$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/9R5fgyXxTGgoxA1BTiSXYYA0zTk.roa File: 9R5fgyXxTGgoxA1BTiSXYYA0zTk.roa (raw, json) Hash identifier: AtsviwmOIYm/a+s4vMt1RegXjG+LDG9bcVyAbY3aNLQ= Subject key identifier: F5:1E:5F:83:25:F1:4C:68:28:C4:0D:41:4E:24:97:61:80:34:CD:39 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A9D Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/9R5fgyXxTGgoxA1BTiSXYYA0zTk.roa Signing time: Sat 13 Sep 2025 03:07:25 +0000 ROA not before: Sat 13 Sep 2025 03:07:25 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 2914 IP address blocks: 180.223.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Oct 2025 13:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6813 (0x1a9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:25 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F51E5F8325F14C6828C40D414E2497618034CD39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:d2:e5:00:3c:e2:cb:fe:92:fd:e4:21:f1: 83:95:03:31:2c:12:c1:92:f4:7c:dc:0b:77:8c:eb: 0d:95:ba:96:20:c1:fb:23:e0:91:2b:fc:ce:2c:97: 90:2e:33:7b:26:3f:b0:59:1d:b4:c4:26:40:3e:17: 27:ca:87:a9:0e:2b:e0:ae:31:ad:5a:04:fd:4b:5c: 08:3c:63:0d:9c:83:34:04:40:69:da:7f:58:be:61: 61:40:27:2d:14:b6:81:49:dc:c2:09:f3:c5:bf:e1: 10:97:bb:3e:04:c0:a0:17:89:87:5b:04:d9:bf:64: 20:ac:60:7f:1c:5a:10:45:4c:07:33:d8:8b:f7:4c: 36:af:64:b2:00:9a:62:06:37:03:8e:e4:d4:82:10: a2:84:a4:4d:01:38:7f:a1:fd:9f:19:ec:3d:f7:ff: 76:0b:ed:d2:6e:3c:5e:91:18:47:20:31:6f:63:d1: 4d:d1:9e:fe:a8:9c:aa:2d:83:4c:93:da:ab:b3:25: 2a:81:be:74:5e:77:07:f9:fe:16:40:f8:72:dc:8e: d7:8c:80:b2:2a:10:c0:f1:9d:f3:98:6e:df:f2:58: 84:59:f2:cb:ba:db:e5:23:e6:23:af:f1:5d:51:01: f9:53:fa:9f:25:ca:9c:5b:5d:4c:a5:0a:ed:ea:2b: 2e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1E:5F:83:25:F1:4C:68:28:C4:0D:41:4E:24:97:61:80:34:CD:39 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/9R5fgyXxTGgoxA1BTiSXYYA0zTk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.120.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:f4:19:4e:6e:7c:6f:8c:c9:7c:27:cc:0e:b4:47:3f:9f:af: b6:78:cd:86:0c:7c:f2:5b:80:74:00:b9:6d:27:b3:18:f8:4b: a7:bc:7d:a2:31:a1:82:fa:78:c4:93:67:db:43:72:64:b4:6f: a2:a2:08:30:18:3c:38:b1:3a:cb:93:54:63:3c:23:c9:a1:6f: 8a:08:8d:a5:8f:ea:d3:40:ee:e5:db:78:7f:e7:ee:db:36:72: 5c:1f:5a:f8:ac:7c:7c:80:73:c2:32:46:53:a1:c7:c7:bc:fe: 5b:b3:0b:34:b3:4b:6f:8b:71:09:36:98:66:35:ba:6b:c4:ac: 87:ef:90:b8:87:23:e4:15:39:27:fd:a8:af:13:3e:c2:8b:2c: 7c:68:b1:5a:80:9e:9e:00:b2:93:bc:31:76:68:53:2f:cc:a6: b8:4f:0c:34:68:e0:5a:b3:7b:9e:62:11:31:d8:28:a8:52:aa: 4f:f9:e6:a2:c6:10:3a:89:a6:3d:2c:3a:96:46:4e:8f:c0:9d: be:8d:e6:38:12:0a:d4:15:49:c8:1b:30:36:3d:11:d2:ce:80: 0d:11:03:2d:eb:f0:2a:08:08:95:69:08:00:85:2c:3b:4d:70: 9b:11:a5:63:2b:90:cc:c2:e6:df:cf:96:be:d5:b1:aa:41:73: f4:83:e5:90 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGp0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MjVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY1MUU1RjgzMjVGMTRD NjgyOEM0MEQ0MTRFMjQ5NzYxODAzNENEMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC96tLlADziy/6S/eQh8YOVAzEsEsGS9HzcC3eM6w2VupYgwfsj 4JEr/M4sl5AuM3smP7BZHbTEJkA+FyfKh6kOK+CuMa1aBP1LXAg8Yw2cgzQEQGna f1i+YWFAJy0UtoFJ3MIJ88W/4RCXuz4EwKAXiYdbBNm/ZCCsYH8cWhBFTAcz2Iv3 TDavZLIAmmIGNwOO5NSCEKKEpE0BOH+h/Z8Z7D33/3YL7dJuPF6RGEcgMW9j0U3R nv6onKotg0yT2quzJSqBvnRedwf5/hZA+HLcjteMgLIqEMDxnfOYbt/yWIRZ8su6 2+Uj5iOv8V1RAflT+p8lypxbXUylCu3qKy5nAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU9R5fgyXxTGgoxA1BTiSXYYA0zTkwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvOVI1Zmd5WHhUR2dv eEExQlRpU1hZWUEwelRrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfeDANBgkqhkiG9w0BAQsFAAOCAQEAPfQZTm58b4zJfCfMDrRHP5+vtnjN hgx88luAdAC5bSezGPhLp7x9ojGhgvp4xJNn20NyZLRvoqIIMBg8OLE6y5NUYzwj yaFvigiNpY/q00Du5dt4f+fu2zZyXB9a+Kx8fIBzwjJGU6HHx7z+W7MLNLNLb4tx CTaYZjW6a8Ssh++QuIcj5BU5J/2orxM+wossfGixWoCengCyk7wxdmhTL8ymuE8M NGjgWrN7nmIRMdgoqFKqT/nmosYQOommPSw6lkZOj8Cdvo3mOBIK1BVJyBswNj0R 0s6ADREDLevwKggIlWkIAIUsO01wmxGlYyuQzMLm38+WvtWxqkFz9IPlkA== -----END CERTIFICATE-----Generated at Wed Oct 8 11:55:18 2025 by rpki-client