$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/tdoO1J8FAaDL2s8kZ78jfcdbEKg.roa File: tdoO1J8FAaDL2s8kZ78jfcdbEKg.roa (raw, json) Hash identifier: w9w8VQQ6e+ais8OKN5GPRRsxXWFu/0kggOxBP1pbmNM= Subject key identifier: B5:DA:0E:D4:9F:05:01:A0:CB:DA:CF:24:67:BF:23:7D:C7:5B:10:A8 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E87 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tdoO1J8FAaDL2s8kZ78jfcdbEKg.roa Signing time: Sat 13 Sep 2025 03:05:14 +0000 ROA not before: Sat 13 Sep 2025 03:05:14 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 138527 IP address blocks: 45.252.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7815 (0x1e87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:14 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B5DA0ED49F0501A0CBDACF2467BF237DC75B10A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:00:40:13:ba:bd:45:1d:2d:34:a4:80:4a:55: d7:96:a7:90:6e:be:df:da:7a:a0:8e:31:51:d2:47: 1b:82:19:34:bf:88:50:63:c8:0c:23:3c:28:04:06: f6:76:73:b1:aa:2a:ba:84:98:41:b7:15:82:b1:5f: 48:1d:26:49:cf:86:88:73:17:a2:f6:7e:c5:eb:1a: b0:e0:ba:74:58:35:ab:43:37:7b:f7:62:f0:59:c3: 8b:b6:ce:96:e3:6f:6b:73:b4:68:a0:ed:f4:69:2d: e7:3b:64:b6:29:94:7e:7a:39:7d:e1:8e:f3:2d:d6: c8:2d:2c:fb:2b:ef:d6:c7:a5:04:ee:08:19:ee:d3: 17:ab:e4:bf:1c:c1:48:fc:af:9e:f4:79:ea:e0:e0: a0:1d:f5:69:5c:73:e6:93:81:b4:9f:d2:e6:73:2b: e6:d5:47:91:67:16:4d:56:8a:64:43:2d:fb:91:9c: 97:21:bf:84:99:8e:e5:71:b1:a5:3a:d3:9e:4a:88: a0:69:54:8b:6a:76:67:51:fa:e9:66:f3:1a:68:f4: 34:da:fa:37:cd:46:88:7b:03:00:81:26:b7:0b:1b: 71:ce:71:c0:36:7a:9d:6e:c4:e5:62:9d:3a:bf:d8: 54:a4:ed:b5:00:5e:36:cd:b0:7f:17:31:69:a1:e7: 24:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DA:0E:D4:9F:05:01:A0:CB:DA:CF:24:67:BF:23:7D:C7:5B:10:A8 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tdoO1J8FAaDL2s8kZ78jfcdbEKg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.40.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:23:e7:62:55:95:cd:3b:6a:eb:77:62:4c:64:91:2c:bf:66: 7d:d1:0c:90:4d:01:36:1c:e7:ee:97:d7:f4:47:3c:2a:18:c8: 67:ef:3a:fc:39:e3:18:d1:db:1b:7f:42:c6:b1:35:4d:0f:e1: 8b:1c:94:0e:48:0b:46:a9:b4:da:64:c0:f6:ce:ff:5d:72:28: e6:8d:6d:d9:14:f0:e7:88:e1:a4:b3:0a:b4:8d:6d:4a:6f:0f: 31:e1:6d:b9:18:9c:f4:26:2d:24:67:ac:c6:46:cb:ba:f2:a6: 5e:5a:b6:96:08:79:c6:2a:52:b0:42:cd:a7:c6:42:ad:e9:28: 07:83:ba:57:bb:6e:8b:1d:65:5e:93:ec:b4:fb:b4:f4:20:8e: 21:67:75:74:4e:ea:d5:b3:c2:99:f3:af:6d:5e:17:a2:fe:7c: 75:a7:ab:b9:85:b6:2e:09:62:6b:1d:b3:c2:2d:9b:a7:5c:8f: c7:ee:e4:d7:cf:69:e0:8c:e7:f5:c6:50:3c:f4:82:8b:a5:0d: 2e:d8:77:98:e0:70:92:02:d0:c7:7e:a6:dc:50:95:0a:c8:b1: e8:35:69:2b:44:ec:d5:39:a3:da:e5:34:9e:65:cd:f5:cb:32: 2d:c1:43:6b:7f:a1:5d:bd:32:f5:58:2c:e2:9e:0d:89:c2:24: c3:c6:5c:b7 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEI1REEwRUQ0OUYwNTAx QTBDQkRBQ0YyNDY3QkYyMzdEQzc1QjEwQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQAEATur1FHS00pIBKVdeWp5Buvt/aeqCOMVHSRxuCGTS/iFBj yAwjPCgEBvZ2c7GqKrqEmEG3FYKxX0gdJknPhohzF6L2fsXrGrDgunRYNatDN3v3 YvBZw4u2zpbjb2tztGig7fRpLec7ZLYplH56OX3hjvMt1sgtLPsr79bHpQTuCBnu 0xer5L8cwUj8r570eerg4KAd9Wlcc+aTgbSf0uZzK+bVR5FnFk1WimRDLfuRnJch v4SZjuVxsaU6055KiKBpVItqdmdR+ulm8xpo9DTa+jfNRoh7AwCBJrcLG3HOccA2 ep1uxOVinTq/2FSk7bUAXjbNsH8XMWmh5yQxAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUtdoO1J8FAaDL2s8kZ78jfcdbEKgwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3Rkb08xSjhGQWFETDJz OGtaNzhqZmNkYkVLZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/CgwDQYJKoZIhvcNAQELBQADggEBAAwj52JVlc07aut3YkxkkSy/Zn3RDJBN ATYc5+6X1/RHPCoYyGfvOvw54xjR2xt/QsaxNU0P4YsclA5IC0aptNpkwPbO/11y KOaNbdkU8OeI4aSzCrSNbUpvDzHhbbkYnPQmLSRnrMZGy7rypl5atpYIecYqUrBC zafGQq3pKAeDule7bosdZV6T7LT7tPQgjiFndXRO6tWzwpnzr21eF6L+fHWnq7mF ti4JYmsds8Itm6dcj8fu5NfPaeCM5/XGUDz0goulDS7Yd5jgcJIC0Md+ptxQlQrI seg1aStE7NU5o9rlNJ5lzfXLMi3BQ2t/oV29MvVYLOKeDYnCJMPGXLc= -----END CERTIFICATE-----Generated at Sun Oct 26 11:47:59 2025 by rpki-client