$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/om0vOkMqsnaPkFVfNKShmfsB2zQ.roa File: om0vOkMqsnaPkFVfNKShmfsB2zQ.roa (raw, json) Hash identifier: lG5Eh6yUe2DT1RGgXjrj9tdRkt+WwyOudVREdq7ULok= Subject key identifier: A2:6D:2F:3A:43:2A:B2:76:8F:90:55:5F:34:A4:A1:99:FB:01:DB:34 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A97 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/om0vOkMqsnaPkFVfNKShmfsB2zQ.roa Signing time: Sat 13 Sep 2025 03:07:23 +0000 ROA not before: Sat 13 Sep 2025 03:07:23 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 7018 IP address blocks: 180.223.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 18:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6807 (0x1a97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:23 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A26D2F3A432AB2768F90555F34A4A199FB01DB34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:4f:aa:c5:66:76:36:40:06:d8:02:f3:62: c5:ed:3e:33:c5:af:f4:fd:c8:99:07:4c:fd:73:e1: 6e:e5:22:72:0e:da:cf:7d:8d:f4:64:fb:88:4c:19: f9:47:0a:60:54:70:42:5c:c0:4d:e2:84:b1:64:5f: 90:8d:8f:eb:bc:6d:55:5c:a1:8e:e8:a8:5c:f2:38: 94:a3:55:59:3b:b4:35:2e:b2:25:89:44:10:27:a4: b4:16:cc:22:a6:43:03:6e:5b:3f:70:7d:71:c9:85: 38:bd:47:94:5e:4d:b1:53:be:27:7b:4d:3c:4a:7c: 5a:df:3b:8e:ee:c0:80:4b:16:24:01:66:aa:48:07: 8c:8c:f3:0c:3f:5d:05:1f:6a:ec:5b:5a:83:97:ed: ee:e6:3b:21:47:b7:9a:a8:b5:6c:fc:17:58:b9:27: ad:33:07:5d:53:14:a0:4d:de:b0:c4:e5:e8:2b:d3: 2d:08:19:17:d9:a7:ba:0f:f7:cc:92:5a:17:c5:d5: f8:81:1a:7b:1e:cc:0b:d3:d3:83:e9:5a:68:b1:d2: 55:a6:1c:05:e4:0a:5b:2e:fb:27:34:88:da:7f:83: 9c:ca:96:2b:84:2a:4a:eb:51:44:81:73:9d:77:f8: 68:17:07:c6:cb:f4:44:f2:cc:67:e6:21:f0:a1:32: c2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6D:2F:3A:43:2A:B2:76:8F:90:55:5F:34:A4:A1:99:FB:01:DB:34 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/om0vOkMqsnaPkFVfNKShmfsB2zQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.124.0/22 Signature Algorithm: sha256WithRSAEncryption b4:61:5c:d2:ed:62:c8:ba:b6:73:4b:02:53:23:dc:ea:fd:80: 9d:16:96:3e:48:14:68:ee:2a:d2:49:3b:e3:eb:e3:5d:ff:57: 5e:f1:03:c4:a6:1a:f2:63:3d:57:a5:6d:21:7c:43:e7:77:b0: 36:2c:5f:85:3b:38:b4:5b:af:81:48:5b:46:bd:b6:a1:cf:b3: dd:a5:25:38:ab:3d:11:73:24:7e:e7:d4:89:4e:11:1c:39:14: 28:ea:f7:c8:c8:07:d9:d3:67:63:2a:16:21:77:e2:a2:42:6f: 15:2d:ca:e6:cf:c2:0b:44:92:a5:52:ce:3e:42:2a:86:cf:14: 30:7f:25:6c:a4:f7:fb:4d:59:61:40:6e:97:30:af:d2:55:c6: e1:d3:f3:4a:62:12:2f:8b:bb:99:3f:cf:94:f1:47:64:7e:03: dc:10:51:e8:12:71:ca:40:5c:78:af:41:32:b9:8d:f3:cf:64: 04:47:99:18:69:fe:d4:b4:7c:7f:8d:9b:89:2f:d0:55:77:6b: 85:06:6a:0b:0f:73:65:4e:ce:fb:3f:5b:c9:27:03:8d:2d:44: 41:92:94:14:dd:07:76:81:c5:d3:92:34:d7:e1:d1:5a:0c:2b: 65:7a:79:e0:96:c6:21:b0:d3:b8:2f:13:1e:e6:c7:a2:d6:0e: b9:a1:34:e9 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGpcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MjNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEEyNkQyRjNBNDMyQUIy NzY4RjkwNTU1RjM0QTRBMTk5RkIwMURCMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA10+qxWZ2NkAG2ALzYsXtPjPFr/T9yJkHTP1z4W7lInIO2s99 jfRk+4hMGflHCmBUcEJcwE3ihLFkX5CNj+u8bVVcoY7oqFzyOJSjVVk7tDUusiWJ RBAnpLQWzCKmQwNuWz9wfXHJhTi9R5ReTbFTvid7TTxKfFrfO47uwIBLFiQBZqpI B4yM8ww/XQUfauxbWoOX7e7mOyFHt5qotWz8F1i5J60zB11TFKBN3rDE5egr0y0I GRfZp7oP98ySWhfF1fiBGnsezAvT04PpWmix0lWmHAXkClsu+yc0iNp/g5zKliuE KkrrUUSBc513+GgXB8bL9ETyzGfmIfChMsIxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUom0vOkMqsnaPkFVfNKShmfsB2zQwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvb20wdk9rTXFzbmFQ a0ZWZk5LU2htZnNCMnpRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTffDANBgkqhkiG9w0BAQsFAAOCAQEAtGFc0u1iyLq2c0sCUyPc6v2AnRaW PkgUaO4q0kk74+vjXf9XXvEDxKYa8mM9V6VtIXxD53ewNixfhTs4tFuvgUhbRr22 oc+z3aUlOKs9EXMkfufUiU4RHDkUKOr3yMgH2dNnYyoWIXfiokJvFS3K5s/CC0SS pVLOPkIqhs8UMH8lbKT3+01ZYUBulzCv0lXG4dPzSmISL4u7mT/PlPFHZH4D3BBR 6BJxykBceK9BMrmN889kBEeZGGn+1LR8f42biS/QVXdrhQZqCw9zZU7O+z9byScD jS1EQZKUFN0HdoHF05I01+HRWgwrZXp54JbGIbDTuC8THubHotYOuaE06Q== -----END CERTIFICATE-----Generated at Sun Oct 19 16:11:43 2025 by rpki-client