$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/KA93nG2FtENYQmiLFB341gsgPJg.roa File: KA93nG2FtENYQmiLFB341gsgPJg.roa (raw, json) Hash identifier: Z28+Uuqrw3SPUbTzG+OdJ0Vi+GQPIoiBCn6imUmHYvk= Subject key identifier: 28:0F:77:9C:6D:85:B4:43:58:42:68:8B:14:1D:F8:D6:0B:20:3C:98 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A9C Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KA93nG2FtENYQmiLFB341gsgPJg.roa Signing time: Sat 13 Sep 2025 03:07:25 +0000 ROA not before: Sat 13 Sep 2025 03:07:25 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 398704 IP address blocks: 180.223.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 04:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6812 (0x1a9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:25 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=280F779C6D85B4435842688B141DF8D60B203C98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ce:c6:7f:d7:04:36:52:ba:8a:dc:00:86:18: c0:88:23:b1:ec:1e:ee:55:b4:0e:78:52:11:58:c1: 8c:35:15:6c:8f:39:19:35:27:f4:3e:af:9c:a2:08: 17:4f:8c:6b:42:5f:69:ad:bb:1c:64:92:94:f8:7b: 5c:92:a8:a7:7d:63:4c:2a:47:88:84:19:ab:a6:60: b1:5f:62:15:43:37:2e:93:68:da:70:6a:79:bf:88: 59:6f:2a:2e:b6:cd:d2:23:53:32:36:03:2d:e9:5f: de:5e:d3:c6:80:c9:98:41:eb:27:31:8f:e6:be:42: f7:84:29:29:bb:69:3e:74:3f:28:a0:74:a6:cf:2c: 37:2e:1c:53:52:cd:9f:33:0e:8e:2b:f4:ff:1f:e7: a4:39:75:c0:9a:35:68:4f:bb:85:7e:d9:ec:43:8f: 29:45:8f:fd:08:a3:78:ea:74:87:84:df:6a:7d:98: 45:02:8e:5a:a5:6f:d9:0b:f0:f6:dd:b4:c3:8b:8d: 5c:65:27:9b:bb:7c:4f:a9:ea:b6:82:f2:61:dc:ee: 3d:9e:c6:44:d6:82:9a:8a:3a:5d:49:58:2e:a6:a2: fe:c4:ce:64:60:47:76:a0:8c:6f:f7:79:b8:64:58: f0:d6:13:00:a1:0f:3f:1d:9e:79:47:3c:8d:8b:ce: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0F:77:9C:6D:85:B4:43:58:42:68:8B:14:1D:F8:D6:0B:20:3C:98 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KA93nG2FtENYQmiLFB341gsgPJg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.204.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:52:9e:be:96:62:a3:ea:ed:1f:32:95:24:d7:22:dd:3a:08: d3:95:a0:cc:96:50:61:17:57:bd:44:95:db:3d:cd:0f:5b:c5: 4a:e0:16:f6:dd:be:e6:8b:cd:83:ec:f5:fd:45:81:3a:e8:ea: 45:a9:6c:eb:5c:14:e7:92:91:84:aa:a9:ad:a0:a5:46:b8:3d: 26:a3:41:1e:5b:3a:bc:41:20:ed:e5:05:b5:c1:35:cf:f3:68: 32:c6:e1:9a:32:7d:dc:6e:02:58:e2:3a:45:7b:a1:54:ab:22: 76:10:88:4d:eb:d0:48:2c:73:a0:d1:e1:f3:fd:7c:7d:90:83: ca:61:c6:a3:3b:33:14:7d:8d:68:6a:dc:f1:19:3e:17:82:ef: 16:a9:bd:45:90:a5:af:fd:4c:a0:b7:90:7a:11:02:4a:cb:ed: 3d:f6:69:58:4d:b9:8b:13:59:b9:23:42:dd:bb:46:b9:c7:6e: cc:00:95:0c:9d:0c:50:2b:69:30:e9:12:c3:dc:87:0b:81:47: 8c:a4:34:01:5b:04:39:25:4a:69:79:70:52:70:2d:79:9b:0a: 06:65:0d:2d:e8:f7:ec:b0:64:b5:30:e6:7b:8e:32:5b:3c:47: 66:4d:24:ff:41:59:c1:59:eb:30:35:c2:b0:18:a0:9b:de:42: 96:8c:b2:36 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGpwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MjVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDI4MEY3NzlDNkQ4NUI0 NDM1ODQyNjg4QjE0MURGOEQ2MEIyMDNDOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8zsZ/1wQ2UrqK3ACGGMCII7HsHu5VtA54UhFYwYw1FWyPORk1 J/Q+r5yiCBdPjGtCX2mtuxxkkpT4e1ySqKd9Y0wqR4iEGaumYLFfYhVDNy6TaNpw anm/iFlvKi62zdIjUzI2Ay3pX95e08aAyZhB6ycxj+a+QveEKSm7aT50PyigdKbP LDcuHFNSzZ8zDo4r9P8f56Q5dcCaNWhPu4V+2exDjylFj/0Io3jqdIeE32p9mEUC jlqlb9kL8PbdtMOLjVxlJ5u7fE+p6raC8mHc7j2exkTWgpqKOl1JWC6mov7EzmRg R3agjG/3ebhkWPDWEwChDz8dnnlHPI2Lzn0RAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUKA93nG2FtENYQmiLFB341gsgPJgwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvS0E5M25HMkZ0RU5Z UW1pTEZCMzQxZ3NnUEpnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfzDANBgkqhkiG9w0BAQsFAAOCAQEALVKevpZio+rtHzKVJNci3ToI05Wg zJZQYRdXvUSV2z3ND1vFSuAW9t2+5ovNg+z1/UWBOujqRals61wU55KRhKqpraCl Rrg9JqNBHls6vEEg7eUFtcE1z/NoMsbhmjJ93G4CWOI6RXuhVKsidhCITevQSCxz oNHh8/18fZCDymHGozszFH2NaGrc8Rk+F4LvFqm9RZClr/1MoLeQehECSsvtPfZp WE25ixNZuSNC3btGucduzACVDJ0MUCtpMOkSw9yHC4FHjKQ0AVsEOSVKaXlwUnAt eZsKBmUNLej37LBktTDme44yWzxHZk0k/0FZwVnrMDXCsBigm95CloyyNg== -----END CERTIFICATE-----Generated at Thu Sep 18 02:52:40 2025 by rpki-client