$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/-iqey9zHJBIPFaAPFlLLzScN7QM.roa File: -iqey9zHJBIPFaAPFlLLzScN7QM.roa (raw, json) Hash identifier: sCSgZcMdpxa9wOlXD4WFlKgI2DAW8y67DiQhtq1UgBM= Subject key identifier: FA:2A:9E:CB:DC:C7:24:12:0F:15:A0:0F:16:52:CB:CD:27:0D:ED:03 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21CF Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/-iqey9zHJBIPFaAPFlLLzScN7QM.roa Signing time: Sat 13 Sep 2025 03:09:01 +0000 ROA not before: Sat 13 Sep 2025 03:09:01 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 58542 IP address blocks: 180.184.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8655 (0x21cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:01 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FA2A9ECBDCC724120F15A00F1652CBCD270DED03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:f7:3c:de:03:11:d9:8e:11:3b:82:47:e2: 12:70:3d:80:f8:8b:33:4c:aa:0f:58:ab:be:8e:68: 13:dd:1d:b3:9e:6a:9e:52:3e:02:e2:62:1c:c8:35: 01:8c:49:07:e8:15:f3:5c:7a:1a:00:00:48:f5:7c: b1:81:70:23:5a:5c:84:3e:e6:c8:4b:f9:03:29:1c: 01:be:53:5e:9e:29:5e:7d:c4:6c:97:b9:ef:78:43: aa:92:37:e8:00:52:e9:ae:d2:b4:51:0a:70:d8:39: c2:7f:66:db:d8:13:b0:e7:0e:f9:c1:04:62:67:06: a0:4e:1c:c9:ec:ea:e9:a6:3d:5f:7f:e9:e4:40:e9: 59:4e:11:a3:d5:3a:19:c7:94:a3:33:1a:5b:49:10: 50:b2:b8:38:14:3b:d2:ed:84:c5:3e:22:d9:25:ab: 57:dd:db:0d:4b:7f:24:79:70:9a:02:51:89:b0:e5: ef:a2:44:fd:74:e7:f4:92:a5:f3:30:97:8a:90:44: eb:b0:a8:f1:de:ec:15:c9:ff:d3:5e:b7:c7:27:be: 5a:fe:80:3c:ee:0d:51:4e:d2:9b:f3:ff:a5:20:6a: 56:f9:a7:fe:2e:de:66:fa:70:28:cd:96:f8:98:f2: a3:f5:57:ce:ba:ec:cd:92:a7:92:fc:44:e5:4b:69: ef:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2A:9E:CB:DC:C7:24:12:0F:15:A0:0F:16:52:CB:CD:27:0D:ED:03 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/-iqey9zHJBIPFaAPFlLLzScN7QM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.56.0/21 Signature Algorithm: sha256WithRSAEncryption 99:5f:a6:33:39:78:7b:5a:d5:9f:d4:c0:1a:19:f8:ab:5a:f0: 77:44:eb:15:b8:ad:3d:68:1e:b3:a5:84:96:17:1f:2e:13:20: 06:21:50:3a:f0:d6:3f:df:06:df:14:81:45:fe:c4:50:1c:7c: 4a:a4:4e:24:b2:b3:fa:9e:af:ba:b7:5e:cd:0f:ae:fe:78:20: c5:34:9f:4b:7b:3f:56:b8:08:06:b6:4d:c6:86:1e:08:d4:ac: 97:0e:9d:c1:f2:02:8f:2e:0d:b0:2a:4e:32:a0:37:18:5e:4f: 84:d9:d1:0b:7c:87:24:c7:d1:6b:15:36:cf:46:66:dd:51:1d: 63:ad:4d:33:2c:82:18:cc:a9:e6:a1:8a:80:4f:8a:dc:32:8c: 5c:9d:b7:9d:a2:78:a0:cd:95:9b:7c:c6:05:30:00:72:73:09: bd:cc:b0:82:d4:5c:01:03:93:bd:b4:20:af:24:35:bd:fa:40: 42:52:5d:c6:85:4f:36:0a:bc:a7:47:65:15:13:c5:2d:26:0f: e3:41:db:31:7c:de:4d:91:ea:39:4c:0f:e6:36:c2:26:6b:f1: 01:e8:de:08:ba:50:91:92:21:5c:fb:34:ff:78:2a:6e:a3:e7: 91:4a:ee:c6:88:f0:c4:7f:35:2f:fb:c6:cd:9f:71:ee:f8:0d: 97:ac:dc:c0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIc8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZBMkE5RUNCRENDNzI0 MTIwRjE1QTAwRjE2NTJDQkNEMjcwREVEMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvp/c83gMR2Y4RO4JH4hJwPYD4izNMqg9Yq76OaBPdHbOeap5S PgLiYhzINQGMSQfoFfNcehoAAEj1fLGBcCNaXIQ+5shL+QMpHAG+U16eKV59xGyX ue94Q6qSN+gAUumu0rRRCnDYOcJ/ZtvYE7DnDvnBBGJnBqBOHMns6ummPV9/6eRA 6VlOEaPVOhnHlKMzGltJEFCyuDgUO9LthMU+Itklq1fd2w1LfyR5cJoCUYmw5e+i RP105/SSpfMwl4qQROuwqPHe7BXJ/9Net8cnvlr+gDzuDVFO0pvz/6Ugalb5p/4u 3mb6cCjNlviY8qP1V8667M2Sp5L8ROVLae93AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU+iqey9zHJBIPFaAPFlLLzScN7QMwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvLWlxZXk5ekhKQklQ RmFBUEZsTEx6U2NON1FNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7S4ODANBgkqhkiG9w0BAQsFAAOCAQEAmV+mMzl4e1rVn9TAGhn4q1rwd0Tr FbitPWges6WElhcfLhMgBiFQOvDWP98G3xSBRf7EUBx8SqROJLKz+p6vurdezQ+u /nggxTSfS3s/VrgIBrZNxoYeCNSslw6dwfICjy4NsCpOMqA3GF5PhNnRC3yHJMfR axU2z0Zm3VEdY61NMyyCGMyp5qGKgE+K3DKMXJ23naJ4oM2Vm3zGBTAAcnMJvcyw gtRcAQOTvbQgryQ1vfpAQlJdxoVPNgq8p0dlFRPFLSYP40HbMXzeTZHqOUwP5jbC JmvxAejeCLpQkZIhXPs0/3gqbqPnkUruxojwxH81L/vGzZ9x7vgNl6zcwA== -----END CERTIFICATE-----Generated at Wed Nov 5 23:26:57 2025 by rpki-client