$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/HxMZLtqaa40_-D3AlM2bEsyeA-s.roa File: HxMZLtqaa40_-D3AlM2bEsyeA-s.roa (raw, json) Hash identifier: uWZazcNrfKEifOCxlQsAhWAMFnu1iK2gEPxndGegHQo= Subject key identifier: 1F:13:19:2E:DA:9A:6B:8D:3F:F8:3D:C0:94:CD:9B:12:CC:9E:03:EB Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 24 Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/HxMZLtqaa40_-D3AlM2bEsyeA-s.roa Signing time: Fri 22 Aug 2025 06:27:16 +0000 ROA not before: Fri 22 Aug 2025 06:27:16 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 139140 IP address blocks: 45.120.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:27:16 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=1F13192EDA9A6B8D3FF83DC094CD9B12CC9E03EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bc:6e:cd:d9:e0:5b:1e:e3:16:2d:c9:39:b0: 1c:f4:20:98:ec:00:c5:70:31:a4:76:a5:b2:01:0f: d9:16:f8:bc:4f:72:98:34:66:e6:4f:7a:15:79:4f: 68:09:83:be:e1:71:1f:33:48:82:af:26:67:67:c6: 1e:74:18:a4:c5:47:66:86:33:ab:21:76:ac:f0:35: c3:a4:05:83:87:c4:cc:0f:cc:f6:9c:ec:77:d6:37: d5:e8:d0:db:b4:29:3f:e9:de:4f:a2:57:0f:9a:32: b4:da:7f:9b:93:85:5e:8d:4a:2a:f7:42:97:70:8e: db:48:85:50:97:8d:cf:b1:b1:4a:db:ca:7e:1c:78: 3a:84:eb:7b:eb:b2:80:f9:7b:04:04:d7:89:07:af: 8d:a3:59:3c:08:78:93:7b:56:84:e6:a9:d8:55:c9: 72:90:ca:00:61:b3:4b:bd:c2:19:72:95:94:b5:74: 47:7d:e2:c9:59:f9:25:35:be:da:68:3f:1d:2a:4f: 25:94:ca:36:1e:a4:6f:f5:9d:ec:3d:e0:73:99:46: 2e:29:cc:72:10:62:fb:c7:96:8c:7c:24:1b:67:10: df:57:1e:d6:39:2e:64:96:7d:5c:b7:1f:31:19:6f: 1b:17:df:0f:d9:dc:fc:c9:4e:9b:9b:46:7b:f2:3b: 89:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:13:19:2E:DA:9A:6B:8D:3F:F8:3D:C0:94:CD:9B:12:CC:9E:03:EB X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/HxMZLtqaa40_-D3AlM2bEsyeA-s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.120.241.0/24 Signature Algorithm: sha256WithRSAEncryption 94:b6:c6:95:88:73:d6:3f:7a:5d:a9:55:72:a3:50:27:c7:b7: 73:7a:de:d0:93:4c:c5:b7:af:af:04:fd:0f:fd:e2:e9:9e:66: 5e:34:e8:b9:b6:9a:db:60:93:80:38:14:21:45:ba:dd:c7:3b: ea:67:7d:75:c3:a1:12:dc:fc:3d:31:f1:41:66:13:4d:aa:1c: eb:2f:a4:e2:0e:2d:55:46:b8:13:8e:c8:e5:6c:06:91:79:1d: 22:61:dd:4b:19:98:2b:3b:5c:3d:68:e6:8d:85:76:f5:e4:7c: 1c:97:1e:6f:a5:ee:54:b6:1f:cf:99:3b:4f:5e:42:da:61:70: 06:e9:94:99:e0:25:15:a9:a3:80:b9:97:7e:bf:0f:ed:60:09: 20:98:53:c4:cd:a5:5a:0c:b2:7f:2d:e2:05:ff:5e:ba:e3:25: 79:ec:2d:53:f4:9f:93:f5:57:4f:a5:50:d5:16:ef:ce:ca:f1: 4d:40:81:f9:2e:e2:88:0b:ea:04:8f:4f:27:cf:c6:89:75:15: 26:c1:de:33:79:05:13:a1:fd:a9:88:02:25:39:c1:04:45:da: c4:03:2e:7d:71:ec:4f:db:66:35:04:01:84:4f:4c:80:f3:84: 7b:a8:b8:35:ae:5d:e3:cd:2e:0d:c5:6a:05:23:bf:eb:27:db: c8:0b:54:81 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MjcxNloXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoMUYxMzE5MkVEQTlBNkI4 RDNGRjgzREMwOTRDRDlCMTJDQzlFMDNFQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOK8bs3Z4Fse4xYtyTmwHPQgmOwAxXAxpHalsgEP2Rb4vE9ymDRm 5k96FXlPaAmDvuFxHzNIgq8mZ2fGHnQYpMVHZoYzqyF2rPA1w6QFg4fEzA/M9pzs d9Y31ejQ27QpP+neT6JXD5oytNp/m5OFXo1KKvdCl3CO20iFUJeNz7GxStvKfhx4 OoTre+uygPl7BATXiQevjaNZPAh4k3tWhOap2FXJcpDKAGGzS73CGXKVlLV0R33i yVn5JTW+2mg/HSpPJZTKNh6kb/Wd7D3gc5lGLinMchBi+8eWjHwkG2cQ31ce1jku ZJZ9XLcfMRlvGxffD9nc/MlOm5tGe/I7iX0CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQfExku2pprjT/4PcCUzZsSzJ4D6zAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9IeE1aTHRxYWE0MF8t RDNBbE0yYkVzeWVBLXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALXjxMA0GCSqGSIb3DQEBCwUAA4IBAQCUtsaViHPWP3pdqVVyo1Anx7dzet7Q k0zFt6+vBP0P/eLpnmZeNOi5tprbYJOAOBQhRbrdxzvqZ311w6ES3Pw9MfFBZhNN qhzrL6TiDi1VRrgTjsjlbAaReR0iYd1LGZgrO1w9aOaNhXb15Hwclx5vpe5Uth/P mTtPXkLaYXAG6ZSZ4CUVqaOAuZd+vw/tYAkgmFPEzaVaDLJ/LeIF/1664yV57C1T 9J+T9VdPpVDVFu/OyvFNQIH5LuKIC+oEj08nz8aJdRUmwd4zeQUTof2piAIlOcEE RdrEAy59cexP22Y1BAGET0yA84R7qLg1rl3jzS4NxWoFI7/rJ9vIC1SB -----END CERTIFICATE-----Generated at Mon Sep 8 11:59:38 2025 by rpki-client