$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/5Tewn_AV1uUu1P-yr_y020HboNg.roa File: 5Tewn_AV1uUu1P-yr_y020HboNg.roa (raw, json) Hash identifier: Ttt8WhdyqN4De+hrcv4F6NkbI9mCw5KpxkYXdhzPM9o= Subject key identifier: E5:37:B0:9F:F0:15:D6:E5:2E:D4:FF:B2:AF:FC:B4:DB:41:DB:A0:D8 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1953 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/5Tewn_AV1uUu1P-yr_y020HboNg.roa Signing time: Mon 21 Jul 2025 07:42:29 +0000 ROA not before: Mon 21 Jul 2025 07:42:29 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 6079 IP address blocks: 180.223.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 18:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6483 (0x1953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jul 21 07:42:29 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E537B09FF015D6E52ED4FFB2AFFCB4DB41DBA0D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:18:2a:58:c4:10:9a:7b:49:d1:ab:f3:95: 35:58:74:84:4f:6b:05:e8:ef:c1:ee:da:28:c1:72: cc:23:d8:8b:c1:e5:26:b9:88:85:29:f7:58:2d:30: df:17:a7:fd:cc:3e:67:19:c5:99:4d:6d:9e:21:81: 20:25:e3:54:62:99:b8:c0:f7:7b:0a:bb:4e:bd:37: b1:1e:f1:0e:9d:90:ba:60:c3:7f:98:54:54:21:e2: 1e:c8:3b:da:d2:86:de:d7:49:78:2f:0f:0f:cb:45: 06:c6:a3:dc:68:82:10:6d:ba:5f:1c:c5:9d:74:e9: 76:83:12:f0:bb:ce:85:da:4f:12:a0:bc:b1:a9:7a: 93:cb:6d:9d:90:e5:7a:36:3f:e7:0f:14:7f:cd:7f: 15:11:11:af:92:f4:76:41:05:8d:a9:3d:5a:19:40: 92:dd:bc:bd:64:b1:89:df:9d:07:15:05:a0:a2:47: 6c:68:76:f4:4c:03:3a:53:67:c2:17:b2:d3:cb:d1: 92:06:5a:ba:9f:55:16:47:21:73:5e:fe:85:0f:60: 7a:a9:bb:d9:04:6a:02:e9:7e:8f:97:c5:74:64:43: 10:81:5a:9a:fa:e6:40:ad:08:ab:2a:23:28:61:38: 06:c2:37:7b:a5:1c:33:58:9c:0a:87:81:31:c4:64: e0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:37:B0:9F:F0:15:D6:E5:2E:D4:FF:B2:AF:FC:B4:DB:41:DB:A0:D8 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/5Tewn_AV1uUu1P-yr_y020HboNg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.64.0/18 Signature Algorithm: sha256WithRSAEncryption 5b:93:62:f0:82:72:19:ba:d7:64:c8:2b:62:e8:52:8b:58:4d: cb:df:ae:ee:4a:cf:c6:1c:b0:f4:03:77:c8:5d:ad:38:d2:15: f8:a0:05:87:fc:b3:43:0a:e7:9a:03:f8:2f:ac:6c:42:ee:86: 3d:e0:cf:73:d9:e4:02:4c:62:a8:7d:e7:6c:4d:18:21:92:ea: 15:b4:89:a5:12:42:2a:50:98:2d:fa:0e:bc:2b:f8:66:5d:f3: f8:c3:a1:09:37:b1:89:50:84:b7:01:31:31:30:12:6d:30:47: e1:d9:5b:02:08:24:19:5e:37:59:30:23:cd:ec:41:58:f3:12: a9:fb:ff:c2:50:a3:0b:e9:a4:28:b4:24:3c:b1:bf:2f:80:b7: 19:a4:e6:30:37:5a:57:aa:f0:89:d0:3a:d4:c9:b7:9e:06:1a: 95:a3:ce:e3:28:48:e2:9e:18:f4:0f:42:0a:ab:50:ca:88:95: 1a:23:cd:a4:63:c0:2b:78:a2:99:1a:d6:17:9a:a9:57:f3:4b: e1:80:7c:65:ac:7d:ae:c5:27:76:76:29:cc:e4:84:e1:1b:e5: 0a:9a:80:a0:fa:1d:b5:65:e3:9b:a1:6c:22:73:a0:f5:53:ab: 86:8a:bd:19:ce:65:9b:d3:c9:96:93:65:8a:f6:6a:3f:c3:73: 02:c5:e9:f6 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA3MjEw NzQyMjlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU1MzdCMDlGRjAxNUQ2 RTUyRUQ0RkZCMkFGRkNCNERCNDFEQkEwRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGcxgqWMQQmntJ0avzlTVYdIRPawXo78Hu2ijBcswj2IvB5Sa5 iIUp91gtMN8Xp/3MPmcZxZlNbZ4hgSAl41RimbjA93sKu069N7Ee8Q6dkLpgw3+Y VFQh4h7IO9rSht7XSXgvDw/LRQbGo9xoghBtul8cxZ106XaDEvC7zoXaTxKgvLGp epPLbZ2Q5Xo2P+cPFH/NfxUREa+S9HZBBY2pPVoZQJLdvL1ksYnfnQcVBaCiR2xo dvRMAzpTZ8IXstPL0ZIGWrqfVRZHIXNe/oUPYHqpu9kEagLpfo+XxXRkQxCBWpr6 5kCtCKsqIyhhOAbCN3ulHDNYnAqHgTHEZOArAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU5Tewn/AV1uUu1P+yr/y020HboNgwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvNVRld25fQVYxdVV1 MVAteXJfeTAyMEhib05nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBrTfQDANBgkqhkiG9w0BAQsFAAOCAQEAW5Ni8IJyGbrXZMgrYuhSi1hNy9+u 7krPxhyw9AN3yF2tONIV+KAFh/yzQwrnmgP4L6xsQu6GPeDPc9nkAkxiqH3nbE0Y IZLqFbSJpRJCKlCYLfoOvCv4Zl3z+MOhCTexiVCEtwExMTASbTBH4dlbAggkGV43 WTAjzexBWPMSqfv/wlCjC+mkKLQkPLG/L4C3GaTmMDdaV6rwidA61Mm3ngYalaPO 4yhI4p4Y9A9CCqtQyoiVGiPNpGPAK3iimRrWF5qpV/NL4YB8Zax9rsUndnYpzOSE 4RvlCpqAoPodtWXjm6FsInOg9VOrhoq9Gc5lm9PJlpNlivZqP8NzAsXp9g== -----END CERTIFICATE-----Generated at Tue Nov 4 16:37:14 2025 by rpki-client