$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/Vought8Kg91Vs3gr3JyNoi27jTQ.roa File: Vought8Kg91Vs3gr3JyNoi27jTQ.roa (raw, json) Hash identifier: ImMnT7weEGXYWytPNtkIc6HxVdmWN9pXhiUnMcenmb8= Subject key identifier: 56:8B:A0:86:DF:0A:83:DD:55:B3:78:2B:DC:9C:8D:A2:2D:BB:8D:34 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21DA Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/Vought8Kg91Vs3gr3JyNoi27jTQ.roa Signing time: Sat 13 Sep 2025 03:09:02 +0000 ROA not before: Sat 13 Sep 2025 03:09:02 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 137718 IP address blocks: 180.184.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 03:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8666 (0x21da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:02 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=568BA086DF0A83DD55B3782BDC9C8DA22DBB8D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:46:75:cd:6b:b6:43:38:3f:63:fd:36:1b:61: 76:20:2f:d0:b0:73:38:32:7f:32:16:7f:6f:e1:74: e2:6d:39:c6:87:72:b9:8e:d2:b4:a9:93:9a:2e:77: 74:6a:b1:c1:cf:36:a4:7d:a4:64:ce:d8:47:db:da: d1:28:c4:53:8c:1d:f7:6e:f9:d0:6f:06:ec:15:0f: d0:42:13:3e:76:72:77:0e:ec:e8:78:6f:b2:ab:81: 91:ce:ed:f3:e4:77:a8:a4:4d:a2:91:f5:dd:95:28: f5:b9:99:7a:4a:80:84:d0:8d:99:96:bf:af:49:bd: 9c:b0:8f:9f:d0:d9:5f:04:95:c4:6b:7c:7e:7f:8a: 70:7c:03:0d:c6:ff:01:f7:27:4f:e8:d6:3c:79:63: dd:79:70:08:96:13:d0:f7:8a:ba:71:13:4a:4c:ce: 07:c7:6a:2a:1a:db:5c:2c:11:f1:46:67:4a:eb:39: e4:c5:fb:4e:1c:13:74:ce:4d:ac:54:06:ba:ec:c0: 1a:bd:b6:f0:a2:e6:37:72:18:e3:5f:6b:d7:3e:92: 45:c6:53:0f:10:3c:8e:f0:cf:e5:d4:90:02:d9:1d: 1d:2e:8c:95:66:2a:f7:af:3c:e4:c3:41:42:05:25: ed:ce:9c:f0:69:f9:0e:f6:66:4c:db:06:03:a0:eb: bf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8B:A0:86:DF:0A:83:DD:55:B3:78:2B:DC:9C:8D:A2:2D:BB:8D:34 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/Vought8Kg91Vs3gr3JyNoi27jTQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.56.0/21 Signature Algorithm: sha256WithRSAEncryption 81:3e:2e:44:9a:2c:81:8b:a7:d1:d5:8f:06:ad:ca:21:76:5a: 22:5a:88:fc:60:f7:5e:33:c6:36:90:af:78:63:3e:2f:0d:4c: 0a:2b:e7:a4:b8:13:ec:0f:89:60:7e:3e:04:7b:8d:44:56:06: 0c:65:c6:9a:ca:c2:a6:6f:fa:76:ec:20:71:84:3c:8d:90:a6: f8:f3:4f:da:e1:c0:db:5e:e0:8f:ce:1d:6e:16:0e:20:8c:ef: 9c:dd:79:a6:5b:c2:64:b9:44:3c:04:b3:8b:bb:bf:28:32:4c: 26:6c:38:26:17:d1:c8:ea:59:73:46:33:cd:16:bf:f5:3f:50: e1:ad:65:52:3f:10:0f:c0:29:01:6e:75:7a:ad:87:2c:9d:77: c3:e2:b1:54:b2:4e:c3:33:6d:00:80:1c:48:e6:4d:fb:04:c0: 6c:02:7e:ae:33:25:f5:b0:63:e8:79:9b:b7:06:3b:75:0e:86: f2:62:f6:2f:34:e5:f6:ca:ce:53:b3:de:ae:f5:d8:25:ef:7b: 2b:b7:25:62:af:4b:dc:22:b9:76:bc:38:70:75:b2:d7:c5:06: 7f:ae:d0:2c:12:eb:4e:77:90:fe:68:80:e3:5f:26:b4:a3:8e: 49:91:2f:93:5f:04:8d:1c:eb:29:df:b6:1e:83:07:7b:ba:92: ec:bc:65:f1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDU2OEJBMDg2REYwQTgz REQ1NUIzNzgyQkRDOUM4REEyMkRCQjhEMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbRnXNa7ZDOD9j/TYbYXYgL9CwczgyfzIWf2/hdOJtOcaHcrmO 0rSpk5oud3RqscHPNqR9pGTO2Efb2tEoxFOMHfdu+dBvBuwVD9BCEz52cncO7Oh4 b7KrgZHO7fPkd6ikTaKR9d2VKPW5mXpKgITQjZmWv69JvZywj5/Q2V8ElcRrfH5/ inB8Aw3G/wH3J0/o1jx5Y915cAiWE9D3irpxE0pMzgfHaioa21wsEfFGZ0rrOeTF +04cE3TOTaxUBrrswBq9tvCi5jdyGONfa9c+kkXGUw8QPI7wz+XUkALZHR0ujJVm KvevPOTDQUIFJe3OnPBp+Q72ZkzbBgOg6791AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUVought8Kg91Vs3gr3JyNoi27jTQwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvVm91Z2h0OEtnOTFW czNncjNKeU5vaTI3alRRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7S4ODANBgkqhkiG9w0BAQsFAAOCAQEAgT4uRJosgYun0dWPBq3KIXZaIlqI /GD3XjPGNpCveGM+Lw1MCivnpLgT7A+JYH4+BHuNRFYGDGXGmsrCpm/6duwgcYQ8 jZCm+PNP2uHA217gj84dbhYOIIzvnN15plvCZLlEPASzi7u/KDJMJmw4JhfRyOpZ c0YzzRa/9T9Q4a1lUj8QD8ApAW51eq2HLJ13w+KxVLJOwzNtAIAcSOZN+wTAbAJ+ rjMl9bBj6HmbtwY7dQ6G8mL2LzTl9srOU7PervXYJe97K7clYq9L3CK5drw4cHWy 18UGf67QLBLrTneQ/miA418mtKOOSZEvk18EjRzrKd+2HoMHe7qS7Lxl8Q== -----END CERTIFICATE-----Generated at Tue Oct 21 01:27:39 2025 by rpki-client