$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/HENqmW8P5dcEQIfswIqgbjfICaE.roa File: HENqmW8P5dcEQIfswIqgbjfICaE.roa (raw, json) Hash identifier: 2uQSitIo9B3RR+cJnZzNJCmzNIkok2Z3w96MqLM6zRk= Subject key identifier: 1C:43:6A:99:6F:0F:E5:D7:04:40:87:EC:C0:8A:A0:6E:37:C8:09:A1 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 7F96 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HENqmW8P5dcEQIfswIqgbjfICaE.roa Signing time: Wed 06 Aug 2025 07:33:16 +0000 ROA not before: Wed 06 Aug 2025 07:33:16 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.246.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32662 (0x7f96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Aug 6 07:33:16 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1C436A996F0FE5D7044087ECC08AA06E37C809A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ef:aa:50:65:e0:99:b8:a4:54:6e:18:76:69: 82:86:47:f2:b0:5b:fd:04:fb:f9:e2:0b:ce:d5:e0: 48:c8:e0:31:02:a3:da:91:50:a9:df:72:87:a2:ca: 52:27:8a:d6:07:58:17:7e:b7:38:b4:41:3c:f1:ec: 6d:6a:57:9c:2c:8f:95:ff:62:4c:05:56:be:a3:f1: 98:74:f1:ef:20:d4:99:bd:d5:a7:71:4c:c0:f3:90: af:83:24:a7:51:6f:d9:65:e4:51:5a:db:67:af:7d: 4d:71:ab:69:90:3a:51:98:75:24:ad:a9:7f:ce:5a: 31:17:1b:e5:1d:4e:4f:a9:52:af:4b:4b:33:d7:fe: 27:b3:4e:f4:66:ac:1c:9d:eb:2c:01:b2:0e:8f:06: 08:41:c9:bd:7c:44:ae:92:78:0e:46:3b:82:69:53: a5:90:fe:2b:a1:6d:62:4f:ef:ea:39:a3:28:97:81: fa:b4:93:d2:09:7a:e8:92:fc:98:43:2c:16:b7:30: 37:42:d3:8e:cf:4e:55:38:fe:4e:4c:c4:d2:58:d0: 43:11:8b:00:1d:bf:ce:79:5c:cd:c2:dd:cf:48:16: d7:87:ea:09:97:8a:ca:90:9f:38:07:a3:e9:5c:c1: 57:49:a9:b1:4d:f4:50:45:71:1a:b5:e2:06:23:c9: 6f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:43:6A:99:6F:0F:E5:D7:04:40:87:EC:C0:8A:A0:6E:37:C8:09:A1 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HENqmW8P5dcEQIfswIqgbjfICaE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.246.76.0/22 Signature Algorithm: sha256WithRSAEncryption 07:09:59:aa:75:2b:b7:d2:34:8c:c3:d2:21:39:dd:fa:60:19: 4b:5d:fc:f5:95:60:4d:66:7f:29:bf:f8:c3:41:0e:c3:31:79: a5:2a:7d:e9:cb:fe:f1:9e:f5:d1:09:d3:a6:f7:7c:75:b8:c9: 89:c4:d7:3d:3c:be:13:b1:91:ee:f3:34:cf:92:8a:74:78:1c: 7b:c2:ee:71:57:13:07:b0:7d:e3:01:1e:b2:fc:ff:27:c6:f9: 25:50:99:d7:85:2c:16:a7:db:bd:67:ee:94:0e:1b:65:55:0a: bd:98:0f:b7:46:36:99:de:89:df:80:7e:98:21:19:ed:c5:2e: e3:c1:bb:fb:80:84:c8:dd:2c:23:18:26:6a:41:6e:5a:d5:34: ee:b7:e8:ae:f1:1d:24:95:dd:45:86:74:92:11:de:dd:b4:38: 00:20:54:19:ac:77:c3:a1:c1:06:f7:17:d6:23:33:f5:7a:f9: 5c:6a:ad:04:49:df:01:30:84:f9:bf:48:19:e9:5d:33:28:89: be:a8:74:e0:5b:46:fc:62:94:3b:1e:26:e6:39:0d:d7:29:1a: 02:72:e5:bb:be:b8:aa:10:6e:85:6c:30:0b:85:01:bc:e8:e2: 87:ea:74:ed:69:40:f7:34:fe:dd:f9:31:18:a8:1b:55:37:80: 20:87:7b:94 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICf5YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw NzMzMTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFDNDM2QTk5NkYwRkU1 RDcwNDQwODdFQ0MwOEFBMDZFMzdDODA5QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCX76pQZeCZuKRUbhh2aYKGR/KwW/0E+/niC87V4EjI4DECo9qR UKnfcoeiylInitYHWBd+tzi0QTzx7G1qV5wsj5X/YkwFVr6j8Zh08e8g1Jm91adx TMDzkK+DJKdRb9ll5FFa22evfU1xq2mQOlGYdSStqX/OWjEXG+UdTk+pUq9LSzPX /iezTvRmrByd6ywBsg6PBghByb18RK6SeA5GO4JpU6WQ/iuhbWJP7+o5oyiXgfq0 k9IJeuiS/JhDLBa3MDdC047PTlU4/k5MxNJY0EMRiwAdv855XM3C3c9IFteH6gmX isqQnzgHo+lcwVdJqbFN9FBFcRq14gYjyW/LAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUHENqmW8P5dcEQIfswIqgbjfICaEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0hFTnFtVzhQNWRjRVFJ ZnN3SXFnYmpmSUNhRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr9kwwDQYJKoZIhvcNAQELBQADggEBAAcJWap1K7fSNIzD0iE53fpgGUtd/PWV YE1mfym/+MNBDsMxeaUqfenL/vGe9dEJ06b3fHW4yYnE1z08vhOxke7zNM+SinR4 HHvC7nFXEwewfeMBHrL8/yfG+SVQmdeFLBan271n7pQOG2VVCr2YD7dGNpneid+A fpghGe3FLuPBu/uAhMjdLCMYJmpBblrVNO636K7xHSSV3UWGdJIR3t20OAAgVBms d8OhwQb3F9YjM/V6+VxqrQRJ3wEwhPm/SBnpXTMoib6odOBbRvxilDseJuY5Ddcp GgJy5bu+uKoQboVsMAuFAbzo4ofqdO1pQPc0/t35MRioG1U3gCCHe5Q= -----END CERTIFICATE-----Generated at Thu Aug 14 11:07:33 2025 by rpki-client