$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/KEGbqN6uKpk79roZcXYzAELvEtk.roa File: KEGbqN6uKpk79roZcXYzAELvEtk.roa (raw, json) Hash identifier: T1fQzwGnpuV97AINfuPHmpJ9S1Pu5/ejpQHeOtjmHYQ= Subject key identifier: 28:41:9B:A8:DE:AE:2A:99:3B:F6:BA:19:71:76:33:00:42:EF:12:D9 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A88 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KEGbqN6uKpk79roZcXYzAELvEtk.roa Signing time: Sat 13 Sep 2025 03:07:21 +0000 ROA not before: Sat 13 Sep 2025 03:07:21 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 2914 IP address blocks: 180.223.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 23:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6792 (0x1a88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:21 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=28419BA8DEAE2A993BF6BA197176330042EF12D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:96:c2:7f:b3:7d:84:a9:76:07:6b:86:f1: ee:5f:25:ff:8a:12:1a:50:0c:82:ce:3d:7c:b0:2e: be:30:10:9d:c2:9f:0b:48:71:41:2b:a3:74:fe:46: 0f:eb:24:13:e3:fd:02:7d:ba:26:c2:70:56:71:16: 3f:75:51:78:b6:9a:fa:85:6d:d3:99:84:a5:db:42: 58:ad:97:dd:5e:81:b5:1f:62:ad:f3:5d:9c:a1:54: 79:14:f4:3f:14:69:85:5f:ba:04:3f:b7:7c:ca:f3: ad:77:0b:e1:b3:5c:f3:ea:cd:96:20:c6:89:eb:13: d3:76:e4:ab:e5:cb:20:41:9d:b5:0d:cb:13:38:79: f8:e4:a5:cf:d2:ea:96:86:24:cb:df:65:12:e5:dd: cf:bc:a0:a4:14:e6:e6:59:54:9b:e0:84:65:26:81: 1c:f0:1f:dc:0d:9d:ef:b0:d6:29:89:00:38:d2:e9: 53:25:bb:f3:23:b9:bc:db:9d:97:1b:a7:6f:43:44: 32:a6:80:a0:14:e2:78:a3:dc:10:1d:f2:8c:0f:c3: e9:c7:4c:58:34:7d:ef:d0:0f:54:c1:28:70:e6:1f: 4d:d2:06:fe:64:1b:5c:39:30:89:0e:af:3f:c6:52: 47:27:aa:82:94:6a:6d:10:78:d8:cc:72:a2:a9:ba: f9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:41:9B:A8:DE:AE:2A:99:3B:F6:BA:19:71:76:33:00:42:EF:12:D9 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KEGbqN6uKpk79roZcXYzAELvEtk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.124.0/22 Signature Algorithm: sha256WithRSAEncryption 41:9c:d0:01:41:73:26:7a:3c:fd:ee:27:5f:6c:08:83:89:b8: 65:e9:3c:b7:b0:5d:ce:ac:a4:5d:86:f7:a2:d4:8e:5f:e5:18: 71:fd:d1:6b:63:9f:de:b2:62:78:9f:58:14:97:8c:7c:a1:ea: c3:47:cc:99:70:cd:d9:eb:8f:9f:65:fc:97:60:0a:58:19:0e: 93:6f:8f:74:b7:27:5a:bf:5e:ee:8f:37:02:99:d1:26:34:d6: f7:21:cf:33:66:5c:7f:77:4f:78:36:24:f3:15:98:b2:5a:bb: c0:ba:01:16:08:97:c8:af:19:24:f5:8a:1a:07:b4:2c:95:cc: 0f:a7:43:f5:84:2c:de:35:f2:0d:fb:ed:1e:3b:00:30:b2:ea: c6:ee:fa:27:89:7e:d0:d3:04:96:10:1a:01:ea:94:1f:cd:ec: 37:9c:9a:b5:94:67:f7:94:c3:08:3d:f1:e8:ff:2e:3e:88:c0: f6:a4:ca:7a:e9:b9:23:ed:30:af:b1:d3:57:24:4a:32:b5:ac: f3:9a:ef:e1:2c:19:d1:16:4b:f4:73:6c:8d:8c:84:d4:36:41: 3f:27:d9:88:dd:10:a8:bb:66:91:57:2e:77:64:5c:79:71:9a: b6:80:10:2a:db:eb:e3:37:4f:b3:ee:03:9a:31:14:56:59:46: 07:84:ce:4c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MjFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDI4NDE5QkE4REVBRTJB OTkzQkY2QkExOTcxNzYzMzAwNDJFRjEyRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJJ5bCf7N9hKl2B2uG8e5fJf+KEhpQDILOPXywLr4wEJ3CnwtI cUEro3T+Rg/rJBPj/QJ9uibCcFZxFj91UXi2mvqFbdOZhKXbQlitl91egbUfYq3z XZyhVHkU9D8UaYVfugQ/t3zK8613C+GzXPPqzZYgxonrE9N25KvlyyBBnbUNyxM4 efjkpc/S6paGJMvfZRLl3c+8oKQU5uZZVJvghGUmgRzwH9wNne+w1imJADjS6VMl u/MjubzbnZcbp29DRDKmgKAU4nij3BAd8owPw+nHTFg0fe/QD1TBKHDmH03SBv5k G1w5MIkOrz/GUkcnqoKUam0QeNjMcqKpuvn1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUKEGbqN6uKpk79roZcXYzAELvEtkwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvS0VHYnFONnVLcGs3 OXJvWmNYWXpBRUx2RXRrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTffDANBgkqhkiG9w0BAQsFAAOCAQEAQZzQAUFzJno8/e4nX2wIg4m4Zek8 t7BdzqykXYb3otSOX+UYcf3Ra2Of3rJieJ9YFJeMfKHqw0fMmXDN2euPn2X8l2AK WBkOk2+PdLcnWr9e7o83ApnRJjTW9yHPM2Zcf3dPeDYk8xWYslq7wLoBFgiXyK8Z JPWKGge0LJXMD6dD9YQs3jXyDfvtHjsAMLLqxu76J4l+0NMElhAaAeqUH83sN5ya tZRn95TDCD3x6P8uPojA9qTKeum5I+0wr7HTVyRKMrWs85rv4SwZ0RZL9HNsjYyE 1DZBPyfZiN0QqLtmkVcud2RceXGatoAQKtvr4zdPs+4DmjEUVllGB4TOTA== -----END CERTIFICATE-----Generated at Tue Nov 4 22:34:58 2025 by rpki-client