$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/HdpDtHutq2lwNoRi4qXNEq4PXJg.roa File: HdpDtHutq2lwNoRi4qXNEq4PXJg.roa (raw, json) Hash identifier: Qj3Yz+DQTfum+ojK4jzUyL+M1XFi0Qa2AChno2C37r0= Subject key identifier: 1D:DA:43:B4:7B:AD:AB:69:70:36:84:62:E2:A5:CD:12:AE:0F:5C:98 Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 2C Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/HdpDtHutq2lwNoRi4qXNEq4PXJg.roa Signing time: Fri 22 Aug 2025 06:27:17 +0000 ROA not before: Fri 22 Aug 2025 06:27:17 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 63582 IP address blocks: 45.120.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:27:17 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=1DDA43B47BADAB6970368462E2A5CD12AE0F5C98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:bd:3e:01:e0:ca:e6:a1:21:c8:2e:1a:5a: 74:3e:f0:48:0e:85:9c:ba:5c:ff:3b:9c:7e:36:d9: 09:45:50:d6:d0:23:a8:9b:de:e2:e4:e9:d7:00:84: 3c:b0:ce:aa:89:19:80:bc:31:40:5f:f3:18:c1:74: 1a:8c:dd:ed:94:48:e8:a8:61:33:f1:be:f0:5a:67: 3e:e0:ce:dc:81:5d:9e:2b:8b:a4:19:d4:0d:11:32: 86:4c:7d:c8:ea:3d:3a:6f:23:e4:64:f1:5f:ce:b4: 56:22:8f:8e:9d:4b:d5:68:ac:21:6b:0f:8b:91:52: 4e:4a:45:17:fb:e9:b6:c7:0a:f6:1e:42:ae:10:f7: 8a:b8:74:96:ab:69:87:31:bd:e0:d5:f0:5a:ab:22: 70:8c:08:a9:7d:46:d3:1d:2e:7d:48:67:30:ed:2e: e0:09:65:a4:3a:47:45:00:79:af:57:26:d0:47:32: 11:e6:c3:7f:da:cd:c3:ee:ed:ed:49:23:51:9e:ee: 9b:17:ff:e1:61:75:66:a3:fb:4d:2d:ef:11:2b:1a: 50:c5:f0:22:42:17:57:8f:af:fa:95:1c:af:26:7a: 75:91:c6:28:50:11:90:56:8e:f3:f8:47:31:27:55: d3:7e:3f:a8:cb:0e:04:16:b6:6e:19:86:67:71:41: 50:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DA:43:B4:7B:AD:AB:69:70:36:84:62:E2:A5:CD:12:AE:0F:5C:98 X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/HdpDtHutq2lwNoRi4qXNEq4PXJg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.120.242.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:8e:54:3c:f1:2b:e7:b1:9b:51:5a:19:47:78:31:11:c1:6d: 2c:9c:6c:38:78:b7:34:d9:e0:89:42:0f:dc:51:75:73:1a:97: a6:58:e4:22:18:98:38:c7:7a:93:ae:10:16:03:2d:7e:e2:18: 62:4e:df:5a:27:0d:a8:88:89:32:1e:38:23:60:e8:f4:a3:1e: 43:79:09:6a:b6:b9:9f:77:fd:9a:c0:c3:2b:65:d1:85:ab:0f: 09:d5:19:84:6a:cd:15:d1:f5:ca:a1:dc:b2:4f:b4:84:2b:cc: 4f:4c:b5:c0:33:33:51:ab:30:e4:3f:39:13:22:19:29:48:a4: fa:ec:aa:55:86:cc:05:f3:e9:d7:01:e6:7e:48:b2:10:c0:e8: fd:10:ca:5f:70:f8:20:58:56:99:07:84:bf:51:d8:e3:2f:21: c3:ea:ba:a8:e4:93:b8:1e:39:f7:82:15:89:2d:f7:4b:31:d7: 6c:8f:3f:f8:7c:57:2e:b2:2b:ed:23:35:1e:4c:59:91:64:76: f6:c3:36:99:87:1c:47:39:8c:d1:24:30:2a:34:71:f4:a9:93: 9b:a8:07:ff:0b:d4:44:a7:c5:13:c8:53:34:46:ed:8d:34:c4: 2f:7c:10:3a:36:ac:4d:57:34:03:8b:1d:b1:89:b6:fb:70:50: 27:db:4d:c3 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MjcxN1oXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoMUREQTQzQjQ3QkFEQUI2 OTcwMzY4NDYyRTJBNUNEMTJBRTBGNUM5ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKq0vT4B4MrmoSHILhpadD7wSA6FnLpc/zucfjbZCUVQ1tAjqJve 4uTp1wCEPLDOqokZgLwxQF/zGMF0Gozd7ZRI6KhhM/G+8FpnPuDO3IFdniuLpBnU DREyhkx9yOo9Om8j5GTxX860ViKPjp1L1WisIWsPi5FSTkpFF/vptscK9h5CrhD3 irh0lqtphzG94NXwWqsicIwIqX1G0x0ufUhnMO0u4AllpDpHRQB5r1cm0EcyEebD f9rNw+7t7UkjUZ7umxf/4WF1ZqP7TS3vESsaUMXwIkIXV4+v+pUcryZ6dZHGKFAR kFaO8/hHMSdV034/qMsOBBa2bhmGZ3FBUNkCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQd2kO0e62raXA2hGLipc0Srg9cmDAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9IZHBEdEh1dHEybHdO b1JpNHFYTkVxNFBYSmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALXjyMA0GCSqGSIb3DQEBCwUAA4IBAQAujlQ88SvnsZtRWhlHeDERwW0snGw4 eLc02eCJQg/cUXVzGpemWOQiGJg4x3qTrhAWAy1+4hhiTt9aJw2oiIkyHjgjYOj0 ox5DeQlqtrmfd/2awMMrZdGFqw8J1RmEas0V0fXKodyyT7SEK8xPTLXAMzNRqzDk PzkTIhkpSKT67KpVhswF8+nXAeZ+SLIQwOj9EMpfcPggWFaZB4S/UdjjLyHD6rqo 5JO4Hjn3ghWJLfdLMddsjz/4fFcusivtIzUeTFmRZHb2wzaZhxxHOYzRJDAqNHH0 qZObqAf/C9REp8UTyFM0Ru2NNMQvfBA6NqxNVzQDix2xibb7cFAn203D -----END CERTIFICATE-----Generated at Sun Aug 24 02:40:16 2025 by rpki-client