$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/xqMngYF6o_FDcv3kBmsCMk11U9Y.roa File: xqMngYF6o_FDcv3kBmsCMk11U9Y.roa (raw, json) Hash identifier: MSt24a56MCTma7VAqromKvi19uCWmTVWhlSJ8fVLNcY= Subject key identifier: C6:A3:27:81:81:7A:A3:F1:43:72:FD:E4:06:6B:02:32:4D:75:53:D6 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21E0 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/xqMngYF6o_FDcv3kBmsCMk11U9Y.roa Signing time: Sat 13 Sep 2025 03:09:04 +0000 ROA not before: Sat 13 Sep 2025 03:09:04 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 137718 IP address blocks: 180.184.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 03:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8672 (0x21e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:04 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C6A32781817AA3F14372FDE4066B02324D7553D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:e7:22:c1:73:81:ad:92:4d:6e:9a:5c:63: 85:53:c0:c0:89:75:8f:fd:22:0c:ee:6c:61:46:b2: 55:14:94:ff:57:64:34:de:cf:8c:15:99:4e:2a:39: bb:14:3f:2d:32:a2:b9:8b:4e:52:2b:c0:bd:60:47: af:28:f0:1f:97:ac:c0:66:2a:5a:7a:06:f4:5e:3d: 19:19:98:46:e9:96:6f:2a:1a:bc:f6:02:02:c1:93: 32:53:15:ea:b0:c5:97:a7:d4:85:e6:04:59:7a:4d: 6f:e6:ea:f4:8a:b9:d6:e6:4f:33:5b:83:e3:69:34: da:83:10:96:2a:ea:dd:1f:17:8e:a5:bf:cf:01:83: 25:8c:14:71:fa:b5:20:62:06:86:40:71:7a:74:2d: 37:c7:8f:d9:4f:4b:3b:09:fd:bd:51:c5:a2:3f:3a: 62:fc:10:37:f6:90:ea:3e:75:49:51:c4:06:a4:ff: 4b:dc:e1:bb:bd:bc:da:92:10:e0:d2:e2:5f:c1:a9: ab:89:cd:b1:ae:23:7b:ec:2e:bf:1b:6c:b8:fd:3e: ef:1e:47:bb:d3:ba:bf:3e:04:88:0f:a0:a7:dc:7c: d3:32:de:17:b4:e1:3a:9f:d6:1a:1c:00:a7:57:80: ee:e1:67:13:35:df:3e:b2:ef:f7:2d:c2:e9:a2:d7: 62:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A3:27:81:81:7A:A3:F1:43:72:FD:E4:06:6B:02:32:4D:75:53:D6 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/xqMngYF6o_FDcv3kBmsCMk11U9Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.184.0/22 Signature Algorithm: sha256WithRSAEncryption c0:7f:14:2b:a1:a1:c4:93:c9:97:4c:98:22:c6:3a:1a:b1:1c: b5:f6:2b:dc:07:a6:3a:e5:11:73:07:af:7e:e6:02:ba:0b:93: 87:91:33:45:68:9b:c6:b0:e6:e1:f3:ba:83:b2:97:27:1f:26: b1:f4:14:3d:18:28:79:05:12:b1:3c:25:ce:7c:7d:ce:6e:bd: d8:b3:e6:aa:0a:a9:7a:ac:ac:cf:79:0a:f3:d8:e2:e4:96:34: 38:eb:9b:f5:37:b2:95:67:7a:c0:ba:be:e4:0c:d7:af:ce:cd: 5d:79:d5:d8:40:d5:92:3f:5a:60:4e:92:15:15:e3:60:02:d1: 79:b0:e4:fb:aa:1e:6c:25:4f:43:c1:92:ad:30:94:be:93:18: 32:e1:95:47:66:0f:74:02:0d:2c:60:b2:f9:c9:b1:b3:45:a4: 3a:da:c4:1e:21:32:d5:80:99:e0:8a:52:28:5c:55:5a:56:5a: c0:be:74:91:e5:a1:0e:95:ba:99:84:92:b9:93:38:d0:ee:c1: 05:8b:f4:46:f3:a2:4b:e4:ce:7a:fa:11:38:02:24:0b:50:a0: c6:f3:23:27:14:4d:f1:89:9d:e7:32:3c:c0:c3:a4:6c:d9:3d: 01:e4:ec:58:82:5b:45:70:66:4c:ec:10:25:46:fb:49:e2:84: 62:b7:e3:d1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM2QTMyNzgxODE3QUEz RjE0MzcyRkRFNDA2NkIwMjMyNEQ3NTUzRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLMeciwXOBrZJNbppcY4VTwMCJdY/9IgzubGFGslUUlP9XZDTe z4wVmU4qObsUPy0yormLTlIrwL1gR68o8B+XrMBmKlp6BvRePRkZmEbplm8qGrz2 AgLBkzJTFeqwxZen1IXmBFl6TW/m6vSKudbmTzNbg+NpNNqDEJYq6t0fF46lv88B gyWMFHH6tSBiBoZAcXp0LTfHj9lPSzsJ/b1RxaI/OmL8EDf2kOo+dUlRxAak/0vc 4bu9vNqSEODS4l/BqauJzbGuI3vsLr8bbLj9Pu8eR7vTur8+BIgPoKfcfNMy3he0 4Tqf1hocAKdXgO7hZxM13z6y7/ctwumi12JPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUxqMngYF6o/FDcv3kBmsCMk11U9YwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQveHFNbmdZRjZvX0ZE Y3Yza0Jtc0NNazExVTlZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArS4uDANBgkqhkiG9w0BAQsFAAOCAQEAwH8UK6GhxJPJl0yYIsY6GrEctfYr 3AemOuURcwevfuYCuguTh5EzRWibxrDm4fO6g7KXJx8msfQUPRgoeQUSsTwlznx9 zm692LPmqgqpeqysz3kK89ji5JY0OOub9TeylWd6wLq+5AzXr87NXXnV2EDVkj9a YE6SFRXjYALRebDk+6oebCVPQ8GSrTCUvpMYMuGVR2YPdAINLGCy+cmxs0WkOtrE HiEy1YCZ4IpSKFxVWlZawL50keWhDpW6mYSSuZM40O7BBYv0RvOiS+TOevoROAIk C1CgxvMjJxRN8Ymd5zI8wMOkbNk9AeTsWIJbRXBmTOwQJUb7SeKEYrfj0Q== -----END CERTIFICATE-----Generated at Tue Oct 21 01:20:37 2025 by rpki-client