$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/Neg0_D1zg7T2ukSgrUGeGFd30xA.roa File: Neg0_D1zg7T2ukSgrUGeGFd30xA.roa (raw, json) Hash identifier: shNQdElBjMHnIU1OOy/G5gJPVs0I6u3crAgPyzRqZuw= Subject key identifier: 35:E8:34:FC:3D:73:83:B4:F6:BA:44:A0:AD:41:9E:18:57:77:D3:10 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A8B Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Neg0_D1zg7T2ukSgrUGeGFd30xA.roa Signing time: Sat 13 Sep 2025 03:07:21 +0000 ROA not before: Sat 13 Sep 2025 03:07:21 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4766 IP address blocks: 180.223.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 18:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6795 (0x1a8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:21 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=35E834FC3D7383B4F6BA44A0AD419E185777D310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:f9:e6:c1:94:81:ba:74:bd:1b:8a:a6:8a: 11:0e:9f:5f:b0:3c:b6:3c:42:03:9c:8c:79:63:78: d7:5f:89:23:20:b1:11:df:aa:d0:bd:eb:4d:55:0f: a5:20:b8:66:ef:a1:f9:ac:66:e3:5d:92:31:c4:39: bc:6f:6c:b4:77:2f:0c:57:b3:92:04:02:94:e8:b8: 89:cc:fa:68:2e:aa:b5:2e:e5:a8:1a:49:2c:b9:07: 29:89:6d:3a:1a:74:05:7b:11:7a:f4:57:61:e1:19: d4:23:33:bb:43:4c:6d:bb:c6:3f:4e:e3:5a:94:06: 5e:ba:bb:ef:02:e7:8d:d7:18:d9:1b:41:d6:d7:09: 9f:c0:9b:b8:82:43:f9:b3:72:90:7e:2d:98:5c:97: e5:ab:b5:53:a1:7a:1f:2c:a1:22:6a:b1:0d:7e:48: ef:4c:f6:26:53:ad:7d:3c:44:a7:1d:83:08:64:f0: 07:77:93:36:f7:bf:6e:98:fa:a6:3e:ea:1d:61:a0: 9d:79:96:ca:4a:6a:84:cc:a3:0e:53:6c:93:dd:0a: e0:66:b6:aa:10:9d:4b:01:ac:03:63:dd:11:a3:97: 31:1b:97:29:79:68:82:4a:cd:33:1f:79:c8:2d:2c: d4:3a:24:b9:5d:34:ae:2b:b0:49:67:3a:28:b6:0d: fe:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E8:34:FC:3D:73:83:B4:F6:BA:44:A0:AD:41:9E:18:57:77:D3:10 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Neg0_D1zg7T2ukSgrUGeGFd30xA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.224.0/21 Signature Algorithm: sha256WithRSAEncryption 79:35:1c:5d:81:f3:73:eb:85:00:df:3a:bf:7d:d9:0f:8e:23: 2a:ed:f6:10:8b:d1:7e:d7:7d:5f:f4:68:03:ba:26:8d:f9:56: 7a:5a:59:4b:ab:a9:12:3e:50:15:b4:b4:db:57:17:6c:ba:41: e5:39:f4:37:5d:76:51:03:44:6b:d8:9f:27:1e:e8:5c:b5:e3: 3a:91:35:b9:c8:de:ec:fe:4f:3d:b9:dd:c8:f2:9a:fe:73:de: d1:1c:f5:24:1e:e2:4a:d1:43:29:09:16:4c:10:c9:05:e5:dc: e7:9d:06:7b:72:4b:f2:95:34:95:b1:fb:7e:17:6f:f0:6f:7f: ee:17:1b:70:04:03:fa:85:ed:0c:b2:61:a4:31:c4:f5:0f:84: ae:10:7f:39:5e:c6:79:da:26:ba:84:18:3b:23:43:cb:78:55: 9d:c0:56:54:c2:e6:b6:76:13:53:de:28:42:48:c6:87:bb:cb: 94:e6:0f:30:24:30:26:a0:0f:60:bf:e9:f3:62:e1:bc:e5:4a: 82:07:1b:f5:ab:16:f4:0a:de:9a:12:b8:da:e9:2a:1d:81:c2: 51:b8:14:f1:f7:64:51:ae:60:0b:3a:b0:59:6c:1e:f1:97:0b: 57:bf:cc:4b:8b:a0:7b:55:c6:b6:85:b3:0d:96:e7:24:57:04: b8:90:c5:42 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGoswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MjFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM1RTgzNEZDM0Q3Mzgz QjRGNkJBNDRBMEFENDE5RTE4NTc3N0QzMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRfPnmwZSBunS9G4qmihEOn1+wPLY8QgOcjHljeNdfiSMgsRHf qtC9601VD6UguGbvofmsZuNdkjHEObxvbLR3LwxXs5IEApTouInM+mguqrUu5aga SSy5BymJbToadAV7EXr0V2HhGdQjM7tDTG27xj9O41qUBl66u+8C543XGNkbQdbX CZ/Am7iCQ/mzcpB+LZhcl+WrtVOheh8soSJqsQ1+SO9M9iZTrX08RKcdgwhk8Ad3 kzb3v26Y+qY+6h1hoJ15lspKaoTMow5TbJPdCuBmtqoQnUsBrANj3RGjlzEblyl5 aIJKzTMfecgtLNQ6JLldNK4rsElnOii2Df61AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUNeg0/D1zg7T2ukSgrUGeGFd30xAwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvTmVnMF9EMXpnN1Qy dWtTZ3JVR2VHRmQzMHhBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7Tf4DANBgkqhkiG9w0BAQsFAAOCAQEAeTUcXYHzc+uFAN86v33ZD44jKu32 EIvRftd9X/RoA7omjflWelpZS6upEj5QFbS021cXbLpB5Tn0N112UQNEa9ifJx7o XLXjOpE1ucje7P5PPbndyPKa/nPe0Rz1JB7iStFDKQkWTBDJBeXc550Ge3JL8pU0 lbH7fhdv8G9/7hcbcAQD+oXtDLJhpDHE9Q+ErhB/OV7GedomuoQYOyNDy3hVncBW VMLmtnYTU94oQkjGh7vLlOYPMCQwJqAPYL/p82LhvOVKggcb9asW9AremhK42ukq HYHCUbgU8fdkUa5gCzqwWWwe8ZcLV7/MS4uge1XGtoWzDZbnJFcEuJDFQg== -----END CERTIFICATE-----Generated at Sun Oct 19 16:11:45 2025 by rpki-client