$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/_nHDQeZIhofIGJSfU8E7lwpubrc.roa File: _nHDQeZIhofIGJSfU8E7lwpubrc.roa (raw, json) Hash identifier: 0mDeMS0a+EslvWduQZBBlpSLCA+CoRP68P+431Npqco= Subject key identifier: FE:71:C3:41:E6:48:86:87:C8:18:94:9F:53:C1:3B:97:0A:6E:6E:B7 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A9B Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/_nHDQeZIhofIGJSfU8E7lwpubrc.roa Signing time: Sat 13 Sep 2025 03:07:24 +0000 ROA not before: Sat 13 Sep 2025 03:07:24 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 18811 IP address blocks: 180.223.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 04:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6811 (0x1a9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:24 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FE71C341E6488687C818949F53C13B970A6E6EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:a3:e7:5a:2d:e7:a7:e4:95:7e:7f:86:11: ff:13:0c:b0:16:74:6e:e8:54:96:aa:d6:22:55:56: 36:7b:b8:4b:6d:ec:86:2a:de:7c:fd:3d:51:7f:79: 47:44:26:59:15:5d:8b:58:7c:d2:26:37:f0:cc:24: c4:33:cc:81:2e:8a:dc:d1:e0:31:fc:76:0f:da:32: d4:fd:d4:2b:47:6b:f5:17:78:59:f7:e2:c7:88:30: 4a:6f:fa:1e:3f:da:88:64:52:bb:b4:7b:48:6f:d8: e8:50:44:77:a5:62:26:9b:2e:ba:8b:76:4e:4c:55: f5:b5:bf:e8:ba:e7:57:a8:76:22:26:7e:1f:20:19: 53:93:9f:74:a1:9d:2e:18:7a:f6:16:0c:87:21:a6: a4:fa:eb:e4:98:e4:8e:33:5a:db:7a:a6:b2:48:77: d2:3c:62:8c:17:36:08:c7:05:34:ba:8f:a3:b7:e3: ae:04:6c:f0:72:86:0d:a3:10:bf:f5:39:9a:c1:e3: 21:db:98:b5:b4:45:31:2b:5a:7d:72:bc:0b:85:e2: 38:89:d4:70:12:50:15:63:a9:c0:17:f5:a9:1f:36: 76:95:16:78:1e:56:7f:a3:ab:1b:9b:24:e2:29:af: d6:8f:5b:af:00:2a:9a:53:b7:8d:f4:d4:8e:29:f6: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:71:C3:41:E6:48:86:87:C8:18:94:9F:53:C1:3B:97:0A:6E:6E:B7 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/_nHDQeZIhofIGJSfU8E7lwpubrc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.248.0/21 Signature Algorithm: sha256WithRSAEncryption 62:e0:f0:a2:28:c6:3d:46:5d:d1:4b:60:fb:bd:4b:a7:ec:01: 50:91:9b:6a:9e:5d:83:4f:06:88:b0:65:4c:14:15:b1:00:2e: 92:b6:01:dd:d1:63:90:91:b8:5d:16:7a:bf:6a:2f:f5:82:c6: 99:1f:5f:a5:8e:e0:fc:76:24:8d:30:5c:c4:d0:a9:16:6f:77: fe:3b:a1:1b:8c:37:22:21:b0:6d:96:75:c6:93:98:b3:27:e6: bc:dc:aa:9c:0e:2b:6a:99:4c:95:00:50:ca:86:14:55:b2:48: 6a:29:39:9c:c9:0f:1c:04:1a:e4:ab:ad:c9:4e:02:b7:a4:84: b1:41:37:c1:c1:73:1d:e2:18:e4:d8:67:63:c9:a2:5c:f0:30: e0:33:5f:bd:58:a0:14:60:83:ba:44:58:a7:4d:6f:39:82:c7: c7:7a:cb:02:4f:60:db:48:fd:e9:e7:07:b6:59:cd:14:44:0a: 12:0c:4c:f6:18:26:9a:67:38:c2:93:32:a3:bd:e7:b1:42:c0: 7e:ea:2f:c8:01:68:23:3b:22:fc:56:5a:df:69:ea:e1:52:2a: b9:21:69:ec:e2:fb:47:61:53:37:7e:20:c2:48:c2:f5:d7:c8: a7:4a:59:81:11:29:90:19:90:28:7f:9c:50:e0:c4:64:0a:c9: 68:6d:18:5f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGpswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MjRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZFNzFDMzQxRTY0ODg2 ODdDODE4OTQ5RjUzQzEzQjk3MEE2RTZFQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKdKPnWi3np+SVfn+GEf8TDLAWdG7oVJaq1iJVVjZ7uEtt7IYq 3nz9PVF/eUdEJlkVXYtYfNImN/DMJMQzzIEuitzR4DH8dg/aMtT91CtHa/UXeFn3 4seIMEpv+h4/2ohkUru0e0hv2OhQRHelYiabLrqLdk5MVfW1v+i651eodiImfh8g GVOTn3ShnS4YevYWDIchpqT66+SY5I4zWtt6prJId9I8YowXNgjHBTS6j6O3464E bPByhg2jEL/1OZrB4yHbmLW0RTErWn1yvAuF4jiJ1HASUBVjqcAX9akfNnaVFnge Vn+jqxubJOIpr9aPW68AKppTt4301I4p9quxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU/nHDQeZIhofIGJSfU8E7lwpubrcwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvX25IRFFlWklob2ZJ R0pTZlU4RTdsd3B1YnJjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7Tf+DANBgkqhkiG9w0BAQsFAAOCAQEAYuDwoijGPUZd0Utg+71Lp+wBUJGb ap5dg08GiLBlTBQVsQAukrYB3dFjkJG4XRZ6v2ov9YLGmR9fpY7g/HYkjTBcxNCp Fm93/juhG4w3IiGwbZZ1xpOYsyfmvNyqnA4raplMlQBQyoYUVbJIaik5nMkPHAQa 5KutyU4Ct6SEsUE3wcFzHeIY5NhnY8miXPAw4DNfvVigFGCDukRYp01vOYLHx3rL Ak9g20j96ecHtlnNFEQKEgxM9hgmmmc4wpMyo73nsULAfuovyAFoIzsi/FZa32nq 4VIquSFp7OL7R2FTN34gwkjC9dfIp0pZgREpkBmQKH+cUODEZArJaG0YXw== -----END CERTIFICATE-----Generated at Mon Oct 20 00:04:32 2025 by rpki-client