$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/233/hxxm10cip3JqtchA7UZBQymP6vk.roa File: hxxm10cip3JqtchA7UZBQymP6vk.roa (raw, json) Hash identifier: 93UwpEBZZZlvsPwyvpYB2IOTZvAfQT8jp+LAd+larWY= Subject key identifier: 87:1C:66:D7:47:22:A7:72:6A:B5:C8:40:ED:46:41:43:29:8F:EA:F9 Certificate issuer: /CN=AF3AF4D01F0CD056F0E3F698800B223AEE773D20 Certificate serial: 26B8 Authority key identifier: AF:3A:F4:D0:1F:0C:D0:56:F0:E3:F6:98:80:0B:22:3A:EE:77:3D:20 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rzr00B8M0Fbw4_aYgAsiOu53PSA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/hxxm10cip3JqtchA7UZBQymP6vk.roa Signing time: Sat 13 Sep 2025 03:09:42 +0000 ROA not before: Sat 13 Sep 2025 03:09:42 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 7468 IP address blocks: 222.126.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rzr00B8M0Fbw4_aYgAsiOu53PSA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9912 (0x26b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3AF4D01F0CD056F0E3F698800B223AEE773D20 Validity Not Before: Sep 13 03:09:42 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=871C66D74722A7726AB5C840ED464143298FEAF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:64:fb:c9:c1:3f:45:9f:8f:4b:02:e8:1a:96: a5:d0:83:a4:2c:c4:5b:dd:7b:12:60:15:ea:04:a8: 03:65:40:f3:f8:78:cc:86:b5:38:72:38:34:24:2a: 55:c6:ae:b6:48:dc:11:0f:6e:b9:6c:7f:8f:ef:73: bb:25:d1:43:b0:c5:f2:02:9d:fc:51:14:bd:c6:41: a9:34:e5:69:f7:49:c3:51:fe:66:fd:ec:bd:40:98: 1d:dc:69:79:10:61:e4:11:13:63:9a:66:36:f6:ed: 4f:8e:c4:2a:0a:4f:fc:8a:25:01:d3:1a:e9:d9:65: 66:6b:fe:d2:36:0e:9c:2a:55:12:61:24:1b:2f:61: 27:34:5b:1f:74:39:34:14:44:e8:32:54:c9:29:92: 52:da:e0:85:58:fb:2b:a7:be:21:2c:28:67:eb:e2: 4b:0a:7c:d0:63:47:50:77:3e:f7:89:4b:74:86:d6: 62:2d:4f:c2:07:ea:e2:96:3b:fc:40:b6:c3:36:85: dc:f9:3b:42:c6:eb:2f:9a:4c:9a:6d:89:e9:6f:06: 23:8d:5b:1b:b1:e6:99:d0:f8:2a:01:51:5d:07:4d: 0d:61:2f:f8:64:88:54:30:3a:79:a0:64:0b:61:47: 8f:82:ae:ac:6b:da:c2:3d:43:8b:aa:aa:04:87:69: c2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1C:66:D7:47:22:A7:72:6A:B5:C8:40:ED:46:41:43:29:8F:EA:F9 X509v3 Authority Key Identifier: keyid:AF:3A:F4:D0:1F:0C:D0:56:F0:E3:F6:98:80:0B:22:3A:EE:77:3D:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rzr00B8M0Fbw4_aYgAsiOu53PSA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/hxxm10cip3JqtchA7UZBQymP6vk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.126.138.0/24 Signature Algorithm: sha256WithRSAEncryption 43:53:bf:e4:fa:60:da:fa:d3:f7:95:6d:d2:a6:f5:b5:b8:90: 1d:18:be:bd:6e:28:45:d1:34:5f:8d:54:69:a6:34:c4:ad:ee: 97:8f:4f:b1:33:04:49:3a:83:2f:e9:f3:05:71:65:86:0b:b3: 50:82:08:07:cd:0d:9d:33:e2:6a:4a:b5:29:06:35:dd:70:b6: d6:ad:2c:9b:70:39:0c:b9:da:3d:5e:bf:b1:d5:71:09:47:55: af:99:ad:05:fb:8c:57:53:4a:66:88:57:55:12:2e:c7:db:66: 0a:d0:f1:1a:ea:f9:81:a4:71:1b:62:11:fc:90:cc:73:3c:14: 0a:49:0e:da:85:3c:97:df:4f:e8:25:aa:f5:ac:60:b9:a1:d8: 19:9c:24:05:e2:9b:5c:89:81:7a:86:54:65:95:68:4e:71:33: 4d:1f:ff:56:d6:b0:5b:50:f8:28:37:79:99:95:50:66:8b:83: d1:14:38:14:58:54:15:67:39:6b:e7:2b:81:27:df:d1:a9:d3: 89:90:8b:11:f6:1f:46:a8:3b:ad:f5:74:bf:24:2b:67:9f:97: df:d8:74:78:65:7b:a0:49:8b:45:f3:64:b3:e5:9f:1e:0d:be: a3:00:c3:f8:29:58:cf:28:ca:7b:12:d3:cb:0d:92:fb:95:36: 95:ab:0a:06 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICJrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUYz QUY0RDAxRjBDRDA1NkYwRTNGNjk4ODAwQjIyM0FFRTc3M0QyMDAeFw0yNTA5MTMw MzA5NDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDg3MUM2NkQ3NDcyMkE3 NzI2QUI1Qzg0MEVENDY0MTQzMjk4RkVBRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpZPvJwT9Fn49LAugalqXQg6QsxFvdexJgFeoEqANlQPP4eMyG tThyODQkKlXGrrZI3BEPbrlsf4/vc7sl0UOwxfICnfxRFL3GQak05Wn3ScNR/mb9 7L1AmB3caXkQYeQRE2OaZjb27U+OxCoKT/yKJQHTGunZZWZr/tI2DpwqVRJhJBsv YSc0Wx90OTQUROgyVMkpklLa4IVY+yunviEsKGfr4ksKfNBjR1B3PveJS3SG1mIt T8IH6uKWO/xAtsM2hdz5O0LG6y+aTJptielvBiONWxux5pnQ+CoBUV0HTQ1hL/hk iFQwOnmgZAthR4+Crqxr2sI9Q4uqqgSHacJJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUhxxm10cip3JqtchA7UZBQymP6vkwHwYDVR0jBBgwFoAUrzr00B8M0Fbw4/aY gAsiOu53PSAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMz L3J6cjAwQjhNMEZidzRfYVlnQXNpT3U1M1BTQS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcnpyMDBCOE0wRmJ3NF9hWWdBc2lPdTUzUFNBLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMzL2h4eG0xMGNpcDNKcXRj aEE3VVpCUXltUDZ2ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADefoowDQYJKoZIhvcNAQELBQADggEBAENTv+T6YNr60/eVbdKm9bW4kB0Yvr1u KEXRNF+NVGmmNMSt7pePT7EzBEk6gy/p8wVxZYYLs1CCCAfNDZ0z4mpKtSkGNd1w ttatLJtwOQy52j1ev7HVcQlHVa+ZrQX7jFdTSmaIV1USLsfbZgrQ8Rrq+YGkcRti EfyQzHM8FApJDtqFPJffT+glqvWsYLmh2BmcJAXim1yJgXqGVGWVaE5xM00f/1bW sFtQ+Cg3eZmVUGaLg9EUOBRYVBVnOWvnK4En39Gp04mQixH2H0aoO631dL8kK2ef l9/YdHhle6BJi0XzZLPlnx4NvqMAw/gpWM8oynsS08sNkvuVNpWrCgY= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:59 2025 by rpki-client