$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/kdtQT68ZV2_jOf2MEIoNx5YXKrk.roa File: kdtQT68ZV2_jOf2MEIoNx5YXKrk.roa (raw, json) Hash identifier: Wd4ldPYbsrMEn0lwBhUiU8dG5LIw8S3xnC2Y9Xxg5UQ= Subject key identifier: 91:DB:50:4F:AF:19:57:6F:E3:39:FD:8C:10:8A:0D:C7:96:17:2A:B9 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A8A Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/kdtQT68ZV2_jOf2MEIoNx5YXKrk.roa Signing time: Sat 13 Sep 2025 03:07:21 +0000 ROA not before: Sat 13 Sep 2025 03:07:21 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 2914 IP address blocks: 180.223.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Oct 2025 13:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6794 (0x1a8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:21 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=91DB504FAF19576FE339FD8C108A0DC796172AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e2:a0:85:d0:f5:bc:f0:e0:f4:5d:33:92:87: ad:0e:c6:f9:68:ca:25:63:e4:b5:80:82:18:39:7f: 0a:2b:9d:58:37:3d:0f:70:6d:7a:89:01:e8:fd:1c: 32:17:65:0b:7b:e7:74:90:ae:f6:56:77:6c:6f:5f: 5b:bf:3c:a8:06:92:a3:79:1b:6e:05:84:22:a2:6c: ef:0e:89:74:3f:4c:e8:18:7c:cb:18:af:5b:1b:2a: 31:9a:dc:09:9d:a4:07:08:8b:24:a0:84:87:f3:b6: 6e:2a:51:57:62:31:9c:5d:ba:d6:b3:96:17:38:de: 39:74:66:d8:55:3d:5b:d1:80:5e:9c:38:47:6c:dd: 9e:d1:9f:eb:dc:45:0c:a0:be:75:74:1d:db:6f:e2: ca:00:25:88:dc:02:9f:93:13:5b:cb:fb:91:53:c2: dc:60:f0:58:44:86:74:7b:62:3b:61:90:5b:a6:11: c9:c2:5a:a5:78:24:93:99:72:33:3c:16:08:5f:3c: 9f:61:4c:aa:85:13:78:14:31:a8:e8:04:44:ee:65: be:89:bc:36:82:b4:ef:be:03:60:66:b7:8e:6a:ff: c1:aa:b9:5c:da:51:61:bc:fd:8a:8d:ea:df:12:de: 89:49:b6:24:30:a6:8f:0f:22:43:32:51:aa:0e:7e: c8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DB:50:4F:AF:19:57:6F:E3:39:FD:8C:10:8A:0D:C7:96:17:2A:B9 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/kdtQT68ZV2_jOf2MEIoNx5YXKrk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.206.0/24 Signature Algorithm: sha256WithRSAEncryption c7:df:9b:07:d6:46:c8:0e:f2:87:97:9d:1c:39:b5:70:e3:a9: b8:ac:df:dd:de:cb:92:03:41:f1:17:0a:77:3d:f3:a7:ce:66: d9:1b:4f:40:70:d0:12:21:ca:14:b5:59:40:2c:4b:4b:f1:f4: 0a:69:b1:ff:db:bd:fa:d7:45:f5:c3:d8:81:aa:21:de:e7:ea: 67:85:5c:ea:11:c9:0d:1e:21:e3:2a:43:8b:99:44:04:f2:62: aa:ed:9f:0e:6b:09:bc:7c:d0:36:5b:2c:d6:13:4d:8a:c0:08: 76:f4:af:4a:74:d9:65:2d:4f:ef:3d:aa:d0:b3:b9:ae:ad:8d: e6:ed:68:d8:53:17:31:a3:e2:9d:4c:99:d8:11:b6:cf:74:9c: bd:d0:5c:84:59:0b:a4:ab:a5:81:ce:53:e1:85:41:89:5d:bb: 72:9a:63:94:07:07:79:4a:32:21:4f:6c:66:b1:ab:46:54:ca: e5:5e:22:c0:d7:40:3b:ea:2b:05:28:0f:f0:59:a5:f0:80:b2: ad:a6:60:e8:aa:c0:06:be:06:b8:ac:55:35:d5:5a:d7:b7:8e: 8d:45:16:16:22:89:89:7f:55:5b:c7:ca:1b:f3:96:6f:15:90: 38:b9:d6:6e:ac:e7:44:64:dd:cc:45:85:35:82:3d:43:b0:ca: 94:19:31:fe -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MjFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDkxREI1MDRGQUYxOTU3 NkZFMzM5RkQ4QzEwOEEwREM3OTYxNzJBQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDn4qCF0PW88OD0XTOSh60OxvloyiVj5LWAghg5fwornVg3PQ9w bXqJAej9HDIXZQt753SQrvZWd2xvX1u/PKgGkqN5G24FhCKibO8OiXQ/TOgYfMsY r1sbKjGa3AmdpAcIiySghIfztm4qUVdiMZxdutazlhc43jl0ZthVPVvRgF6cOEds 3Z7Rn+vcRQygvnV0Hdtv4soAJYjcAp+TE1vL+5FTwtxg8FhEhnR7YjthkFumEcnC WqV4JJOZcjM8FghfPJ9hTKqFE3gUMajoBETuZb6JvDaCtO++A2Bmt45q/8GquVza UWG8/YqN6t8S3olJtiQwpo8PIkMyUaoOfsizAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUkdtQT68ZV2/jOf2MEIoNx5YXKrkwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAva2R0UVQ2OFpWMl9q T2YyTUVJb054NVlYS3JrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTfzjANBgkqhkiG9w0BAQsFAAOCAQEAx9+bB9ZGyA7yh5edHDm1cOOpuKzf 3d7LkgNB8RcKdz3zp85m2RtPQHDQEiHKFLVZQCxLS/H0Cmmx/9u9+tdF9cPYgaoh 3ufqZ4Vc6hHJDR4h4ypDi5lEBPJiqu2fDmsJvHzQNlss1hNNisAIdvSvSnTZZS1P 7z2q0LO5rq2N5u1o2FMXMaPinUyZ2BG2z3ScvdBchFkLpKulgc5T4YVBiV27cppj lAcHeUoyIU9sZrGrRlTK5V4iwNdAO+orBSgP8Fml8ICyraZg6KrABr4GuKxVNdVa 17eOjUUWFiKJiX9VW8fKG/OWbxWQOLnWbqznRGTdzEWFNYI9Q7DKlBkx/g== -----END CERTIFICATE-----Generated at Wed Oct 8 11:54:32 2025 by rpki-client