$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/svqnms4OkBXhKx0p_gaynnVLnAw.roa File: svqnms4OkBXhKx0p_gaynnVLnAw.roa (raw, json) Hash identifier: 36G617lI/ZmXNJQrBpp06bTWCZP/E8T1Y+uibtvkPXM= Subject key identifier: B2:FA:A7:9A:CE:0E:90:15:E1:2B:1D:29:FE:06:B2:9E:75:4B:9C:0C Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A7B Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/svqnms4OkBXhKx0p_gaynnVLnAw.roa Signing time: Sat 13 Sep 2025 03:07:18 +0000 ROA not before: Sat 13 Sep 2025 03:07:18 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 398704 IP address blocks: 180.223.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 04:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6779 (0x1a7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:18 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B2FAA79ACE0E9015E12B1D29FE06B29E754B9C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:e6:21:49:9a:8e:40:7a:a7:53:51:1e:8d: c1:ce:28:a5:38:83:d6:fb:25:03:28:53:f6:af:1c: 69:f7:d6:39:59:75:8e:b1:57:7c:ed:2f:eb:d5:9d: b5:b3:de:04:de:30:e6:09:9e:e6:76:80:d0:8a:4e: 3f:72:c3:ef:0c:30:58:da:81:54:f7:b3:51:11:7e: 5f:02:b3:2d:ff:1a:6f:31:85:09:98:8b:eb:38:81: 0f:67:0c:ef:0d:86:19:d4:c0:0a:5f:b0:f0:87:3f: a7:ce:d6:8a:59:b8:3a:b4:d1:ce:45:fe:23:91:9e: 03:75:32:95:e8:e9:a2:cf:cc:3c:38:fb:2c:d6:68: 0c:06:2d:79:e3:7e:89:75:c1:05:3d:a2:c6:87:51: e8:d2:4d:3c:bc:58:97:73:5b:7b:39:a8:98:f6:5f: 2b:fe:be:7a:3a:44:27:e5:48:4c:7b:23:4f:0e:fd: 6b:81:47:d1:84:7c:54:f3:34:3d:91:24:31:29:45: 40:cd:e6:78:7a:50:03:90:9e:33:b2:73:e3:5d:10: 54:88:e0:ed:78:12:b6:e0:50:31:b3:5a:1c:b9:b3: 38:2d:4d:94:98:62:df:0d:e9:a9:5e:17:0d:1d:59: 0d:d0:e4:39:b0:5c:05:3c:47:7f:39:44:b9:95:b8: 13:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FA:A7:9A:CE:0E:90:15:E1:2B:1D:29:FE:06:B2:9E:75:4B:9C:0C X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/svqnms4OkBXhKx0p_gaynnVLnAw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.212.0/22 Signature Algorithm: sha256WithRSAEncryption 16:66:1c:17:fd:d4:da:b0:06:13:d1:ac:c4:5a:81:2f:de:8f: 66:65:3a:5a:88:39:1d:44:55:44:2f:53:42:2e:8d:a3:30:6b: 4d:a7:ca:14:58:ff:37:1a:28:f2:27:da:e8:60:c0:c4:6d:4a: bd:37:c9:d8:14:23:d3:45:11:6b:26:00:80:9d:50:e7:26:5c: c7:60:70:a7:f7:fe:39:6f:5f:54:a4:60:d1:e5:45:d7:64:e5: 6c:fc:70:85:0b:f4:3f:75:7a:96:ce:59:1a:9b:9f:e1:f2:a0: 9b:c9:59:f9:21:f8:3c:1c:e1:32:0e:3d:c4:69:bd:db:3a:4e: 3a:99:44:62:d2:d8:bd:0e:0a:c5:91:5b:ec:90:8d:10:7a:ca: da:8d:4b:42:f8:5b:1f:3f:d0:57:eb:17:22:75:cc:0f:db:5c: 45:cc:61:82:9a:7a:c4:0c:2a:7b:d6:53:3d:e9:50:cb:24:2c: 15:17:37:6b:c0:99:a6:d0:13:f5:33:7b:d7:d6:2d:36:0b:f5: d7:97:11:a5:8c:b9:4c:27:f3:3f:cd:eb:d0:b7:b2:5e:0b:2e: 25:84:b1:1b:f2:fc:ad:78:bd:4e:2d:7f:d8:63:93:d8:ce:1d: 7d:6b:ea:b0:31:3a:f2:32:42:3d:a4:3d:35:51:ad:12:94:48: b9:f5:c7:b2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGnswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEIyRkFBNzlBQ0UwRTkw MTVFMTJCMUQyOUZFMDZCMjlFNzU0QjlDMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrUeYhSZqOQHqnU1EejcHOKKU4g9b7JQMoU/avHGn31jlZdY6x V3ztL+vVnbWz3gTeMOYJnuZ2gNCKTj9yw+8MMFjagVT3s1ERfl8Csy3/Gm8xhQmY i+s4gQ9nDO8NhhnUwApfsPCHP6fO1opZuDq00c5F/iORngN1MpXo6aLPzDw4+yzW aAwGLXnjfol1wQU9osaHUejSTTy8WJdzW3s5qJj2Xyv+vno6RCflSEx7I08O/WuB R9GEfFTzND2RJDEpRUDN5nh6UAOQnjOyc+NdEFSI4O14ErbgUDGzWhy5szgtTZSY Yt8N6aleFw0dWQ3Q5DmwXAU8R385RLmVuBOnAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUsvqnms4OkBXhKx0p/gaynnVLnAwwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvc3Zxbm1zNE9rQlho S3gwcF9nYXlublZMbkF3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTf1DANBgkqhkiG9w0BAQsFAAOCAQEAFmYcF/3U2rAGE9GsxFqBL96PZmU6 Wog5HURVRC9TQi6NozBrTafKFFj/Nxoo8ifa6GDAxG1KvTfJ2BQj00URayYAgJ1Q 5yZcx2Bwp/f+OW9fVKRg0eVF12TlbPxwhQv0P3V6ls5ZGpuf4fKgm8lZ+SH4PBzh Mg49xGm92zpOOplEYtLYvQ4KxZFb7JCNEHrK2o1LQvhbHz/QV+sXInXMD9tcRcxh gpp6xAwqe9ZTPelQyyQsFRc3a8CZptAT9TN719YtNgv115cRpYy5TCfzP83r0Ley XgsuJYSxG/L8rXi9Ti1/2GOT2M4dfWvqsDE68jJCPaQ9NVGtEpRIufXHsg== -----END CERTIFICATE-----Generated at Thu Sep 18 02:53:43 2025 by rpki-client