$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/hoPr-9IA4xK24pWrJXMiqEmgL-8.roa File: hoPr-9IA4xK24pWrJXMiqEmgL-8.roa (raw, json) Hash identifier: djCXcQA76LoasQf3lEFZRM2zMYCrw8/G6HVc9HLaw70= Subject key identifier: 86:83:EB:FB:D2:00:E3:12:B6:E2:95:AB:25:73:22:A8:49:A0:2F:EF Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Certificate serial: 14E4 Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/hoPr-9IA4xK24pWrJXMiqEmgL-8.roa Signing time: Thu 11 Sep 2025 08:18:04 +0000 ROA not before: Thu 11 Sep 2025 08:18:04 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 17621 IP address blocks: 120.136.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5348 (0x14e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Validity Not Before: Sep 11 08:18:04 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8683EBFBD200E312B6E295AB257322A849A02FEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:7f:f2:26:b6:56:54:ac:0a:b9:48:3a:d1: 38:d7:26:11:98:90:66:2d:c1:b5:11:c2:38:da:41: 39:0f:21:9b:a0:b5:da:2e:1d:ae:0f:8f:0e:62:f8: 2c:0e:0d:35:bf:ce:7e:d9:19:21:f9:f4:80:fc:fd: 1a:4e:ee:b1:0d:14:59:1b:67:cd:5d:ca:71:69:14: 4c:f9:f5:68:17:29:0f:ef:d3:80:04:9b:c0:f0:bb: 67:58:d8:ad:9c:04:86:d8:db:42:ca:6c:68:05:3d: 9a:83:91:40:23:c7:e7:ed:46:67:62:ad:95:ef:e0: 5a:22:0f:f7:1d:af:22:d7:a6:f4:3b:46:ac:bb:ae: 70:25:0a:a2:e4:ea:f4:85:1e:4f:77:5f:fa:3e:30: e0:d7:95:2f:11:c2:3c:e3:c7:ae:53:70:1d:b8:dc: 25:69:b3:1f:bf:4e:4e:ab:4f:18:bc:2e:5d:d4:33: 45:99:ab:5e:98:1e:f5:3c:ad:d5:1f:36:23:61:11: 18:54:fa:3a:cf:3c:50:e5:31:9b:be:f0:4a:c0:d0: 31:94:bd:17:80:bb:de:98:12:70:50:bf:4a:f0:51: 18:9e:a0:73:2a:9b:66:53:33:1b:f3:21:19:c9:76: da:03:8e:c9:92:fd:77:11:f8:71:89:53:6d:e3:7c: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:83:EB:FB:D2:00:E3:12:B6:E2:95:AB:25:73:22:A8:49:A0:2F:EF X509v3 Authority Key Identifier: keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/hoPr-9IA4xK24pWrJXMiqEmgL-8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.136.176.0/22 Signature Algorithm: sha256WithRSAEncryption 75:58:ad:c5:c1:5b:a5:7f:ed:07:bb:0d:35:95:b4:8e:fb:1b: de:44:02:85:48:d1:8b:e1:0e:c7:34:0d:34:b3:d2:ab:6d:80: 30:f5:5e:bd:0e:81:e8:55:d2:d6:eb:1c:99:8b:74:89:c8:f5: 1f:d5:2c:7c:3c:df:1a:f2:fe:ef:ab:26:9f:57:b5:d4:17:b4: 7e:f9:b6:39:9a:36:57:3b:86:9e:c2:6d:3f:de:8b:58:67:c1: f0:4c:1b:54:0c:8d:30:48:78:ac:59:d9:c4:b8:1f:b2:26:81: 6d:d9:7e:29:61:8d:65:41:83:c8:e2:d9:45:72:5e:b9:47:28: 6f:78:33:d8:db:53:ae:94:71:d9:9e:eb:c2:2d:63:f7:6e:e2: d3:a6:a0:55:27:82:9e:cb:8a:b2:d9:c6:b5:ff:2c:ad:d3:80: 31:90:e4:3a:92:d7:ef:79:55:65:ca:28:5b:e8:6a:0b:3f:79: d3:54:10:85:83:91:04:ac:e6:8e:1a:cf:d6:3c:60:02:41:29: 3b:27:d5:0f:c9:18:0c:d7:2c:3a:3b:48:32:fa:a7:13:0a:68: 14:55:7c:a6:2d:cd:c5:fb:d4:44:53:24:49:b0:a7:df:96:d5: 98:46:70:ba:b1:52:67:4d:7b:c4:9e:0f:a0:97:d2:81:c1:89: ca:ed:28:84 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICFOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNTA5MTEw ODE4MDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDg2ODNFQkZCRDIwMEUz MTJCNkUyOTVBQjI1NzMyMkE4NDlBMDJGRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCg23/yJrZWVKwKuUg60TjXJhGYkGYtwbURwjjaQTkPIZugtdou Ha4Pjw5i+CwODTW/zn7ZGSH59ID8/RpO7rENFFkbZ81dynFpFEz59WgXKQ/v04AE m8Dwu2dY2K2cBIbY20LKbGgFPZqDkUAjx+ftRmdirZXv4FoiD/cdryLXpvQ7Rqy7 rnAlCqLk6vSFHk93X/o+MODXlS8Rwjzjx65TcB243CVpsx+/Tk6rTxi8Ll3UM0WZ q16YHvU8rdUfNiNhERhU+jrPPFDlMZu+8ErA0DGUvReAu96YEnBQv0rwURieoHMq m2ZTMxvzIRnJdtoDjsmS/XcR+HGJU23jfFelAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUhoPr+9IA4xK24pWrJXMiqEmgL+8wHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7 wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9ob1ByLTlJQTR4SzI0cFdy SlhNaXFFbWdMLTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC eIiwMA0GCSqGSIb3DQEBCwUAA4IBAQB1WK3FwVulf+0Huw01lbSO+xveRAKFSNGL 4Q7HNA00s9KrbYAw9V69DoHoVdLW6xyZi3SJyPUf1Sx8PN8a8v7vqyafV7XUF7R+ +bY5mjZXO4aewm0/3otYZ8HwTBtUDI0wSHisWdnEuB+yJoFt2X4pYY1lQYPI4tlF cl65RyhveDPY21OulHHZnuvCLWP3buLTpqBVJ4Key4qy2ca1/yyt04AxkOQ6ktfv eVVlyihb6GoLP3nTVBCFg5EErOaOGs/WPGACQSk7J9UPyRgM1yw6O0gy+qcTCmgU VXymLc3F+9REUyRJsKffltWYRnC6sVJnTXvEng+gl9KBwYnK7SiE -----END CERTIFICATE-----Generated at Thu Oct 23 20:27:27 2025 by rpki-client