$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2578/HIkT_nEnsLxGeI-3zJUHhtNyWj8.roa File: HIkT_nEnsLxGeI-3zJUHhtNyWj8.roa (raw, json) Hash identifier: IhDC9QUQgRmJWF3Vdetq/G4pSKe6C+p+OntJsqXr45o= Subject key identifier: 1C:89:13:FE:71:27:B0:BC:46:78:8F:B7:CC:95:07:86:D3:72:5A:3F Certificate issuer: /CN=7CF44C06D5EA7DF0CBD4F68508F14E84DA08B752 Certificate serial: 17CF Authority key identifier: 7C:F4:4C:06:D5:EA:7D:F0:CB:D4:F6:85:08:F1:4E:84:DA:08:B7:52 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPRMBtXqffDL1PaFCPFOhNoIt1I.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/HIkT_nEnsLxGeI-3zJUHhtNyWj8.roa Signing time: Tue 05 Aug 2025 13:46:32 +0000 ROA not before: Tue 05 Aug 2025 13:46:32 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 140224 IP address blocks: 103.99.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/fPRMBtXqffDL1PaFCPFOhNoIt1I.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/fPRMBtXqffDL1PaFCPFOhNoIt1I.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPRMBtXqffDL1PaFCPFOhNoIt1I.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 06:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6095 (0x17cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CF44C06D5EA7DF0CBD4F68508F14E84DA08B752 Validity Not Before: Aug 5 13:46:32 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1C8913FE7127B0BC46788FB7CC950786D3725A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:63:f4:b1:64:4d:22:de:4e:4b:d7:9e:36: 9c:18:af:54:49:87:a8:2a:05:a6:79:13:15:04:e8: 7f:e1:99:96:3e:67:3b:3c:c5:34:c4:1a:8c:9d:81: 3e:1c:3a:27:ee:bb:cf:f0:db:83:4e:1d:94:62:f1: 96:11:76:be:b3:b4:94:d6:84:a4:33:f8:61:74:1c: 73:7d:76:d4:d9:eb:4e:98:e1:d6:4f:19:59:dd:30: b6:c5:52:45:56:6d:c4:c0:64:1b:c4:53:3b:80:09: 9a:e0:2f:f9:f0:97:c1:f0:5d:23:eb:11:86:cf:ff: 2f:84:25:0f:51:cc:01:72:f0:e7:7d:82:cf:a6:5f: 36:5d:46:f2:dc:df:3c:67:a9:1f:68:c7:6c:1c:93: 8c:99:1a:c1:ec:47:11:6e:41:f9:00:8e:79:be:0a: c6:7e:12:27:33:b7:38:c2:e2:f8:9c:50:d6:81:a1: 3f:f1:3d:46:7b:18:83:00:d0:fd:5b:bd:fc:a2:21: bd:89:29:a1:b4:a4:5a:3a:59:a1:bf:1a:27:40:7c: 7e:38:8d:01:94:a9:2c:d7:ce:43:74:08:22:54:c1: 22:73:73:d0:d3:2d:cf:bd:b2:11:ef:20:8a:ec:53: b9:9e:fa:a4:33:cf:9d:c8:cb:8d:b4:38:2a:46:34: 1d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:89:13:FE:71:27:B0:BC:46:78:8F:B7:CC:95:07:86:D3:72:5A:3F X509v3 Authority Key Identifier: keyid:7C:F4:4C:06:D5:EA:7D:F0:CB:D4:F6:85:08:F1:4E:84:DA:08:B7:52 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/fPRMBtXqffDL1PaFCPFOhNoIt1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPRMBtXqffDL1PaFCPFOhNoIt1I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/HIkT_nEnsLxGeI-3zJUHhtNyWj8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.99.78.