$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/gKPrw_0oR3XFHnhHcYU61an3U_I.roa File: gKPrw_0oR3XFHnhHcYU61an3U_I.roa (raw, json) Hash identifier: vy8kQVSGaGkRvFbMxJC9tq4zxiH25p480buN0sx0shk= Subject key identifier: 80:A3:EB:C3:FD:28:47:75:C5:1E:78:47:71:85:3A:D5:A9:F7:53:F2 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A94 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/gKPrw_0oR3XFHnhHcYU61an3U_I.roa Signing time: Sat 13 Sep 2025 03:07:23 +0000 ROA not before: Sat 13 Sep 2025 03:07:23 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 7018 IP address blocks: 180.223.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 18:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6804 (0x1a94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:23 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=80A3EBC3FD284775C51E784771853AD5A9F753F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:d6:1a:bb:56:53:fa:43:44:d4:39:4c:f6: a1:0a:43:ea:15:c8:20:fb:ff:97:af:aa:f4:aa:c5: d7:75:47:11:c3:d2:96:bc:74:84:ba:0d:01:51:78: 89:54:83:09:09:06:4e:48:65:6b:e6:ea:ad:7d:b7: 23:93:a4:40:3c:96:57:81:1b:d5:65:ee:81:ba:83: 1c:50:54:9d:40:31:16:db:a6:f0:4d:72:4b:2b:43: 52:57:d7:d5:09:fc:2f:c9:07:87:61:62:43:87:53: ad:bc:9a:57:b7:33:52:a4:ab:de:e9:ba:71:52:a7: aa:0f:23:42:d0:8d:86:e8:11:82:bf:09:a7:96:55: 2b:ee:b3:50:e3:b0:da:d0:b3:37:df:44:45:7b:af: b1:64:6b:f7:f1:0a:b3:8f:13:23:76:5c:a2:84:f1: bc:3d:4e:d5:9a:f8:87:8d:a1:10:43:0d:c2:1e:a4: 08:6a:fc:3d:14:fb:41:8e:bc:7e:a4:f3:bd:b6:6b: ec:4f:ed:1e:7d:2e:e2:c1:5f:b8:e6:39:9c:ff:2c: a9:6d:26:6f:20:7f:a4:9a:21:c8:41:61:87:09:61: 0d:5a:75:ee:0b:52:af:00:d9:6f:83:b7:31:0e:7f: 8b:40:62:46:13:45:90:cd:5f:46:af:36:3a:3d:56: 78:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A3:EB:C3:FD:28:47:75:C5:1E:78:47:71:85:3A:D5:A9:F7:53:F2 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/gKPrw_0oR3XFHnhHcYU61an3U_I.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.64.0/21 Signature Algorithm: sha256WithRSAEncryption ae:cb:e9:b3:70:9f:cf:0c:fa:33:dd:ad:ed:92:b1:5d:88:5d: 4d:ab:08:b4:10:04:5b:07:81:16:60:58:14:25:42:2e:b9:57: f5:9c:6d:77:b3:4b:62:af:a6:96:be:15:45:ed:e1:17:5c:71: 42:ad:97:eb:2b:ee:7b:49:9c:6e:f8:15:de:f3:68:0c:cb:bc: 66:72:62:0d:ac:ae:23:38:5d:84:bc:8a:b7:4b:da:0a:57:36: ad:dd:63:d8:d0:e5:e6:71:53:b8:f5:95:a7:5d:16:fb:24:1a: 1b:b2:84:d7:23:e6:4d:dc:89:39:1f:da:99:1f:cf:88:4e:b2: d9:1e:46:71:7e:ed:c9:5b:74:18:66:82:53:d7:84:b3:b8:ce: 97:12:81:95:89:74:2a:f5:aa:e6:df:c1:8c:ae:76:9a:15:db: 8c:fd:c4:b0:a2:f6:a9:76:1e:25:62:b2:57:c4:e9:e3:74:08: 44:49:7e:f6:ef:ed:97:06:50:99:f4:13:a6:f5:90:95:9b:44: 18:fa:f5:1c:ab:d3:cd:e3:67:06:43:a5:08:23:2c:e3:ab:db: 19:1e:27:d4:2a:bd:a4:91:e9:49:d8:ad:ff:33:a6:8d:35:d5: 53:f2:ee:d3:52:30:bc:2d:d8:fa:25:6a:8d:9d:51:2c:3c:e2: fc:ce:0e:af -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGpQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MjNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDgwQTNFQkMzRkQyODQ3 NzVDNTFFNzg0NzcxODUzQUQ1QTlGNzUzRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+NdYau1ZT+kNE1DlM9qEKQ+oVyCD7/5evqvSqxdd1RxHD0pa8 dIS6DQFReIlUgwkJBk5IZWvm6q19tyOTpEA8lleBG9Vl7oG6gxxQVJ1AMRbbpvBN cksrQ1JX19UJ/C/JB4dhYkOHU628mle3M1Kkq97punFSp6oPI0LQjYboEYK/CaeW VSvus1DjsNrQszffREV7r7Fka/fxCrOPEyN2XKKE8bw9TtWa+IeNoRBDDcIepAhq /D0U+0GOvH6k8722a+xP7R59LuLBX7jmOZz/LKltJm8gf6SaIchBYYcJYQ1ade4L Uq8A2W+DtzEOf4tAYkYTRZDNX0avNjo9VnhPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUgKPrw/0oR3XFHnhHcYU61an3U/IwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvZ0tQcndfMG9SM1hG SG5oSGNZVTYxYW4zVV9JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfQDANBgkqhkiG9w0BAQsFAAOCAQEArsvps3Cfzwz6M92t7ZKxXYhdTasI tBAEWweBFmBYFCVCLrlX9Zxtd7NLYq+mlr4VRe3hF1xxQq2X6yvue0mcbvgV3vNo DMu8ZnJiDayuIzhdhLyKt0vaClc2rd1j2NDl5nFTuPWVp10W+yQaG7KE1yPmTdyJ OR/amR/PiE6y2R5GcX7tyVt0GGaCU9eEs7jOlxKBlYl0KvWq5t/BjK52mhXbjP3E sKL2qXYeJWKyV8Tp43QIREl+9u/tlwZQmfQTpvWQlZtEGPr1HKvTzeNnBkOlCCMs 46vbGR4n1Cq9pJHpSdit/zOmjTXVU/Lu01IwvC3Y+iVqjZ1RLDzi/M4Orw== -----END CERTIFICATE-----Generated at Sun Oct 19 16:11:43 2025 by rpki-client