$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/715/HfBEtTqWTSkAtipWavXVR-y9-jo.roa File: HfBEtTqWTSkAtipWavXVR-y9-jo.roa (raw, json) Hash identifier: 3hFDbCdIfL+OLtSS0OXYLw7zBn+k/fXqDRXMxteGY5E= Subject key identifier: 1D:F0:44:B5:3A:96:4D:29:00:B6:2A:56:6A:F5:D5:47:EC:BD:FA:3A Certificate issuer: /CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3 Certificate serial: 33 Authority key identifier: 7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/HfBEtTqWTSkAtipWavXVR-y9-jo.roa Signing time: Thu 22 May 2025 02:51:21 +0000 ROA not before: Thu 22 May 2025 02:51:21 +0000 ROA not after: Tue 12 May 2026 12:19:28 +0000 asID: 131526 IP address blocks: 103.227.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 22:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3 Validity Not Before: May 22 02:51:21 2025 GMT Not After : May 12 12:19:28 2026 GMT Subject: CN=1DF044B53A964D2900B62A566AF5D547ECBDFA3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:52:e3:f0:07:79:c3:65:ba:c2:32:3f:12:16: 67:ab:13:48:ba:11:0f:b2:fd:30:4b:8d:76:15:23: 68:2b:ca:e1:1c:00:89:29:c3:34:fd:d7:6b:8e:63: 81:d8:c5:74:79:fb:53:ab:84:8f:d3:bd:9d:2b:fb: 76:ff:af:e2:b8:0c:9a:6e:8b:4d:54:76:8b:fa:b6: 97:d8:e4:fb:df:63:9e:22:02:ad:3e:49:f9:09:38: 8d:fa:e5:8e:7f:0e:0e:16:44:7a:64:b6:49:40:6e: b9:3f:be:c0:73:4e:07:5d:6b:24:f2:06:0b:74:19: c1:ed:f9:a4:b4:84:be:98:be:09:6d:05:42:07:5c: af:e8:37:4b:fc:24:8d:51:be:97:98:b7:8e:07:1f: 41:2c:44:f6:b3:38:0c:dc:36:74:8a:53:60:0d:ff: 64:cd:e4:b9:b8:f7:74:b3:50:1b:58:b8:d5:c0:e5: e7:13:a5:bf:1f:01:c7:0c:03:81:3c:6a:3c:80:4b: 09:43:cb:8e:3c:6e:6b:71:62:14:d9:1e:08:1e:99: 95:e6:b6:88:85:32:5b:1e:82:9e:2a:47:96:a4:bd: b1:8c:ad:a1:67:17:6a:14:3b:86:92:87:0f:96:92: e5:4a:92:64:ba:84:94:a4:a8:29:f0:8d:c4:2e:38: 71:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F0:44:B5:3A:96:4D:29:00:B6:2A:56:6A:F5:D5:47:EC:BD:FA:3A X509v3 Authority Key Identifier: keyid:7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/HfBEtTqWTSkAtipWavXVR-y9-jo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.227.228.0/22 Signature Algorithm: sha256WithRSAEncryption 67:5c:3f:d3:86:63:41:30:77:4f:8e:fc:fa:e7:40:57:24:d2: 73:b9:c6:96:1f:96:78:0c:2b:2c:b8:97:a3:23:f1:c1:9f:52: c0:bb:1d:d8:3b:bf:22:95:d4:80:12:f9:e1:12:f6:f5:14:10: 06:36:f2:53:54:32:11:55:ed:ba:26:a4:1f:e1:4c:de:06:63: b3:e1:62:1f:ed:f3:26:b5:83:10:1e:3c:73:79:d4:c4:c1:3a: ce:b8:6d:09:5c:be:b9:3d:9a:f7:e3:f2:7f:32:28:84:a1:b6: ae:f9:59:67:1b:65:37:26:dc:28:58:d8:0e:10:e0:12:3e:e8: c8:ce:22:ac:7b:71:cb:0f:11:87:cc:8a:bc:42:6b:79:44:b3: 0d:99:d5:77:17:55:1d:e2:5c:e1:fd:f4:0f:bf:da:d4:62:12: 84:a1:bc:63:d0:78:7a:27:5a:2a:fc:32:8e:73:d2:31:cf:2a: e5:67:ef:f1:e7:80:4a:3b:24:2b:ea:22:07:da:70:dd:dd:6e: fb:e9:55:dd:0f:d3:f0:f0:b1:78:87:2e:bc:46:35:31:b4:18: 68:61:61:ad:46:d0:d3:7f:6e:d5:04:2b:ef:b6:33:4f:2d:66: 51:bb:41:9e:90:f7:0d:7f:9d:c2:ed:54:41:3d:ae:a7:da:ad: 14:88:3f:6b -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QTE0 MzY4QTE3MDREREUyQjAyOEQyNkQ1NEQ4M0JEN0M4MzQ3Q0UzMB4XDTI1MDUyMjAy NTEyMVoXDTI2MDUxMjEyMTkyOFowMzExMC8GA1UEAxMoMURGMDQ0QjUzQTk2NEQy OTAwQjYyQTU2NkFGNUQ1NDdFQ0JERkEzQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMpS4/AHecNlusIyPxIWZ6sTSLoRD7L9MEuNdhUjaCvK4RwAiSnD NP3Xa45jgdjFdHn7U6uEj9O9nSv7dv+v4rgMmm6LTVR2i/q2l9jk+99jniICrT5J +Qk4jfrljn8ODhZEemS2SUBuuT++wHNOB11rJPIGC3QZwe35pLSEvpi+CW0FQgdc r+g3S/wkjVG+l5i3jgcfQSxE9rM4DNw2dIpTYA3/ZM3kubj3dLNQG1i41cDl5xOl vx8BxwwDgTxqPIBLCUPLjjxua3FiFNkeCB6Zlea2iIUyWx6CnipHlqS9sYytoWcX ahQ7hpKHD5aS5UqSZLqElKSoKfCNxC44cfUCAwEAAaOCAfEwggHtMB0GA1UdDgQW BBQd8ES1OpZNKQC2KlZq9dVH7L36OjAfBgNVHSMEGDAWgBR6FDaKFwTd4rAo0m1U 2DvXyDR84zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83MTUv ZWhRMmloY0UzZUt3S05KdFZOZzcxOGcwZk9NLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9laFEyaWhjRTNlS3dLTkp0Vk5nNzE4ZzBmT00uY2VyMA4GA1UdDwEB/wQE AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83MTUvSGZCRXRUcVdUU2tBdGlw V2F2WFZSLXk5LWpvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj LmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Amfj5DANBgkqhkiG9w0BAQsFAAOCAQEAZ1w/04ZjQTB3T478+udAVyTSc7nGlh+W eAwrLLiXoyPxwZ9SwLsd2Du/IpXUgBL54RL29RQQBjbyU1QyEVXtuiakH+FM3gZj s+FiH+3zJrWDEB48c3nUxME6zrhtCVy+uT2a9+PyfzIohKG2rvlZZxtlNybcKFjY DhDgEj7oyM4irHtxyw8Rh8yKvEJreUSzDZnVdxdVHeJc4f30D7/a1GIShKG8Y9B4 eidaKvwyjnPSMc8q5Wfv8eeASjskK+oiB9pw3d1u++lV3Q/T8PCxeIcuvEY1MbQY aGFhrUbQ039u1QQr77YzTy1mUbtBnpD3DX+dwu1UQT2up9qtFIg/aw== -----END CERTIFICATE-----Generated at Fri Jul 4 18:37:01 2025 by rpki-client