$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/NkHAfhiM6mqCCcXRtRoxFHmuBlY.roa File: NkHAfhiM6mqCCcXRtRoxFHmuBlY.roa (raw, json) Hash identifier: YEw+9TR/n5kLaLSjnzDR3NtcTzcqYz1thgdIeylQ4V4= Subject key identifier: 36:41:C0:7E:18:8C:EA:6A:82:09:C5:D1:B5:1A:31:14:79:AE:06:56 Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Certificate serial: 0776 Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/NkHAfhiM6mqCCcXRtRoxFHmuBlY.roa Signing time: Tue 08 Jul 2025 08:45:13 +0000 ROA not before: Tue 08 Jul 2025 08:45:13 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146762 IP address blocks: 114.111.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 03:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1910 (0x776) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Validity Not Before: Jul 8 08:45:13 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=3641C07E188CEA6A8209C5D1B51A311479AE0656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:66:f4:ba:fe:33:7e:4f:1a:d1:74:e9:a7: 63:78:27:11:cb:6e:71:8b:24:e7:75:76:ad:a8:85: 3a:99:c6:33:07:71:d7:f8:bd:3e:b3:4c:8d:99:51: 90:83:52:a6:5c:18:99:fd:8c:00:af:85:7a:81:a9: eb:48:25:8e:9c:65:d4:85:a1:51:d4:ac:8c:5d:25: f7:9f:df:6f:2c:fa:14:17:f8:2a:cb:66:3f:60:79: 2a:0e:82:64:d0:08:91:52:7e:ea:1f:3e:ed:76:4c: 07:0f:fe:3d:d4:2c:bd:77:40:69:09:fc:c9:db:0c: d4:58:e2:02:c2:a3:55:a3:d3:5c:22:23:7b:d5:9d: eb:31:5a:e3:99:72:3b:e4:42:42:e5:af:ee:c1:3a: e3:cf:15:5a:64:39:00:3c:1e:f8:9b:97:f1:ba:f8: f4:f3:f5:52:07:7d:8c:65:97:aa:86:10:4b:05:5a: 6f:c9:95:fa:a6:24:fe:bb:39:57:0e:53:5d:b5:dc: d7:47:0b:6b:f2:2a:6c:96:39:db:a9:72:2d:10:25: e6:7a:92:17:a9:cf:a5:53:b7:4c:65:3b:55:20:24: db:ae:ce:70:14:4e:72:d7:a8:5f:a2:48:ad:9f:a2: 69:82:d1:b8:ce:13:e6:a4:7b:5e:c3:43:b1:8d:75: 9e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:41:C0:7E:18:8C:EA:6A:82:09:C5:D1:B5:1A:31:14:79:AE:06:56 X509v3 Authority Key Identifier: keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/NkHAfhiM6mqCCcXRtRoxFHmuBlY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.111.180.0/24 Signature Algorithm: sha256WithRSAEncryption 73:a1:04:d8:10:b2:04:e4:ed:cf:a4:35:9f:17:70:89:9f:18: 98:46:2f:75:e0:b5:ec:84:3b:c7:06:51:0b:80:29:71:54:17: 05:5f:58:5f:04:f0:6e:f0:92:f1:ae:b3:0f:b3:79:6d:7b:4f: f4:41:a4:f1:6b:27:0f:26:3a:fb:cf:67:4c:a1:48:aa:9a:5b: 9f:18:63:1c:25:72:05:e5:17:fe:80:e0:81:1a:b5:d5:8c:e7: 69:12:3d:fb:b1:f4:ce:22:43:15:b6:c7:cd:cc:13:51:06:20: 26:9e:af:37:22:7c:79:2b:64:43:56:a3:3b:41:53:a1:1d:72: 44:2a:62:84:7c:18:1d:34:bf:fa:1b:f6:7f:98:96:5a:48:4b: d2:bb:02:88:f1:84:47:61:5a:3c:24:61:0b:20:5a:cc:a2:e5: b1:f2:8a:a6:b9:7e:57:8c:45:b4:10:cd:fd:e4:69:41:7a:f8: 38:c9:24:ca:2b:b5:5e:76:5e:29:f4:ae:1e:8a:b0:c6:c9:b6: 4f:88:b1:68:37:c5:61:83:79:c2:0f:51:12:b5:ba:fe:30:40: 56:23:a9:31:af:28:21:2d:e4:39:49:01:23:39:06:20:1e:3e: 80:3e:ed:00:1a:55:70:dd:de:b1:5e:f1:2a:63:7b:5d:77:64: 05:19:d8:b4 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJD NkQ5QTlGNEEyMjZBNjFGNUZBMUE5MTYzOTQxRDRCMzVCQTM1QjAeFw0yNTA3MDgw ODQ1MTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM2NDFDMDdFMTg4Q0VB NkE4MjA5QzVEMUI1MUEzMTE0NzlBRTA2NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZhmb0uv4zfk8a0XTpp2N4JxHLbnGLJOd1dq2ohTqZxjMHcdf4 vT6zTI2ZUZCDUqZcGJn9jACvhXqBqetIJY6cZdSFoVHUrIxdJfef328s+hQX+CrL Zj9geSoOgmTQCJFSfuofPu12TAcP/j3ULL13QGkJ/MnbDNRY4gLCo1Wj01wiI3vV nesxWuOZcjvkQkLlr+7BOuPPFVpkOQA8Hvibl/G6+PTz9VIHfYxll6qGEEsFWm/J lfqmJP67OVcOU1213NdHC2vyKmyWOdupci0QJeZ6khepz6VTt0xlO1UgJNuuznAU TnLXqF+iSK2fommC0bjOE+ake17DQ7GNdZ5BAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUNkHAfhiM6mqCCcXRtRoxFHmuBlYwHwYDVR0jBBgwFoAUG8bZqfSiJqYfX6Gp FjlB1LNbo1swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz NC9HOGJacWZTaUpxWWZYNkdwRmpsQjFMTmJvMXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0c4YlpxZlNpSnFZZlg2R3BGamxCMUxOYm8xcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzQvTmtIQWZoaU02bXFD Q2NYUnRSb3hGSG11QmxZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHJvtDANBgkqhkiG9w0BAQsFAAOCAQEAc6EE2BCyBOTtz6Q1nxdwiZ8YmEYv deC17IQ7xwZRC4ApcVQXBV9YXwTwbvCS8a6zD7N5bXtP9EGk8WsnDyY6+89nTKFI qppbnxhjHCVyBeUX/oDggRq11YznaRI9+7H0ziJDFbbHzcwTUQYgJp6vNyJ8eStk Q1ajO0FToR1yRCpihHwYHTS/+hv2f5iWWkhL0rsCiPGER2FaPCRhCyBazKLlsfKK prl+V4xFtBDN/eRpQXr4OMkkyiu1XnZeKfSuHoqwxsm2T4ixaDfFYYN5wg9RErW6 /jBAViOpMa8oIS3kOUkBIzkGIB4+gD7tABpVcN3esV7xKmN7XXdkBRnYtA== -----END CERTIFICATE-----Generated at Sun Aug 24 02:42:49 2025 by rpki-client