$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/-n7PQMycJAsWlkUJTUKmSgeUUcw.roa File: -n7PQMycJAsWlkUJTUKmSgeUUcw.roa (raw, json) Hash identifier: xroksjY/SW/e6hZBkB8CMY9suUV5wusDn8ySAaN3rwQ= Subject key identifier: FA:7E:CF:40:CC:9C:24:0B:16:96:45:09:4D:42:A6:4A:07:94:51:CC Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A7F Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/-n7PQMycJAsWlkUJTUKmSgeUUcw.roa Signing time: Sat 13 Sep 2025 03:07:19 +0000 ROA not before: Sat 13 Sep 2025 03:07:19 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 18811 IP address blocks: 180.223.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6783 (0x1a7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:19 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FA7ECF40CC9C240B169645094D42A64A079451CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:67:76:9a:58:b5:99:a8:a0:a5:8c:b5:87:24: c4:c7:47:f2:b7:f9:3f:d9:6e:74:1b:8c:d8:34:d2: c5:38:14:86:34:48:2e:f9:b0:c1:cc:ad:91:71:a1: 84:86:4e:3d:92:01:96:cc:75:65:76:ed:0b:4c:02: f2:8a:45:43:1a:80:bb:66:57:6a:a8:1a:d2:2e:79: 00:12:3e:cd:8a:ac:22:86:02:b2:7d:b9:f5:14:bd: 4e:54:f4:7c:1e:5c:5f:79:21:b6:99:f5:59:28:33: 02:2f:c6:2c:9e:d8:e8:84:e4:ad:65:3f:60:05:f5: ad:82:59:a0:37:f4:3e:be:8f:87:32:4e:19:94:d6: 00:fa:56:1e:a0:6d:a6:48:88:67:92:37:e7:c4:b2: 0c:09:32:05:71:d0:54:ab:14:a6:9c:a9:fb:19:77: fe:3c:8d:ce:d2:1b:eb:19:a3:90:e7:c6:a5:a6:ab: 72:5b:d2:8f:5d:0a:41:ce:1b:0f:72:db:82:ff:dc: 40:9d:92:27:e3:08:63:0a:c2:7e:9b:ae:35:ce:34: b7:5c:a2:1b:26:fb:eb:d4:75:3e:c6:dd:10:7a:59: e9:6b:78:d6:2a:41:a8:5b:13:15:3a:e8:d0:01:1a: 49:e9:dd:f0:42:6d:9b:67:d2:2f:b9:ba:95:8a:70: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7E:CF:40:CC:9C:24:0B:16:96:45:09:4D:42:A6:4A:07:94:51:CC X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/-n7PQMycJAsWlkUJTUKmSgeUUcw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.204.0/22 Signature Algorithm: sha256WithRSAEncryption c9:2a:85:0f:bf:dc:14:f7:c7:04:4a:a9:1b:7d:46:5a:79:d2: 1f:16:2c:f9:af:d7:06:4b:a3:82:80:84:cb:a5:fc:84:29:1e: cb:70:0a:bd:1c:15:cb:a6:e8:57:1c:57:a0:46:23:53:88:77: 89:1e:fb:fd:de:68:61:46:49:fd:ad:74:68:17:23:c9:b6:2e: a9:aa:0c:45:f9:30:6b:25:89:41:53:5c:b5:31:5a:b6:74:f7: ac:6c:6c:0a:93:2a:b0:a8:f5:4f:d0:d5:d3:3c:07:aa:e7:01: 69:1a:43:e9:57:c3:27:46:98:e7:0a:d5:3c:e0:08:6e:42:d7: 4b:c2:51:6b:11:18:b5:3c:91:29:8c:b2:b5:07:3f:be:fa:fd: 7e:59:78:aa:32:95:9e:3c:c3:58:77:4a:0d:c4:fa:35:a1:b0: 7c:f6:75:ad:33:ae:4e:fb:1e:13:9e:34:82:68:c7:e4:03:30: 7e:07:f3:75:f5:82:c9:24:2d:07:7e:a3:6f:d1:38:c5:b1:94: 08:91:19:d5:df:4b:d2:33:5f:d3:11:5a:1c:66:6f:96:b2:e5: 24:bb:c0:62:73:e5:e9:be:6f:44:1e:10:c3:d9:1d:b6:6a:ae: 42:32:58:60:ba:91:af:25:4b:a1:2c:d0:ec:0a:4e:b8:39:93: 2f:63:3f:cd -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGn8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MTlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZBN0VDRjQwQ0M5QzI0 MEIxNjk2NDUwOTRENDJBNjRBMDc5NDUxQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSZ3aaWLWZqKCljLWHJMTHR/K3+T/ZbnQbjNg00sU4FIY0SC75 sMHMrZFxoYSGTj2SAZbMdWV27QtMAvKKRUMagLtmV2qoGtIueQASPs2KrCKGArJ9 ufUUvU5U9HweXF95IbaZ9VkoMwIvxiye2OiE5K1lP2AF9a2CWaA39D6+j4cyThmU 1gD6Vh6gbaZIiGeSN+fEsgwJMgVx0FSrFKacqfsZd/48jc7SG+sZo5DnxqWmq3Jb 0o9dCkHOGw9y24L/3ECdkifjCGMKwn6brjXONLdcohsm++vUdT7G3RB6WelreNYq QahbExU66NABGknp3fBCbZtn0i+5upWKcHbHAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU+n7PQMycJAsWlkUJTUKmSgeUUcwwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvLW43UFFNeWNKQXNX bGtVSlRVS21TZ2VVVWN3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfzDANBgkqhkiG9w0BAQsFAAOCAQEAySqFD7/cFPfHBEqpG31GWnnSHxYs +a/XBkujgoCEy6X8hCkey3AKvRwVy6boVxxXoEYjU4h3iR77/d5oYUZJ/a10aBcj ybYuqaoMRfkwayWJQVNctTFatnT3rGxsCpMqsKj1T9DV0zwHqucBaRpD6VfDJ0aY 5wrVPOAIbkLXS8JRaxEYtTyRKYyytQc/vvr9fll4qjKVnjzDWHdKDcT6NaGwfPZ1 rTOuTvseE540gmjH5AMwfgfzdfWCySQtB36jb9E4xbGUCJEZ1d9L0jNf0xFaHGZv lrLlJLvAYnPl6b5vRB4Qw9kdtmquQjJYYLqRryVLoSzQ7ApOuDmTL2M/zQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:41:56 2025 by rpki-client