$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/Fo8e5Zb-PVubJnnh9Uzuv-lOTrI.roa File: Fo8e5Zb-PVubJnnh9Uzuv-lOTrI.roa (raw, json) Hash identifier: kfAJ+9FpCgjv2uBV+TEVwaKHUFstqswon24ANpwh1vs= Subject key identifier: 16:8F:1E:E5:96:FE:3D:5B:9B:26:79:E1:F5:4C:EE:BF:E9:4E:4E:B2 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21F3 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/Fo8e5Zb-PVubJnnh9Uzuv-lOTrI.roa Signing time: Sat 13 Sep 2025 03:09:08 +0000 ROA not before: Sat 13 Sep 2025 03:09:08 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 180.184.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8691 (0x21f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:08 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=168F1EE596FE3D5B9B2679E1F54CEEBFE94E4EB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0b:75:22:3a:ff:f0:86:ed:d5:65:0f:2c:1a: 13:78:af:d7:be:03:05:a7:92:19:5d:ce:68:bb:c8: 47:2c:8e:a5:cd:c2:fb:fc:0d:3e:d4:6a:b1:08:24: 77:9f:cc:e0:d1:8b:1a:fb:22:dd:98:3a:d2:da:0c: e4:bd:1d:44:a2:70:3a:83:57:3c:3b:9f:e7:db:0a: 20:1b:a6:db:f3:cf:f7:55:2e:cf:b5:ff:74:66:41: b7:db:4f:bd:12:99:e3:a7:54:63:d9:e5:d9:02:50: b8:33:95:b9:1c:92:36:31:28:46:77:3b:5c:c5:12: ec:59:96:81:f0:7d:c6:f2:f9:2e:50:ea:4e:d7:df: 9e:bd:c4:2b:a3:cf:aa:c3:75:bf:98:24:9b:c7:ed: e1:fe:9d:ab:07:6e:e8:85:99:7b:bd:09:15:71:98: 11:cb:57:ae:c2:19:12:94:66:d4:75:aa:94:5a:c7: a7:d3:bb:16:95:e2:f1:30:be:80:01:4e:f5:65:7a: 3e:99:cb:a7:79:e4:a9:47:de:15:5b:c7:70:af:76: 19:c7:6b:04:bd:fb:ea:bb:a6:fa:aa:d2:8e:4a:8b: db:63:ec:af:14:87:3d:d2:88:9b:dd:98:77:c5:c3: d2:64:ee:e7:97:6d:31:a4:85:27:eb:c6:4d:a7:5e: 86:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8F:1E:E5:96:FE:3D:5B:9B:26:79:E1:F5:4C:EE:BF:E9:4E:4E:B2 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/Fo8e5Zb-PVubJnnh9Uzuv-lOTrI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.176.0/21 Signature Algorithm: sha256WithRSAEncryption 9e:54:65:6f:36:04:64:a1:d0:f8:c5:8f:1a:07:f7:99:4d:eb: d6:ed:7a:67:c4:02:12:dd:4d:57:45:cb:72:7c:fc:a4:89:c8: b2:51:9c:07:83:3d:9d:6d:f5:11:6b:8b:fa:ee:ad:54:f4:81: b4:11:16:bc:61:89:b7:5c:a9:e2:9b:0a:9b:48:dc:4c:c6:86: 0b:78:ae:ab:9a:a2:c7:af:f5:23:45:91:48:c5:7f:c2:b5:90: d8:86:4d:e6:a9:74:68:ff:2e:18:56:5f:6a:ff:05:5d:af:ec: 44:62:66:ba:23:04:9e:19:f4:c9:e4:0c:54:70:2a:04:86:ca: 81:85:57:0f:9b:bd:d8:86:2c:fd:87:d2:06:04:b8:a8:50:2d: 5b:9a:f2:aa:e3:f3:d8:a7:c7:a2:55:f0:07:89:f5:03:cc:76: d6:00:53:80:75:a0:00:52:41:dc:00:a4:61:f2:e2:ab:b7:db: 0b:c3:8b:13:9d:6e:9b:88:dd:86:19:3c:c7:bc:0a:02:ea:81: 35:9e:23:02:09:98:95:ed:ba:19:6b:da:f4:78:92:6e:e3:25: bf:e7:05:90:8e:d2:dd:ce:62:31:56:10:74:8a:51:0e:35:45: 8e:17:51:18:7c:e8:f4:03:2b:5c:05:97:fe:cb:e1:af:d2:2a: d7:d8:b0:41 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIfMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDE2OEYxRUU1OTZGRTNE NUI5QjI2NzlFMUY1NENFRUJGRTk0RTRFQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcC3UiOv/whu3VZQ8sGhN4r9e+AwWnkhldzmi7yEcsjqXNwvv8 DT7UarEIJHefzODRixr7It2YOtLaDOS9HUSicDqDVzw7n+fbCiAbptvzz/dVLs+1 /3RmQbfbT70SmeOnVGPZ5dkCULgzlbkckjYxKEZ3O1zFEuxZloHwfcby+S5Q6k7X 3569xCujz6rDdb+YJJvH7eH+nasHbuiFmXu9CRVxmBHLV67CGRKUZtR1qpRax6fT uxaV4vEwvoABTvVlej6Zy6d55KlH3hVbx3CvdhnHawS9++q7pvqq0o5Ki9tj7K8U hz3SiJvdmHfFw9Jk7ueXbTGkhSfrxk2nXoaHAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUFo8e5Zb+PVubJnnh9Uzuv+lOTrIwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvRm84ZTVaYi1QVnVi Sm5uaDlVenV2LWxPVHJJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7S4sDANBgkqhkiG9w0BAQsFAAOCAQEAnlRlbzYEZKHQ+MWPGgf3mU3r1u16 Z8QCEt1NV0XLcnz8pInIslGcB4M9nW31EWuL+u6tVPSBtBEWvGGJt1yp4psKm0jc TMaGC3iuq5qix6/1I0WRSMV/wrWQ2IZN5ql0aP8uGFZfav8FXa/sRGJmuiMEnhn0 yeQMVHAqBIbKgYVXD5u92IYs/YfSBgS4qFAtW5ryquPz2KfHolXwB4n1A8x21gBT gHWgAFJB3ACkYfLiq7fbC8OLE51um4jdhhk8x7wKAuqBNZ4jAgmYle26GWva9HiS buMlv+cFkI7S3c5iMVYQdIpRDjVFjhdRGHzo9AMrXAWX/svhr9Iq19iwQQ== -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:23 2025 by rpki-client