$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/VFHInp7_twFvFnQy1a8soFkyKXM.roa File: VFHInp7_twFvFnQy1a8soFkyKXM.roa (raw, json) Hash identifier: aUK7KH9UvznbXaAAdwG5Qi6D6WAJdpjzyXZ+9rQpazc= Subject key identifier: 54:51:C8:9E:9E:FF:B7:01:6F:16:74:32:D5:AF:2C:A0:59:32:29:73 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A8D Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/VFHInp7_twFvFnQy1a8soFkyKXM.roa Signing time: Sat 13 Sep 2025 03:07:22 +0000 ROA not before: Sat 13 Sep 2025 03:07:22 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 2914 IP address blocks: 180.223.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 23:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6797 (0x1a8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:22 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5451C89E9EFFB7016F167432D5AF2CA059322973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:d8:be:77:3d:50:86:36:25:2a:f6:f5:fc: 27:41:f7:67:85:29:b7:e6:a4:ac:af:2c:c2:2f:bf: 4b:20:37:6a:f4:6c:60:80:0d:35:da:28:5c:63:38: 10:46:26:f2:71:ba:ee:32:ef:1b:2d:92:c2:32:cf: f4:fe:0c:82:6e:a2:e6:8f:56:d8:8c:97:e0:81:25: 3e:0f:20:e1:fd:32:f8:0c:14:9a:a5:78:e7:a7:a4: a4:33:ad:79:54:b6:40:33:b2:a9:d0:fe:29:30:8e: f0:1d:18:86:8b:d9:ba:37:6d:14:e1:b6:ed:7b:6d: 2e:27:e1:93:e5:fb:f5:94:6f:7c:21:1f:a9:0e:02: ce:2d:b3:cd:3d:b9:d4:dd:5a:37:9c:b8:e6:b7:bb: ff:c5:f6:f6:23:81:08:51:96:41:7a:99:2e:fb:dc: 49:0e:3e:45:15:10:04:d2:eb:16:27:76:04:26:40: 8a:34:84:66:2e:c0:1f:07:03:82:fd:6d:6d:88:da: 22:47:04:f2:dd:5a:43:65:aa:1f:dd:d6:8d:fb:7e: 4e:a4:f5:03:59:56:fa:95:cf:30:f0:43:08:a9:e7: 02:b8:d7:98:2c:f3:45:6f:a5:5a:8a:e8:f8:1a:b5: fb:d3:43:ef:05:ef:15:40:0f:59:da:97:a1:84:34: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:51:C8:9E:9E:FF:B7:01:6F:16:74:32:D5:AF:2C:A0:59:32:29:73 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/VFHInp7_twFvFnQy1a8soFkyKXM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.192.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:c3:ad:2e:d2:38:2a:7d:c0:59:d9:d5:78:83:3e:70:f9:90: 8f:87:6a:bc:95:57:29:70:b0:6c:4e:f2:4d:b8:05:d4:9e:ba: 1b:44:8b:77:dc:3c:d5:99:af:bd:b5:53:5f:de:84:2a:66:ec: ea:8f:68:4d:33:99:d8:5d:7c:89:ad:87:18:59:d9:a7:0c:4f: 9a:4e:b0:3c:73:7d:90:59:e1:56:a1:7c:9e:c0:e8:02:6a:0b: ab:d7:72:b1:73:1c:dd:26:54:0d:2d:8c:8c:ca:f5:91:52:ad: 5d:8a:28:55:38:28:9a:35:a6:3f:ac:60:2b:78:82:87:b5:57: f5:ef:a7:6f:c2:3a:6b:35:8d:86:e6:46:63:7f:3a:f3:78:4b: 9e:3a:20:83:dc:87:64:5b:3c:e0:11:f0:66:0d:af:5e:63:e1: cc:00:f2:23:27:d1:88:41:45:d8:2a:1c:09:a9:bc:cf:28:ca: 71:aa:e9:20:6e:ea:a6:3e:41:f8:e2:3f:d3:eb:e0:0a:22:00: d1:5e:97:9a:c0:e7:fe:2c:af:43:ef:b8:79:b9:bb:42:52:c1: 87:69:ce:3c:cc:a7:cb:51:c9:61:c4:b3:bc:bb:b1:36:66:57: 3c:fe:d6:89:54:8a:eb:9a:85:2f:1a:63:51:f1:14:69:d1:ad: 3e:f3:1b:02 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGo0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MjJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDU0NTFDODlFOUVGRkI3 MDE2RjE2NzQzMkQ1QUYyQ0EwNTkzMjI5NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA19i+dz1QhjYlKvb1/CdB92eFKbfmpKyvLMIvv0sgN2r0bGCA DTXaKFxjOBBGJvJxuu4y7xstksIyz/T+DIJuouaPVtiMl+CBJT4PIOH9MvgMFJql eOenpKQzrXlUtkAzsqnQ/ikwjvAdGIaL2bo3bRThtu17bS4n4ZPl+/WUb3whH6kO As4ts809udTdWjecuOa3u//F9vYjgQhRlkF6mS773EkOPkUVEATS6xYndgQmQIo0 hGYuwB8HA4L9bW2I2iJHBPLdWkNlqh/d1o37fk6k9QNZVvqVzzDwQwip5wK415gs 80VvpVqK6PgatfvTQ+8F7xVAD1nal6GENESXAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUVFHInp7/twFvFnQy1a8soFkyKXMwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvVkZISW5wN190d0Z2 Rm5ReTFhOHNvRmt5S1hNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTfwDANBgkqhkiG9w0BAQsFAAOCAQEAesOtLtI4Kn3AWdnVeIM+cPmQj4dq vJVXKXCwbE7yTbgF1J66G0SLd9w81ZmvvbVTX96EKmbs6o9oTTOZ2F18ia2HGFnZ pwxPmk6wPHN9kFnhVqF8nsDoAmoLq9dysXMc3SZUDS2MjMr1kVKtXYooVTgomjWm P6xgK3iCh7VX9e+nb8I6azWNhuZGY38683hLnjogg9yHZFs84BHwZg2vXmPhzADy IyfRiEFF2CocCam8zyjKcarpIG7qpj5B+OI/0+vgCiIA0V6XmsDn/iyvQ++4ebm7 QlLBh2nOPMyny1HJYcSzvLuxNmZXPP7WiVSK65qFLxpjUfEUadGtPvMbAg== -----END CERTIFICATE-----Generated at Tue Nov 4 22:47:12 2025 by rpki-client