$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/d7SkVZyE1OQLM1jAzOGeDElHSCo.roa File: d7SkVZyE1OQLM1jAzOGeDElHSCo.roa (raw, json) Hash identifier: vzycVg2BQ9n4HdjGfEnTkYGN3ibumBPOD+DKzbfZtD0= Subject key identifier: 77:B4:A4:55:9C:84:D4:E4:0B:33:58:C0:CC:E1:9E:0C:49:47:48:2A Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1925 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/d7SkVZyE1OQLM1jAzOGeDElHSCo.roa Signing time: Mon 14 Jul 2025 11:52:36 +0000 ROA not before: Mon 14 Jul 2025 11:52:36 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4515 IP address blocks: 180.223.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 18:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6437 (0x1925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jul 14 11:52:36 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=77B4A4559C84D4E40B3358C0CCE19E0C4947482A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:72:41:3d:8b:4c:45:eb:ea:04:94:9c:0d:70: c1:43:53:98:59:d9:0f:dc:39:2a:4d:98:e0:17:df: 3a:65:e7:d7:ee:7c:b9:bb:2e:33:ac:2d:bd:ca:13: cc:8e:6b:3f:ac:a2:d4:09:f4:fa:d3:0d:71:ed:92: 6a:8a:f2:e7:c7:68:a5:32:c0:d6:90:51:c8:2b:37: 58:5e:41:71:60:3f:60:5a:60:1d:18:15:73:01:43: b6:06:31:09:07:78:d1:cf:13:03:21:60:33:98:df: 01:45:16:bc:17:0c:fb:0f:75:0e:93:4b:69:8f:46: 54:a5:cf:ab:ac:54:d4:78:13:a9:8b:8d:a4:c4:7f: 12:13:ac:cd:75:7f:4c:9d:67:46:ba:16:b1:89:de: 3c:28:25:56:2c:cf:ba:db:02:42:5e:de:2b:d3:5a: 6a:87:4d:af:82:2e:53:34:04:0c:5d:88:ed:fb:29: ec:05:90:5e:35:4d:32:64:39:18:01:65:23:1b:db: c4:77:36:2e:88:7a:54:fe:f7:57:8f:a8:43:11:34: 11:e6:22:ac:64:62:9a:c5:70:27:c5:08:dc:ec:be: b1:a5:70:09:b7:4d:d9:29:f4:e9:51:58:8b:ab:53: 49:6b:2f:10:38:a2:f4:c3:f9:57:1e:e1:5d:ea:b0: ef:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B4:A4:55:9C:84:D4:E4:0B:33:58:C0:CC:E1:9E:0C:49:47:48:2A X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/d7SkVZyE1OQLM1jAzOGeDElHSCo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.32.0/21 Signature Algorithm: sha256WithRSAEncryption 00:d9:ed:c3:8c:ad:29:7a:35:1e:e5:85:d8:3a:cd:40:11:8e: 64:3f:76:6b:ff:1a:9d:72:f0:20:94:6c:94:a2:09:77:3d:2c: ac:81:02:61:cf:9c:56:ae:2c:e1:42:da:1d:53:62:e8:4d:fd: 49:58:18:8d:57:be:07:b2:cd:e9:d4:69:ac:31:fd:ab:12:d5: 13:3d:a4:f8:5b:3e:25:2c:3b:cd:19:23:a2:3f:66:99:c1:5c: 98:82:c7:68:b7:22:ee:2a:5e:77:f2:40:86:94:78:9b:57:4e: 30:fd:e6:cb:67:90:97:7a:50:77:3f:bb:71:8f:bf:33:0d:15: 78:29:2d:28:ac:e8:b5:9b:43:d4:f2:c8:5d:06:dc:9a:85:20: 45:43:98:48:62:2a:5a:21:97:37:22:77:15:72:c3:7e:8b:de: 62:d8:83:0f:56:64:3f:d2:11:bd:95:7c:40:e1:55:e7:c2:27: 06:67:89:44:42:39:ab:9e:a1:6c:50:c3:ba:27:7b:e3:4b:db: e8:76:d6:d3:72:6a:9a:1d:8b:70:31:7f:45:44:d2:1c:16:99: 59:3f:36:0d:81:79:6a:1b:9c:88:cf:60:f7:27:1b:67:23:01: 22:2c:7d:4c:2b:83:ee:ce:12:f2:19:51:4a:e7:dc:64:9b:77: 86:a5:8c:75 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGSUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA3MTQx MTUyMzZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc3QjRBNDU1OUM4NEQ0 RTQwQjMzNThDMENDRTE5RTBDNDk0NzQ4MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZckE9i0xF6+oElJwNcMFDU5hZ2Q/cOSpNmOAX3zpl59fufLm7 LjOsLb3KE8yOaz+sotQJ9PrTDXHtkmqK8ufHaKUywNaQUcgrN1heQXFgP2BaYB0Y FXMBQ7YGMQkHeNHPEwMhYDOY3wFFFrwXDPsPdQ6TS2mPRlSlz6usVNR4E6mLjaTE fxITrM11f0ydZ0a6FrGJ3jwoJVYsz7rbAkJe3ivTWmqHTa+CLlM0BAxdiO37KewF kF41TTJkORgBZSMb28R3Ni6IelT+91ePqEMRNBHmIqxkYprFcCfFCNzsvrGlcAm3 Tdkp9OlRWIurU0lrLxA4ovTD+Vce4V3qsO/PAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUd7SkVZyE1OQLM1jAzOGeDElHSCowHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvZDdTa1ZaeUUxT1FM TTFqQXpPR2VERWxIU0NvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfIDANBgkqhkiG9w0BAQsFAAOCAQEAANntw4ytKXo1HuWF2DrNQBGOZD92 a/8anXLwIJRslKIJdz0srIECYc+cVq4s4ULaHVNi6E39SVgYjVe+B7LN6dRprDH9 qxLVEz2k+Fs+JSw7zRkjoj9mmcFcmILHaLci7iped/JAhpR4m1dOMP3my2eQl3pQ dz+7cY+/Mw0VeCktKKzotZtD1PLIXQbcmoUgRUOYSGIqWiGXNyJ3FXLDfoveYtiD D1ZkP9IRvZV8QOFV58InBmeJREI5q56hbFDDuid740vb6HbW03Jqmh2LcDF/RUTS HBaZWT82DYF5ahuciM9g9ycbZyMBIix9TCuD7s4S8hlRSufcZJt3hqWMdQ== -----END CERTIFICATE-----Generated at Sun Jul 20 16:30:30 2025 by rpki-client