$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/WDqTa2XH7kRGKr_1RSgjBFkJ1ZA.roa File: WDqTa2XH7kRGKr_1RSgjBFkJ1ZA.roa (raw, json) Hash identifier: AjpMVnfiUUUa2ojeohCXihzdTUlvs3kGVAB+3Et9XNs= Subject key identifier: 58:3A:93:6B:65:C7:EE:44:46:2A:BF:F5:45:28:23:04:59:09:D5:90 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1863 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/WDqTa2XH7kRGKr_1RSgjBFkJ1ZA.roa Signing time: Fri 06 Jun 2025 13:20:46 +0000 ROA not before: Fri 06 Jun 2025 13:20:46 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 398704 IP address blocks: 180.223.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6243 (0x1863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jun 6 13:20:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=583A936B65C7EE44462ABFF5452823045909D590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:89:68:e0:45:e5:a5:aa:bc:75:d1:03:f1:d1: 5a:e0:49:e6:3f:89:ca:ac:4f:fc:44:50:97:be:d3: 29:9a:2d:39:7c:43:67:9f:a2:e4:5e:65:bf:0f:6f: f8:bc:c4:6d:73:e5:a8:ce:29:9d:2b:0f:bf:c3:bf: 16:ff:48:0a:de:9c:dc:a2:e1:0e:d5:19:2e:ad:39: 1c:73:c3:ef:4d:85:47:56:24:d3:f8:08:05:2f:77: 98:db:43:dd:9a:8d:03:b6:d9:19:cb:dc:8d:ab:cb: 94:a8:8a:7e:eb:ce:c7:7a:ee:1e:74:e7:29:58:1b: f3:61:47:a6:a7:6a:e8:4b:92:c6:49:d1:88:4b:47: 7a:e9:cc:a9:b3:b6:8a:5f:c5:a9:f2:c7:ab:ac:88: b2:bb:13:14:09:09:63:85:e1:da:df:34:67:7f:3a: bf:18:79:6b:77:77:f4:2b:08:87:46:5f:35:03:84: 5a:59:a0:e2:22:85:5a:09:0b:7f:1d:6b:a3:b7:9c: b4:11:a4:14:e2:87:09:02:01:4e:cf:70:bf:43:e7: cc:48:84:f3:bd:05:24:41:0e:fb:f3:b9:c0:27:37: 9a:79:b6:61:3a:c6:17:5d:b5:cc:e4:0b:71:bd:c2: 10:f3:fc:e8:b9:35:34:7c:f5:f5:2c:89:8c:2b:5e: f2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3A:93:6B:65:C7:EE:44:46:2A:BF:F5:45:28:23:04:59:09:D5:90 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/WDqTa2XH7kRGKr_1RSgjBFkJ1ZA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.125.0/24 Signature Algorithm: sha256WithRSAEncryption 45:c9:16:e9:38:ef:1b:f6:37:c8:43:c7:50:29:13:61:14:82: 3e:2e:5e:61:0b:04:dc:b0:3a:9b:e7:2f:a5:e0:1b:80:65:e2: 7c:84:d6:89:df:e3:2b:f9:39:8a:22:8b:4a:dc:c8:17:ba:43: 4d:1d:46:f5:a0:6a:86:ac:13:92:02:43:1a:68:16:c4:36:25: 69:74:4e:c1:80:f2:12:13:49:e3:88:03:e1:5d:d2:6a:f6:71: 0c:b3:80:e0:9f:b3:4c:3d:95:68:8d:69:ae:3d:6d:f7:6b:a7: b2:5e:bf:58:be:8b:56:0b:f1:c7:e7:14:87:55:3a:37:8f:d9: e9:9b:11:53:4b:fd:e0:53:fb:4d:4a:9f:7f:c1:16:52:d3:30: 82:47:e7:16:11:fa:d0:42:46:35:f5:8a:e9:98:2b:a3:57:d3: 51:db:69:2a:f5:f3:a9:f9:5f:7e:b9:14:17:f6:e6:d5:1d:fe: 29:77:6a:16:61:0c:95:79:42:21:49:f4:4a:39:77:95:b6:dd: 92:4d:20:4d:8c:d2:2a:be:5c:28:c9:9b:aa:59:81:85:d9:8a: a7:07:f1:8d:a4:54:b3:64:a4:e5:ea:ad:11:d8:5b:7d:cb:91: 0c:53:11:94:58:f2:e4:39:96:31:08:c5:26:11:5a:a3:69:8e: 0b:fc:4b:4f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGGMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA2MDYx MzIwNDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDU4M0E5MzZCNjVDN0VF NDQ0NjJBQkZGNTQ1MjgyMzA0NTkwOUQ1OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0iWjgReWlqrx10QPx0VrgSeY/icqsT/xEUJe+0ymaLTl8Q2ef ouReZb8Pb/i8xG1z5ajOKZ0rD7/Dvxb/SArenNyi4Q7VGS6tORxzw+9NhUdWJNP4 CAUvd5jbQ92ajQO22RnL3I2ry5Soin7rzsd67h505ylYG/NhR6anauhLksZJ0YhL R3rpzKmztopfxanyx6usiLK7ExQJCWOF4drfNGd/Or8YeWt3d/QrCIdGXzUDhFpZ oOIihVoJC38da6O3nLQRpBTihwkCAU7PcL9D58xIhPO9BSRBDvvzucAnN5p5tmE6 xhddtczkC3G9whDz/Oi5NTR89fUsiYwrXvJNAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUWDqTa2XH7kRGKr/1RSgjBFkJ1ZAwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvV0RxVGEyWEg3a1JH S3JfMVJTZ2pCRmtKMVpBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTffTANBgkqhkiG9w0BAQsFAAOCAQEARckW6TjvG/Y3yEPHUCkTYRSCPi5e YQsE3LA6m+cvpeAbgGXifITWid/jK/k5iiKLStzIF7pDTR1G9aBqhqwTkgJDGmgW xDYlaXROwYDyEhNJ44gD4V3SavZxDLOA4J+zTD2VaI1prj1t92unsl6/WL6LVgvx x+cUh1U6N4/Z6ZsRU0v94FP7TUqff8EWUtMwgkfnFhH60EJGNfWK6Zgro1fTUdtp KvXzqflffrkUF/bm1R3+KXdqFmEMlXlCIUn0Sjl3lbbdkk0gTYzSKr5cKMmbqlmB hdmKpwfxjaRUs2Sk5eqtEdhbfcuRDFMRlFjy5DmWMQjFJhFao2mOC/xLTw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:06:04 2025 by rpki-client