$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/1ySI3jBnajWatU70tsq1f6s6Eng.roa File: 1ySI3jBnajWatU70tsq1f6s6Eng.roa (raw, json) Hash identifier: 6QckF70I3VSEr81dkehqMtOEyhEC85qv3c4lTdJnr1Y= Subject key identifier: D7:24:88:DE:30:67:6A:35:9A:B5:4E:F4:B6:CA:B5:7F:AB:3A:12:78 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21D6 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/1ySI3jBnajWatU70tsq1f6s6Eng.roa Signing time: Sat 13 Sep 2025 03:09:02 +0000 ROA not before: Sat 13 Sep 2025 03:09:02 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 180.184.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8662 (0x21d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:02 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D72488DE30676A359AB54EF4B6CAB57FAB3A1278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:2b:f8:18:29:f3:00:84:40:5a:7b:60:71: 96:bf:eb:16:83:20:f3:23:51:1a:9b:69:76:37:12: 29:97:7b:9d:5e:c3:58:9d:d7:98:0b:6d:5a:be:52: 04:e4:d6:1b:e7:11:94:d6:04:82:d5:15:17:ca:6d: 32:e2:78:08:f0:0d:42:7b:a1:4e:26:1c:9f:81:f8: 59:2c:1e:ef:a8:0e:e4:76:ca:bf:67:21:6a:85:8a: 9d:34:ad:8a:f0:66:1e:c2:92:fa:c4:1b:d2:81:08: 77:16:7d:4f:0f:97:39:d9:59:56:e0:76:a6:26:6f: f1:aa:64:55:6b:6d:c2:ab:3b:fa:f2:c8:2b:77:d1: 92:f7:62:fb:d0:a1:d8:ec:04:ca:6a:a3:fc:7b:4d: 0f:ee:84:47:f1:9f:2d:f6:ea:40:59:ea:fb:64:f9: 7d:54:cc:0c:2f:87:e8:b0:dc:00:41:31:0e:6d:e8: 60:95:4e:4f:e2:53:3d:b5:fa:91:bb:7d:a0:f1:51: 44:8b:21:c6:eb:3d:f4:a3:c4:77:02:c7:e2:ed:0e: 69:ad:85:f8:6f:40:73:a0:03:ba:e7:6f:46:ee:f8: b5:ec:a1:a9:d5:27:12:1b:3b:83:7e:24:ff:7a:c6: 4a:fd:4f:b9:14:d8:0a:bc:bd:65:99:12:9c:51:0d: 23:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:24:88:DE:30:67:6A:35:9A:B5:4E:F4:B6:CA:B5:7F:AB:3A:12:78 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/1ySI3jBnajWatU70tsq1f6s6Eng.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.144.0/21 Signature Algorithm: sha256WithRSAEncryption 62:a4:3d:22:76:0c:ca:84:5c:4d:47:42:8f:e2:34:d6:da:42: 97:68:42:e2:e0:97:51:17:f6:9d:96:e7:89:af:34:f3:1d:e4: 35:04:40:82:ef:ae:e6:98:6c:22:84:27:02:ba:b9:13:33:61: 66:93:ae:3f:16:13:dd:e8:f5:75:6e:6c:bb:58:fe:27:d0:57: 18:5a:68:af:d2:2b:29:fd:b2:98:39:6d:7e:85:57:05:cf:a0: 2e:16:4a:11:e7:eb:c2:47:25:cb:d0:23:03:1e:43:b3:01:cd: 57:e8:cc:c2:28:8c:8c:ee:66:5e:7b:94:2d:4e:92:ff:5c:83: b9:ae:88:df:8e:1b:1a:ab:b1:bf:10:36:71:46:a1:ef:05:95: a9:72:15:33:b1:63:1d:c1:84:86:a8:87:a3:39:67:34:8d:87: 51:b7:fe:00:e0:33:22:f2:b0:23:b2:2c:01:d9:e9:88:d7:8b: c6:1b:46:c4:d1:18:c3:72:17:f6:fe:3b:5b:52:85:70:87:dd: 2b:37:f4:11:67:69:76:5d:4b:61:e9:ad:de:77:d7:e8:04:e4: 63:01:57:a0:74:6a:84:b3:2f:a5:92:c7:a8:c7:55:e0:61:3c: 98:1b:ff:d7:0d:0a:6a:79:77:c6:af:e6:8d:fa:cc:30:96:7a: 66:60:f8:97 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQ3MjQ4OERFMzA2NzZB MzU5QUI1NEVGNEI2Q0FCNTdGQUIzQTEyNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx5Sv4GCnzAIRAWntgcZa/6xaDIPMjURqbaXY3EimXe51ew1id 15gLbVq+UgTk1hvnEZTWBILVFRfKbTLieAjwDUJ7oU4mHJ+B+FksHu+oDuR2yr9n IWqFip00rYrwZh7CkvrEG9KBCHcWfU8PlznZWVbgdqYmb/GqZFVrbcKrO/ryyCt3 0ZL3YvvQodjsBMpqo/x7TQ/uhEfxny326kBZ6vtk+X1UzAwvh+iw3ABBMQ5t6GCV Tk/iUz21+pG7faDxUUSLIcbrPfSjxHcCx+LtDmmthfhvQHOgA7rnb0bu+LXsoanV JxIbO4N+JP96xkr9T7kU2Aq8vWWZEpxRDSMtAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU1ySI3jBnajWatU70tsq1f6s6EngwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvMXlTSTNqQm5haldh dFU3MHRzcTFmNnM2RW5nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7S4kDANBgkqhkiG9w0BAQsFAAOCAQEAYqQ9InYMyoRcTUdCj+I01tpCl2hC 4uCXURf2nZbnia808x3kNQRAgu+u5phsIoQnArq5EzNhZpOuPxYT3ej1dW5su1j+ J9BXGFpor9IrKf2ymDltfoVXBc+gLhZKEefrwkcly9AjAx5DswHNV+jMwiiMjO5m XnuULU6S/1yDua6I344bGquxvxA2cUah7wWVqXIVM7FjHcGEhqiHozlnNI2HUbf+ AOAzIvKwI7IsAdnpiNeLxhtGxNEYw3IX9v47W1KFcIfdKzf0EWdpdl1LYemt3nfX 6ATkYwFXoHRqhLMvpZLHqMdV4GE8mBv/1w0Kanl3xq/mjfrMMJZ6ZmD4lw== -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:23 2025 by rpki-client