$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/f4xz75YJ0CsbQdGDsqIHk7YiyN4.roa File: f4xz75YJ0CsbQdGDsqIHk7YiyN4.roa (raw, json) Hash identifier: IH6eh9ssqqy1jmKk6bmphAQ503e9w0A5X09zCc6p028= Subject key identifier: 7F:8C:73:EF:96:09:D0:2B:1B:41:D1:83:B2:A2:07:93:B6:22:C8:DE Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21D2 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/f4xz75YJ0CsbQdGDsqIHk7YiyN4.roa Signing time: Sat 13 Sep 2025 03:09:01 +0000 ROA not before: Sat 13 Sep 2025 03:09:01 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 180.184.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8658 (0x21d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:01 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=7F8C73EF9609D02B1B41D183B2A20793B622C8DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0a:2b:a2:18:ff:64:8a:0c:07:93:6f:92:f4: 76:82:df:9b:19:95:b3:36:43:db:78:56:ad:d6:b6: 00:ca:7f:f1:5c:1d:36:bd:e4:3c:b7:01:0e:47:12: 32:0e:53:93:d4:46:4e:b3:9f:0f:9f:ee:e0:28:29: 95:cd:89:5a:fc:0c:70:17:f2:aa:28:ec:ea:ac:01: 20:58:69:01:3e:4c:9a:a4:c4:86:fb:28:f1:d7:c9: 82:be:1d:1d:71:1c:e1:dd:81:a4:4b:c6:77:b9:07: 1c:0e:65:f6:1a:5d:0f:a1:35:68:31:88:d3:43:56: d4:fd:95:35:45:15:23:4f:74:f9:11:56:cc:94:a7: 67:e5:8f:a3:03:88:42:8c:94:3a:5e:38:bb:28:fc: d8:bf:8a:35:cc:b9:6e:ec:b3:d4:f1:ac:f2:d1:c6: 86:ae:39:ef:cd:84:a6:37:ea:94:50:de:2c:8f:a8: 91:06:b3:41:96:76:fa:4e:22:64:11:a5:49:de:cf: 27:cb:39:8e:8b:71:25:fa:1e:24:cb:83:26:1b:ac: 76:5e:d9:71:ee:e3:34:06:a0:c2:95:20:aa:98:db: 2a:0d:dc:a2:37:22:c3:02:d8:25:fa:de:0c:18:5f: 79:52:bc:69:ac:ab:0e:74:ba:d4:5a:36:c1:00:23: da:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8C:73:EF:96:09:D0:2B:1B:41:D1:83:B2:A2:07:93:B6:22:C8:DE X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/f4xz75YJ0CsbQdGDsqIHk7YiyN4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.152.0/22 Signature Algorithm: sha256WithRSAEncryption 28:40:f3:ab:07:24:33:dd:ec:9c:07:2f:7d:d4:f2:90:26:fb: 9e:46:48:ab:ba:be:c9:1e:06:d0:56:1a:78:79:96:ac:58:df: cf:42:3e:2b:e4:88:3f:2f:55:8f:00:cf:2b:1f:79:93:8d:c5: e5:ca:12:3d:3b:da:86:c9:66:97:b5:c2:a6:df:4a:2a:8d:3d: ae:26:43:9b:4f:31:9e:22:a3:f0:53:4a:1c:13:17:a9:3e:4a: 74:c7:c1:30:74:41:ad:13:bb:ae:ad:4a:0e:ec:ae:f6:2b:55: 84:d5:c8:14:cb:28:ea:fc:25:79:12:90:93:fb:3f:1f:9f:0d: 9e:c1:74:94:78:57:81:31:07:9a:40:38:97:92:0d:89:d9:4b: af:18:77:d6:ed:3b:7b:e1:91:a3:8b:93:5a:3d:70:98:a2:a3: 0c:d4:6c:02:6d:19:41:b7:3e:99:a2:1f:20:bf:fa:ac:2d:89: 03:7e:37:79:19:e9:4b:22:81:8b:16:2e:23:48:b4:7f:45:6a: 85:44:04:8c:97:58:77:d9:ef:85:0c:b0:45:7a:fe:fb:db:fb: 47:ee:ab:06:cd:02:51:12:11:57:97:34:f6:b2:2e:4b:c2:9b: ae:64:3b:37:20:82:e5:cb:92:e5:a0:b3:05:c1:d7:d9:83:23: 21:72:43:40 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIdIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDdGOEM3M0VGOTYwOUQw MkIxQjQxRDE4M0IyQTIwNzkzQjYyMkM4REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8CiuiGP9kigwHk2+S9HaC35sZlbM2Q9t4Vq3WtgDKf/FcHTa9 5Dy3AQ5HEjIOU5PURk6znw+f7uAoKZXNiVr8DHAX8qoo7OqsASBYaQE+TJqkxIb7 KPHXyYK+HR1xHOHdgaRLxne5BxwOZfYaXQ+hNWgxiNNDVtT9lTVFFSNPdPkRVsyU p2flj6MDiEKMlDpeOLso/Ni/ijXMuW7ss9TxrPLRxoauOe/NhKY36pRQ3iyPqJEG s0GWdvpOImQRpUnezyfLOY6LcSX6HiTLgyYbrHZe2XHu4zQGoMKVIKqY2yoN3KI3 IsMC2CX63gwYX3lSvGmsqw50utRaNsEAI9qLAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUf4xz75YJ0CsbQdGDsqIHk7YiyN4wHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvZjR4ejc1WUowQ3Ni UWRHRHNxSUhrN1lpeU40LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArS4mDANBgkqhkiG9w0BAQsFAAOCAQEAKEDzqwckM93snAcvfdTykCb7nkZI q7q+yR4G0FYaeHmWrFjfz0I+K+SIPy9VjwDPKx95k43F5coSPTvahslml7XCpt9K Ko09riZDm08xniKj8FNKHBMXqT5KdMfBMHRBrRO7rq1KDuyu9itVhNXIFMso6vwl eRKQk/s/H58NnsF0lHhXgTEHmkA4l5INidlLrxh31u07e+GRo4uTWj1wmKKjDNRs Am0ZQbc+maIfIL/6rC2JA343eRnpSyKBixYuI0i0f0VqhUQEjJdYd9nvhQywRXr+ +9v7R+6rBs0CURIRV5c09rIuS8KbrmQ7NyCC5cuS5aCzBcHX2YMjIXJDQA== -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:36 2025 by rpki-client