$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/4nKREMIhbGZ2m8B_8cJOgFTwhfE.roa File: 4nKREMIhbGZ2m8B_8cJOgFTwhfE.roa (raw, json) Hash identifier: G6g8pr6jTdlNOAKaxFVCbD1u7PT5jZA68u+xS7yk8kc= Subject key identifier: E2:72:91:10:C2:21:6C:66:76:9B:C0:7F:F1:C2:4E:80:54:F0:85:F1 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A7C Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/4nKREMIhbGZ2m8B_8cJOgFTwhfE.roa Signing time: Sat 13 Sep 2025 03:07:18 +0000 ROA not before: Sat 13 Sep 2025 03:07:18 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 152179 IP address blocks: 180.223.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 04:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6780 (0x1a7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:18 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E2729110C2216C66769BC07FF1C24E8054F085F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:76:66:e2:4a:f9:a1:da:47:d0:9f:2c:8f:81: 24:20:18:06:d9:fa:1b:57:69:02:78:e7:ce:b1:1a: 6c:8d:c7:3b:48:d2:91:7f:82:bc:65:b2:13:98:1c: fe:cb:20:02:a4:82:63:7b:77:77:ed:11:45:55:9e: 39:39:3c:d5:0e:c0:0a:65:5f:c1:63:c2:70:65:40: aa:3e:7b:c9:6e:c9:ed:a7:fa:7a:a1:49:39:89:89: 84:a5:fd:db:54:66:03:9c:b1:0d:79:c7:cb:44:fa: 97:f4:af:84:ca:e1:cb:95:ec:4e:42:1f:bb:d1:a1: b6:5c:7c:cc:9e:0f:88:b6:88:32:25:04:c6:18:c4: c1:b3:a9:15:73:7f:e7:31:c0:63:fb:6f:32:e2:26: c4:1e:23:0b:62:73:b8:8f:6a:b0:46:e7:0e:1d:1a: 48:5c:16:59:1d:d3:bd:32:63:f7:f5:14:a8:9b:7b: 03:b5:18:55:ea:d1:61:60:9e:b2:11:03:88:4d:ad: 1f:dd:f4:3f:80:44:ca:60:7b:64:d0:66:a3:d9:60: 21:69:95:05:59:71:f7:fc:27:a5:73:aa:78:b6:93: c6:26:67:44:61:20:a5:49:91:68:cf:b3:58:b6:80: d5:2f:09:89:1a:26:d6:9f:41:fe:7c:38:e8:39:48: 7c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:72:91:10:C2:21:6C:66:76:9B:C0:7F:F1:C2:4E:80:54:F0:85:F1 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/4nKREMIhbGZ2m8B_8cJOgFTwhfE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.209.0/24 Signature Algorithm: sha256WithRSAEncryption d5:2a:e7:bf:39:69:c8:dc:95:14:65:92:aa:22:6d:40:7c:7f: 78:1e:7c:eb:e1:b9:91:08:49:1e:52:61:65:fb:5f:5a:4f:13: 52:1b:f7:a9:ba:37:30:a3:70:85:95:78:22:8b:35:fd:c8:4f: 8f:c5:0d:0e:99:6a:5b:df:1e:35:10:43:9d:ab:5f:a0:f2:a3: 8a:90:bc:c6:f1:9a:67:43:4e:29:34:f4:4c:24:a1:56:9a:04: bb:75:61:6f:9f:42:19:d8:53:e0:b7:05:47:9b:9e:e4:2e:8a: 22:6b:a4:9e:45:3c:bd:b0:45:91:e7:2b:d7:82:8f:4f:2d:b7: 42:23:29:df:2d:a9:58:7a:91:cb:12:34:fb:e2:0d:c5:00:03: 41:29:1d:6d:87:de:ac:4e:0c:3d:9c:3c:f1:f7:5d:06:eb:29: f3:1a:de:1e:74:af:0e:04:61:6e:e9:f6:bf:a5:1c:69:18:38: 5d:d1:20:8d:5d:cb:c4:e4:ba:89:0e:5b:41:ab:c1:a6:93:28: d2:df:d1:63:cd:2d:e6:1b:43:dc:00:0d:41:8c:32:64:81:2d: 29:3e:ee:a1:b7:1f:70:ed:a3:dc:4f:52:7c:af:21:c7:68:ea: 21:b2:c8:31:92:b7:5f:da:82:ee:6f:bd:df:6d:92:ca:41:14: fb:65:f9:e1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEUyNzI5MTEwQzIyMTZD NjY3NjlCQzA3RkYxQzI0RTgwNTRGMDg1RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcdmbiSvmh2kfQnyyPgSQgGAbZ+htXaQJ4586xGmyNxztI0pF/ grxlshOYHP7LIAKkgmN7d3ftEUVVnjk5PNUOwAplX8FjwnBlQKo+e8luye2n+nqh STmJiYSl/dtUZgOcsQ15x8tE+pf0r4TK4cuV7E5CH7vRobZcfMyeD4i2iDIlBMYY xMGzqRVzf+cxwGP7bzLiJsQeIwtic7iParBG5w4dGkhcFlkd070yY/f1FKibewO1 GFXq0WFgnrIRA4hNrR/d9D+ARMpge2TQZqPZYCFplQVZcff8J6Vzqni2k8YmZ0Rh IKVJkWjPs1i2gNUvCYkaJtafQf58OOg5SHwVAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU4nKREMIhbGZ2m8B/8cJOgFTwhfEwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvNG5LUkVNSWhiR1oy bThCXzhjSk9nRlR3aGZFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTf0TANBgkqhkiG9w0BAQsFAAOCAQEA1SrnvzlpyNyVFGWSqiJtQHx/eB58 6+G5kQhJHlJhZftfWk8TUhv3qbo3MKNwhZV4Ios1/chPj8UNDplqW98eNRBDnatf oPKjipC8xvGaZ0NOKTT0TCShVpoEu3Vhb59CGdhT4LcFR5ue5C6KImuknkU8vbBF kecr14KPTy23QiMp3y2pWHqRyxI0++INxQADQSkdbYferE4MPZw88fddBusp8xre HnSvDgRhbun2v6UcaRg4XdEgjV3LxOS6iQ5bQavBppMo0t/RY80t5htD3AANQYwy ZIEtKT7uobcfcO2j3E9SfK8hx2jqIbLIMZK3X9qC7m+9322SykEU+2X54Q== -----END CERTIFICATE-----Generated at Mon Oct 20 00:04:40 2025 by rpki-client