$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/IpB-_xWaGZUTRn2WCKWox6_wSj4.roa File: IpB-_xWaGZUTRn2WCKWox6_wSj4.roa (raw, json) Hash identifier: KpRk34rie3Qih157w6wUpM4X3CAulWJDuC8vdBxbFwQ= Subject key identifier: 22:90:7E:FF:15:9A:19:95:13:46:7D:96:08:A5:A8:C7:AF:F0:4A:3E Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A74 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/IpB-_xWaGZUTRn2WCKWox6_wSj4.roa Signing time: Sat 13 Sep 2025 03:07:16 +0000 ROA not before: Sat 13 Sep 2025 03:07:16 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 7018 IP address blocks: 180.223.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 18:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6772 (0x1a74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:16 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=22907EFF159A199513467D9608A5A8C7AFF04A3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:15:b1:2c:f5:21:a2:b5:ab:37:a1:fe:53: ff:f8:c2:bb:c2:52:6f:c8:a3:c0:5c:48:8c:b1:96: b9:55:5f:8a:9c:ec:d0:06:62:33:6c:0a:3a:5c:91: 24:31:b7:eb:60:4a:98:c4:64:39:c0:61:13:f4:ca: 1c:43:53:75:5a:ea:01:70:dd:48:6d:21:43:44:b8: cd:79:0f:c9:c6:b5:5a:db:f0:7d:bb:82:5c:b3:e8: 85:f6:60:94:40:fa:f0:22:b3:3e:ba:c3:3f:d5:6a: 20:fe:6a:b5:8a:95:17:5d:00:e5:01:85:90:99:3d: 13:7b:01:75:3c:cf:9a:cb:d9:e4:69:34:7e:e6:f9: 7f:a0:cf:21:89:8b:fd:c4:21:ba:a2:74:b9:c5:8f: 39:89:5d:7c:99:c6:f4:aa:ce:c1:b3:74:e6:b5:a4: 43:a9:b2:96:16:31:ab:f3:2b:80:e8:54:69:97:2c: 05:54:20:02:ac:38:32:d9:6f:0a:57:07:f5:cb:37: 2c:83:b0:15:bc:52:15:d1:84:3f:e2:56:5b:5d:64: 53:7c:21:96:3b:95:33:49:98:ad:bf:95:4c:9e:d1: 7f:a0:66:b6:9f:11:5c:c8:5a:18:63:33:7a:11:63: cd:dd:9d:8a:12:f8:ad:10:35:c3:48:14:cf:83:76: 9a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:90:7E:FF:15:9A:19:95:13:46:7D:96:08:A5:A8:C7:AF:F0:4A:3E X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/IpB-_xWaGZUTRn2WCKWox6_wSj4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.248.0/21 Signature Algorithm: sha256WithRSAEncryption ca:c4:2c:7a:89:6e:8a:66:59:c2:99:d0:3c:50:9d:9a:e6:38: fb:8f:82:06:c5:41:ee:ff:18:f9:08:b4:7a:1d:b6:4e:83:35: 5e:62:2e:88:ae:2e:75:b8:cb:8d:a0:bf:52:2f:26:98:a9:c2: eb:51:a7:10:9c:8d:4e:74:b8:a6:3b:c8:0a:2a:ad:39:db:af: 30:53:a7:e7:cc:87:30:7e:fd:77:b9:82:6d:7c:a9:b8:09:ce: a4:59:f9:af:32:54:19:8a:4e:cc:e7:d6:a0:7e:66:e9:e8:52: b9:2e:ad:01:94:9b:8b:ff:37:34:74:58:b1:64:4f:9e:0b:a1: 90:fa:50:cb:b0:84:26:64:8a:21:c9:47:d8:b5:bd:ef:b3:b6: 26:d2:79:c2:82:ef:c1:e6:ff:21:82:84:b5:0d:eb:bf:bf:14: 35:bf:e3:d5:ce:b2:37:b1:9c:60:e9:9c:b0:dd:77:be:9a:ed: 8a:bc:4f:77:dd:9f:ab:47:ca:52:71:7e:7a:e2:b6:f7:85:51: a5:29:97:e9:7c:fc:45:26:be:ec:6f:16:79:12:35:91:81:90: 1a:8e:50:bf:ce:f7:ec:f0:c7:e6:51:fc:80:d0:5b:21:c2:5b: aa:ad:04:b6:8b:e2:3a:8b:a2:a4:1d:fa:00:f4:98:a4:02:1d: 03:4b:f4:de -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGnQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDIyOTA3RUZGMTU5QTE5 OTUxMzQ2N0Q5NjA4QTVBOEM3QUZGMDRBM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwuhWxLPUhorWrN6H+U//4wrvCUm/Io8BcSIyxlrlVX4qc7NAG YjNsCjpckSQxt+tgSpjEZDnAYRP0yhxDU3Va6gFw3UhtIUNEuM15D8nGtVrb8H27 glyz6IX2YJRA+vAisz66wz/VaiD+arWKlRddAOUBhZCZPRN7AXU8z5rL2eRpNH7m +X+gzyGJi/3EIbqidLnFjzmJXXyZxvSqzsGzdOa1pEOpspYWMavzK4DoVGmXLAVU IAKsODLZbwpXB/XLNyyDsBW8UhXRhD/iVltdZFN8IZY7lTNJmK2/lUye0X+gZraf EVzIWhhjM3oRY83dnYoS+K0QNcNIFM+DdpolAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUIpB+/xWaGZUTRn2WCKWox6/wSj4wHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvSXBCLV94V2FHWlVU Um4yV0NLV294Nl93U2o0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7Tf+DANBgkqhkiG9w0BAQsFAAOCAQEAysQseoluimZZwpnQPFCdmuY4+4+C BsVB7v8Y+Qi0eh22ToM1XmIuiK4udbjLjaC/Ui8mmKnC61GnEJyNTnS4pjvICiqt OduvMFOn58yHMH79d7mCbXypuAnOpFn5rzJUGYpOzOfWoH5m6ehSuS6tAZSbi/83 NHRYsWRPnguhkPpQy7CEJmSKIclH2LW977O2JtJ5woLvweb/IYKEtQ3rv78UNb/j 1c6yN7GcYOmcsN13vprtirxPd92fq0fKUnF+euK294VRpSmX6Xz8RSa+7G8WeRI1 kYGQGo5Qv8737PDH5lH8gNBbIcJbqq0EtoviOouipB36APSYpAIdA0v03g== -----END CERTIFICATE-----Generated at Sun Oct 19 16:11:44 2025 by rpki-client