$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/hnKNSB-hsX7LlJYFoVnLSk7lOHk.roa File: hnKNSB-hsX7LlJYFoVnLSk7lOHk.roa (raw, json) Hash identifier: CtVObatrmxM6qafMzQ8513fXHmeeUMhhlQodqtscnqM= Subject key identifier: 86:72:8D:48:1F:A1:B1:7E:CB:94:96:05:A1:59:CB:4A:4E:E5:38:79 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 217D Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/hnKNSB-hsX7LlJYFoVnLSk7lOHk.roa Signing time: Fri 29 Aug 2025 09:05:24 +0000 ROA not before: Fri 29 Aug 2025 09:05:24 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 135377 IP address blocks: 106.75.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 01:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8573 (0x217d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:24 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=86728D481FA1B17ECB949605A159CB4A4EE53879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:0f:ec:f9:01:08:b2:00:16:d8:00:f9:e7: 4e:8e:9e:97:dd:63:49:7b:ea:f0:38:54:77:8c:d0: 6c:b7:52:52:45:a1:0b:86:bb:97:1f:85:f7:7f:d4: c1:ea:64:9c:3f:94:16:01:ca:77:8a:eb:e2:05:88: 21:83:c1:82:6f:1a:be:b0:51:85:f2:c2:97:ee:05: 87:f6:0a:6d:d7:ff:01:ba:13:9a:1b:eb:d7:f4:3c: 4a:ac:a2:3c:ac:d1:86:eb:ad:d2:46:be:71:63:64: 71:a2:78:f4:82:59:59:48:a1:89:62:6b:bc:c4:bf: a6:b5:5d:9e:d9:fe:60:01:1e:19:61:7e:ec:a4:44: b8:4d:0a:37:1d:bb:d4:e8:01:18:26:67:ac:bc:75: 62:00:2d:51:0a:37:e7:3c:9d:51:a0:79:b0:86:2a: 2f:68:aa:91:51:2a:4e:b5:e2:9d:2d:e7:d3:2d:59: 58:5a:6b:9a:eb:04:3e:e7:c4:fc:9b:29:53:49:d3: 2b:63:65:30:04:05:31:64:71:04:17:8e:db:52:27: 32:87:8a:b4:b6:94:be:f2:44:fb:0a:01:45:5b:a9: a0:3f:d0:36:c7:12:44:09:c7:87:a0:79:f3:1a:1b: 25:44:e5:5f:68:36:14:9c:1b:b7:21:5c:66:02:41: 56:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:72:8D:48:1F:A1:B1:7E:CB:94:96:05:A1:59:CB:4A:4E:E5:38:79 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/hnKNSB-hsX7LlJYFoVnLSk7lOHk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.196.0/24 Signature Algorithm: sha256WithRSAEncryption b1:24:e2:af:89:33:1e:90:6b:e3:cd:7a:02:e2:7d:9a:5e:9f: 59:8e:13:67:2c:e9:49:ab:3b:28:f8:84:b1:ea:6c:0d:93:5a: 6c:17:83:92:25:fe:65:d8:37:e3:bd:6f:81:3a:92:6d:a7:35: f9:63:d2:a3:37:f5:ce:63:78:c9:86:b3:0d:57:e1:27:33:07: d0:4a:c2:fe:1a:e8:92:66:dc:43:7a:a9:f9:4b:6c:ac:0d:45: d4:42:3c:c7:71:14:af:14:bc:b8:6c:07:d6:a2:e0:2a:a9:cc: 9c:f0:a3:d0:4d:db:85:3c:7d:57:67:9d:41:43:19:88:c1:2c: ab:1d:34:54:71:3e:ac:fe:be:48:99:c4:12:d4:d3:ff:34:89: c0:fc:7d:a6:59:54:3e:82:cc:c6:67:70:0b:bb:62:87:c0:32: e4:0e:66:12:e4:46:1e:46:cb:84:8f:ea:57:a4:7b:7c:82:78: a3:1f:19:ce:d2:9e:24:58:53:17:8c:45:1b:0d:14:81:94:2c: 0f:81:33:fd:8c:8d:b3:f7:38:77:98:4d:43:93:71:a0:0e:4a: 9c:65:0a:b9:71:a6:f4:74:f6:8a:17:43:23:58:35:80:6d:ab: 60:cd:03:a0:46:a0:47:8e:80:d4:41:4b:10:bd:d2:1a:be:1d: 88:6d:e7:b3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MjRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDg2NzI4RDQ4MUZBMUIx N0VDQjk0OTYwNUExNTlDQjRBNEVFNTM4NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvSA/s+QEIsgAW2AD5506OnpfdY0l76vA4VHeM0Gy3UlJFoQuG u5cfhfd/1MHqZJw/lBYByneK6+IFiCGDwYJvGr6wUYXywpfuBYf2Cm3X/wG6E5ob 69f0PEqsojys0YbrrdJGvnFjZHGiePSCWVlIoYlia7zEv6a1XZ7Z/mABHhlhfuyk RLhNCjcdu9ToARgmZ6y8dWIALVEKN+c8nVGgebCGKi9oqpFRKk614p0t59MtWVha a5rrBD7nxPybKVNJ0ytjZTAEBTFkcQQXjttSJzKHirS2lL7yRPsKAUVbqaA/0DbH EkQJx4egefMaGyVE5V9oNhScG7chXGYCQVaPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUhnKNSB+hsX7LlJYFoVnLSk7lOHkwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L2huS05TQi1oc1g3TGxK WUZvVm5MU2s3bE9Iay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABqS8QwDQYJKoZIhvcNAQELBQADggEBALEk4q+JMx6Qa+PNegLifZpen1mOE2cs 6UmrOyj4hLHqbA2TWmwXg5Il/mXYN+O9b4E6km2nNflj0qM39c5jeMmGsw1X4Scz B9BKwv4a6JJm3EN6qflLbKwNRdRCPMdxFK8UvLhsB9ai4CqpzJzwo9BN24U8fVdn nUFDGYjBLKsdNFRxPqz+vkiZxBLU0/80icD8faZZVD6CzMZncAu7YofAMuQOZhLk Rh5Gy4SP6leke3yCeKMfGc7SniRYUxeMRRsNFIGULA+BM/2MjbP3OHeYTUOTcaAO SpxlCrlxpvR09ooXQyNYNYBtq2DNA6BGoEeOgNRBSxC90hq+HYht57M= -----END CERTIFICATE-----Generated at Sun Oct 26 23:17:42 2025 by rpki-client