$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/f5fIapOl8HSouoTVr3VF8Sn4ha8.roa File: f5fIapOl8HSouoTVr3VF8Sn4ha8.roa (raw, json) Hash identifier: 9spUXWLTj/UHsWXpKWHltoa40WsxSoLhnBF3B6z5gXc= Subject key identifier: 7F:97:C8:6A:93:A5:F0:74:A8:BA:84:D5:AF:75:45:F1:29:F8:85:AF Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1864 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/f5fIapOl8HSouoTVr3VF8Sn4ha8.roa Signing time: Fri 06 Jun 2025 13:20:47 +0000 ROA not before: Fri 06 Jun 2025 13:20:47 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 398704 IP address blocks: 180.223.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6244 (0x1864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jun 6 13:20:47 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7F97C86A93A5F074A8BA84D5AF7545F129F885AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:25:c1:8e:d2:f9:53:4c:e8:4a:23:51:8a: e4:4e:0c:f3:da:b5:b6:9b:79:0f:2f:bf:fa:99:97: f3:1d:2c:0b:57:7c:38:d3:50:dd:2c:14:94:2b:18: 91:e3:cf:44:05:45:35:47:75:4f:41:02:96:d2:c1: ba:a6:6e:0a:ef:88:16:35:49:33:ae:66:d0:58:1d: 9d:cc:f4:6a:d0:ce:d7:e7:1e:a6:e1:72:57:8d:72: e3:34:fd:d9:3a:6c:e4:62:34:f2:54:0c:27:3e:0e: eb:f1:dc:1c:da:e1:c0:f0:5c:7c:46:95:28:45:2b: 80:6f:7d:e9:2a:74:d3:4e:a0:38:e6:88:68:f3:f5: 1a:11:3b:cb:28:a3:86:e5:6c:53:b8:85:4e:c3:8b: 49:92:a4:a8:05:ed:b7:74:6d:d8:37:48:a6:b3:03: 75:83:b2:a6:a6:bc:49:d9:a5:da:98:6a:f8:cb:97: 15:cc:da:86:ba:e1:43:18:f2:63:e7:26:68:b3:34: ac:b7:60:69:2b:0a:3e:65:0e:ab:80:c2:ab:4a:1f: 84:6c:18:5c:4f:1b:64:96:30:f1:03:a0:60:65:18: 71:e5:3f:e2:9a:57:26:78:fe:4a:0b:98:46:f8:3e: ae:91:bc:f4:cc:85:16:cb:06:f2:41:03:d7:e6:82: 50:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:97:C8:6A:93:A5:F0:74:A8:BA:84:D5:AF:75:45:F1:29:F8:85:AF X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/f5fIapOl8HSouoTVr3VF8Sn4ha8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.126.0/24 Signature Algorithm: sha256WithRSAEncryption 19:bb:98:5f:d2:83:90:f2:8c:37:45:35:b6:eb:79:88:04:e8: cd:92:9f:95:da:39:ad:54:5d:7c:af:ac:eb:e0:91:67:63:43: 60:06:1d:4b:3b:23:f0:ab:59:12:9b:8b:08:3d:d9:66:68:24: 5e:80:18:08:c8:36:a1:88:8c:74:c3:8a:0c:18:92:54:6d:df: 03:7d:3e:bc:0c:64:6d:66:df:07:5b:b5:34:b5:22:d5:67:d8: 5a:7a:62:31:f3:8a:a7:31:3a:07:cd:14:8f:94:54:6e:ee:96: fa:42:65:28:4d:11:ae:b1:fa:39:4f:4a:e1:fb:c6:1f:14:f2: 41:e7:f1:94:c5:a2:1e:a3:4d:f1:54:a6:32:b0:90:47:9f:f0: 9d:95:00:f9:39:85:32:82:43:f5:96:f4:a8:d7:2e:d9:ed:58: 16:d0:ba:ef:9b:f8:0f:31:80:86:29:58:e4:36:1a:7a:ca:12: 93:ca:2d:65:1d:d4:62:d8:40:61:d7:fb:b9:96:77:61:5a:2c: 9d:65:fa:6f:a3:b8:84:66:f4:ad:04:52:00:9b:cb:8a:15:41: f3:70:1f:81:e3:a7:6b:48:d3:cc:0e:5b:b5:8b:66:02:6a:84: 4c:a5:9d:c3:b1:1e:33:60:ab:c1:f4:29:4e:df:e8:65:30:64: 77:d8:40:66 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGGQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA2MDYx MzIwNDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDdGOTdDODZBOTNBNUYw NzRBOEJBODRENUFGNzU0NUYxMjlGODg1QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtlyXBjtL5U0zoSiNRiuRODPPatbabeQ8vv/qZl/MdLAtXfDjT UN0sFJQrGJHjz0QFRTVHdU9BApbSwbqmbgrviBY1STOuZtBYHZ3M9GrQztfnHqbh cleNcuM0/dk6bORiNPJUDCc+Duvx3Bza4cDwXHxGlShFK4BvfekqdNNOoDjmiGjz 9RoRO8soo4blbFO4hU7Di0mSpKgF7bd0bdg3SKazA3WDsqamvEnZpdqYavjLlxXM 2oa64UMY8mPnJmizNKy3YGkrCj5lDquAwqtKH4RsGFxPG2SWMPEDoGBlGHHlP+Ka VyZ4/koLmEb4Pq6RvPTMhRbLBvJBA9fmglADAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUf5fIapOl8HSouoTVr3VF8Sn4ha8wHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvZjVmSWFwT2w4SFNv dW9UVnIzVkY4U240aGE4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTffjANBgkqhkiG9w0BAQsFAAOCAQEAGbuYX9KDkPKMN0U1tut5iATozZKf ldo5rVRdfK+s6+CRZ2NDYAYdSzsj8KtZEpuLCD3ZZmgkXoAYCMg2oYiMdMOKDBiS VG3fA30+vAxkbWbfB1u1NLUi1WfYWnpiMfOKpzE6B80Uj5RUbu6W+kJlKE0RrrH6 OU9K4fvGHxTyQefxlMWiHqNN8VSmMrCQR5/wnZUA+TmFMoJD9Zb0qNcu2e1YFtC6 75v4DzGAhilY5DYaesoSk8otZR3UYthAYdf7uZZ3YVosnWX6b6O4hGb0rQRSAJvL ihVB83AfgeOna0jTzA5btYtmAmqETKWdw7EeM2CrwfQpTt/oZTBkd9hAZg== -----END CERTIFICATE-----Generated at Sat Jun 21 20:57:35 2025 by rpki-client