$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/5Emxb0BU-wiuuARlI9AgDDyMGGs.roa File: 5Emxb0BU-wiuuARlI9AgDDyMGGs.roa (raw, json) Hash identifier: 2js/b39EhBKzTUAbhbMlJcb5Cy7P82l9CUuo0uCItZE= Subject key identifier: E4:49:B1:6F:40:54:FB:08:AE:B8:04:65:23:D0:20:0C:3C:8C:18:6B Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A78 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/5Emxb0BU-wiuuARlI9AgDDyMGGs.roa Signing time: Sat 13 Sep 2025 03:07:17 +0000 ROA not before: Sat 13 Sep 2025 03:07:17 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 2914 IP address blocks: 180.223.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Oct 2025 13:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6776 (0x1a78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:17 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E449B16F4054FB08AEB8046523D0200C3C8C186B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:86:a9:f8:d2:15:6f:31:ff:04:bf:ad:11: 00:8b:aa:60:9a:b0:e3:79:7c:4f:63:86:2c:e9:29: cb:af:8c:b8:66:46:12:1a:c3:57:89:c0:bd:75:1e: ce:0b:0a:d6:8f:cb:e9:22:89:35:0a:16:b2:1f:5d: 20:43:e2:ce:7e:a6:ad:9f:be:f9:2d:bb:be:f4:6c: 2c:bc:c9:75:dc:93:36:d7:ef:d6:de:10:22:93:b8: 68:47:b3:07:f6:14:06:63:d9:8b:a2:97:30:9b:55: e2:98:bd:dc:b8:ee:e6:eb:53:97:07:c6:16:d1:4e: 98:df:bc:69:b1:19:1f:4f:04:8a:ab:de:de:3f:40: 8f:aa:1c:76:b0:b6:5d:64:36:10:5c:c6:88:07:6b: fa:c9:e2:ea:c5:a6:fc:b8:31:57:ae:b9:18:14:47: 88:21:33:98:31:2e:95:9b:2c:c7:ce:3c:ba:16:32: d7:68:3c:11:b8:79:40:bb:18:31:d5:f4:97:6e:bd: a7:d7:66:17:8a:23:ee:45:05:3f:e8:63:ab:d6:50: d1:a1:34:15:68:84:62:c9:f9:88:64:02:b2:fb:94: 94:49:94:b9:34:d4:1e:02:0d:77:f6:d0:e2:59:f5: d8:b9:33:ed:fa:68:03:7e:71:d5:0a:65:a1:35:99: 78:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:49:B1:6F:40:54:FB:08:AE:B8:04:65:23:D0:20:0C:3C:8C:18:6B X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/5Emxb0BU-wiuuARlI9AgDDyMGGs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.197.0/24 Signature Algorithm: sha256WithRSAEncryption b9:bf:fd:da:ee:5d:f1:01:42:5b:dd:fd:a2:9d:11:1e:18:5e: c6:91:06:44:6f:51:fa:38:13:dc:08:06:23:c3:26:d2:1a:8c: b3:93:41:42:d9:5f:25:df:ec:f5:0c:95:f3:43:0e:6b:3f:8b: a7:9d:4e:01:10:d6:6f:0a:5d:79:48:42:72:3e:2e:c0:4e:c7: eb:05:05:56:f2:21:8b:b4:db:07:60:7d:61:76:c7:23:35:c4: 8e:1d:3d:14:14:88:b0:f5:1c:b8:b7:ab:6a:e4:ab:33:77:5f: c2:bc:77:bb:11:42:4e:c2:14:37:2a:66:6a:34:54:c5:20:3c: d4:15:3a:95:f3:45:99:d3:ff:c6:3d:ae:e5:c8:37:2c:30:c4: a7:14:c0:11:cc:b0:f5:29:7a:f3:af:63:d6:1a:14:be:2c:f8: 60:fa:91:31:24:51:ad:e9:e4:12:ed:17:32:15:1a:4d:a0:b7: 4e:02:9b:7b:16:5c:06:21:b7:18:9a:07:37:c4:90:d4:c6:b6: 89:99:a9:d5:5f:e4:64:78:92:10:48:0c:dc:f0:d3:ff:d2:ce: ef:c9:2b:8f:b8:9c:b4:74:04:e8:35:e1:a3:76:88:6a:5d:a9: ae:20:b9:3d:09:d5:b1:66:e9:12:72:9b:ca:52:b2:f3:4e:1e: 13:9c:f5:cd -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGngwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEU0NDlCMTZGNDA1NEZC MDhBRUI4MDQ2NTIzRDAyMDBDM0M4QzE4NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3aIap+NIVbzH/BL+tEQCLqmCasON5fE9jhizpKcuvjLhmRhIa w1eJwL11Hs4LCtaPy+kiiTUKFrIfXSBD4s5+pq2fvvktu770bCy8yXXckzbX79be ECKTuGhHswf2FAZj2YuilzCbVeKYvdy47ubrU5cHxhbRTpjfvGmxGR9PBIqr3t4/ QI+qHHawtl1kNhBcxogHa/rJ4urFpvy4MVeuuRgUR4ghM5gxLpWbLMfOPLoWMtdo PBG4eUC7GDHV9JduvafXZheKI+5FBT/oY6vWUNGhNBVohGLJ+YhkArL7lJRJlLk0 1B4CDXf20OJZ9di5M+36aAN+cdUKZaE1mXjfAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU5Emxb0BU+wiuuARlI9AgDDyMGGswHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvNUVteGIwQlUtd2l1 dUFSbEk5QWdERHlNR0dzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTfxTANBgkqhkiG9w0BAQsFAAOCAQEAub/92u5d8QFCW939op0RHhhexpEG RG9R+jgT3AgGI8Mm0hqMs5NBQtlfJd/s9QyV80MOaz+Lp51OARDWbwpdeUhCcj4u wE7H6wUFVvIhi7TbB2B9YXbHIzXEjh09FBSIsPUcuLerauSrM3dfwrx3uxFCTsIU NypmajRUxSA81BU6lfNFmdP/xj2u5cg3LDDEpxTAEcyw9Sl6869j1hoUviz4YPqR MSRRrenkEu0XMhUaTaC3TgKbexZcBiG3GJoHN8SQ1Ma2iZmp1V/kZHiSEEgM3PDT /9LO78krj7ictHQE6DXho3aIal2priC5PQnVsWbpEnKbylKy804eE5z1zQ== -----END CERTIFICATE-----Generated at Wed Oct 8 11:55:17 2025 by rpki-client