$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/FcgrOvu6cRZZlhS1YUBR9JqoDGA.roa File: FcgrOvu6cRZZlhS1YUBR9JqoDGA.roa (raw, json) Hash identifier: kNR6FMG9FzhUPfNARpbxoYIdzFV9zeEY511BNuEICpc= Subject key identifier: 15:C8:2B:3A:FB:BA:71:16:59:96:14:B5:61:40:51:F4:9A:A8:0C:60 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A77 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/FcgrOvu6cRZZlhS1YUBR9JqoDGA.roa Signing time: Sat 13 Sep 2025 03:07:17 +0000 ROA not before: Sat 13 Sep 2025 03:07:17 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 18811 IP address blocks: 180.223.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6775 (0x1a77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:17 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=15C82B3AFBBA7116599614B5614051F49AA80C60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ae:d8:37:b1:d0:01:ef:a5:fb:00:34:15:87: 06:ac:7d:44:da:89:ec:f8:ec:b0:47:02:00:bb:a5: 64:26:29:d4:c4:5c:ef:ac:97:cf:d4:07:21:d6:19: 70:66:27:16:c3:3f:0e:78:00:e4:48:2c:cd:ad:a5: bb:21:58:2b:cd:f4:03:fd:fd:06:6e:a8:76:f1:02: e3:c0:65:04:1e:76:20:e6:1d:c1:20:f7:b6:a3:24: 4d:b8:8d:55:c1:4a:c4:86:96:c7:12:06:a1:38:16: f6:71:78:7b:88:71:f0:98:cf:7d:36:20:cc:43:41: 0f:b0:91:b5:2e:dc:32:7b:9a:6b:ca:b7:75:11:31: 81:e1:eb:a1:df:aa:6f:92:5c:77:d5:ba:1f:53:3c: af:73:6f:ea:6c:22:24:d2:16:28:61:32:8e:70:05: 79:24:50:1f:67:0b:ca:73:67:3c:82:73:2f:34:aa: 36:35:2e:2b:55:61:18:11:9c:e3:6b:b3:71:94:11: c4:37:c4:f0:5e:9c:90:81:62:b0:49:c8:45:7a:c5: 3f:0b:df:da:80:84:92:5c:04:c2:13:d2:ca:bf:a4: d3:d0:9b:e4:81:ab:65:c5:f4:a9:5c:74:15:e1:4e: 7e:bf:43:81:8b:52:8f:71:61:6b:83:3d:8c:68:be: f1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C8:2B:3A:FB:BA:71:16:59:96:14:B5:61:40:51:F4:9A:A8:0C:60 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/FcgrOvu6cRZZlhS1YUBR9JqoDGA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.112.0/21 Signature Algorithm: sha256WithRSAEncryption 25:21:2e:f3:2c:3c:66:f3:96:82:25:b6:63:53:e2:ee:d3:a5: 00:60:51:72:37:db:78:9a:0b:ba:91:d6:41:85:21:30:80:7e: 31:89:dc:56:80:65:2a:55:67:d2:58:d1:4e:17:07:c3:f5:a6: 6e:ea:61:2f:12:4b:95:a9:46:57:c0:7a:fd:31:4b:0f:93:21: c3:f4:70:e1:c9:93:be:e6:93:8f:e1:03:f5:6e:11:86:93:30: e1:7d:35:6a:d6:71:dc:ed:12:eb:f5:3b:c1:82:1f:cf:7c:f7: d6:c5:c5:3e:3f:2d:3f:ff:70:c1:c0:84:d2:e6:33:89:96:6e: 3e:35:13:b2:a9:85:31:0e:c2:79:21:80:64:ce:fc:af:0a:ea: 1d:b6:86:ed:4f:7c:9d:23:aa:54:6e:8f:92:7e:1b:e6:19:b7: ac:b3:3e:34:ae:ff:4b:af:53:06:ba:c8:87:14:23:75:c5:f6: 92:ef:44:40:98:54:88:9c:ba:3f:e2:99:95:b8:97:ad:d6:35: 8a:61:e0:c2:12:61:c9:5f:0b:1e:75:99:d0:da:f1:c2:53:0c: d2:7b:5e:fa:cf:cb:48:62:0f:61:bd:8b:3c:9e:83:49:c0:31: 25:da:dd:16:fc:09:bb:e2:0b:39:27:ad:b2:cf:d3:74:c7:d1: 9d:de:89:f8 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGncwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDE1QzgyQjNBRkJCQTcx MTY1OTk2MTRCNTYxNDA1MUY0OUFBODBDNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5rtg3sdAB76X7ADQVhwasfUTaiez47LBHAgC7pWQmKdTEXO+s l8/UByHWGXBmJxbDPw54AORILM2tpbshWCvN9AP9/QZuqHbxAuPAZQQediDmHcEg 97ajJE24jVXBSsSGlscSBqE4FvZxeHuIcfCYz302IMxDQQ+wkbUu3DJ7mmvKt3UR MYHh66Hfqm+SXHfVuh9TPK9zb+psIiTSFihhMo5wBXkkUB9nC8pzZzyCcy80qjY1 LitVYRgRnONrs3GUEcQ3xPBenJCBYrBJyEV6xT8L39qAhJJcBMIT0sq/pNPQm+SB q2XF9KlcdBXhTn6/Q4GLUo9xYWuDPYxovvHNAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUFcgrOvu6cRZZlhS1YUBR9JqoDGAwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvRmNnck92dTZjUlpa bGhTMVlVQlI5SnFvREdBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfcDANBgkqhkiG9w0BAQsFAAOCAQEAJSEu8yw8ZvOWgiW2Y1Pi7tOlAGBR cjfbeJoLupHWQYUhMIB+MYncVoBlKlVn0ljRThcHw/WmbuphLxJLlalGV8B6/TFL D5Mhw/Rw4cmTvuaTj+ED9W4RhpMw4X01atZx3O0S6/U7wYIfz3z31sXFPj8tP/9w wcCE0uYziZZuPjUTsqmFMQ7CeSGAZM78rwrqHbaG7U98nSOqVG6Pkn4b5hm3rLM+ NK7/S69TBrrIhxQjdcX2ku9EQJhUiJy6P+KZlbiXrdY1imHgwhJhyV8LHnWZ0Nrx wlMM0nte+s/LSGIPYb2LPJ6DScAxJdrdFvwJu+ILOSetss/TdMfRnd6J+A== -----END CERTIFICATE-----Generated at Wed Nov 5 04:42:20 2025 by rpki-client