$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/_GjIzsHqD1yLfeE_Hxz2vkwIrwo.roa File: _GjIzsHqD1yLfeE_Hxz2vkwIrwo.roa (raw, json) Hash identifier: Ti3VnaNucTAmZSWASKFOW95ymTm9DWJNs8z+2pV00pY= Subject key identifier: FC:68:C8:CE:C1:EA:0F:5C:8B:7D:E1:3F:1F:1C:F6:BE:4C:08:AF:0A Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A6D Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/_GjIzsHqD1yLfeE_Hxz2vkwIrwo.roa Signing time: Sat 13 Sep 2025 03:07:15 +0000 ROA not before: Sat 13 Sep 2025 03:07:15 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 2914 IP address blocks: 180.223.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Oct 2025 13:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6765 (0x1a6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:15 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FC68C8CEC1EA0F5C8B7DE13F1F1CF6BE4C08AF0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:5f:fa:0b:3e:fc:c7:9b:af:cd:84:5c:85: 13:19:96:ed:c3:bf:a8:97:42:ba:70:c1:c3:93:14: 04:43:b9:b2:ce:21:e4:e2:2a:bf:3e:9e:3e:e2:64: a1:f1:e6:32:30:d5:e6:f8:b2:e0:73:f7:d9:62:55: ee:b5:ef:77:7a:08:76:03:a0:eb:16:26:ee:96:40: 51:3f:ac:ea:d4:da:c0:de:be:77:0a:d0:11:8c:bb: aa:e9:60:8c:f5:33:16:c4:ee:7b:e2:b2:58:92:3c: fb:de:78:e0:8b:ba:61:65:9e:ef:92:c3:aa:10:4b: b7:29:bf:ef:94:10:9b:72:9d:c8:12:34:cd:55:ef: 4e:4e:85:07:9c:69:ae:bf:4f:fd:c0:ee:b6:bd:65: e2:2a:bb:03:38:c2:02:78:59:f7:a5:7a:96:17:a0: 7e:05:31:c2:ed:88:16:46:39:dc:29:1a:35:6d:a7: b3:08:98:13:a8:fb:b2:da:cf:1f:82:98:fc:f2:80: 24:08:4e:0e:17:23:42:51:19:68:0d:18:bf:9e:15: 6a:10:dc:00:34:d3:eb:2d:9e:07:0f:80:bb:4b:86: 6c:86:86:bc:53:cc:26:c8:56:4b:a5:df:26:77:aa: 9b:59:46:62:2f:a4:d8:89:91:16:89:50:e6:36:27: 46:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:68:C8:CE:C1:EA:0F:5C:8B:7D:E1:3F:1F:1C:F6:BE:4C:08:AF:0A X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/_GjIzsHqD1yLfeE_Hxz2vkwIrwo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.248.0/21 Signature Algorithm: sha256WithRSAEncryption c4:a6:47:4e:84:4c:fd:81:e9:fb:0f:62:c1:e7:ca:fd:30:c3: 3c:89:01:58:c8:10:f2:2c:3c:73:77:58:c0:f8:0b:3a:cc:cd: 15:6d:04:56:0c:ee:9e:0f:51:7f:ab:b7:cf:0b:8b:f9:05:e1: 1f:be:cf:3f:a8:8f:b6:9d:a1:6f:3b:e1:9d:16:d1:b7:05:27: 29:e0:50:67:6f:39:5a:2d:bc:51:d2:20:9f:f5:21:6a:76:91: 6d:40:10:8c:88:aa:9e:a9:f8:c9:1e:cd:6a:72:88:f2:69:ab: 2b:64:8c:84:3f:1b:af:c2:d4:bd:83:72:af:08:7b:0e:3c:d4: 1d:5a:d0:52:50:9b:9f:b7:f1:13:da:20:97:41:f0:e5:fd:5d: be:0d:3c:1e:e6:93:27:88:5c:2a:f8:83:ba:3e:a7:5b:9e:23: fc:41:74:73:23:11:ac:12:c8:97:11:2c:2b:20:24:bb:01:dc: c8:b9:70:ee:ee:5c:c3:bd:89:7c:49:4a:a2:51:b2:11:73:9a: 2f:da:b5:60:fa:47:a4:04:dd:10:c6:39:1a:20:73:d0:c3:b4: 52:b2:07:3c:a2:d7:cd:be:e0:1b:0a:e2:05:67:00:24:ea:81: 6d:ed:d1:af:1c:3b:81:65:f6:5d:06:38:d6:99:19:87:a1:72: 3e:23:e5:2c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZDNjhDOENFQzFFQTBG NUM4QjdERTEzRjFGMUNGNkJFNEMwOEFGMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrEF/6Cz78x5uvzYRchRMZlu3Dv6iXQrpwwcOTFARDubLOIeTi Kr8+nj7iZKHx5jIw1eb4suBz99liVe6173d6CHYDoOsWJu6WQFE/rOrU2sDevncK 0BGMu6rpYIz1MxbE7nvisliSPPveeOCLumFlnu+Sw6oQS7cpv++UEJtyncgSNM1V 705OhQecaa6/T/3A7ra9ZeIquwM4wgJ4WfelepYXoH4FMcLtiBZGOdwpGjVtp7MI mBOo+7Lazx+CmPzygCQITg4XI0JRGWgNGL+eFWoQ3AA00+stngcPgLtLhmyGhrxT zCbIVkul3yZ3qptZRmIvpNiJkRaJUOY2J0b9AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU/GjIzsHqD1yLfeE/Hxz2vkwIrwowHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvX0dqSXpzSHFEMXlM ZmVFX0h4ejJ2a3dJcndvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7Tf+DANBgkqhkiG9w0BAQsFAAOCAQEAxKZHToRM/YHp+w9iwefK/TDDPIkB WMgQ8iw8c3dYwPgLOszNFW0EVgzung9Rf6u3zwuL+QXhH77PP6iPtp2hbzvhnRbR twUnKeBQZ285Wi28UdIgn/UhanaRbUAQjIiqnqn4yR7NanKI8mmrK2SMhD8br8LU vYNyrwh7DjzUHVrQUlCbn7fxE9ogl0Hw5f1dvg08HuaTJ4hcKviDuj6nW54j/EF0 cyMRrBLIlxEsKyAkuwHcyLlw7u5cw72JfElKolGyEXOaL9q1YPpHpATdEMY5GiBz 0MO0UrIHPKLXzb7gGwriBWcAJOqBbe3Rrxw7gWX2XQY41pkZh6FyPiPlLA== -----END CERTIFICATE-----Generated at Wed Oct 8 11:55:16 2025 by rpki-client