$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/9BS1SPFF-2HCsP1LnquBgQnD4G4.roa File: 9BS1SPFF-2HCsP1LnquBgQnD4G4.roa (raw, json) Hash identifier: /lWvuzxF5Ph5njZTDRqwYpkQF/JAj3XkM++JodEm5ho= Subject key identifier: F4:14:B5:48:F1:45:FB:61:C2:B0:FD:4B:9E:AB:81:81:09:C3:E0:6E Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A7A Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/9BS1SPFF-2HCsP1LnquBgQnD4G4.roa Signing time: Sat 13 Sep 2025 03:07:18 +0000 ROA not before: Sat 13 Sep 2025 03:07:18 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 7018 IP address blocks: 180.223.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 18:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6778 (0x1a7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:18 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F414B548F145FB61C2B0FD4B9EAB818109C3E06E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:92:8e:cd:e9:86:12:20:76:8a:f1:32:2d:4a: a8:9a:6e:0a:9b:a4:bf:53:ee:74:90:68:d9:5d:ca: 6f:d9:e5:9c:17:ef:cc:0d:ef:83:64:5c:aa:55:98: 15:c6:e7:aa:07:13:2c:3b:40:0e:cc:55:b1:16:29: a6:9f:15:ba:c4:90:3c:4e:7a:52:9a:58:d9:de:bc: b4:f9:a4:ea:70:b1:aa:19:bf:1a:a6:36:e8:e9:52: 99:d6:4d:84:f6:cb:c7:c8:ae:9d:26:ed:1b:29:e9: cf:7c:5e:de:fe:a9:2f:46:9a:8c:a4:ed:94:a0:9f: 4d:3b:1e:9a:a0:9a:5e:0a:01:b4:3d:26:23:ad:24: 19:50:99:a4:25:ac:27:51:2e:6a:c2:d0:27:e6:5d: 91:a8:3b:d1:4b:8c:69:60:a1:bf:68:d8:5e:a7:cd: a6:6e:17:31:12:74:19:1f:1e:01:f5:6e:48:a5:3c: c9:94:65:0b:9d:80:31:18:87:ec:59:1d:67:ca:2d: 1a:01:b5:6e:24:bd:4d:27:0b:61:d5:93:bc:6c:e8: ae:82:79:1c:27:6c:08:b1:85:a5:47:1e:69:f6:8d: 53:84:0b:c8:11:48:69:8e:4c:51:aa:38:51:c0:33: d7:2e:50:d4:41:25:8a:3f:43:50:43:78:59:65:54: 1b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:14:B5:48:F1:45:FB:61:C2:B0:FD:4B:9E:AB:81:81:09:C3:E0:6E X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/9BS1SPFF-2HCsP1LnquBgQnD4G4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.96.0/22 Signature Algorithm: sha256WithRSAEncryption 18:7c:3a:52:bd:a6:1d:b3:a2:16:b3:57:88:80:8e:f6:fb:92: 38:06:42:a9:42:f1:40:74:d0:e6:b4:8a:02:91:4a:6a:a3:d4: f8:46:02:9a:f8:46:9e:49:92:d6:18:b9:80:1e:9a:74:34:e1: 56:38:18:f6:5f:01:02:83:d0:49:92:13:d1:54:e3:f6:96:47: 70:d4:32:5b:de:d6:a5:ec:b4:38:70:c0:be:a8:fc:76:c8:0c: 77:d2:56:82:c5:90:f4:ce:04:6b:c2:8b:1f:7d:af:43:6f:05: 32:00:9e:82:6d:e1:d2:db:d1:bd:48:67:97:67:35:8c:9e:e7: 3a:48:e3:00:eb:f9:30:d5:0b:35:ec:bd:3f:c5:71:e3:9d:24: db:7b:b9:6c:d0:b4:6b:1b:5f:e3:55:51:12:05:80:f9:46:f2: 51:f7:e9:63:7a:54:5c:73:72:0c:9e:18:9a:d4:a6:6a:65:39: 30:26:bf:c3:25:c1:c7:67:39:7a:be:b1:79:fa:aa:e1:de:6f: f0:5a:36:05:42:65:f8:3a:93:e6:f4:03:2b:58:4d:03:73:f3: 07:1d:2c:1f:ee:55:14:26:34:68:f5:3e:41:36:67:f1:a7:67: 35:7c:53:e9:ef:5c:5b:db:b3:1c:9b:e7:a0:04:bd:17:0e:b9: 2d:7c:6a:f9 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGnowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY0MTRCNTQ4RjE0NUZC NjFDMkIwRkQ0QjlFQUI4MTgxMDlDM0UwNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1ko7N6YYSIHaK8TItSqiabgqbpL9T7nSQaNldym/Z5ZwX78wN 74NkXKpVmBXG56oHEyw7QA7MVbEWKaafFbrEkDxOelKaWNnevLT5pOpwsaoZvxqm NujpUpnWTYT2y8fIrp0m7Rsp6c98Xt7+qS9Gmoyk7ZSgn007Hpqgml4KAbQ9JiOt JBlQmaQlrCdRLmrC0CfmXZGoO9FLjGlgob9o2F6nzaZuFzESdBkfHgH1bkilPMmU ZQudgDEYh+xZHWfKLRoBtW4kvU0nC2HVk7xs6K6CeRwnbAixhaVHHmn2jVOEC8gR SGmOTFGqOFHAM9cuUNRBJYo/Q1BDeFllVBsXAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU9BS1SPFF+2HCsP1LnquBgQnD4G4wHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvOUJTMVNQRkYtMkhD c1AxTG5xdUJnUW5ENEc0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfYDANBgkqhkiG9w0BAQsFAAOCAQEAGHw6Ur2mHbOiFrNXiICO9vuSOAZC qULxQHTQ5rSKApFKaqPU+EYCmvhGnkmS1hi5gB6adDThVjgY9l8BAoPQSZIT0VTj 9pZHcNQyW97Wpey0OHDAvqj8dsgMd9JWgsWQ9M4Ea8KLH32vQ28FMgCegm3h0tvR vUhnl2c1jJ7nOkjjAOv5MNULNey9P8Vx450k23u5bNC0axtf41VREgWA+UbyUffp Y3pUXHNyDJ4YmtSmamU5MCa/wyXBx2c5er6xefqq4d5v8Fo2BUJl+DqT5vQDK1hN A3PzBx0sH+5VFCY0aPU+QTZn8adnNXxT6e9cW9uzHJvnoAS9Fw65LXxq+Q== -----END CERTIFICATE-----Generated at Sun Oct 19 16:05:29 2025 by rpki-client