$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/hpDRfZfLbmty0CpK9okCo-erNLg.roa File: hpDRfZfLbmty0CpK9okCo-erNLg.roa (raw, json) Hash identifier: A3GQyRKjDPG/OkNmlsS/2/RH9HbpUXi8SqknTsbjBX8= Subject key identifier: 86:90:D1:7D:97:CB:6E:6B:72:D0:2A:4A:F6:89:02:A3:E7:AB:34:B8 Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Certificate serial: 1752 Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/hpDRfZfLbmty0CpK9okCo-erNLg.roa Signing time: Sat 13 Sep 2025 03:03:32 +0000 ROA not before: Sat 13 Sep 2025 03:03:32 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 58593 IP address blocks: 163.228.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 03:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5970 (0x1752) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Validity Not Before: Sep 13 03:03:32 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8690D17D97CB6E6B72D02A4AF68902A3E7AB34B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:08:30:0c:d8:25:ba:13:f4:8a:38:bc:c4:36: 31:29:89:fe:de:d5:09:0f:ab:1f:b2:1b:ee:40:8d: 0f:79:27:07:9f:5f:b4:9d:55:6a:50:c0:02:06:53: 7a:6e:3c:78:58:cb:c4:7e:af:10:71:c7:1f:91:0e: e7:c2:96:4c:15:4f:19:e1:aa:49:be:02:d5:29:83: 22:8a:e3:ee:8b:ca:10:9e:f0:38:b6:3c:d0:98:06: 01:d9:01:74:35:ca:dc:c3:1a:b7:b5:09:44:1b:e1: 8c:ad:44:09:af:83:c0:50:0d:1e:05:c5:bf:ed:86: 07:d7:4c:e1:d6:44:d5:47:80:e2:9c:24:60:5a:60: 9a:37:c6:7e:2e:36:11:62:15:b5:28:d5:14:24:87: e8:08:7a:07:42:cd:b1:c7:fd:69:45:0e:41:56:df: 9f:87:65:0d:1e:1f:77:75:17:7b:b4:0f:41:4b:d4: e9:ef:25:80:b7:ba:8f:da:76:31:9c:3b:81:8a:7f: f7:9d:e7:b9:79:f6:23:eb:05:87:e8:de:e8:11:2f: 45:8c:bd:ac:24:5a:66:c8:66:8e:85:d5:2d:ce:2f: e2:98:f8:fa:47:c5:a2:1c:26:bc:71:32:ec:79:68: fa:16:c5:c0:5d:3c:70:19:86:a1:60:cb:56:9f:20: f7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:90:D1:7D:97:CB:6E:6B:72:D0:2A:4A:F6:89:02:A3:E7:AB:34:B8 X509v3 Authority Key Identifier: keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/hpDRfZfLbmty0CpK9okCo-erNLg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.228.0.0/16 Signature Algorithm: sha256WithRSAEncryption d6:a4:4f:d4:d7:bc:c5:22:1b:3f:25:f1:b6:8b:d3:d7:0b:2c: a0:17:94:d8:fa:8c:0b:86:7d:d5:d5:af:76:a7:6c:11:b0:28: c4:47:a9:f8:7c:73:24:d0:d4:a6:81:84:c8:55:cc:a0:6a:9b: de:52:80:19:8b:48:bc:ac:eb:0e:97:c0:a2:40:51:f7:20:0a: 65:5d:10:a1:09:d8:3a:59:c8:05:45:7e:f4:9b:ee:0e:87:b5: 4d:6a:ea:c0:b9:50:77:d9:30:77:89:d1:7a:ae:a6:fd:07:eb: b2:a9:b8:12:df:76:a3:2b:c7:6c:1c:b1:4d:3e:e8:85:d7:0a: aa:f8:94:25:d6:3e:c1:f2:32:6a:4e:30:ba:c7:f0:2e:09:0e: 6c:c6:6b:c8:48:78:03:e6:5f:b7:78:8e:88:8e:fd:09:71:68: be:6c:2c:90:18:4e:63:34:04:6e:c0:8d:14:97:fb:97:48:e2: 1d:56:41:58:d6:e5:9f:46:d3:93:8f:ff:2b:c8:fd:4a:d3:85: c5:75:a9:95:32:eb:8a:d1:13:fc:52:4b:e5:25:ca:04:c0:cd: 74:59:cb:17:2a:b2:52:a5:6b:55:03:d8:11:d5:e8:e9:ee:dd: ba:16:ba:cd:9b:dd:92:2a:8f:63:16:fc:33:4a:b2:dc:d0:30: 25:df:f5:f8 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICF1IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RF RjcxMTFERTk4QkQ3NTZEOTJCMzREMzk0REEyRDM5RUZGOUI4RTAeFw0yNTA5MTMw MzAzMzJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDg2OTBEMTdEOTdDQjZF NkI3MkQwMkE0QUY2ODkwMkEzRTdBQjM0QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfCDAM2CW6E/SKOLzENjEpif7e1QkPqx+yG+5AjQ95JwefX7Sd VWpQwAIGU3puPHhYy8R+rxBxxx+RDufClkwVTxnhqkm+AtUpgyKK4+6LyhCe8Di2 PNCYBgHZAXQ1ytzDGre1CUQb4YytRAmvg8BQDR4Fxb/thgfXTOHWRNVHgOKcJGBa YJo3xn4uNhFiFbUo1RQkh+gIegdCzbHH/WlFDkFW35+HZQ0eH3d1F3u0D0FL1Onv JYC3uo/adjGcO4GKf/ed57l59iPrBYfo3ugRL0WMvawkWmbIZo6F1S3OL+KY+PpH xaIcJrxxMux5aPoWxcBdPHAZhqFgy1afIPfTAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUhpDRfZfLbmty0CpK9okCo+erNLgwHwYDVR0jBBgwFoAUze9xEd6YvXVtkrNN OU2i057/m44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy MC96ZTl4RWQ2WXZYVnRrck5OT1UyaTA1N19tNDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3plOXhFZDZZdlhWdGtyTk5PVTJpMDU3X200NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvaHBEUmZaZkxibXR5 MENwSzlva0NvLWVyTkxnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAKPkMA0GCSqGSIb3DQEBCwUAA4IBAQDWpE/U17zFIhs/JfG2i9PXCyygF5TY +owLhn3V1a92p2wRsCjER6n4fHMk0NSmgYTIVcygapveUoAZi0i8rOsOl8CiQFH3 IAplXRChCdg6WcgFRX70m+4Oh7VNaurAuVB32TB3idF6rqb9B+uyqbgS33ajK8ds HLFNPuiF1wqq+JQl1j7B8jJqTjC6x/AuCQ5sxmvISHgD5l+3eI6Ijv0JcWi+bCyQ GE5jNARuwI0Ul/uXSOIdVkFY1uWfRtOTj/8ryP1K04XFdamVMuuK0RP8UkvlJcoE wM10WcsXKrJSpWtVA9gR1ejp7t26FrrNm92SKo9jFvwzSrLc0DAl3/X4 -----END CERTIFICATE-----Generated at Tue Oct 21 01:04:53 2025 by rpki-client