$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/JmTssDfoLbW-zRKlZ0PdrEgxpf8.roa File: JmTssDfoLbW-zRKlZ0PdrEgxpf8.roa (raw, json) Hash identifier: EJUjSIxh2o9325xuO413fT3AjBF+v6eL+u9B42ACi8E= Subject key identifier: 26:64:EC:B0:37:E8:2D:B5:BE:CD:12:A5:67:43:DD:AC:48:31:A5:FF Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A7E Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/JmTssDfoLbW-zRKlZ0PdrEgxpf8.roa Signing time: Sat 13 Sep 2025 03:07:19 +0000 ROA not before: Sat 13 Sep 2025 03:07:19 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 7018 IP address blocks: 180.223.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 18:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6782 (0x1a7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:19 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=2664ECB037E82DB5BECD12A56743DDAC4831A5FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3a:6e:3a:4c:4e:0a:ea:4c:6a:c2:8c:52:b0: 2f:d1:9b:5d:9f:21:c6:06:18:5f:fd:52:4d:5c:9d: b0:d2:54:22:38:02:3f:ca:63:78:dd:5e:3e:f6:f8: 5d:21:65:b1:c1:e5:b5:6d:8b:15:03:31:a6:d6:75: c5:93:63:41:30:1d:7c:18:f2:47:c6:4f:c3:38:9b: 6d:7d:8f:d9:ae:68:ea:c7:cf:0f:74:b2:28:8c:4d: d4:ff:60:b0:f2:d7:de:72:74:35:9e:08:08:8a:c7: 70:11:ce:49:86:17:6c:10:47:d3:d7:3e:5e:b0:46: 71:34:1a:2c:be:60:5a:45:e4:f2:28:d1:6e:05:ca: 22:fb:4f:c3:88:f6:71:f6:d6:e8:34:5b:79:67:a7: 1a:82:6b:32:6d:79:e7:e9:6c:50:f6:f9:10:22:21: 82:4b:3c:48:5f:d5:ae:14:42:b4:3f:59:47:52:4d: 5f:c2:d6:e2:d5:14:9c:9a:8c:18:02:3d:75:26:d9: 8f:2f:e4:de:8e:c7:1d:6c:77:7b:86:ca:4c:de:4b: d0:ff:c3:14:7e:03:29:11:08:1f:f0:b1:63:81:77: c5:27:7a:1f:69:32:78:2f:3d:57:f8:6b:dd:91:27: 5c:3c:f7:b3:e5:58:9c:cb:88:2f:e2:f3:92:a5:b2: 22:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:64:EC:B0:37:E8:2D:B5:BE:CD:12:A5:67:43:DD:AC:48:31:A5:FF X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/JmTssDfoLbW-zRKlZ0PdrEgxpf8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.100.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:c0:1f:5e:66:91:b9:28:b2:d4:28:ba:9c:2e:48:cf:2d:8f: 43:f6:f5:4e:d0:23:3e:9f:23:d3:27:14:47:52:d9:0d:f0:2e: e7:98:ec:1d:9d:23:87:3d:6f:09:d1:3e:99:c5:a5:7b:d7:69: f6:e3:1d:c0:18:53:0a:28:9c:6f:36:97:03:39:e9:35:5c:a4: ae:91:0c:16:45:1d:a4:ff:d7:e7:87:3a:7d:a9:89:16:0c:f5: 47:ba:a7:4a:bb:18:f5:85:e5:c7:fc:5a:33:b8:c2:20:b1:78: 0b:04:68:c6:88:c4:13:a2:fc:e6:f4:e2:67:10:13:c4:94:9c: 9c:af:31:bd:4e:cf:15:24:64:89:7e:e9:89:b8:f3:03:b9:b0: 76:e7:1d:09:21:4e:99:5d:d4:8a:ac:30:6e:8f:61:85:74:31: bd:82:d9:84:37:b0:4a:54:e6:4b:17:8c:7a:24:3f:b3:c5:08: 15:00:9d:20:e1:96:7e:d7:de:a6:80:2e:c9:87:c1:40:3f:83: 0b:a9:b0:2a:f1:88:da:9a:18:59:a3:fd:da:70:35:a3:cc:a0: 89:01:36:d5:ed:da:28:93:c1:dc:ac:4a:de:8b:da:ad:d3:64: d4:cb:16:8e:6c:c5:cc:1e:fe:30:30:2f:0e:95:ba:9b:7e:01: 56:87:0a:22 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGn4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MTlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDI2NjRFQ0IwMzdFODJE QjVCRUNEMTJBNTY3NDNEREFDNDgzMUE1RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMOm46TE4K6kxqwoxSsC/Rm12fIcYGGF/9Uk1cnbDSVCI4Aj/K Y3jdXj72+F0hZbHB5bVtixUDMabWdcWTY0EwHXwY8kfGT8M4m219j9muaOrHzw90 siiMTdT/YLDy195ydDWeCAiKx3ARzkmGF2wQR9PXPl6wRnE0Giy+YFpF5PIo0W4F yiL7T8OI9nH21ug0W3lnpxqCazJteefpbFD2+RAiIYJLPEhf1a4UQrQ/WUdSTV/C 1uLVFJyajBgCPXUm2Y8v5N6Oxx1sd3uGykzeS9D/wxR+AykRCB/wsWOBd8Uneh9p MngvPVf4a92RJ1w897PlWJzLiC/i85KlsiJlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUJmTssDfoLbW+zRKlZ0PdrEgxpf8wHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvSm1Uc3NEZm9MYlct elJLbFowUGRyRWd4cGY4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfZDANBgkqhkiG9w0BAQsFAAOCAQEASsAfXmaRuSiy1Ci6nC5Izy2PQ/b1 TtAjPp8j0ycUR1LZDfAu55jsHZ0jhz1vCdE+mcWle9dp9uMdwBhTCiicbzaXAznp NVykrpEMFkUdpP/X54c6famJFgz1R7qnSrsY9YXlx/xaM7jCILF4CwRoxojEE6L8 5vTiZxATxJScnK8xvU7PFSRkiX7pibjzA7mwducdCSFOmV3Uiqwwbo9hhXQxvYLZ hDewSlTmSxeMeiQ/s8UIFQCdIOGWftfepoAuyYfBQD+DC6mwKvGI2poYWaP92nA1 o8ygiQE21e3aKJPB3KxK3ovardNk1MsWjmzFzB7+MDAvDpW6m34BVocKIg== -----END CERTIFICATE-----Generated at Sun Oct 19 16:11:44 2025 by rpki-client