$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/xIVCmY3y6SHnvxhkR9CjuogoFe0.roa File: xIVCmY3y6SHnvxhkR9CjuogoFe0.roa (raw, json) Hash identifier: rCukxgTGso9jtERkfTwYDGzUt3Lstdmdm7Y0tH/vXjA= Subject key identifier: C4:85:42:99:8D:F2:E9:21:E7:BF:18:64:47:D0:A3:BA:88:28:15:ED Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1ED5 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xIVCmY3y6SHnvxhkR9CjuogoFe0.roa Signing time: Sat 13 Sep 2025 03:05:32 +0000 ROA not before: Sat 13 Sep 2025 03:05:32 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7893 (0x1ed5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:32 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C48542998DF2E921E7BF186447D0A3BA882815ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:06:b8:35:26:cb:fb:5a:a2:4b:95:57:ac: c0:b2:f9:08:55:52:85:18:8e:b4:41:5e:3a:df:c8: 37:0c:dc:23:e4:30:6b:6a:e3:53:18:3a:8c:a7:10: 50:29:f5:74:11:63:4b:9e:ef:a7:47:2b:c0:cc:3d: f7:ca:af:b2:68:5d:fb:7d:c0:7c:8b:6a:50:07:a3: c3:2e:59:b8:6f:a1:fa:85:15:fc:e3:01:3a:bf:43: 15:95:43:41:72:26:49:dc:ef:69:1f:26:23:6f:f2: 35:bb:78:99:ba:87:25:91:fe:75:25:ce:39:5a:0a: 79:a6:19:b5:94:29:8c:d3:f3:44:4c:ab:59:e0:9d: de:11:8f:5a:ba:c1:19:0c:5b:8a:1d:30:32:61:f3: e5:33:64:71:4a:c1:34:ac:c3:11:5a:3d:5f:9a:e8: 58:34:a0:a6:a7:d8:fe:75:9b:5a:27:ed:a0:9b:4c: ad:3e:56:12:26:fb:a2:2b:0f:1e:73:6d:69:05:71: 0f:d9:10:1d:09:94:04:7d:e1:00:5d:55:ec:48:af: 25:46:73:2a:e3:9e:de:1d:02:2b:2a:70:c9:db:c9: 2b:26:2d:26:a0:37:70:2e:ee:6b:89:de:af:ad:ca: ec:ea:ca:05:c1:b6:02:b1:95:6f:01:6a:b0:d6:dd: af:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:85:42:99:8D:F2:E9:21:E7:BF:18:64:47:D0:A3:BA:88:28:15:ED X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xIVCmY3y6SHnvxhkR9CjuogoFe0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.38.0/24 Signature Algorithm: sha256WithRSAEncryption b5:bf:06:ff:66:8c:3a:e9:23:8e:32:69:1b:36:30:0c:73:68: 17:ea:01:82:f8:fa:8f:19:f5:d0:6d:07:7c:73:f7:79:94:93: 8c:74:2e:22:4e:12:18:0c:bb:82:b4:1b:78:50:f7:98:a7:d2: bc:94:96:4e:10:20:8b:87:25:3f:44:11:fd:02:1e:0d:1e:25: ad:b5:32:7b:02:ca:0a:f8:66:49:44:41:31:c3:c6:af:83:9f: ec:2a:d9:5c:98:d5:63:1c:ae:48:c9:f0:70:69:e6:df:b8:3f: 4d:3a:ea:af:e4:b4:03:67:45:f3:ec:93:59:0d:ea:c7:ae:8d: a6:aa:5e:61:68:6f:df:92:59:9f:8e:97:4f:4b:8b:ba:b1:4a: 45:9b:58:e5:66:d3:41:cf:73:fa:e8:7c:12:9a:6f:56:bb:7e: b6:60:7d:ee:0b:f0:6b:7c:c6:c3:c5:7a:30:f6:bd:b2:7e:25: 90:d4:1a:14:53:12:91:a0:36:a0:35:da:ec:da:dc:62:d1:41: a5:a2:93:69:35:d9:28:d3:95:95:2f:62:5d:a4:dd:ea:58:5e: 0a:85:75:73:4e:f2:e7:7f:e0:f8:68:47:d3:51:2a:12:83:b3: 3b:c4:5e:5d:01:4d:ac:45:5d:08:a0:be:67:74:83:8f:ca:d5: e5:52:4b:0b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHtUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MzJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM0ODU0Mjk5OERGMkU5 MjFFN0JGMTg2NDQ3RDBBM0JBODgyODE1RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4fwa4NSbL+1qiS5VXrMCy+QhVUoUYjrRBXjrfyDcM3CPkMGtq 41MYOoynEFAp9XQRY0ue76dHK8DMPffKr7JoXft9wHyLalAHo8MuWbhvofqFFfzj ATq/QxWVQ0FyJknc72kfJiNv8jW7eJm6hyWR/nUlzjlaCnmmGbWUKYzT80RMq1ng nd4Rj1q6wRkMW4odMDJh8+UzZHFKwTSswxFaPV+a6Fg0oKan2P51m1on7aCbTK0+ VhIm+6IrDx5zbWkFcQ/ZEB0JlAR94QBdVexIryVGcyrjnt4dAisqcMnbySsmLSag N3Au7muJ3q+tyuzqygXBtgKxlW8BarDW3a9NAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUxIVCmY3y6SHnvxhkR9CjuogoFe0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3hJVkNtWTN5NlNIbnZ4 aGtSOUNqdW9nb0ZlMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SYwDQYJKoZIhvcNAQELBQADggEBALW/Bv9mjDrpI44yaRs2MAxzaBfqAYL4 +o8Z9dBtB3xz93mUk4x0LiJOEhgMu4K0G3hQ95in0ryUlk4QIIuHJT9EEf0CHg0e Ja21MnsCygr4ZklEQTHDxq+Dn+wq2VyY1WMcrkjJ8HBp5t+4P0066q/ktANnRfPs k1kN6seujaaqXmFob9+SWZ+Ol09Li7qxSkWbWOVm00HPc/rofBKab1a7frZgfe4L 8Gt8xsPFejD2vbJ+JZDUGhRTEpGgNqA12uza3GLRQaWik2k12SjTlZUvYl2k3epY XgqFdXNO8ud/4PhoR9NRKhKDszvEXl0BTaxFXQigvmd0g4/K1eVSSws= -----END CERTIFICATE-----Generated at Sun Oct 26 07:17:59 2025 by rpki-client