$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/bNsT0KaoL533vH9bs5bMQstt_Ec.roa File: bNsT0KaoL533vH9bs5bMQstt_Ec.roa (raw, json) Hash identifier: WpfeVSnmI+W+xmnezkScFAD4v9sweSHNoH/IxsHWgLI= Subject key identifier: 6C:DB:13:D0:A6:A8:2F:9D:F7:BC:7F:5B:B3:96:CC:42:CB:6D:FC:47 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A5F Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/bNsT0KaoL533vH9bs5bMQstt_Ec.roa Signing time: Sat 13 Sep 2025 03:07:11 +0000 ROA not before: Sat 13 Sep 2025 03:07:11 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 2914 IP address blocks: 180.223.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Oct 2025 13:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6751 (0x1a5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:11 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6CDB13D0A6A82F9DF7BC7F5BB396CC42CB6DFC47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ae:6b:2d:ee:78:14:a7:91:f7:17:67:6f:1b: eb:96:a2:99:c1:3a:c7:cb:ea:22:5b:04:ff:7e:bc: c8:76:f5:e9:19:84:0a:14:98:b3:50:3b:82:ac:3c: 44:26:c9:a7:0a:e0:8a:93:06:1c:10:01:85:26:69: 68:00:b2:1b:55:6b:db:cc:c1:82:0a:3e:10:47:66: a6:14:a5:e9:55:af:29:19:8b:2c:1a:87:2f:c2:07: 23:05:6e:60:6e:de:6f:d7:bd:bc:be:34:d4:1c:87: 73:83:d8:52:88:69:82:8d:5c:ae:d0:4f:ef:3e:44: bd:b7:a0:10:e0:ca:7e:13:c8:db:c8:2c:3d:b9:1b: 3a:77:a5:80:1b:37:c6:0d:6f:a7:96:f8:c6:d3:54: cc:dd:d8:fc:05:5d:bd:e0:ae:13:19:c8:8e:ef:17: 9e:aa:8b:8d:02:48:56:e6:09:af:9e:b8:de:9c:8c: d5:a6:ab:bf:5e:84:6c:9d:2f:82:af:04:67:a6:57: 0f:1d:f5:3a:22:0a:be:3f:e2:cf:75:47:fb:8e:fb: a9:fc:a2:ac:c1:00:f4:e3:b7:ad:1f:9b:c8:82:c6: 36:36:ad:19:f9:f0:a7:98:01:82:cb:72:0a:a1:fa: f0:16:fe:eb:1a:0a:b4:36:52:e6:ce:f8:2c:c2:e1: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DB:13:D0:A6:A8:2F:9D:F7:BC:7F:5B:B3:96:CC:42:CB:6D:FC:47 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/bNsT0KaoL533vH9bs5bMQstt_Ec.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.198.0/24 Signature Algorithm: sha256WithRSAEncryption 46:54:e9:6b:df:fe:87:44:7a:23:0a:9a:14:74:6f:5d:ae:96: a3:2a:02:c6:b6:1b:cf:36:11:62:15:e7:fe:d2:58:29:67:20: 88:42:35:06:b1:2e:04:e9:89:af:8b:d2:a4:f6:e8:5c:fb:2d: ad:97:c2:34:92:c2:76:5d:54:79:29:ea:37:e4:73:35:01:a8: 5a:e1:ca:9c:e1:f3:22:39:40:71:6b:97:6f:e8:83:18:e1:bf: da:7f:fb:91:8b:6c:77:3d:87:47:7b:ee:db:cd:bb:15:b6:b7: 23:e4:78:b1:80:2c:9f:e5:ce:9c:a4:d4:e8:e9:6b:2a:d5:18: 4c:2a:50:ec:13:35:68:ed:a3:07:8f:48:85:af:fb:50:50:70: 24:9d:8e:49:14:c8:f1:5e:35:1c:42:da:6d:84:64:4e:c1:23: b4:9e:3a:a2:d9:73:fb:8e:f5:68:4a:75:30:63:6f:8d:60:2f: 22:f2:90:82:2c:2b:09:7b:e4:28:25:75:b5:82:59:76:ba:e1: 59:89:60:8b:a1:2d:0d:c9:db:c0:15:dd:b4:36:5b:6d:4c:99: d9:55:66:27:57:58:77:26:1d:9a:a8:f1:88:e7:92:b1:fd:de: 9a:41:cd:f6:34:85:22:88:b7:91:0a:b5:71:89:0c:90:f9:bd: 02:94:4b:f6 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MTFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDZDREIxM0QwQTZBODJG OURGN0JDN0Y1QkIzOTZDQzQyQ0I2REZDNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVrmst7ngUp5H3F2dvG+uWopnBOsfL6iJbBP9+vMh29ekZhAoU mLNQO4KsPEQmyacK4IqTBhwQAYUmaWgAshtVa9vMwYIKPhBHZqYUpelVrykZiywa hy/CByMFbmBu3m/Xvby+NNQch3OD2FKIaYKNXK7QT+8+RL23oBDgyn4TyNvILD25 Gzp3pYAbN8YNb6eW+MbTVMzd2PwFXb3grhMZyI7vF56qi40CSFbmCa+euN6cjNWm q79ehGydL4KvBGemVw8d9ToiCr4/4s91R/uO+6n8oqzBAPTjt60fm8iCxjY2rRn5 8KeYAYLLcgqh+vAW/usaCrQ2UubO+CzC4TNFAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUbNsT0KaoL533vH9bs5bMQstt/EcwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvYk5zVDBLYW9MNTMz dkg5YnM1Yk1Rc3R0X0VjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTfxjANBgkqhkiG9w0BAQsFAAOCAQEARlTpa9/+h0R6IwqaFHRvXa6WoyoC xrYbzzYRYhXn/tJYKWcgiEI1BrEuBOmJr4vSpPboXPstrZfCNJLCdl1UeSnqN+Rz NQGoWuHKnOHzIjlAcWuXb+iDGOG/2n/7kYtsdz2HR3vu2827Fba3I+R4sYAsn+XO nKTU6OlrKtUYTCpQ7BM1aO2jB49Iha/7UFBwJJ2OSRTI8V41HELabYRkTsEjtJ46 otlz+471aEp1MGNvjWAvIvKQgiwrCXvkKCV1tYJZdrrhWYlgi6EtDcnbwBXdtDZb bUyZ2VVmJ1dYdyYdmqjxiOeSsf3emkHN9jSFIoi3kQq1cYkMkPm9ApRL9g== -----END CERTIFICATE-----Generated at Wed Oct 8 11:54:25 2025 by rpki-client