$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/HQzxbmrAY4KPd5avWdlalNydyPk.roa File: HQzxbmrAY4KPd5avWdlalNydyPk.roa (raw, json) Hash identifier: NO28EEp4JMf31j1oqlJkGCIwW7N65hmVHJ93zkX+7Z0= Subject key identifier: 1D:0C:F1:6E:6A:C0:63:82:8F:77:96:AF:59:D9:5A:94:DC:9D:C8:F9 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E38 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/HQzxbmrAY4KPd5avWdlalNydyPk.roa Signing time: Sat 13 Sep 2025 03:04:56 +0000 ROA not before: Sat 13 Sep 2025 03:04:56 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 00:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7736 (0x1e38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:56 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1D0CF16E6AC063828F7796AF59D95A94DC9DC8F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:4f:c6:3e:37:f7:c7:cd:09:4a:03:6a:6e: 8b:fd:25:b5:e7:74:fc:2f:76:e7:f6:3a:cd:3d:ee: d5:4f:62:69:29:9d:e9:b6:75:47:e9:be:1d:30:28: f5:a7:79:dd:15:db:67:6c:88:19:c6:91:d1:a1:8f: a3:6f:37:07:0c:47:02:1d:5c:91:77:d5:54:93:83: 0a:d5:cc:50:e0:3a:a5:0a:a2:16:c1:73:bd:4a:cf: 6e:5b:13:94:e3:99:0f:89:a8:46:67:b4:e2:de:70: 82:99:c0:f4:de:1c:31:ac:3d:77:f4:08:a5:0c:ac: a5:57:1b:2b:f2:cd:b5:5e:31:a1:ce:81:91:4d:42: 5f:83:a8:d4:7c:7c:ba:85:09:73:6c:af:9b:7d:79: 4d:e7:42:1f:a4:fb:6c:cc:14:2e:1b:93:f0:bd:7f: 88:9d:fe:40:18:d2:a5:5e:10:21:03:2f:c6:df:a1: 0c:bd:a7:bf:b0:6c:e3:08:c2:b3:af:50:29:7f:7c: f6:79:a5:5c:05:ce:0d:b5:53:d8:73:34:c9:2d:a4: 80:2e:63:08:49:2b:24:4a:23:61:32:5c:c8:be:3d: 67:bd:49:91:c6:05:fb:22:92:8c:53:13:95:05:be: 1d:ae:0c:48:99:54:f6:b6:e1:6b:34:47:85:b0:36: 0a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0C:F1:6E:6A:C0:63:82:8F:77:96:AF:59:D9:5A:94:DC:9D:C8:F9 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/HQzxbmrAY4KPd5avWdlalNydyPk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.24.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:ae:9a:8a:09:6c:cb:44:7b:52:86:ca:30:9a:50:cb:16:9a: f4:79:4e:f5:1c:38:73:94:60:5f:3c:a6:bb:c3:fc:02:62:69: 2e:78:52:c4:89:f0:0a:02:ad:ce:28:9a:35:9a:8e:19:8d:ab: 8b:12:68:ba:8d:ec:1d:32:bb:ea:61:9d:d0:dd:25:34:c8:95: de:5c:0d:f9:e7:05:9b:3d:6e:d9:d9:f9:ca:a9:d5:fa:1b:41: cf:2f:29:d0:b5:3f:0e:b8:0a:3e:0f:7d:d4:87:6d:83:fe:bf: eb:1d:50:98:2a:c8:b2:7b:f7:00:2c:70:9d:06:d1:a3:3c:63: 9d:16:29:fb:4d:2e:a5:ae:ef:b4:87:94:0e:de:6a:78:16:bb: 35:42:3b:b0:3d:1d:07:48:70:03:9c:a4:de:ba:c1:c0:70:a0: ef:dd:eb:57:43:e4:6c:e1:1c:30:55:11:a4:22:9f:68:21:64: 32:81:72:cc:6d:0d:ac:f8:a1:c1:3b:7e:23:7d:09:17:8e:06: c1:76:0e:dd:bc:ed:69:25:ad:71:de:7e:3d:66:65:17:bf:69: 12:d6:74:ed:77:c4:fd:94:79:12:09:bf:6e:f5:84:d5:73:f0: 42:d4:7d:6a:d9:e6:df:98:26:a2:9d:0e:93:ab:d4:7c:38:d0: bc:a3:96:4a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHjgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFEMENGMTZFNkFDMDYz ODI4Rjc3OTZBRjU5RDk1QTk0REM5REM4RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDISU/GPjf3x80JSgNqbov9JbXndPwvduf2Os097tVPYmkpnem2 dUfpvh0wKPWned0V22dsiBnGkdGhj6NvNwcMRwIdXJF31VSTgwrVzFDgOqUKohbB c71Kz25bE5TjmQ+JqEZntOLecIKZwPTeHDGsPXf0CKUMrKVXGyvyzbVeMaHOgZFN Ql+DqNR8fLqFCXNsr5t9eU3nQh+k+2zMFC4bk/C9f4id/kAY0qVeECEDL8bfoQy9 p7+wbOMIwrOvUCl/fPZ5pVwFzg21U9hzNMktpIAuYwhJKyRKI2EyXMi+PWe9SZHG BfsikoxTE5UFvh2uDEiZVPa24Ws0R4WwNgqRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUHQzxbmrAY4KPd5avWdlalNydyPkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0hRenhibXJBWTRLUGQ1 YXZXZGxhbE55ZHlQay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RgwDQYJKoZIhvcNAQELBQADggEBAJyumooJbMtEe1KGyjCaUMsWmvR5TvUc OHOUYF88prvD/AJiaS54UsSJ8AoCrc4omjWajhmNq4sSaLqN7B0yu+phndDdJTTI ld5cDfnnBZs9btnZ+cqp1fobQc8vKdC1Pw64Cj4PfdSHbYP+v+sdUJgqyLJ79wAs cJ0G0aM8Y50WKftNLqWu77SHlA7eangWuzVCO7A9HQdIcAOcpN66wcBwoO/d61dD 5GzhHDBVEaQin2ghZDKBcsxtDaz4ocE7fiN9CReOBsF2Dt287WklrXHefj1mZRe/ aRLWdO13xP2UeRIJv271hNVz8ELUfWrZ5t+YJqKdDpOr1Hw40Lyjlko= -----END CERTIFICATE-----Generated at Mon Oct 20 23:27:22 2025 by rpki-client