$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/oUxvBAo9tnlPHfMG1Wd8lPHYjiY.roa File: oUxvBAo9tnlPHfMG1Wd8lPHYjiY.roa (raw, json) Hash identifier: bLFAPNdypi2OopkuYHYRjnlKH5sIVxyM0+Lp6gAlyQY= Subject key identifier: A1:4C:6F:04:0A:3D:B6:79:4F:1D:F3:06:D5:67:7C:94:F1:D8:8E:26 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A81 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/oUxvBAo9tnlPHfMG1Wd8lPHYjiY.roa Signing time: Sat 13 Sep 2025 03:07:19 +0000 ROA not before: Sat 13 Sep 2025 03:07:19 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4766 IP address blocks: 180.223.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 18:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6785 (0x1a81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:19 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A14C6F040A3DB6794F1DF306D5677C94F1D88E26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f1:26:f0:5d:14:14:e4:11:8b:61:ff:db:df: 63:65:78:39:0e:c2:0f:5b:44:83:d1:01:55:f1:a5: c6:81:99:e9:fb:f3:2c:82:31:29:da:b1:54:08:32: b4:ae:3c:a9:d2:5a:6d:31:d9:ee:c6:7f:15:af:ce: 31:98:00:77:c9:92:d4:a8:bf:90:29:eb:22:3c:e4: 7f:8a:98:50:2c:be:fb:ae:89:bf:e2:27:19:fb:53: c1:f9:b3:53:85:3e:fe:bf:6e:c5:e2:c0:ca:8d:f2: 2b:6c:c4:98:71:85:48:57:5c:c6:ce:21:ea:2e:8f: 86:0c:bc:84:9a:ae:92:29:99:a0:bf:d1:72:87:23: f6:98:74:74:86:d7:9c:b9:0f:f6:51:fa:30:fd:cd: b9:05:56:84:bf:c0:36:7b:5c:94:64:2e:fb:33:78: c1:2f:2e:61:b9:c6:e1:0e:da:49:4b:df:d2:27:f3: 0f:86:03:60:53:2b:71:98:ca:33:1d:86:a7:16:67: a5:dc:62:2f:9a:1b:eb:a0:d2:c1:1d:3f:90:44:86: 8e:d3:a1:12:10:35:a2:26:52:cd:7a:e5:89:ff:c5: 48:d3:31:be:3f:58:89:95:33:fb:d6:43:49:ea:98: ef:92:9b:91:c8:91:c2:88:bc:b4:1c:bf:1e:8b:32: da:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4C:6F:04:0A:3D:B6:79:4F:1D:F3:06:D5:67:7C:94:F1:D8:8E:26 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/oUxvBAo9tnlPHfMG1Wd8lPHYjiY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.240.0/21 Signature Algorithm: sha256WithRSAEncryption 74:f3:21:7a:56:96:fe:37:95:a0:70:dc:86:07:6f:38:f8:da: 43:17:17:01:0d:bf:26:84:7d:02:27:01:04:e0:89:1a:9f:30: d3:1f:8b:58:bf:e2:49:2a:b0:ad:ea:ac:93:2e:71:8d:cf:e2: 96:b5:51:05:64:53:43:5c:cf:1a:05:d0:b0:b4:b7:38:cc:ad: 65:47:62:95:ab:73:6d:81:ca:e5:25:55:6a:21:43:89:42:95: 36:51:7a:2c:98:96:1e:de:84:4f:d9:d7:85:ca:50:31:86:73: 24:7d:12:e7:12:1a:8c:e5:bb:e5:0d:57:94:b5:83:25:2a:77: 47:65:86:97:ea:31:2a:37:02:1c:6d:48:16:07:66:3a:19:31: e8:1e:cd:d4:c1:dc:07:0c:7d:ab:a1:a7:36:47:9c:15:37:b2: eb:21:4b:9b:45:6a:83:f1:29:b4:02:95:64:4f:5c:b9:70:b2: e3:b1:2c:1b:b0:66:a7:f0:35:c3:36:76:02:b1:8a:ed:be:c5: 82:ce:f3:35:95:01:fe:05:fe:45:cf:04:ba:b7:13:c5:54:ea: 32:5c:0c:5d:0b:8f:25:eb:32:63:7b:28:6b:d6:02:94:e2:42: 9b:5b:14:38:b6:72:88:32:c7:ea:4a:29:7a:47:9a:14:cc:50: 36:b0:62:a5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGoEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MTlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEExNEM2RjA0MEEzREI2 Nzk0RjFERjMwNkQ1Njc3Qzk0RjFEODhFMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDf8SbwXRQU5BGLYf/b32NleDkOwg9bRIPRAVXxpcaBmen78yyC MSnasVQIMrSuPKnSWm0x2e7GfxWvzjGYAHfJktSov5Ap6yI85H+KmFAsvvuuib/i Jxn7U8H5s1OFPv6/bsXiwMqN8itsxJhxhUhXXMbOIeouj4YMvISarpIpmaC/0XKH I/aYdHSG15y5D/ZR+jD9zbkFVoS/wDZ7XJRkLvszeMEvLmG5xuEO2klL39In8w+G A2BTK3GYyjMdhqcWZ6XcYi+aG+ug0sEdP5BEho7ToRIQNaImUs165Yn/xUjTMb4/ WImVM/vWQ0nqmO+Sm5HIkcKIvLQcvx6LMtpvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUoUxvBAo9tnlPHfMG1Wd8lPHYjiYwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvb1V4dkJBbzl0bmxQ SGZNRzFXZDhsUEhZamlZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7Tf8DANBgkqhkiG9w0BAQsFAAOCAQEAdPMhelaW/jeVoHDchgdvOPjaQxcX AQ2/JoR9AicBBOCJGp8w0x+LWL/iSSqwreqsky5xjc/ilrVRBWRTQ1zPGgXQsLS3 OMytZUdilatzbYHK5SVVaiFDiUKVNlF6LJiWHt6ET9nXhcpQMYZzJH0S5xIajOW7 5Q1XlLWDJSp3R2WGl+oxKjcCHG1IFgdmOhkx6B7N1MHcBwx9q6GnNkecFTey6yFL m0Vqg/EptAKVZE9cuXCy47EsG7Bmp/A1wzZ2ArGK7b7Fgs7zNZUB/gX+Rc8EurcT xVTqMlwMXQuPJesyY3soa9YClOJCm1sUOLZyiDLH6kopekeaFMxQNrBipQ== -----END CERTIFICATE-----Generated at Sun Oct 19 16:11:43 2025 by rpki-client