$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/3uXxuW5P3LA3NoLD4nTNC6IoR64.roa File: 3uXxuW5P3LA3NoLD4nTNC6IoR64.roa (raw, json) Hash identifier: JxnVYqEDvjPaOG26ZckmXX0l5wwemhtjTAJ8cfP6BzI= Subject key identifier: DE:E5:F1:B9:6E:4F:DC:B0:37:36:82:C3:E2:74:CD:0B:A2:28:47:AE Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1866 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/3uXxuW5P3LA3NoLD4nTNC6IoR64.roa Signing time: Fri 06 Jun 2025 13:20:48 +0000 ROA not before: Fri 06 Jun 2025 13:20:48 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 398704 IP address blocks: 180.223.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6246 (0x1866) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jun 6 13:20:48 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=DEE5F1B96E4FDCB0373682C3E274CD0BA22847AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:d9:e0:f6:cd:5e:3b:70:d0:7b:b6:1a:a0: b2:86:92:b8:4e:80:6b:dd:e7:0a:5c:f8:78:48:0f: a2:14:e1:6e:e4:39:ee:6b:08:5b:ae:19:18:d1:29: 4f:48:dc:64:5f:55:3c:00:8f:b7:b1:46:ed:2a:45: cf:ab:14:a5:5f:6f:97:e8:20:33:26:6c:c3:07:c2: 5a:a4:af:93:db:9e:d2:e0:dd:79:b7:7d:02:44:15: 9f:75:07:9c:d8:b7:9d:92:00:0c:bf:d8:36:85:29: ec:b9:76:ad:6f:dc:81:c9:12:30:02:4c:a5:98:92: b9:3d:e0:41:17:f9:8f:ca:5c:aa:d1:12:89:e8:63: 29:0f:81:b9:e3:28:2b:34:0e:2b:1c:a2:4e:ec:e4: 25:9b:a6:aa:58:9c:0e:65:58:5c:b8:1a:6e:6a:41: 56:18:ff:8c:81:d8:20:a4:77:58:dc:44:d3:a9:a0: 71:5c:9b:69:7e:a2:b9:3b:90:19:0a:15:41:6c:99: 27:00:61:c9:39:d3:cd:2a:8c:27:85:79:b8:37:ac: 4f:d9:da:16:e9:dd:85:61:36:cf:de:bf:8c:15:e3: 6d:25:14:ad:bc:e5:37:b1:78:c1:e1:8d:ea:42:bc: 9e:00:ca:28:b8:3a:63:1b:92:2e:9e:aa:5b:f8:d9: af:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E5:F1:B9:6E:4F:DC:B0:37:36:82:C3:E2:74:CD:0B:A2:28:47:AE X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/3uXxuW5P3LA3NoLD4nTNC6IoR64.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.212.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:9e:9d:32:af:f9:a1:34:07:d3:da:3f:09:8a:6d:26:61:0f: e7:d7:42:f4:32:d6:fe:ec:b1:24:ee:3a:39:e1:7f:ce:e1:21: e6:f0:92:1e:19:f2:a7:fe:d6:40:83:05:15:de:ca:59:e0:ec: 6f:51:10:ee:2e:3a:68:fa:5d:80:7b:54:d9:31:bf:e1:ae:b2: 3b:6b:a7:2f:a3:e8:f4:c2:07:52:5e:fc:8b:74:0c:48:97:f2: ae:01:30:72:2f:ae:43:fb:38:a1:fb:67:a1:e6:c1:d1:6f:08: d3:7a:7c:e8:ad:c8:42:bc:e1:01:94:7e:22:4d:42:f7:f2:28: 51:7a:13:c9:40:72:d2:14:92:f1:a1:bb:1e:bf:3e:0f:c7:fc: bc:22:a6:8d:bf:84:0e:62:9e:12:3d:00:b2:17:11:a6:62:b2: 4c:b3:a9:4b:27:13:3c:ba:f2:fe:6e:19:9b:a0:62:a2:6e:a6: ba:66:36:ac:88:94:18:f1:2f:60:08:e0:c0:cd:24:15:31:d3: 6c:84:ac:1b:e3:fe:fd:66:61:1b:7f:d4:f4:19:dc:17:32:fa: 0f:d5:63:4e:5e:69:aa:50:23:a3:16:0f:41:a1:79:d2:7b:bb: 7b:45:0c:6d:f0:90:04:e4:b7:55:3b:7a:30:db:78:64:af:a9: 84:e1:ff:76 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGGYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA2MDYx MzIwNDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERFRTVGMUI5NkU0RkRD QjAzNzM2ODJDM0UyNzRDRDBCQTIyODQ3QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIvdng9s1eO3DQe7YaoLKGkrhOgGvd5wpc+HhID6IU4W7kOe5r CFuuGRjRKU9I3GRfVTwAj7exRu0qRc+rFKVfb5foIDMmbMMHwlqkr5PbntLg3Xm3 fQJEFZ91B5zYt52SAAy/2DaFKey5dq1v3IHJEjACTKWYkrk94EEX+Y/KXKrREono YykPgbnjKCs0Discok7s5CWbpqpYnA5lWFy4Gm5qQVYY/4yB2CCkd1jcRNOpoHFc m2l+ork7kBkKFUFsmScAYck5080qjCeFebg3rE/Z2hbp3YVhNs/ev4wV420lFK28 5TexeMHhjepCvJ4Ayii4OmMbki6eqlv42a/dAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU3uXxuW5P3LA3NoLD4nTNC6IoR64wHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvM3VYeHVXNVAzTEEz Tm9MRDRuVE5DNklvUjY0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTf1DANBgkqhkiG9w0BAQsFAAOCAQEAfp6dMq/5oTQH09o/CYptJmEP59dC 9DLW/uyxJO46OeF/zuEh5vCSHhnyp/7WQIMFFd7KWeDsb1EQ7i46aPpdgHtU2TG/ 4a6yO2unL6Po9MIHUl78i3QMSJfyrgEwci+uQ/s4oftnoebB0W8I03p86K3IQrzh AZR+Ik1C9/IoUXoTyUBy0hSS8aG7Hr8+D8f8vCKmjb+EDmKeEj0AshcRpmKyTLOp SycTPLry/m4Zm6Biom6mumY2rIiUGPEvYAjgwM0kFTHTbISsG+P+/WZhG3/U9Bnc FzL6D9VjTl5pqlAjoxYPQaF50nu7e0UMbfCQBOS3VTt6MNt4ZK+phOH/dg== -----END CERTIFICATE-----Generated at Wed Nov 5 13:37:21 2025 by rpki-client