$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hx0tyEUQsVMeThffkgpe2O2ceLU.roa File: hx0tyEUQsVMeThffkgpe2O2ceLU.roa (raw, json) Hash identifier: IwIDtdr6+OYt3HasXBCZsocJppL1Kz9oaZymlBuju/0= Subject key identifier: 87:1D:2D:C8:45:10:B1:53:1E:4E:17:DF:92:0A:5E:D8:ED:9C:78:B5 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 7F8F Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hx0tyEUQsVMeThffkgpe2O2ceLU.roa Signing time: Wed 06 Aug 2025 07:33:14 +0000 ROA not before: Wed 06 Aug 2025 07:33:14 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.246.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32655 (0x7f8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Aug 6 07:33:14 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=871D2DC84510B1531E4E17DF920A5ED8ED9C78B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5e:ed:b5:39:13:f8:fd:01:10:0c:83:eb:bb: f2:29:92:15:30:fe:13:b2:4b:00:76:4f:63:87:93: 8f:fd:53:49:30:48:c9:55:d6:03:24:90:5e:32:2d: 8d:23:31:65:6b:07:0f:47:97:e3:da:a0:2d:e8:4c: a6:45:aa:0a:32:bb:4c:a0:ab:57:4c:16:a6:ab:c4: 55:fb:fa:99:2a:ba:80:30:59:07:3e:26:3e:1c:bd: 86:8b:09:17:97:11:22:7d:77:4e:86:43:c6:bb:98: 6a:62:5f:82:02:38:cf:68:b1:fb:03:4f:10:10:34: aa:e5:fd:b5:10:89:5f:1d:1a:5d:a8:81:95:9e:ad: dd:2e:fe:76:c2:25:ca:d7:ab:b4:19:19:16:2c:76: ed:19:44:5f:b1:73:d6:f4:f2:41:7a:6b:13:e7:61: 60:f9:ed:4b:4b:c4:2a:f6:c7:bb:7e:7e:e0:e6:7b: f5:f2:02:e5:05:f2:8b:3a:fc:2c:8f:d6:9e:53:ec: 79:89:c4:31:7f:f9:d8:18:57:8b:fb:30:5d:60:92: 38:d9:d0:6e:dc:85:38:de:95:96:65:6e:1c:cf:18: 34:0f:48:f5:3f:bb:bf:a6:4b:dc:da:9a:60:81:0c: 37:c4:08:32:d8:32:73:c2:80:d0:35:6f:bf:17:0f: d2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1D:2D:C8:45:10:B1:53:1E:4E:17:DF:92:0A:5E:D8:ED:9C:78:B5 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hx0tyEUQsVMeThffkgpe2O2ceLU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.246.44.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:58:20:b1:5c:dc:a3:88:da:35:55:3a:d9:a0:55:a2:e5:68: 44:ee:f3:a5:32:6a:14:f9:9d:40:07:b0:22:1a:97:3a:f4:15: c3:43:ca:a0:1f:2f:14:06:c7:38:20:f4:0f:55:59:f5:c2:40: d7:25:c1:93:ea:0a:28:85:3e:bd:ab:1e:28:47:dd:47:3e:1a: 2e:cd:17:23:72:8e:fc:cf:52:55:f7:69:15:67:55:de:a9:9a: 47:e7:df:f4:74:93:93:e4:3f:49:ef:28:c6:66:88:7f:2a:4c: 43:ec:fd:64:c3:94:42:9f:ad:e3:e6:85:6c:6c:a5:8b:da:01: 09:81:ca:55:54:07:47:48:15:c6:1c:46:ac:1b:65:f3:ea:ae: 84:c4:00:94:4a:33:db:d6:31:45:d7:41:1a:92:06:11:27:91: 7f:ff:e9:98:52:34:e9:11:54:25:a0:a8:80:51:e2:59:26:33: 06:a9:39:42:e1:a4:f2:f8:11:79:b9:4c:a9:6a:37:b8:22:35: 74:52:93:c1:c7:7a:a7:a1:45:e9:f0:5f:2a:ff:d2:76:f8:8c: 6f:f4:68:64:44:15:7e:43:9e:9a:06:5f:03:4b:64:1f:6e:ed: cf:d0:db:03:da:ae:f1:33:b5:b5:ec:a2:3e:46:1b:04:d8:ad: 00:7e:27:df -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICf48wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw NzMzMTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDg3MUQyREM4NDUxMEIx NTMxRTRFMTdERjkyMEE1RUQ4RUQ5Qzc4QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUXu21ORP4/QEQDIPru/IpkhUw/hOySwB2T2OHk4/9U0kwSMlV 1gMkkF4yLY0jMWVrBw9Hl+PaoC3oTKZFqgoyu0ygq1dMFqarxFX7+pkquoAwWQc+ Jj4cvYaLCReXESJ9d06GQ8a7mGpiX4ICOM9osfsDTxAQNKrl/bUQiV8dGl2ogZWe rd0u/nbCJcrXq7QZGRYsdu0ZRF+xc9b08kF6axPnYWD57UtLxCr2x7t+fuDme/Xy AuUF8os6/CyP1p5T7HmJxDF/+dgYV4v7MF1gkjjZ0G7chTjelZZlbhzPGDQPSPU/ u7+mS9zammCBDDfECDLYMnPCgNA1b78XD9LXAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUhx0tyEUQsVMeThffkgpe2O2ceLUwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2h4MHR5RVVRc1ZNZVRo ZmZrZ3BlMk8yY2VMVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr9iwwDQYJKoZIhvcNAQELBQADggEBAE5YILFc3KOI2jVVOtmgVaLlaETu86Uy ahT5nUAHsCIalzr0FcNDyqAfLxQGxzgg9A9VWfXCQNclwZPqCiiFPr2rHihH3Uc+ Gi7NFyNyjvzPUlX3aRVnVd6pmkfn3/R0k5PkP0nvKMZmiH8qTEPs/WTDlEKfrePm hWxspYvaAQmBylVUB0dIFcYcRqwbZfPqroTEAJRKM9vWMUXXQRqSBhEnkX//6ZhS NOkRVCWgqIBR4lkmMwapOULhpPL4EXm5TKlqN7giNXRSk8HHeqehRenwXyr/0nb4 jG/0aGREFX5DnpoGXwNLZB9u7c/Q2wParvEztbXsoj5GGwTYrQB+J98= -----END CERTIFICATE-----Generated at Thu Aug 14 11:06:05 2025 by rpki-client