$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/55zjsCa5NA3nEZXoQiP3T-OzTaE.roa File: 55zjsCa5NA3nEZXoQiP3T-OzTaE.roa (raw, json) Hash identifier: g++nE5Umc8NoNDBBzSikC3kz+skqriPJm2xfkaUKRQM= Subject key identifier: E7:9C:E3:B0:26:B9:34:0D:E7:11:95:E8:42:23:F7:4F:E3:B3:4D:A1 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A9F Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/55zjsCa5NA3nEZXoQiP3T-OzTaE.roa Signing time: Sat 13 Sep 2025 03:07:25 +0000 ROA not before: Sat 13 Sep 2025 03:07:25 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 2914 IP address blocks: 180.223.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 23:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6815 (0x1a9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:25 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E79CE3B026B9340DE71195E84223F74FE3B34DA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:20:6c:78:e4:3b:44:53:77:24:f3:b7:9b: 26:ac:dd:fe:5b:78:fd:56:6e:3e:71:fd:88:7c:51: 7d:c4:e5:30:b0:52:4b:c4:46:a9:45:aa:e5:3e:ac: 25:61:07:d1:50:47:30:38:0c:bf:39:57:71:6b:aa: 5f:4c:86:5f:a5:e9:70:70:fc:70:c6:70:b0:1f:d5: ab:04:d9:b3:d5:80:7b:8f:8f:e0:c9:41:e3:6a:ed: 60:66:21:60:ea:40:ef:3b:a7:ac:9f:be:92:b4:4d: 22:61:d4:e3:5d:de:ba:a7:38:4a:a9:75:73:42:cf: 0e:da:88:8c:8b:a7:3b:05:27:97:d6:54:0b:95:01: 19:07:a9:b1:25:a2:76:30:27:7e:b6:4b:3a:8b:39: 00:09:c8:f0:76:d2:9e:a9:62:38:7f:13:b9:0b:91: a8:1f:f7:5e:12:cc:6a:45:7b:b2:28:c5:96:4f:f7: 80:c4:ae:1f:d2:4d:5c:c9:61:e5:18:6a:7a:4a:3a: b6:5d:f9:92:7e:b1:d6:61:b9:d0:d0:39:6d:23:d3: a8:d9:5d:e5:85:b5:51:f8:c7:a5:96:97:c4:48:ea: d5:0a:87:2d:64:1f:30:c2:a6:6f:38:d4:7e:c2:1d: 52:1f:92:ad:05:ca:dd:a8:a5:1e:08:6d:05:12:b7: b6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9C:E3:B0:26:B9:34:0D:E7:11:95:E8:42:23:F7:4F:E3:B3:4D:A1 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/55zjsCa5NA3nEZXoQiP3T-OzTaE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.216.0/21 Signature Algorithm: sha256WithRSAEncryption d4:67:aa:bc:76:6f:bf:d5:3f:b7:78:c9:15:d0:e2:0c:b9:e1: fa:f2:e2:5d:29:ff:a4:58:42:30:f9:53:fe:49:65:35:d4:0b: 79:7f:b7:6b:d3:c9:98:c6:f4:40:56:de:c3:33:de:a1:6c:9b: a0:86:67:8d:89:23:c6:97:e0:46:95:ae:83:d9:cb:4f:2f:81: d7:50:44:72:c8:8b:dc:85:35:96:46:26:28:20:f8:e8:4a:da: 38:75:fa:85:f9:95:57:d7:9d:a7:e2:84:68:35:bc:07:88:e2: ae:43:61:c7:0d:6f:a9:cd:4e:a6:5b:e6:97:7d:47:0e:18:e2: ad:d1:f7:27:26:2a:45:4d:3d:c4:48:1f:c9:43:b0:9f:30:19: 90:a7:e0:ed:3e:18:c0:e6:ae:e7:ef:31:9a:77:83:32:30:db: 84:f0:f6:6c:ca:0b:85:6b:d2:52:47:1d:13:25:23:4b:92:6d: 9a:e3:5c:6a:f3:bd:02:96:9b:67:b1:92:a1:83:ae:a9:c3:79: a1:46:da:49:6e:0a:fb:04:ad:8e:f6:88:d9:21:af:a6:bd:d8: 78:d5:28:1a:4b:2a:8d:71:d3:95:68:44:b0:af:91:b6:47:17: c5:b6:25:d5:97:b3:8a:12:49:9d:df:bb:6d:6f:4d:4c:b0:02: ac:73:c8:e5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGp8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MjVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEU3OUNFM0IwMjZCOTM0 MERFNzExOTVFODQyMjNGNzRGRTNCMzREQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5CCBseOQ7RFN3JPO3myas3f5beP1Wbj5x/Yh8UX3E5TCwUkvE RqlFquU+rCVhB9FQRzA4DL85V3Frql9Mhl+l6XBw/HDGcLAf1asE2bPVgHuPj+DJ QeNq7WBmIWDqQO87p6yfvpK0TSJh1ONd3rqnOEqpdXNCzw7aiIyLpzsFJ5fWVAuV ARkHqbElonYwJ362SzqLOQAJyPB20p6pYjh/E7kLkagf914SzGpFe7IoxZZP94DE rh/STVzJYeUYanpKOrZd+ZJ+sdZhudDQOW0j06jZXeWFtVH4x6WWl8RI6tUKhy1k HzDCpm841H7CHVIfkq0Fyt2opR4IbQUSt7b5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU55zjsCa5NA3nEZXoQiP3T+OzTaEwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvNTV6anNDYTVOQTNu RVpYb1FpUDNULU96VGFFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7Tf2DANBgkqhkiG9w0BAQsFAAOCAQEA1GeqvHZvv9U/t3jJFdDiDLnh+vLi XSn/pFhCMPlT/kllNdQLeX+3a9PJmMb0QFbewzPeoWyboIZnjYkjxpfgRpWug9nL Ty+B11BEcsiL3IU1lkYmKCD46EraOHX6hfmVV9edp+KEaDW8B4jirkNhxw1vqc1O plvml31HDhjirdH3JyYqRU09xEgfyUOwnzAZkKfg7T4YwOau5+8xmneDMjDbhPD2 bMoLhWvSUkcdEyUjS5JtmuNcavO9ApabZ7GSoYOuqcN5oUbaSW4K+wStjvaI2SGv pr3YeNUoGksqjXHTlWhEsK+RtkcXxbYl1ZezihJJnd+7bW9NTLACrHPI5Q== -----END CERTIFICATE-----Generated at Tue Nov 4 22:34:58 2025 by rpki-client