$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/wRV4YEbFHzQanI1khcmOfFQAajs.roa File: wRV4YEbFHzQanI1khcmOfFQAajs.roa (raw, json) Hash identifier: 2PDMcIPoa8UzBPve0tJun9uJyinvQgPD4CtYHHwJsR0= Subject key identifier: C1:15:78:60:46:C5:1F:34:1A:9C:8D:64:85:C9:8E:7C:54:00:6A:3B Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E18 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/wRV4YEbFHzQanI1khcmOfFQAajs.roa Signing time: Sat 13 Sep 2025 03:04:50 +0000 ROA not before: Sat 13 Sep 2025 03:04:50 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.220.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7704 (0x1e18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:50 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C115786046C51F341A9C8D6485C98E7C54006A3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:1f:0b:1d:b8:57:3e:d3:55:7d:9a:ae:16: 7d:30:04:13:a5:7f:de:7c:5c:d7:51:90:92:5d:00: 56:30:f8:fa:fb:85:74:1d:a9:55:ea:2b:24:5f:f6: 39:15:82:bb:20:47:b8:52:d8:57:c6:98:3b:24:6c: 37:19:6f:bb:11:df:c8:1e:8b:11:21:66:b6:23:5b: 46:dd:50:a9:61:71:86:df:7b:e0:ea:06:1f:46:b6: 2b:3f:f9:e6:7e:03:c2:7d:f2:65:9b:70:09:30:4d: c8:dc:2f:62:95:6a:b1:16:d3:30:0a:d2:5c:31:ec: 59:3e:04:ba:ea:c5:5b:ac:9c:a1:94:7f:5c:7b:fe: 46:8c:da:cb:65:4b:96:cf:f9:4a:61:92:e7:ce:d3: 90:e7:91:c9:ae:99:4c:82:dd:db:89:63:5a:47:29: f4:f4:de:3f:d1:1c:4c:31:d4:f7:8f:28:5b:62:22: 31:85:ff:f0:e3:9e:2a:13:fb:2f:a5:e9:8b:ec:fc: 6f:f0:c6:63:b4:cc:5c:07:17:00:81:99:a3:59:70: 0a:88:43:d8:01:10:bf:63:6c:d7:e3:87:63:63:05: b8:8f:88:ea:85:9f:3a:2e:91:5c:64:4b:ef:a5:60: a1:5a:57:a6:96:9b:78:a9:95:c6:0b:d3:0d:03:cc: b2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:15:78:60:46:C5:1F:34:1A:9C:8D:64:85:C9:8E:7C:54:00:6A:3B X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/wRV4YEbFHzQanI1khcmOfFQAajs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.251.0/24 Signature Algorithm: sha256WithRSAEncryption 58:c8:2f:f6:2f:5b:48:cf:e3:cc:e8:09:89:ed:cb:2d:af:f0: f5:64:a2:78:05:0d:ae:7e:74:3c:eb:71:f3:71:3d:34:82:8f: ea:90:a2:be:f5:a4:ae:1b:f6:a0:d0:9e:ec:17:ed:11:61:e2: 5f:49:e9:45:22:07:47:b3:86:4f:ba:f4:f3:19:a2:ea:c2:3a: 36:e7:66:54:84:39:5d:8f:25:6c:4c:a8:ab:bb:3e:c4:ff:12: fd:a6:fc:8e:f1:5e:0a:76:43:82:30:3f:4c:5f:c8:0b:7e:8f: 42:9f:04:61:bb:94:d0:ad:c7:33:4c:aa:81:f9:1d:fb:0c:b8: c4:e3:7c:66:da:9e:e4:bc:7d:5c:59:33:08:31:a0:7e:58:29: b0:9c:f5:3a:b9:fd:cc:e8:30:1f:a7:cf:cb:b7:d3:00:1c:7a: ae:f8:c5:78:95:3b:fc:ee:47:c7:5e:b5:f4:d9:60:53:5a:fa: 6f:79:38:c9:54:ba:c3:c0:8a:8d:4e:8d:9f:20:a6:00:3c:a1: 0a:0c:ce:89:7f:61:7a:fd:d0:d6:aa:31:89:85:4d:cd:c0:ab: 3b:0c:7d:7d:e1:9f:f2:c4:a0:ec:eb:5e:97:a5:b1:ce:d7:30: 05:87:a6:89:8e:66:d9:84:f3:71:36:85:cb:c5:78:5d:da:7a: 0c:f0:9c:6a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHhgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEMxMTU3ODYwNDZDNTFG MzQxQTlDOEQ2NDg1Qzk4RTdDNTQwMDZBM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8Eh8LHbhXPtNVfZquFn0wBBOlf958XNdRkJJdAFYw+Pr7hXQd qVXqKyRf9jkVgrsgR7hS2FfGmDskbDcZb7sR38geixEhZrYjW0bdUKlhcYbfe+Dq Bh9Gtis/+eZ+A8J98mWbcAkwTcjcL2KVarEW0zAK0lwx7Fk+BLrqxVusnKGUf1x7 /kaM2stlS5bP+UphkufO05DnkcmumUyC3duJY1pHKfT03j/RHEwx1PePKFtiIjGF //DjnioT+y+l6Yvs/G/wxmO0zFwHFwCBmaNZcAqIQ9gBEL9jbNfjh2NjBbiPiOqF nzoukVxkS++lYKFaV6aWm3iplcYL0w0DzLL1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUwRV4YEbFHzQanI1khcmOfFQAajswHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3dSVjRZRWJGSHpRYW5J MWtoY21PZkZRQWFqcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3PswDQYJKoZIhvcNAQELBQADggEBAFjIL/YvW0jP48zoCYntyy2v8PVkongF Da5+dDzrcfNxPTSCj+qQor71pK4b9qDQnuwX7RFh4l9J6UUiB0ezhk+69PMZourC OjbnZlSEOV2PJWxMqKu7PsT/Ev2m/I7xXgp2Q4IwP0xfyAt+j0KfBGG7lNCtxzNM qoH5HfsMuMTjfGbanuS8fVxZMwgxoH5YKbCc9Tq5/czoMB+nz8u30wAceq74xXiV O/zuR8detfTZYFNa+m95OMlUusPAio1OjZ8gpgA8oQoMzol/YXr90NaqMYmFTc3A qzsMfX3hn/LEoOzrXpelsc7XMAWHpomOZtmE83E2hcvFeF3aegzwnGo= -----END CERTIFICATE-----Generated at Sun Oct 26 07:07:57 2025 by rpki-client