$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/HLC_YBAONMLuTFiBqMaJpVlyvEU.roa File: HLC_YBAONMLuTFiBqMaJpVlyvEU.roa (raw, json) Hash identifier: aDq0u9agwt1XLObb5Yf/++Ba6H3HJsIR7i5kQk9VOdQ= Subject key identifier: 1C:B0:BF:60:10:0E:34:C2:EE:4C:58:81:A8:C6:89:A5:59:72:BC:45 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 97 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/HLC_YBAONMLuTFiBqMaJpVlyvEU.roa Signing time: Fri 06 Jun 2025 01:44:56 +0000 ROA not before: Fri 06 Jun 2025 01:44:56 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56046 IP address blocks: 240a:42a4::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 13:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 01:44:56 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=1CB0BF60100E34C2EE4C5881A8C689A55972BC45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:26:c2:d3:d5:4b:d2:2d:26:74:e2:b2:37:1e: f9:f4:2c:01:af:76:63:a8:77:0e:81:e1:3c:30:7d: 62:a1:5a:f5:5d:f8:e3:04:22:75:31:4d:e6:17:94: a9:55:ad:fc:39:5b:77:f4:81:0a:13:c4:40:e1:da: 62:b7:61:6f:9e:97:9d:9c:74:52:18:84:87:7a:89: 48:0a:c9:ce:fa:0f:84:cc:5a:83:bf:8a:a2:b8:14: 38:15:b8:67:6e:b1:e7:ae:3e:a1:75:33:6f:ab:fe: a5:81:46:29:c9:09:ee:f8:24:20:31:ed:de:c8:96: cd:59:31:a1:cd:b3:2f:00:36:a5:35:7a:82:02:b6: d2:c6:96:da:77:f8:7f:a8:70:16:6d:fb:f0:1f:5d: d8:11:2e:c0:86:37:9d:51:11:23:02:06:8b:a0:b9: ea:a0:2c:3c:d0:28:d1:96:b7:d7:e2:83:f0:03:92: 95:7b:01:69:92:56:37:fb:16:3a:c5:d6:72:08:f9: 51:e4:07:29:dd:c2:f3:73:c3:0d:4e:41:48:ab:8b: d6:72:9b:6d:09:11:85:d4:81:6a:53:2d:28:e9:27: 07:3e:b4:bc:fb:93:f0:fe:9d:38:14:94:a6:d9:e6: 57:05:45:b9:3b:5b:d7:4c:35:00:a3:63:e9:17:3d: 9a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B0:BF:60:10:0E:34:C2:EE:4C:58:81:A8:C6:89:A5:59:72:BC:45 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/HLC_YBAONMLuTFiBqMaJpVlyvEU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42a4::/31 Signature Algorithm: sha256WithRSAEncryption 89:2a:ea:f3:ad:7c:39:1d:98:12:b0:57:1b:a2:32:16:f2:e0: 5a:89:f1:25:a7:9e:63:44:e6:f2:29:1c:eb:a0:f3:ed:7c:e6: a6:a1:d6:ca:6c:7c:4e:38:a8:7a:a3:95:b1:cc:e3:c3:d7:1c: 1f:58:bd:3c:a3:b6:60:3c:6d:79:47:4f:d3:68:87:f1:95:2c: c8:ed:e9:23:14:77:3b:da:b5:04:36:15:04:87:08:70:42:9f: e6:c4:9e:b5:3e:e0:ab:88:59:6c:c4:15:c1:4c:75:07:50:7f: 86:de:bb:b5:d9:9b:d7:35:02:4f:bf:47:cd:21:03:f7:27:a8: d0:ab:06:28:2c:33:d8:5a:e6:d9:6d:e9:eb:4f:79:74:df:aa: 80:42:65:c3:58:80:50:fe:29:07:9d:e3:df:84:c3:f0:62:bf: 2a:5a:16:68:37:5e:bd:25:34:2c:0e:e5:b1:f7:b9:4c:98:a1: 1b:39:7a:ce:77:4d:05:8d:3f:45:32:3c:95:8b:b9:32:99:d3: bd:47:d7:7a:4b:59:5d:81:75:42:5d:bd:58:da:b9:53:59:6f: 38:33:20:40:1e:9b:f2:c9:f8:a0:8d:9a:a6:a1:11:ef:69:9a: 8a:5a:ff:5b:a5:96:32:1b:d6:ce:7f:84:16:df:f5:dc:00:e9: dc:f9:98:e5 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MTQ0NTZaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKDFDQjBCRjYwMTAwRTM0 QzJFRTRDNTg4MUE4QzY4OUE1NTk3MkJDNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZJsLT1UvSLSZ04rI3Hvn0LAGvdmOodw6B4TwwfWKhWvVd+OME InUxTeYXlKlVrfw5W3f0gQoTxEDh2mK3YW+el52cdFIYhId6iUgKyc76D4TMWoO/ iqK4FDgVuGduseeuPqF1M2+r/qWBRinJCe74JCAx7d7Ils1ZMaHNsy8ANqU1eoIC ttLGltp3+H+ocBZt+/AfXdgRLsCGN51RESMCBougueqgLDzQKNGWt9fig/ADkpV7 AWmSVjf7FjrF1nII+VHkByndwvNzww1OQUiri9Zym20JEYXUgWpTLSjpJwc+tLz7 k/D+nTgUlKbZ5lcFRbk7W9dMNQCjY+kXPZqlAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUHLC/YBAONMLuTFiBqMaJpVlyvEUwHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvSExDX1lCQU9OTUx1 VEZpQnFNYUpwVmx5dkVVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFASQKQqQwDQYJKoZIhvcNAQELBQADggEBAIkq6vOtfDkdmBKwVxuiMhby4FqJ 8SWnnmNE5vIpHOug8+185qah1spsfE44qHqjlbHM48PXHB9YvTyjtmA8bXlHT9No h/GVLMjt6SMUdzvatQQ2FQSHCHBCn+bEnrU+4KuIWWzEFcFMdQdQf4beu7XZm9c1 Ak+/R80hA/cnqNCrBigsM9ha5tlt6etPeXTfqoBCZcNYgFD+KQed49+Ew/Bivypa Fmg3Xr0lNCwO5bH3uUyYoRs5es53TQWNP0UyPJWLuTKZ071H13pLWV2BdUJdvVja uVNZbzgzIEAem/LJ+KCNmqahEe9pmopa/1ulljIb1s5/hBbf9dwA6dz5mOU= -----END CERTIFICATE-----Generated at Thu Jun 12 13:03:04 2025 by rpki-client