$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/cAxTyqXPpy7ABQED70QsEHaL0Bk.roa File: cAxTyqXPpy7ABQED70QsEHaL0Bk.roa (raw, json) Hash identifier: k7FJO2AsHsXT7Z5eiZ/YuRqw98eIrxl8BzyKb7ijL7A= Subject key identifier: 70:0C:53:CA:A5:CF:A7:2E:C0:05:01:03:EF:44:2C:10:76:8B:D0:19 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 19ED Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/cAxTyqXPpy7ABQED70QsEHaL0Bk.roa Signing time: Thu 21 Aug 2025 01:35:15 +0000 ROA not before: Thu 21 Aug 2025 01:35:15 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4134 IP address blocks: 180.223.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 14:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6637 (0x19ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Aug 21 01:35:15 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=700C53CAA5CFA72EC0050103EF442C10768BD019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:40:f9:cf:cf:13:90:64:76:9a:84:73:c3: d1:6a:e6:41:00:bd:a7:9d:05:0e:a3:f2:17:40:09: ff:f3:0e:e4:34:81:be:62:ce:0a:1b:87:f7:55:bf: b7:9f:0e:63:12:00:24:c6:ae:41:bc:0f:a4:20:3c: 36:9b:b7:58:d5:84:bb:c5:0a:16:c1:60:89:4b:b5: 22:75:03:79:2d:c8:48:18:ed:33:1c:eb:b6:9e:7a: 98:43:92:f2:0c:03:ee:97:dc:48:3e:14:77:ea:ad: cb:ce:32:05:27:1b:8b:07:a1:56:fc:bc:9f:00:3e: 7b:68:1b:b9:7b:03:4e:08:d9:5a:82:97:67:a1:2c: 6a:60:91:53:45:d6:e3:31:44:68:94:09:b9:76:07: fc:cb:38:f5:dd:94:86:fb:17:f1:53:e5:55:fe:f7: 91:70:3e:b3:ed:ed:f2:cc:a2:55:30:7c:13:6f:22: d5:75:43:c5:9e:0d:cb:35:04:73:cf:08:e8:51:c0: 4f:cd:67:65:c8:4d:91:b4:2d:2c:0c:9e:f6:56:e8: d5:f4:e8:68:7d:47:60:91:9a:79:1d:01:f6:aa:1d: 2c:da:08:82:03:26:30:2a:9f:6d:ae:2d:84:52:da: 1a:f9:06:2a:41:3c:09:68:16:94:98:e2:9b:a0:ca: d1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0C:53:CA:A5:CF:A7:2E:C0:05:01:03:EF:44:2C:10:76:8B:D0:19 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/cAxTyqXPpy7ABQED70QsEHaL0Bk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.128.0/18 Signature Algorithm: sha256WithRSAEncryption 82:79:95:59:b9:fa:c7:7c:ea:9f:b4:97:c2:2b:5c:73:52:85: 89:b4:23:f6:34:7b:29:46:56:8b:95:fb:4a:ee:c9:24:da:a8: 8d:68:76:3a:7c:4c:9a:b5:b8:60:03:94:57:01:18:d5:6e:48: 0a:eb:d5:58:ef:3b:05:1e:3f:b1:55:b9:0a:81:4a:7f:b5:3b: 73:ae:7f:4b:09:58:21:05:0d:8b:a9:d6:df:81:5c:04:e4:45: 40:a2:f6:24:b9:6c:a3:f2:17:50:78:e2:44:b1:7a:c3:a9:12: ad:45:99:9c:8d:1f:f4:de:2f:06:b2:cf:38:cb:1c:91:05:74: 41:c6:ac:d7:9b:4a:17:d1:5e:b0:14:aa:7b:4b:3e:05:9f:c4: f6:4c:aa:c3:29:30:9e:08:6b:ae:a1:2f:f0:10:ab:ee:c3:ac: 94:79:d1:7b:78:53:75:98:3b:a2:17:1b:4c:32:29:8f:63:52: 6d:91:3f:70:9d:80:71:dc:b3:e4:a7:31:13:76:02:2c:b6:63: a6:47:a3:3c:e3:51:6b:56:e5:63:b7:c3:e7:e3:af:e5:e5:6f: 6d:89:45:1d:96:5d:fb:ca:a7:90:ce:b4:56:10:95:02:24:dc: e0:9c:81:8f:3b:5d:46:17:01:3a:32:4c:7d:72:50:5b:32:ad: 6e:a3:28:af -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA4MjEw MTM1MTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDcwMEM1M0NBQTVDRkE3 MkVDMDA1MDEwM0VGNDQyQzEwNzY4QkQwMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3EUD5z88TkGR2moRzw9Fq5kEAvaedBQ6j8hdACf/zDuQ0gb5i zgobh/dVv7efDmMSACTGrkG8D6QgPDabt1jVhLvFChbBYIlLtSJ1A3ktyEgY7TMc 67aeephDkvIMA+6X3Eg+FHfqrcvOMgUnG4sHoVb8vJ8APntoG7l7A04I2VqCl2eh LGpgkVNF1uMxRGiUCbl2B/zLOPXdlIb7F/FT5VX+95FwPrPt7fLMolUwfBNvItV1 Q8WeDcs1BHPPCOhRwE/NZ2XITZG0LSwMnvZW6NX06Gh9R2CRmnkdAfaqHSzaCIID JjAqn22uLYRS2hr5BipBPAloFpSY4pugytEXAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUcAxTyqXPpy7ABQED70QsEHaL0BkwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvY0F4VHlxWFBweTdB QlFFRDcwUXNFSGFMMEJrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBrTfgDANBgkqhkiG9w0BAQsFAAOCAQEAgnmVWbn6x3zqn7SXwitcc1KFibQj 9jR7KUZWi5X7Su7JJNqojWh2OnxMmrW4YAOUVwEY1W5ICuvVWO87BR4/sVW5CoFK f7U7c65/SwlYIQUNi6nW34FcBORFQKL2JLlso/IXUHjiRLF6w6kSrUWZnI0f9N4v BrLPOMsckQV0Qcas15tKF9FesBSqe0s+BZ/E9kyqwykwnghrrqEv8BCr7sOslHnR e3hTdZg7ohcbTDIpj2NSbZE/cJ2Acdyz5KcxE3YCLLZjpkejPONRa1blY7fD5+Ov 5eVvbYlFHZZd+8qnkM60VhCVAiTc4JyBjztdRhcBOjJMfXJQWzKtbqMorw== -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:39 2025 by rpki-client