$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/hd4p8bRkbnzPLiIvE4WzEc4L6v4.roa File: hd4p8bRkbnzPLiIvE4WzEc4L6v4.roa (raw, json) Hash identifier: NXyCQvHS203M2U7q90eaDOnQ2hj2vQiZl4tKD3oJpKU= Subject key identifier: 85:DE:29:F1:B4:64:6E:7C:CF:2E:22:2F:13:85:B3:11:CE:0B:EA:FE Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 2D Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/hd4p8bRkbnzPLiIvE4WzEc4L6v4.roa Signing time: Fri 22 Aug 2025 06:27:17 +0000 ROA not before: Fri 22 Aug 2025 06:27:17 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 139140 IP address blocks: 103.61.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:27:17 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=85DE29F1B4646E7CCF2E222F1385B311CE0BEAFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:ef:5a:b5:c0:6c:f6:f3:be:b0:56:fb:63: 22:50:5b:8b:74:06:ea:61:f0:d3:5d:69:34:1c:fd: 3e:37:65:5f:e6:d7:df:d8:df:5a:f9:eb:5c:24:2e: 5d:8a:63:8d:61:66:db:e9:2c:30:25:db:90:8c:a8: 8b:05:b4:90:76:c9:7e:eb:75:c7:5c:3e:2c:d6:58: 22:1c:f1:cc:13:80:e1:e2:49:39:8d:f0:5f:d1:fb: a2:af:d5:a8:e5:88:f9:00:d9:d1:d4:62:b5:9c:03: f8:b6:dc:d7:cd:f8:03:77:ce:34:ed:ab:ea:7e:69: b6:57:65:c3:6b:48:e5:e2:3e:0b:16:38:fc:e3:3b: e1:20:f2:bc:df:94:f6:02:ef:2d:9a:90:39:e3:1c: 02:51:5a:d8:ca:fd:77:7a:b3:46:ec:71:af:f4:be: 9e:2b:df:4f:9e:ee:31:8a:63:89:e8:6e:57:31:46: 5a:0a:af:62:f8:37:e0:8b:42:bf:24:cc:4f:7c:00: 1b:93:92:44:6a:28:ca:c3:8f:96:74:94:ef:ec:61: 81:33:0a:91:27:aa:25:d6:51:ce:18:77:7e:35:dd: 87:b3:73:06:07:9a:58:36:df:73:12:c2:e1:d5:c8: e0:76:9f:2a:3a:07:e1:a1:e3:9b:57:da:ec:18:1d: 5a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DE:29:F1:B4:64:6E:7C:CF:2E:22:2F:13:85:B3:11:CE:0B:EA:FE X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/hd4p8bRkbnzPLiIvE4WzEc4L6v4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.61.62.0/24 Signature Algorithm: sha256WithRSAEncryption 58:75:2c:60:b7:a2:b0:a6:09:0b:cb:a9:c8:f2:62:19:fb:9f: dd:96:60:d6:cb:94:0b:ac:21:ac:31:da:b3:4d:b6:95:a4:e3: 0a:e5:81:13:d8:06:75:9a:1c:37:cf:7c:34:2e:fc:1a:19:98: 62:23:f8:40:71:1f:b8:56:8b:fc:0c:cd:51:f4:e8:94:6f:ed: 88:d1:d4:0e:b5:34:65:63:47:ef:36:95:b5:20:c9:72:51:a9: ef:a6:6e:62:db:4d:fb:f0:4e:17:b5:27:a8:e1:ef:fd:45:b1: a8:5a:ad:ab:e0:44:31:8e:15:d3:1b:1a:7e:e4:2c:6c:22:ea: 33:db:73:32:de:0b:2e:10:ba:e0:c4:1b:72:04:ad:5d:69:15: c8:49:44:4a:16:c2:84:ba:8c:3c:dd:35:f8:99:72:28:37:e0: 89:c5:83:6c:fe:5f:bf:ad:44:20:ee:1a:24:56:95:ed:72:46: cf:5a:5e:55:5f:30:df:f8:d5:50:9f:22:c3:df:ec:48:68:8f: 0e:85:38:50:06:69:a4:76:7a:67:ff:b2:25:a9:3c:75:6c:36: 58:4b:56:79:3b:be:a9:d6:cc:1a:03:f3:f8:89:84:ad:32:36: 7d:1c:91:82:c3:42:89:e2:d8:b6:9d:bc:79:c6:7c:6a:2d:ce: 9a:e3:ce:ef -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MjcxN1oXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoODVERTI5RjFCNDY0NkU3 Q0NGMkUyMjJGMTM4NUIzMTFDRTBCRUFGRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALog71q1wGz2876wVvtjIlBbi3QG6mHw011pNBz9PjdlX+bX39jf WvnrXCQuXYpjjWFm2+ksMCXbkIyoiwW0kHbJfut1x1w+LNZYIhzxzBOA4eJJOY3w X9H7oq/VqOWI+QDZ0dRitZwD+Lbc1834A3fONO2r6n5ptldlw2tI5eI+CxY4/OM7 4SDyvN+U9gLvLZqQOeMcAlFa2Mr9d3qzRuxxr/S+nivfT57uMYpjiehuVzFGWgqv Yvg34ItCvyTMT3wAG5OSRGooysOPlnSU7+xhgTMKkSeqJdZRzhh3fjXdh7NzBgea WDbfcxLC4dXI4HafKjoH4aHjm1fa7BgdWhMCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSF3inxtGRufM8uIi8ThbMRzgvq/jAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9oZDRwOGJSa2JuelBM aUl2RTRXekVjNEw2djQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZz0+MA0GCSqGSIb3DQEBCwUAA4IBAQBYdSxgt6KwpgkLy6nI8mIZ+5/dlmDW y5QLrCGsMdqzTbaVpOMK5YET2AZ1mhw3z3w0LvwaGZhiI/hAcR+4Vov8DM1R9OiU b+2I0dQOtTRlY0fvNpW1IMlyUanvpm5i20378E4XtSeo4e/9RbGoWq2r4EQxjhXT Gxp+5CxsIuoz23My3gsuELrgxBtyBK1daRXISURKFsKEuow83TX4mXIoN+CJxYNs /l+/rUQg7hokVpXtckbPWl5VXzDf+NVQnyLD3+xIaI8OhThQBmmkdnpn/7IlqTx1 bDZYS1Z5O76p1swaA/P4iYStMjZ9HJGCw0KJ4ti2nbx5xnxqLc6a487v -----END CERTIFICATE-----Generated at Mon Sep 8 09:07:40 2025 by rpki-client