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:42:14:52:d4:9f:a2:7d:ab:59:1d:31:95:a5:5c:58:f3:8e: 65:4b:f8:47:0f:7c:c0:c2:49:3d:e7:62:34:cf:42:7e:d5:16: 0b:ec:18:b1:a7:58:63:23:5d:4c:c0:91:05:ea:cc:6d:07:42: 71:07:69:1c:62:2d:87:cd:d8:c1:dc:99:ca:92:66:d3:d4:4a: b6:a2:f2:6b:84:e0:39:4d:de:30:82:86:c1:88:1e:ba:b4:71: 22:76:3c:a9:99:05:8c:11:46:b3:a5:96:46:c7:b9:49:b9:45: f8:54:95:33:d8:51:df:9e:0e:46:26:30:da:fe:41:17:20:e3: 5c:30:50:ac:1b:0e:7a:69:fb:52:bd:7e:91:52:a9:06:f6:4e: f5:e2:bd:04:52:f2:1d:82:3b:b2:fd:da:95:80:f0:bd:16:e6: 95:e0:22:3f:35:d8:e9:9d:3b:47:49:08:e9:8b:b9:9d:b0:62: f0:32:9f:69:5a:97:62:47:82:63:f5:6d:33:c6:fd:1c:79:85: c7:d1:00:f1:36:95:29:bc:87:07:15:6c:e9:6b:75:eb:9b:4a: 98:05:d3:a4:01:bd:63:0d:20:9d:e4:66:2d:74:07:72:17:13: 55:32:39:bf:ff:df:df:b7:59:f7:d7:3f:60:ef:db:df:d7:29: b2:82:d1:3b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICF88wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0NG NDRDMDZENUVBN0RGMENCRDRGNjg1MDhGMTRFODREQTA4Qjc1MjAeFw0yNTA4MDUx MzQ2MzJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFDODkxM0ZFNzEyN0Iw QkM0Njc4OEZCN0NDOTUwNzg2RDM3MjVBM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6mGP0sWRNIt5OS9eeNpwYr1RJh6gqBaZ5ExUE6H/hmZY+Zzs8 xTTEGoydgT4cOifuu8/w24NOHZRi8ZYRdr6ztJTWhKQz+GF0HHN9dtTZ606Y4dZP GVndMLbFUkVWbcTAZBvEUzuACZrgL/nwl8HwXSPrEYbP/y+EJQ9RzAFy8Od9gs+m XzZdRvLc3zxnqR9ox2wck4yZGsHsRxFuQfkAjnm+CsZ+EicztzjC4vicUNaBoT/x PUZ7GIMA0P1bvfyiIb2JKaG0pFo6WaG/GidAfH44jQGUqSzXzkN0CCJUwSJzc9DT Lc+9shHvIIrsU7me+qQzz53Iy420OCpGNB2zAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUHIkT/nEnsLxGeI+3zJUHhtNyWj8wHwYDVR0jBBgwFoAUfPRMBtXqffDL1PaF CPFOhNoIt1IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU3 OC9mUFJNQnRYcWZmREwxUGFGQ1BGT2hOb0l0MUkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZQUk1CdFhxZmZETDFQYUZDUEZPaE5vSXQxSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1NzgvSElrVF9uRW5zTHhH ZUktM3pKVUhodE55V2o4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdjTjANBgkqhkiG9w0BAQsFAAOCAQEAj0IUUtSfon2rWR0xlaVcWPOOZUv4 Rw98wMJJPediNM9CftUWC+wYsadYYyNdTMCRBerMbQdCcQdpHGIth83YwdyZypJm 09RKtqLya4TgOU3eMIKGwYgeurRxInY8qZkFjBFGs6WWRse5SblF+FSVM9hR354O RiYw2v5BFyDjXDBQrBsOemn7Ur1+kVKpBvZO9eK9BFLyHYI7sv3alYDwvRbmleAi PzXY6Z07R0kI6Yu5nbBi8DKfaVqXYkeCY/VtM8b9HHmFx9EA8TaVKbyHBxVs6Wt1 65tKmAXTpAG9Yw0gneRmLXQHchcTVTI5v//f37dZ99c/YO/b39cpsoLROw== -----END CERTIFICATE-----Generated at Sun Aug 24 04:06:12 2025 by rpki-client