$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/uk4LcMewHyqiFZH8mWbz5W0OVkc.roa File: uk4LcMewHyqiFZH8mWbz5W0OVkc.roa (raw, json) Hash identifier: 5k6ZDh9cotiCTkuorh/m4zBQpo3YcKy3znk/KMPqH2s= Subject key identifier: BA:4E:0B:70:C7:B0:1F:2A:A2:15:91:FC:99:66:F3:E5:6D:0E:56:47 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1CB8 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/uk4LcMewHyqiFZH8mWbz5W0OVkc.roa Signing time: Thu 17 Jul 2025 03:55:30 +0000 ROA not before: Thu 17 Jul 2025 03:55:30 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 25734 IP address blocks: 103.221.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 13:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7352 (0x1cb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:55:30 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=BA4E0B70C7B01F2AA21591FC9966F3E56D0E5647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:0f:44:91:5a:c4:74:f3:d5:1e:7b:a3:1b: fb:a5:56:e4:e5:c1:80:30:a0:2d:77:e2:f7:ad:9c: 63:b8:3a:10:18:0f:80:ba:c0:ed:f6:ad:b5:b6:e9: e3:15:54:14:fe:81:a2:1d:27:27:05:76:c3:40:ab: 69:1c:f0:2e:7a:38:7c:36:ba:4a:d0:ad:22:44:01: ef:c1:ed:0b:77:6d:4c:f2:60:bd:10:ce:9f:66:61: 9d:0a:b0:01:4c:e0:5f:4d:d4:95:9a:63:20:8a:5d: 02:25:1d:64:69:9b:8d:df:79:2b:4f:47:03:ac:f0: 5d:e9:d2:10:af:0d:7c:18:25:f8:15:56:ad:cb:86: 7b:86:88:6d:14:47:49:e7:56:13:74:13:85:41:fe: c5:c9:91:d4:c3:3a:3b:2c:2e:0a:38:d6:26:51:bc: 52:b4:9a:84:af:ee:b8:1e:74:56:da:17:6e:61:fd: 85:11:6b:a8:96:58:18:49:72:22:d6:18:de:53:f8: 6f:ac:55:df:c5:da:27:36:14:15:2d:de:6a:ba:22: d3:11:0a:80:0d:3f:b1:21:fa:1d:24:cf:d9:ae:80: 38:45:17:c8:b9:b9:cd:36:69:87:3e:04:d2:fe:97: 42:83:7f:c1:cd:59:95:35:96:87:18:17:1d:06:54: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4E:0B:70:C7:B0:1F:2A:A2:15:91:FC:99:66:F3:E5:6D:0E:56:47 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/uk4LcMewHyqiFZH8mWbz5W0OVkc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.36.0/22 Signature Algorithm: sha256WithRSAEncryption 62:f8:00:c0:74:7e:d9:0f:8d:b6:52:06:3a:91:9d:cf:65:22: 8c:9d:6e:ad:76:24:d9:5e:cf:40:13:f9:72:f8:dc:2e:16:e0: f0:0e:91:c1:67:fe:93:01:1c:4d:09:e3:0d:b5:f2:1f:31:8e: 4e:9a:e3:c6:51:59:b1:46:3b:56:48:d3:43:5d:38:3d:d9:11: 7b:55:3c:43:7d:31:40:69:18:31:9e:b3:94:24:81:c3:df:9b: fc:04:23:67:0d:a8:16:07:77:49:6e:a1:77:f1:f8:49:08:8e: 21:44:f7:86:cc:0b:56:ed:bd:57:ee:09:b5:d3:3e:58:a1:94: 3e:70:39:42:e2:8e:a3:cc:46:e1:4f:bf:9c:42:b2:80:35:65: 49:97:f6:fa:bb:d0:7c:86:63:53:11:2a:e6:b2:21:a7:a9:af: f2:cf:ca:a4:96:e8:b8:a8:e9:15:28:97:9e:0a:56:40:6b:66: 61:15:99:b8:2f:98:f7:98:f0:5b:68:2b:82:3d:f2:e4:7d:a4: c1:11:d6:36:66:b0:58:65:5a:c0:10:b2:ea:41:7d:bd:15:c9: 08:dd:d7:0d:4d:23:5a:3f:f9:5a:fd:e0:84:36:44:b7:10:00: 25:ff:57:b6:21:72:1b:b8:87:0b:bc:99:9b:53:9e:54:09:07: b5:aa:88:95 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHLgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzU1MzBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEJBNEUwQjcwQzdCMDFG MkFBMjE1OTFGQzk5NjZGM0U1NkQwRTU2NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJBA9EkVrEdPPVHnujG/ulVuTlwYAwoC134vetnGO4OhAYD4C6 wO32rbW26eMVVBT+gaIdJycFdsNAq2kc8C56OHw2ukrQrSJEAe/B7Qt3bUzyYL0Q zp9mYZ0KsAFM4F9N1JWaYyCKXQIlHWRpm43feStPRwOs8F3p0hCvDXwYJfgVVq3L hnuGiG0UR0nnVhN0E4VB/sXJkdTDOjssLgo41iZRvFK0moSv7rgedFbaF25h/YUR a6iWWBhJciLWGN5T+G+sVd/F2ic2FBUt3mq6ItMRCoANP7Eh+h0kz9mugDhFF8i5 uc02aYc+BNL+l0KDf8HNWZU1locYFx0GVN9DAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUuk4LcMewHyqiFZH8mWbz5W0OVkcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3VrNExjTWV3SHlxaUZa SDhtV2J6NVcwT1ZrYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3SQwDQYJKoZIhvcNAQELBQADggEBAGL4AMB0ftkPjbZSBjqRnc9lIoydbq12 JNlez0AT+XL43C4W4PAOkcFn/pMBHE0J4w218h8xjk6a48ZRWbFGO1ZI00NdOD3Z EXtVPEN9MUBpGDGes5QkgcPfm/wEI2cNqBYHd0luoXfx+EkIjiFE94bMC1btvVfu CbXTPlihlD5wOULijqPMRuFPv5xCsoA1ZUmX9vq70HyGY1MRKuayIaepr/LPyqSW 6Lio6RUol54KVkBrZmEVmbgvmPeY8FtoK4I98uR9pMER1jZmsFhlWsAQsupBfb0V yQjd1w1NI1o/+Vr94IQ2RLcQACX/V7Yhchu4hwu8mZtTnlQJB7WqiJU= -----END CERTIFICATE-----Generated at Mon Jul 21 13:41:12 2025 by rpki-client