$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/Gxk0q51BI7t_rluTFPFJ_hR3Xac.roa File: Gxk0q51BI7t_rluTFPFJ_hR3Xac.roa (raw, json) Hash identifier: HZdjLfWxknvphZQM3p1tFWcUzjqxiQXRWT/NhVjGZMo= Subject key identifier: 1B:19:34:AB:9D:41:23:BB:7F:AE:5B:93:14:F1:49:FE:14:77:5D:A7 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1AA1 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Gxk0q51BI7t_rluTFPFJ_hR3Xac.roa Signing time: Sat 13 Sep 2025 03:07:26 +0000 ROA not before: Sat 13 Sep 2025 03:07:26 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 2914 IP address blocks: 180.223.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Oct 2025 13:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6817 (0x1aa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:26 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1B1934AB9D4123BB7FAE5B9314F149FE14775DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d9:08:f9:35:79:b5:c4:e9:3b:cf:8b:d7:63: a1:1f:d6:26:56:3b:8d:fa:fc:9d:d6:bf:54:79:3c: cb:0d:5f:5a:f1:59:a8:f7:89:bf:c5:5b:d1:da:5c: dd:66:4b:e7:b2:df:17:e6:58:76:59:fd:10:00:20: 80:30:75:4b:06:da:8f:14:4c:31:f3:56:32:f1:9b: 70:ae:6a:40:f0:5b:6c:2c:01:7c:7c:39:08:46:dd: fb:fc:7f:7b:9c:1d:df:cd:8e:e8:69:14:36:f3:eb: 14:a0:0f:a8:3f:31:5f:29:12:6e:50:6b:9b:cb:d4: 26:9f:09:e9:72:bf:d3:e1:19:af:ae:42:7d:5d:c6: d8:6d:99:71:21:6e:e1:42:9d:bb:9f:4f:3c:1c:67: ac:28:c4:48:9d:5c:66:77:4d:71:b0:9c:64:32:c1: 5a:59:53:f5:a7:d6:74:d1:9f:4b:ca:87:cd:ed:19: e8:94:07:1a:91:b3:65:6d:4a:84:dc:77:81:e4:5c: 6a:9a:2c:c7:99:21:48:31:00:a1:e7:2e:8f:78:0f: b4:4f:ba:b0:e0:69:85:1a:34:e8:a9:92:d2:1b:78: fb:c7:f7:ca:74:2c:fc:2d:50:2a:be:22:9d:77:94: 07:77:a4:13:04:d2:3b:b4:84:3a:83:f4:57:6e:95: cf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:19:34:AB:9D:41:23:BB:7F:AE:5B:93:14:F1:49:FE:14:77:5D:A7 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Gxk0q51BI7t_rluTFPFJ_hR3Xac.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.232.0/21 Signature Algorithm: sha256WithRSAEncryption c3:95:5f:a8:92:99:e4:d1:d3:ca:04:f1:0b:53:50:53:7c:0c: ee:28:6a:9b:b4:b3:49:9b:07:07:a9:31:be:ef:6a:b3:f8:a8: 5c:4e:e0:f9:b4:92:e6:bb:3e:4f:7e:94:0c:33:2b:33:3d:82: 24:a6:a4:3a:99:b2:7e:65:1e:97:d1:72:e8:a0:a6:ee:3c:b6: 5f:e5:15:66:f0:e6:78:1e:2a:94:78:5e:94:05:f7:76:c1:f1: 2f:04:52:56:dc:56:95:39:84:60:a5:d3:1c:5a:40:9c:0a:ed: 8d:42:3d:1e:94:5f:47:72:a8:e0:10:2f:4c:22:60:78:5e:15: f2:2d:53:69:bb:e2:33:24:13:a2:11:7b:a5:4e:e1:86:a9:b0: 8a:05:98:8f:32:a8:d5:87:55:30:bc:46:7e:f5:c0:c8:73:fd: ed:7a:bc:6b:c5:cf:45:b3:33:b9:2a:64:6b:e3:d1:2e:e0:39: 64:5d:d4:a3:a3:10:7e:e6:29:b0:31:54:84:82:df:14:4a:1c: 49:dd:32:62:5d:72:68:f8:e2:d9:9f:fc:cf:93:46:6c:91:a6: ae:b4:64:a5:43:b4:aa:36:c0:b8:34:ca:c8:72:61:80:f8:f8: 3d:10:b2:43:58:a0:e3:de:01:3a:92:a9:4e:ec:e5:6e:09:a8: 4a:b0:09:b8 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGqEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MjZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFCMTkzNEFCOUQ0MTIz QkI3RkFFNUI5MzE0RjE0OUZFMTQ3NzVEQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDp2Qj5NXm1xOk7z4vXY6Ef1iZWO436/J3Wv1R5PMsNX1rxWaj3 ib/FW9HaXN1mS+ey3xfmWHZZ/RAAIIAwdUsG2o8UTDHzVjLxm3CuakDwW2wsAXx8 OQhG3fv8f3ucHd/NjuhpFDbz6xSgD6g/MV8pEm5Qa5vL1CafCelyv9PhGa+uQn1d xthtmXEhbuFCnbufTzwcZ6woxEidXGZ3TXGwnGQywVpZU/Wn1nTRn0vKh83tGeiU BxqRs2VtSoTcd4HkXGqaLMeZIUgxAKHnLo94D7RPurDgaYUaNOipktIbePvH98p0 LPwtUCq+Ip13lAd3pBME0ju0hDqD9Fdulc/tAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUGxk0q51BI7t/rluTFPFJ/hR3XacwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvR3hrMHE1MUJJN3Rf cmx1VEZQRkpfaFIzWGFjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7Tf6DANBgkqhkiG9w0BAQsFAAOCAQEAw5VfqJKZ5NHTygTxC1NQU3wM7ihq m7SzSZsHB6kxvu9qs/ioXE7g+bSS5rs+T36UDDMrMz2CJKakOpmyfmUel9Fy6KCm 7jy2X+UVZvDmeB4qlHhelAX3dsHxLwRSVtxWlTmEYKXTHFpAnArtjUI9HpRfR3Ko 4BAvTCJgeF4V8i1TabviMyQTohF7pU7hhqmwigWYjzKo1YdVMLxGfvXAyHP97Xq8 a8XPRbMzuSpka+PRLuA5ZF3Uo6MQfuYpsDFUhILfFEocSd0yYl1yaPji2Z/8z5NG bJGmrrRkpUO0qjbAuDTKyHJhgPj4PRCyQ1ig494BOpKpTuzlbgmoSrAJuA== -----END CERTIFICATE-----Generated at Wed Oct 8 11:54:22 2025 by rpki-client