$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/hAmpa9qi1h-SOvnPRDJRQdc1RUY.roa File: hAmpa9qi1h-SOvnPRDJRQdc1RUY.roa (raw, json) Hash identifier: Xj70QOsU9/EVF9lc2KvvEegn0YWzOyEqWhdutlS6A78= Subject key identifier: 84:09:A9:6B:DA:A2:D6:1F:92:3A:F9:CF:44:32:51:41:D7:35:45:46 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 0CB6 Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/hAmpa9qi1h-SOvnPRDJRQdc1RUY.roa Signing time: Fri 27 Jun 2025 14:08:50 +0000 ROA not before: Fri 27 Jun 2025 14:08:50 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 398704 IP address blocks: 124.173.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 05:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Jun 27 14:08:50 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=8409A96BDAA2D61F923AF9CF44325141D7354546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:2b:c7:6e:9e:76:8e:70:46:bd:4e:52:c9: 5c:88:88:07:ef:89:ff:79:2c:e7:6b:da:ac:4f:5e: a8:3f:ea:a4:98:2c:68:e7:5a:13:f0:b3:11:85:1b: e9:07:7c:49:5c:f5:63:fb:7c:d0:ea:e5:cb:c4:83: 6b:14:a4:32:05:54:f6:2c:2d:10:e0:60:fb:d9:89: c7:8f:bc:a2:03:a8:14:41:d4:46:3e:42:f8:6a:0d: f6:d2:a6:57:c9:93:12:8c:2c:b1:a0:c5:f0:78:76: d8:e5:9f:2b:7a:0f:f5:81:04:5d:8f:8d:1c:85:eb: d0:c9:fd:f4:a5:dd:95:3e:c5:a1:ec:4d:9c:ba:81: 8d:54:94:c7:5e:b8:27:a0:3c:fd:57:20:ae:8e:a9: b4:08:c5:a0:99:2b:53:8a:1e:0b:19:19:2d:c0:52: f1:d4:49:7f:bf:05:fc:05:72:36:51:76:26:a6:e0: 81:15:46:39:1f:c1:38:2f:39:21:96:b1:84:90:4c: b6:91:0d:7c:84:46:f4:a6:4f:9c:75:ad:25:81:ad: d8:fa:64:21:02:fc:6d:47:93:06:a7:9a:dd:4e:f4: be:ef:b4:db:7c:a3:3f:d1:b1:e3:ab:97:da:a3:7f: 55:7c:eb:d4:2c:6d:58:d2:61:86:d4:d6:ec:f3:cd: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:09:A9:6B:DA:A2:D6:1F:92:3A:F9:CF:44:32:51:41:D7:35:45:46 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/hAmpa9qi1h-SOvnPRDJRQdc1RUY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.173.192.0/18 Signature Algorithm: sha256WithRSAEncryption b3:07:d6:59:1f:2d:62:49:18:91:ab:ca:3c:2d:d0:ca:16:df: ae:2e:13:f1:64:8b:98:69:91:40:63:40:f1:1a:e9:bb:a2:64: 04:cc:fa:55:04:85:bf:37:24:2c:14:94:bb:96:e5:ab:90:52: c5:43:5a:27:5a:7a:cf:80:30:70:19:b2:96:02:97:e5:70:d0: c6:7b:ed:1f:7e:c2:cc:fd:a7:e5:c0:77:c9:cc:9c:38:28:90: 72:84:8e:d7:65:3c:90:5e:db:be:83:f0:c0:95:5e:a9:3c:07: bb:98:f6:1f:ac:bc:23:a0:07:d5:83:f0:ea:db:aa:8a:00:a4: ed:f8:a8:33:29:30:5e:ef:be:2d:c8:ba:a6:21:a9:4a:0f:51: 6c:fb:e8:73:fb:96:71:d9:a5:73:57:bb:0f:d5:6a:a2:de:05: 8c:6f:b8:d5:33:25:d7:23:aa:fb:bd:6e:b5:db:20:e2:b1:da: a5:ed:72:13:b5:fb:50:57:dd:f5:31:b5:2a:a1:f8:1d:f5:24: 70:a3:89:ed:80:51:8c:c5:1d:71:ec:11:dd:27:25:b2:15:3f: ad:04:b0:8a:a8:a4:3e:ac:50:d6:fa:43:62:d9:c8:56:18:67: 8a:3e:8f:78:97:28:5a:d1:63:a5:f1:bb:53:a1:8e:28:93:09: 7b:e1:6e:51 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTA2Mjcx NDA4NTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDg0MDlBOTZCREFBMkQ2 MUY5MjNBRjlDRjQ0MzI1MTQxRDczNTQ1NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5PSvHbp52jnBGvU5SyVyIiAfvif95LOdr2qxPXqg/6qSYLGjn WhPwsxGFG+kHfElc9WP7fNDq5cvEg2sUpDIFVPYsLRDgYPvZicePvKIDqBRB1EY+ QvhqDfbSplfJkxKMLLGgxfB4dtjlnyt6D/WBBF2PjRyF69DJ/fSl3ZU+xaHsTZy6 gY1UlMdeuCegPP1XIK6OqbQIxaCZK1OKHgsZGS3AUvHUSX+/BfwFcjZRdiam4IEV RjkfwTgvOSGWsYSQTLaRDXyERvSmT5x1rSWBrdj6ZCEC/G1Hkwanmt1O9L7vtNt8 oz/RseOrl9qjf1V869QsbVjSYYbU1uzzzcIRAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUhAmpa9qi1h+SOvnPRDJRQdc1RUYwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvaEFtcGE5cWkxaC1TT3ZuUFJE SlJRZGMxUlVZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnyt wDANBgkqhkiG9w0BAQsFAAOCAQEAswfWWR8tYkkYkavKPC3Qyhbfri4T8WSLmGmR QGNA8Rrpu6JkBMz6VQSFvzckLBSUu5blq5BSxUNaJ1p6z4AwcBmylgKX5XDQxnvt H37CzP2n5cB3ycycOCiQcoSO12U8kF7bvoPwwJVeqTwHu5j2H6y8I6AH1YPw6tuq igCk7fioMykwXu++Lci6piGpSg9RbPvoc/uWcdmlc1e7D9Vqot4FjG+41TMl1yOq +71utdsg4rHape1yE7X7UFfd9TG1KqH4HfUkcKOJ7YBRjMUdcewR3SclshU/rQSw iqikPqxQ1vpDYtnIVhhnij6PeJcoWtFjpfG7U6GOKJMJe+FuUQ== -----END CERTIFICATE-----Generated at Fri Jul 4 01:37:22 2025 by rpki-client