$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/ZacAFC-vejIYocTUXbOxVXw5ibE.roa File: ZacAFC-vejIYocTUXbOxVXw5ibE.roa (raw, json) Hash identifier: fsh7dJ1/BvK82kfwRxQYMNDOmNbq3w6U80nX7K+hWzI= Subject key identifier: 65:A7:00:14:2F:AF:7A:32:18:A1:C4:D4:5D:B3:B1:55:7C:39:89:B1 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21E8 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/ZacAFC-vejIYocTUXbOxVXw5ibE.roa Signing time: Sat 13 Sep 2025 03:09:06 +0000 ROA not before: Sat 13 Sep 2025 03:09:06 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 23724 IP address blocks: 180.184.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8680 (0x21e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:06 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=65A700142FAF7A3218A1C4D45DB3B1557C3989B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7b:5d:d5:c1:96:57:ee:99:03:c5:e8:19:b5: 15:ea:03:19:a3:cd:b1:c7:7e:23:2b:7c:07:43:d4: 1a:4b:52:eb:cb:27:1c:b9:f7:58:54:d6:43:64:52: 5b:a1:5b:88:8f:e7:cf:31:aa:6d:13:21:43:72:9d: 92:81:a5:45:dd:02:f4:5e:1d:57:e0:1b:d4:35:ed: 54:82:fc:c6:c4:34:86:9a:7a:64:f7:97:fb:21:e8: 2e:58:9b:40:42:bb:37:8e:c9:51:1c:19:66:bc:04: 08:ba:ec:4d:f2:05:fd:fd:2e:7f:3d:bd:ae:f0:02: d4:9e:7a:11:1b:fb:7a:9c:79:44:dc:6c:c1:3e:0b: 83:b0:94:57:29:61:5b:fd:b9:0b:19:ff:ed:fc:25: 90:af:f1:94:a6:3d:2a:12:53:db:f1:51:2a:e1:12: 01:68:a7:96:48:84:e1:e0:3c:dd:5c:77:56:63:27: 66:e2:be:04:27:14:58:75:f3:88:51:de:1a:3e:13: b9:6f:e9:d6:b4:af:28:54:9c:5e:05:98:cb:e4:f1: 37:9b:7d:87:ca:48:eb:d8:10:b1:41:9b:a2:e8:6f: 33:2a:c2:2c:6c:19:35:0d:78:6f:37:09:83:61:4d: 3d:43:14:58:b5:3a:0d:8b:9b:a6:99:3e:b3:1e:d6: d2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A7:00:14:2F:AF:7A:32:18:A1:C4:D4:5D:B3:B1:55:7C:39:89:B1 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/ZacAFC-vejIYocTUXbOxVXw5ibE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.56.0/21 Signature Algorithm: sha256WithRSAEncryption 96:12:20:67:b5:13:46:5b:55:84:99:5b:4d:ae:67:36:11:f5: 89:07:74:b8:15:c8:26:59:7b:9a:f9:2e:5b:67:fd:96:e3:d6: a9:3e:40:69:0b:6f:e6:78:c8:d9:a9:c3:d3:f7:3f:4b:14:96: 48:98:b1:f9:06:48:81:7c:86:71:1e:72:64:b0:1c:af:72:84: b0:c8:5a:e9:eb:65:91:f7:a3:0a:22:b3:99:b8:0e:85:cf:a4: d3:ec:b4:f7:41:2e:a3:02:72:4c:58:42:36:45:55:8c:f7:48: 91:be:fe:de:be:74:de:98:d1:05:67:d4:26:5b:37:37:8b:d8: 74:25:9d:c0:73:cc:dc:82:ec:20:40:bd:94:e1:36:93:15:69: cc:72:f9:7b:83:e0:3e:2c:ab:85:5e:1b:3c:3c:a1:d1:31:87: 28:95:c6:3a:97:c1:0e:64:41:bd:a9:e6:46:d2:cd:2f:57:31: df:79:9e:bd:88:c7:94:5e:18:38:b8:00:e8:dc:cf:a8:a8:cd: 57:ae:b9:90:b9:51:ff:64:8d:58:9a:80:56:e0:ca:c1:73:a6: 96:5b:a9:61:7f:91:c4:53:0f:39:9c:98:6a:48:1c:3b:43:91: b7:1a:06:a1:11:83:b1:aa:ea:16:8c:3b:13:f6:cf:ec:84:15: ae:46:38:18 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDY1QTcwMDE0MkZBRjdB MzIxOEExQzRENDVEQjNCMTU1N0MzOTg5QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfe13VwZZX7pkDxegZtRXqAxmjzbHHfiMrfAdD1BpLUuvLJxy5 91hU1kNkUluhW4iP588xqm0TIUNynZKBpUXdAvReHVfgG9Q17VSC/MbENIaaemT3 l/sh6C5Ym0BCuzeOyVEcGWa8BAi67E3yBf39Ln89va7wAtSeehEb+3qceUTcbME+ C4OwlFcpYVv9uQsZ/+38JZCv8ZSmPSoSU9vxUSrhEgFop5ZIhOHgPN1cd1ZjJ2bi vgQnFFh184hR3ho+E7lv6da0ryhUnF4FmMvk8TebfYfKSOvYELFBm6LobzMqwixs GTUNeG83CYNhTT1DFFi1Og2Lm6aZPrMe1tJtAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUZacAFC+vejIYocTUXbOxVXw5ibEwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvWmFjQUZDLXZlaklZ b2NUVVhiT3hWWHc1aWJFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7S4ODANBgkqhkiG9w0BAQsFAAOCAQEAlhIgZ7UTRltVhJlbTa5nNhH1iQd0 uBXIJll7mvkuW2f9luPWqT5AaQtv5njI2anD0/c/SxSWSJix+QZIgXyGcR5yZLAc r3KEsMha6etlkfejCiKzmbgOhc+k0+y090EuowJyTFhCNkVVjPdIkb7+3r503pjR BWfUJls3N4vYdCWdwHPM3ILsIEC9lOE2kxVpzHL5e4PgPiyrhV4bPDyh0TGHKJXG OpfBDmRBvanmRtLNL1cx33mevYjHlF4YOLgA6NzPqKjNV665kLlR/2SNWJqAVuDK wXOmllupYX+RxFMPOZyYakgcO0ORtxoGoRGDsarqFow7E/bP7IQVrkY4GA== -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:37 2025 by rpki-client