$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/cgbmXCZUa4dSV_mg4YAHr39wdNM.roa File: cgbmXCZUa4dSV_mg4YAHr39wdNM.roa (raw, json) Hash identifier: uBYo5m2Hy/OEGX8lBK/l7FS6xRFtbU3FDrQdGX7oPUc= Subject key identifier: 72:06:E6:5C:26:54:6B:87:52:57:F9:A0:E1:80:07:AF:7F:70:74:D3 Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Certificate serial: 14E0 Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/cgbmXCZUa4dSV_mg4YAHr39wdNM.roa Signing time: Thu 11 Sep 2025 07:46:46 +0000 ROA not before: Thu 11 Sep 2025 07:46:46 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4812 IP address blocks: 120.136.156.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5344 (0x14e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Validity Not Before: Sep 11 07:46:46 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=7206E65C26546B875257F9A0E18007AF7F7074D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:7d:36:9c:08:45:99:d1:97:c5:45:99:8d: 44:67:03:bf:a6:64:3f:12:31:9a:d3:1e:21:1d:aa: ef:9f:29:33:eb:a3:bd:7c:35:e7:51:4b:27:a7:42: da:63:cc:10:82:4b:4a:b4:f0:0d:8d:6b:09:e8:5c: e6:02:9d:fb:c9:65:fa:1a:5f:4a:76:09:e8:d5:a6: 9d:d5:ca:11:03:8e:30:52:73:a0:ca:15:96:55:17: 55:26:85:ff:d8:d2:f4:62:10:0b:43:ad:53:b0:dc: ce:77:c7:bd:e0:f8:00:e6:59:8a:b1:21:76:0c:78: 28:e1:7a:a6:57:7e:e8:bf:80:dc:37:3c:c4:00:ec: 02:66:2f:22:e0:88:70:6f:45:03:07:b2:34:42:7d: c0:73:07:5b:51:b7:63:f6:74:19:2b:b1:8c:7e:38: aa:d0:2b:a6:7e:22:3f:22:b0:73:87:18:46:86:84: 31:da:f9:44:a6:48:5e:1d:a6:5a:bc:2b:11:a4:31: c8:34:34:29:b7:30:50:ae:3f:4b:78:49:f5:ae:cf: f1:c4:49:77:53:dd:d6:80:98:ce:a1:8f:fa:fe:d8: 3f:3c:0b:cc:7c:27:ec:13:a6:42:16:67:1e:b9:31: 33:ba:e1:b8:92:8b:83:0f:9e:7e:68:61:cb:0e:a4: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:06:E6:5C:26:54:6B:87:52:57:F9:A0:E1:80:07:AF:7F:70:74:D3 X509v3 Authority Key Identifier: keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/cgbmXCZUa4dSV_mg4YAHr39wdNM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.136.156.0/22 Signature Algorithm: sha256WithRSAEncryption ae:32:be:26:db:e3:de:a2:f4:65:08:9b:d4:48:e3:23:fd:a6: 6e:ed:0c:d0:1c:45:e3:ca:bf:9a:8a:f4:31:a1:26:a1:ff:76: dc:3f:f8:3d:51:fb:43:ca:a7:79:e2:9e:66:3f:de:6b:3c:ea: 94:3b:ca:d2:3d:ca:25:42:38:59:7f:ca:8c:f4:f7:a7:2a:27: 3d:7f:78:81:4f:ac:49:73:e9:80:4a:7a:a9:49:05:94:c0:d7: 14:a0:1f:9f:2f:c1:61:d2:d5:9c:e6:6e:e2:85:32:e4:22:2f: c0:95:56:a6:2b:3a:23:23:79:c4:45:da:bd:97:2d:af:0d:c6: b1:05:4d:4a:43:2e:5e:ee:09:3e:d8:cf:8d:8b:b1:74:15:92: c2:25:13:ba:5d:00:e2:01:15:66:cf:79:70:42:36:22:b1:3e: 15:c9:34:dd:5f:2b:14:df:5e:70:29:f1:8c:47:95:45:b6:01: 2a:43:8e:4b:aa:82:fc:6c:12:9c:ed:8c:8d:34:4e:47:db:82: 63:ae:92:e9:75:ab:ec:c4:49:99:a4:b6:7c:84:5a:e2:b6:8d: 0a:21:41:ef:a0:1c:11:1e:df:bc:c6:e9:b7:59:1f:11:69:38: a7:a4:92:db:a8:67:f4:30:fd:f9:19:0e:a9:d2:a9:19:dc:39: 5a:d5:c3:95 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICFOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNTA5MTEw NzQ2NDZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDcyMDZFNjVDMjY1NDZC ODc1MjU3RjlBMEUxODAwN0FGN0Y3MDc0RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDELH02nAhFmdGXxUWZjURnA7+mZD8SMZrTHiEdqu+fKTPro718 NedRSyenQtpjzBCCS0q08A2NawnoXOYCnfvJZfoaX0p2CejVpp3VyhEDjjBSc6DK FZZVF1Umhf/Y0vRiEAtDrVOw3M53x73g+ADmWYqxIXYMeCjheqZXfui/gNw3PMQA 7AJmLyLgiHBvRQMHsjRCfcBzB1tRt2P2dBkrsYx+OKrQK6Z+Ij8isHOHGEaGhDHa +USmSF4dplq8KxGkMcg0NCm3MFCuP0t4SfWuz/HESXdT3daAmM6hj/r+2D88C8x8 J+wTpkIWZx65MTO64biSi4MPnn5oYcsOpGjDAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUcgbmXCZUa4dSV/mg4YAHr39wdNMwHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7 wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9jZ2JtWENaVWE0ZFNWX21n NFlBSHIzOXdkTk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC eIicMA0GCSqGSIb3DQEBCwUAA4IBAQCuMr4m2+PeovRlCJvUSOMj/aZu7QzQHEXj yr+aivQxoSah/3bcP/g9UftDyqd54p5mP95rPOqUO8rSPcolQjhZf8qM9PenKic9 f3iBT6xJc+mASnqpSQWUwNcUoB+fL8Fh0tWc5m7ihTLkIi/AlVamKzojI3nERdq9 ly2vDcaxBU1KQy5e7gk+2M+Ni7F0FZLCJRO6XQDiARVmz3lwQjYisT4VyTTdXysU 315wKfGMR5VFtgEqQ45LqoL8bBKc7YyNNE5H24JjrpLpdavsxEmZpLZ8hFrito0K IUHvoBwRHt+8xum3WR8RaTinpJLbqGf0MP35GQ6p0qkZ3Dla1cOV -----END CERTIFICATE-----Generated at Mon Oct 20 17:51:54 2025 by rpki-client