$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/W0YFCcMcBQTh18XGJ9euo5qiTyg.roa File: W0YFCcMcBQTh18XGJ9euo5qiTyg.roa (raw, json) Hash identifier: ajB+MyVS/eZD1e4hkkdV5s0SOcMxygu/peA4v6QCt10= Subject key identifier: 5B:46:05:09:C3:1C:05:04:E1:D7:C5:C6:27:D7:AE:A3:9A:A2:4F:28 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1A65 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/W0YFCcMcBQTh18XGJ9euo5qiTyg.roa Signing time: Sat 13 Sep 2025 03:07:13 +0000 ROA not before: Sat 13 Sep 2025 03:07:13 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 2914 IP address blocks: 180.223.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 23:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6757 (0x1a65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Sep 13 03:07:13 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5B460509C31C0504E1D7C5C627D7AEA39AA24F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:49:2a:23:02:66:3b:27:5d:0c:4b:1e:14: b6:24:ab:ea:da:4d:75:22:c4:8f:1c:fc:2c:bb:d3: e0:27:a2:ed:08:f1:1b:4a:c0:8a:31:41:c5:5d:82: c5:4b:35:d4:38:a6:d1:60:aa:bb:1c:7e:35:a4:95: 47:d4:9c:c5:d2:51:bc:04:a6:3d:38:4f:32:6c:e7: e5:a8:c8:6c:32:69:a9:4f:77:b5:cc:b2:c6:e8:8b: 09:08:84:1a:cf:40:14:39:b2:d1:db:ff:ca:88:b4: 05:56:70:a9:34:53:22:f2:b7:1e:6a:08:a4:40:25: 11:c5:d5:72:4c:c2:0c:45:06:74:37:65:fa:e7:70: 02:0f:73:4e:83:26:cb:e9:a5:c9:2c:b8:23:35:04: f6:1a:eb:39:ed:ba:6a:7f:ef:99:d4:09:69:5f:63: 19:ee:c3:ee:2b:33:ff:d6:71:0e:36:7b:95:a2:f1: 8f:d0:0f:aa:79:ae:ee:e1:a4:47:3c:66:32:ab:5e: 29:8f:f7:13:8c:e2:ae:85:9a:aa:f6:6b:20:00:7d: 0b:7e:70:40:4b:32:55:35:2f:0f:66:8f:7e:71:88: 89:29:18:ff:d9:88:c3:62:8f:d4:b5:3e:97:c7:ce: f4:f6:4c:70:1e:27:2a:05:ab:6e:af:68:01:a7:15: 1f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:46:05:09:C3:1C:05:04:E1:D7:C5:C6:27:D7:AE:A3:9A:A2:4F:28 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/W0YFCcMcBQTh18XGJ9euo5qiTyg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.205.0/24 Signature Algorithm: sha256WithRSAEncryption cd:4c:dd:7e:84:bd:ce:1b:cf:7f:56:a9:b1:d6:05:7f:79:1d: c2:23:5c:64:74:a0:8f:38:bc:aa:53:11:60:6b:6a:6f:b3:92: ba:10:d4:1f:b0:6c:7e:f4:16:ec:34:41:d5:09:1c:66:a1:28: 0f:70:1b:b8:92:23:28:e2:84:83:5a:32:d4:01:03:5d:72:d2: 97:8d:6d:ca:8d:a0:d5:ee:1b:e9:e4:96:63:b3:fd:cd:49:bb: ec:79:bd:e9:77:c3:40:6f:24:89:d8:f0:57:aa:4c:dc:33:4b: e6:f8:86:0b:7c:b6:bf:77:3b:69:b6:31:00:80:d2:4f:02:cf: 15:b8:1d:7f:b0:c0:20:f4:47:50:47:f8:fe:14:25:a2:32:23: df:9b:9c:9d:4e:d5:85:83:9e:34:e4:8d:af:92:ee:4b:5f:9c: 23:7c:6e:42:fc:ef:8a:b9:2a:7b:e1:49:43:b8:51:c7:97:7f: 93:2a:cc:6f:b0:c1:7f:dc:ee:41:7e:19:be:97:87:b4:4b:3c: b2:5f:2b:96:53:1f:31:af:75:2a:a5:7f:d6:95:17:b4:2c:64: 45:59:8e:6e:cf:28:ab:18:f9:16:34:90:66:b7:ef:bf:0f:93: 52:24:56:a1:fd:0d:8b:5a:90:90:99:7d:55:99:e5:c0:d6:29: 58:3a:cd:48 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw MzA3MTNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDVCNDYwNTA5QzMxQzA1 MDRFMUQ3QzVDNjI3RDdBRUEzOUFBMjRGMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC87EkqIwJmOyddDEseFLYkq+raTXUixI8c/Cy70+Anou0I8RtK wIoxQcVdgsVLNdQ4ptFgqrscfjWklUfUnMXSUbwEpj04TzJs5+WoyGwyaalPd7XM ssboiwkIhBrPQBQ5stHb/8qItAVWcKk0UyLytx5qCKRAJRHF1XJMwgxFBnQ3Zfrn cAIPc06DJsvppcksuCM1BPYa6zntump/75nUCWlfYxnuw+4rM//WcQ42e5Wi8Y/Q D6p5ru7hpEc8ZjKrXimP9xOM4q6Fmqr2ayAAfQt+cEBLMlU1Lw9mj35xiIkpGP/Z iMNij9S1PpfHzvT2THAeJyoFq26vaAGnFR/vAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUW0YFCcMcBQTh18XGJ9euo5qiTygwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvVzBZRkNjTWNCUVRo MThYR0o5ZXVvNXFpVHlnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTfzTANBgkqhkiG9w0BAQsFAAOCAQEAzUzdfoS9zhvPf1apsdYFf3kdwiNc ZHSgjzi8qlMRYGtqb7OSuhDUH7BsfvQW7DRB1QkcZqEoD3AbuJIjKOKEg1oy1AED XXLSl41tyo2g1e4b6eSWY7P9zUm77Hm96XfDQG8kidjwV6pM3DNL5viGC3y2v3c7 abYxAIDSTwLPFbgdf7DAIPRHUEf4/hQlojIj35ucnU7VhYOeNOSNr5LuS1+cI3xu Qvzvirkqe+FJQ7hRx5d/kyrMb7DBf9zuQX4ZvpeHtEs8sl8rllMfMa91KqV/1pUX tCxkRVmObs8oqxj5FjSQZrfvvw+TUiRWof0Ni1qQkJl9VZnlwNYpWDrNSA== -----END CERTIFICATE-----Generated at Tue Nov 4 22:34:53 2025 by rpki-client