$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/vSPvOF4kNXGOXBSog6Q_C_E7Nl0.roa File: vSPvOF4kNXGOXBSog6Q_C_E7Nl0.roa (raw, json) Hash identifier: kmflKFMh2ETE1pc5PSnihXc8R7PYjJ4kxHvf4PsciSU= Subject key identifier: BD:23:EF:38:5E:24:35:71:8E:5C:14:A8:83:A4:3F:0B:F1:3B:36:5D Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E08 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vSPvOF4kNXGOXBSog6Q_C_E7Nl0.roa Signing time: Sat 13 Sep 2025 03:04:48 +0000 ROA not before: Sat 13 Sep 2025 03:04:48 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 24373 IP address blocks: 103.221.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7688 (0x1e08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:48 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=BD23EF385E2435718E5C14A883A43F0BF13B365D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:09:b5:1c:47:43:76:a7:ff:56:14:31:eb:3a: b1:0e:96:1b:57:2b:55:2d:ee:99:f2:6d:9a:8f:d2: 7e:5f:d8:37:3c:66:d2:f8:83:7d:91:3b:be:13:58: 1f:0f:de:17:c1:1c:c2:14:b5:54:c7:fb:51:0d:47: 13:fe:1f:45:21:5a:d4:31:04:00:af:6d:ea:8f:ef: d0:c1:8c:1c:e9:89:b1:e2:fa:3d:73:8f:69:5f:cb: d8:3a:ef:d9:d4:34:f7:a3:79:05:95:12:bd:aa:63: e7:39:f3:4c:b7:53:cc:6d:65:71:b8:5e:64:0c:7b: a4:65:87:b7:6b:a9:8a:15:fa:7f:5f:f1:c1:56:2e: 18:e9:54:36:eb:cc:6b:3d:2a:b7:91:40:19:97:0c: 3a:9c:61:63:9e:17:6f:94:ea:f7:ba:c4:17:a6:96: 62:84:f1:3a:76:64:0f:db:9c:38:81:bc:5c:13:c2: f2:12:90:a0:03:48:37:bd:75:87:28:c1:08:ae:3e: 1e:ae:f7:3a:4d:eb:3b:c7:c3:db:0f:41:a5:f6:cf: 0c:da:d4:d3:54:66:a2:4b:0c:87:21:d6:a1:13:ca: a4:bb:49:56:c9:eb:b5:39:b0:1c:fa:42:ac:d7:2d: b3:74:68:62:73:2c:9c:c7:68:04:ed:10:47:02:e9: a8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:23:EF:38:5E:24:35:71:8E:5C:14:A8:83:A4:3F:0B:F1:3B:36:5D X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vSPvOF4kNXGOXBSog6Q_C_E7Nl0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.32.0/22 Signature Algorithm: sha256WithRSAEncryption c8:61:39:48:0b:d8:03:37:0b:22:20:af:e8:4a:e0:75:7b:ae: 28:48:ac:25:14:d3:9e:fb:71:de:04:ca:75:6d:5f:a8:34:d9: f7:9d:d4:b8:33:62:ac:65:00:9c:c1:b2:83:4b:ca:cb:24:db: 8f:e8:fc:c8:a6:50:b9:65:48:41:55:6b:33:ed:2a:ee:e4:c6: 55:ed:5a:09:8f:e8:61:60:ea:1b:70:ea:38:31:5b:06:4d:8a: 6d:cd:6b:b4:b4:1f:06:63:6f:2c:67:f6:4f:1d:1c:fe:d0:99: af:73:50:9d:ad:f1:54:2c:5f:6a:e1:aa:20:d4:97:85:37:39: 91:03:43:8d:15:30:61:26:7f:dd:71:5b:e7:10:8b:b9:00:11: 97:25:60:b6:2e:e1:50:b2:0d:11:af:1d:a3:a5:4e:d7:e3:29: ab:31:a6:cd:87:fa:9e:23:63:08:d7:c1:26:39:3a:65:e4:c9: d2:1a:e1:4c:4f:d8:a7:bb:70:a5:6a:f3:da:44:bf:f2:56:29: 05:22:e4:42:e0:d2:9e:d9:9c:e7:bd:13:14:6f:1f:bf:a9:f2: a3:ab:01:7f:7a:64:59:d3:fc:72:22:65:f3:5c:cf:5e:69:08: 75:0b:b4:64:02:e1:88:7f:83:99:27:b2:77:63:db:76:74:33: 74:38:9e:70 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHggwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEJEMjNFRjM4NUUyNDM1 NzE4RTVDMTRBODgzQTQzRjBCRjEzQjM2NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbCbUcR0N2p/9WFDHrOrEOlhtXK1Ut7pnybZqP0n5f2Dc8ZtL4 g32RO74TWB8P3hfBHMIUtVTH+1ENRxP+H0UhWtQxBACvbeqP79DBjBzpibHi+j1z j2lfy9g679nUNPejeQWVEr2qY+c580y3U8xtZXG4XmQMe6Rlh7drqYoV+n9f8cFW LhjpVDbrzGs9KreRQBmXDDqcYWOeF2+U6ve6xBemlmKE8Tp2ZA/bnDiBvFwTwvIS kKADSDe9dYcowQiuPh6u9zpN6zvHw9sPQaX2zwza1NNUZqJLDIch1qETyqS7SVbJ 67U5sBz6QqzXLbN0aGJzLJzHaATtEEcC6agTAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUvSPvOF4kNXGOXBSog6Q/C/E7Nl0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3ZTUHZPRjRrTlhHT1hC U29nNlFfQ19FN05sMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3SAwDQYJKoZIhvcNAQELBQADggEBAMhhOUgL2AM3CyIgr+hK4HV7rihIrCUU 0577cd4EynVtX6g02fed1LgzYqxlAJzBsoNLyssk24/o/MimULllSEFVazPtKu7k xlXtWgmP6GFg6htw6jgxWwZNim3Na7S0HwZjbyxn9k8dHP7Qma9zUJ2t8VQsX2rh qiDUl4U3OZEDQ40VMGEmf91xW+cQi7kAEZclYLYu4VCyDRGvHaOlTtfjKasxps2H +p4jYwjXwSY5OmXkydIa4UxP2Ke7cKVq89pEv/JWKQUi5ELg0p7ZnOe9ExRvH7+p 8qOrAX96ZFnT/HIiZfNcz15pCHULtGQC4Yh/g5knsndj23Z0M3Q4nnA= -----END CERTIFICATE-----Generated at Sun Oct 26 11:47:58 2025 by rpki-client