$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/DWIwRI3tvI0pKJwXifHY8D7hsPI.roa File: DWIwRI3tvI0pKJwXifHY8D7hsPI.roa (raw, json) Hash identifier: RFo1moaAMPnPh7xyroWN78agQrH2UDHhDCc38EktTCs= Subject key identifier: 0D:62:30:44:8D:ED:BC:8D:29:28:9C:17:89:F1:D8:F0:3E:E1:B0:F2 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A71 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/DWIwRI3tvI0pKJwXifHY8D7hsPI.roa Signing time: Sat 13 Sep 2025 03:07:16 +0000 ROA not before: Sat 13 Sep 2025 03:07:16 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 2914 IP address blocks: 180.223.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 23:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6769 (0x1a71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:16 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=0D6230448DEDBC8D29289C1789F1D8F03EE1B0F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f0:22:7c:83:6d:b1:07:44:27:ea:9f:6a:c3: 58:d1:ea:f3:c3:d4:a8:f1:d1:68:d4:95:4a:fb:69: df:04:8f:87:96:f9:95:a2:2b:e4:2f:db:e6:38:09: f2:42:b7:38:a1:e8:c7:f2:3d:e7:bb:94:78:d3:98: ff:9e:47:30:2e:21:47:7f:f1:c3:7d:a9:07:3b:c4: f2:b7:ad:66:17:bf:13:8f:e0:e9:d0:a8:a8:69:cb: 29:4b:fe:c1:67:4e:e5:08:72:b5:53:2f:ec:e7:73: 8a:6f:f5:a7:b7:8e:a4:f4:9d:4d:83:de:52:a4:e0: 25:59:2b:68:1b:8c:d5:b1:95:f6:b6:dc:37:5e:49: 1a:4f:1b:41:64:c7:4f:b5:f6:ff:57:d3:25:61:9c: f3:68:d6:c1:be:7f:bc:85:65:57:c6:31:93:d5:f1: 01:ac:4e:d5:37:51:ae:f6:6a:dc:f5:5c:9b:42:43: c8:b6:c9:39:76:4c:ce:7f:d6:34:7c:c2:a1:c3:50: 52:c4:dd:f6:8f:30:63:22:0c:da:46:e0:cd:c0:6e: 2f:0b:7b:df:0d:ab:18:77:b6:50:84:56:3a:3d:52: 58:1e:04:d6:f1:bd:9c:fd:f3:2e:51:f0:e3:58:f7: 07:fd:8e:7d:c0:6f:ed:82:84:05:cf:c8:b5:45:75: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:62:30:44:8D:ED:BC:8D:29:28:9C:17:89:F1:D8:F0:3E:E1:B0:F2 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/DWIwRI3tvI0pKJwXifHY8D7hsPI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.201.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:1d:ab:22:e3:32:13:a9:2a:1f:21:81:ef:99:fd:7c:c0:19: 93:61:73:14:e9:11:af:85:83:3c:fe:4e:7b:42:fa:a6:79:ba: 47:6b:cc:93:72:4b:3e:f5:97:85:85:8e:16:34:51:0d:9a:c5: f6:88:26:35:2f:04:f2:90:10:53:90:87:17:6f:53:85:be:49: 68:26:70:18:c8:67:15:ad:89:ec:5c:aa:5e:cd:36:93:ce:ed: 9a:16:9b:58:8d:fa:fa:a4:fb:a1:10:4b:24:4d:77:89:5d:2d: 24:ee:69:fc:44:1c:b7:f9:20:77:57:be:98:16:d7:31:48:3a: 4c:5e:75:f5:c3:74:b8:c1:b2:04:7b:9e:7d:54:07:66:c7:34: 22:47:67:77:be:85:bb:7f:80:9e:c6:01:80:e2:8c:9d:6d:98: b5:16:6f:9e:6c:1d:12:aa:dc:55:87:c0:17:7c:e1:e6:76:7e: a2:89:d1:4b:d8:94:e1:c0:bb:86:e2:d0:80:37:96:61:c2:7a: f9:bc:6c:b7:9b:49:7b:1e:43:c4:12:48:7e:37:6f:24:71:59: ee:7a:98:36:89:ee:44:75:3c:4c:eb:50:a7:42:7f:ac:5e:92: 4b:e9:53:c3:e0:d9:b3:f1:82:2d:15:87:f7:94:0d:51:01:d3: 9b:dd:cf:14 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDBENjIzMDQ0OERFREJD OEQyOTI4OUMxNzg5RjFEOEYwM0VFMUIwRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC8CJ8g22xB0Qn6p9qw1jR6vPD1Kjx0WjUlUr7ad8Ej4eW+ZWi K+Qv2+Y4CfJCtzih6MfyPee7lHjTmP+eRzAuIUd/8cN9qQc7xPK3rWYXvxOP4OnQ qKhpyylL/sFnTuUIcrVTL+znc4pv9ae3jqT0nU2D3lKk4CVZK2gbjNWxlfa23Dde SRpPG0Fkx0+19v9X0yVhnPNo1sG+f7yFZVfGMZPV8QGsTtU3Ua72atz1XJtCQ8i2 yTl2TM5/1jR8wqHDUFLE3faPMGMiDNpG4M3Abi8Le98Nqxh3tlCEVjo9UlgeBNbx vZz98y5R8ONY9wf9jn3Ab+2ChAXPyLVFdYKRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUDWIwRI3tvI0pKJwXifHY8D7hsPIwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvRFdJd1JJM3R2STBw S0p3WGlmSFk4RDdoc1BJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTfyTANBgkqhkiG9w0BAQsFAAOCAQEAGx2rIuMyE6kqHyGB75n9fMAZk2Fz FOkRr4WDPP5Oe0L6pnm6R2vMk3JLPvWXhYWOFjRRDZrF9ogmNS8E8pAQU5CHF29T hb5JaCZwGMhnFa2J7FyqXs02k87tmhabWI36+qT7oRBLJE13iV0tJO5p/EQct/kg d1e+mBbXMUg6TF519cN0uMGyBHuefVQHZsc0Ikdnd76Fu3+AnsYBgOKMnW2YtRZv nmwdEqrcVYfAF3zh5nZ+oonRS9iU4cC7huLQgDeWYcJ6+bxst5tJex5DxBJIfjdv JHFZ7nqYNonuRHU8TOtQp0J/rF6SS+lTw+DZs/GCLRWH95QNUQHTm93PFA== -----END CERTIFICATE-----Generated at Tue Nov 4 22:34:57 2025 by rpki-client