$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/ym0X18TYTkSyYikEbl_NT7RLX4g.roa File: ym0X18TYTkSyYikEbl_NT7RLX4g.roa (raw, json) Hash identifier: PEyNkdr0lIc91yuhmJd/PA9SM2yu8b1bSm7NOfg5xLg= Subject key identifier: CA:6D:17:D7:C4:D8:4E:44:B2:62:29:04:6E:5F:CD:4F:B4:4B:5F:88 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21E7 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/ym0X18TYTkSyYikEbl_NT7RLX4g.roa Signing time: Sat 13 Sep 2025 03:09:06 +0000 ROA not before: Sat 13 Sep 2025 03:09:06 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 180.184.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8679 (0x21e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:06 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=CA6D17D7C4D84E44B26229046E5FCD4FB44B5F88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:1a:02:55:11:4d:76:5e:42:10:1e:df:97: 45:19:e3:f6:2f:d0:07:74:0e:57:f1:06:d3:94:fb: 3c:ad:18:6c:ae:f8:ee:a8:0b:5f:ac:c4:f9:28:1e: cc:de:2e:f6:51:ef:07:0e:2f:89:57:a8:e1:78:4c: d8:19:b9:fc:4d:b5:32:56:0c:c7:63:ae:2d:eb:b4: 7f:14:6c:dc:38:1c:a1:17:75:f2:ad:4a:58:60:27: 1d:ee:79:19:f2:b7:30:1e:f8:dd:15:96:7b:6e:93: da:65:83:8c:e3:54:eb:c2:be:71:39:0e:29:d1:18: c4:e3:4a:33:7f:54:dd:f9:b9:3f:31:29:85:67:58: 82:da:e3:5d:5f:11:e1:f5:95:38:75:d9:41:b1:ef: 89:2d:32:e1:44:8f:65:b3:50:5f:75:fd:b3:c1:f9: 79:d8:b6:ee:a0:64:75:a6:8b:3f:d0:e5:1d:35:b1: fd:c5:de:91:95:a8:e0:3b:59:34:5d:46:5a:68:84: 02:71:39:0f:08:19:47:7f:89:db:34:71:a8:e6:75: 7c:f1:45:01:b1:b1:8f:e0:83:70:77:d2:af:8a:fe: 4b:8a:60:ab:e8:8e:56:bd:92:53:e8:97:a5:47:60: c1:7c:39:7e:38:c6:cc:45:49:ef:9d:65:6a:f1:2d: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6D:17:D7:C4:D8:4E:44:B2:62:29:04:6E:5F:CD:4F:B4:4B:5F:88 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/ym0X18TYTkSyYikEbl_NT7RLX4g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.184.0/22 Signature Algorithm: sha256WithRSAEncryption bb:a3:cf:c7:03:42:c9:ad:4d:b4:a4:ec:15:ee:1b:3f:76:cd: 57:5b:e8:68:a0:d8:3f:b8:a0:7e:01:3c:49:22:a9:04:2b:96: a1:65:6f:b8:27:5d:6b:7e:82:7b:0d:9e:33:cf:f6:12:8b:92: 7e:11:11:f8:97:48:c7:43:84:7d:55:d6:d7:33:f4:2c:eb:fe: 9a:39:1a:06:1e:ce:14:18:4f:6b:35:46:26:78:9f:cc:b2:53: fb:02:fb:0d:84:32:e4:6a:9e:a7:46:5a:22:93:88:ea:53:2c: 6e:e0:e3:21:6d:b9:ab:72:93:3a:a3:67:80:0a:1f:7e:4c:70: c4:f3:f5:16:13:28:88:68:0f:6a:ec:82:70:86:85:8e:cc:23: 4b:eb:98:02:b1:ce:6f:a7:5f:81:f0:6b:fe:7b:3d:9d:6e:2d: fc:be:9d:6b:1e:7d:6f:64:90:f8:db:b0:25:7c:6d:19:63:f9: 4a:b9:bd:17:09:95:b7:94:d7:66:9e:b1:cd:0a:f7:97:06:81: 98:50:ad:7a:cd:63:8c:25:ec:8b:1e:aa:63:3b:f9:dc:36:dc: 36:3e:e8:05:94:b6:dc:a0:26:ea:6d:a0:c3:c6:b6:d6:98:b9: 60:14:de:92:09:8e:51:48:0d:4d:23:7e:c7:ad:37:9e:61:de: 67:aa:6b:33 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIecwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKENBNkQxN0Q3QzREODRF NDRCMjYyMjkwNDZFNUZDRDRGQjQ0QjVGODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzLRoCVRFNdl5CEB7fl0UZ4/Yv0Ad0DlfxBtOU+zytGGyu+O6o C1+sxPkoHszeLvZR7wcOL4lXqOF4TNgZufxNtTJWDMdjri3rtH8UbNw4HKEXdfKt SlhgJx3ueRnytzAe+N0Vlntuk9plg4zjVOvCvnE5DinRGMTjSjN/VN35uT8xKYVn WILa411fEeH1lTh12UGx74ktMuFEj2WzUF91/bPB+XnYtu6gZHWmiz/Q5R01sf3F 3pGVqOA7WTRdRlpohAJxOQ8IGUd/ids0cajmdXzxRQGxsY/gg3B30q+K/kuKYKvo jla9klPol6VHYMF8OX44xsxFSe+dZWrxLa03AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUym0X18TYTkSyYikEbl/NT7RLX4gwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQveW0wWDE4VFlUa1N5 WWlrRWJsX05UN1JMWDRnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArS4uDANBgkqhkiG9w0BAQsFAAOCAQEAu6PPxwNCya1NtKTsFe4bP3bNV1vo aKDYP7igfgE8SSKpBCuWoWVvuCdda36Cew2eM8/2EouSfhER+JdIx0OEfVXW1zP0 LOv+mjkaBh7OFBhPazVGJnifzLJT+wL7DYQy5Gqep0ZaIpOI6lMsbuDjIW25q3KT OqNngAoffkxwxPP1FhMoiGgPauyCcIaFjswjS+uYArHOb6dfgfBr/ns9nW4t/L6d ax59b2SQ+NuwJXxtGWP5Srm9FwmVt5TXZp6xzQr3lwaBmFCtes1jjCXsix6qYzv5 3DbcNj7oBZS23KAm6m2gw8a21pi5YBTekgmOUUgNTSN+x603nmHeZ6prMw== -----END CERTIFICATE-----Generated at Wed Nov 5 23:23:48 2025 by rpki-client