$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/HBHO8tQ-z4hRkwHMpcvPYSsxbRg.roa File: HBHO8tQ-z4hRkwHMpcvPYSsxbRg.roa (raw, json) Hash identifier: igDgEoqbm9xJIF1mphuETv9quhsY6Xfhqwm4UrPtPMw= Subject key identifier: 1C:11:CE:F2:D4:3E:CF:88:51:93:01:CC:A5:CB:CF:61:2B:31:6D:18 Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Certificate serial: 07D5 Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/HBHO8tQ-z4hRkwHMpcvPYSsxbRg.roa Signing time: Thu 24 Jul 2025 01:53:56 +0000 ROA not before: Thu 24 Jul 2025 01:53:56 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146762 IP address blocks: 103.2.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2005 (0x7d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Validity Not Before: Jul 24 01:53:56 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1C11CEF2D43ECF88519301CCA5CBCF612B316D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:79:57:0b:41:a1:e9:45:f8:04:11:b8:af:f9: d9:45:13:e4:0d:6c:c7:20:13:59:ff:e0:25:8a:8a: 62:3d:3a:0e:43:0e:8f:97:63:19:a5:e9:fb:57:61: b9:f1:11:31:d9:56:10:f5:b2:c5:c4:c4:cb:8f:c1: 6b:7a:6d:59:b6:36:81:d3:e9:56:22:85:b2:e8:2e: eb:c3:2b:36:5f:1b:c5:34:a5:aa:c7:33:15:57:27: 8c:c4:16:18:77:3a:0a:2e:a7:5f:82:ac:7c:36:b9: 49:c1:2c:bb:ab:94:07:79:0f:bf:68:7c:ac:e7:2b: 9f:10:82:57:3f:40:66:7d:86:c7:44:07:73:f8:98: 7a:77:96:84:b1:e1:cd:83:96:20:98:d3:91:fc:29: 95:1b:ba:7e:aa:44:97:80:1e:a1:57:80:56:59:78: ac:48:86:e2:0d:49:5d:64:54:e0:d9:73:4d:b3:26: dc:8d:f3:e3:f6:7c:39:6e:78:92:38:ec:6d:df:b2: ab:da:48:08:f0:6d:f4:7a:2b:07:af:1f:95:7b:29: e6:cb:f8:13:dd:f7:c9:dd:cc:c7:f2:ce:e3:ac:1a: 6b:3b:84:68:eb:2b:e3:40:cf:15:9e:6b:29:3a:4a: f5:6b:f0:e8:68:2a:24:9f:83:2c:f3:f4:9c:c9:7e: 28:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:11:CE:F2:D4:3E:CF:88:51:93:01:CC:A5:CB:CF:61:2B:31:6D:18 X509v3 Authority Key Identifier: keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/HBHO8tQ-z4hRkwHMpcvPYSsxbRg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.2.157.0/24 Signature Algorithm: sha256WithRSAEncryption ab:d4:a6:99:ed:63:96:b1:53:68:ec:ef:dd:10:a7:48:8d:c7: dd:63:93:37:4d:79:04:ae:90:08:f0:5f:35:14:3c:d1:6c:23: a3:ba:b3:15:f6:eb:dd:15:6d:68:66:c8:00:ef:e1:7f:bd:bc: 24:09:c8:c7:a0:6b:28:e6:a4:cf:be:d1:47:7a:52:11:3a:9e: 40:30:2b:f9:75:30:1a:b6:b2:18:d6:05:32:a1:88:c0:64:e4: b6:30:56:94:df:d2:9b:d4:7e:78:a6:8f:42:1d:bb:2e:d9:5b: 6e:ca:bd:97:1b:10:4d:48:e3:66:b5:90:8c:49:25:1f:7c:aa: 1b:8c:2c:ab:62:6a:c8:91:8f:3f:99:8a:78:7e:60:04:9b:c2: 6a:57:4e:02:2e:20:12:5f:05:7a:cc:33:60:69:38:e2:cc:f2: fa:57:98:bf:d5:07:4f:8c:ba:ec:5b:21:68:ac:8a:2a:94:79: 91:20:5c:c9:bf:54:2b:f6:6f:c5:54:50:c1:b2:1a:6c:68:a1: 3c:a0:1b:03:d6:75:7c:c7:d1:2b:d2:18:d3:9e:78:69:3b:e5: 74:0e:41:9a:49:69:8b:20:7b:1d:55:81:cd:0f:53:9e:77:a4: 92:30:ef:a6:c1:49:2e:25:94:88:93:8d:5e:14:62:6e:70:d3: 36:cf:f4:ed -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICB9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJD NkQ5QTlGNEEyMjZBNjFGNUZBMUE5MTYzOTQxRDRCMzVCQTM1QjAeFw0yNTA3MjQw MTUzNTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFDMTFDRUYyRDQzRUNG ODg1MTkzMDFDQ0E1Q0JDRjYxMkIzMTZEMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQeVcLQaHpRfgEEbiv+dlFE+QNbMcgE1n/4CWKimI9Og5DDo+X Yxml6ftXYbnxETHZVhD1ssXExMuPwWt6bVm2NoHT6VYihbLoLuvDKzZfG8U0parH MxVXJ4zEFhh3Ogoup1+CrHw2uUnBLLurlAd5D79ofKznK58Qglc/QGZ9hsdEB3P4 mHp3loSx4c2DliCY05H8KZUbun6qRJeAHqFXgFZZeKxIhuINSV1kVODZc02zJtyN 8+P2fDlueJI47G3fsqvaSAjwbfR6KwevH5V7KebL+BPd98ndzMfyzuOsGms7hGjr K+NAzxWeayk6SvVr8OhoKiSfgyzz9JzJfiglAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUHBHO8tQ+z4hRkwHMpcvPYSsxbRgwHwYDVR0jBBgwFoAUG8bZqfSiJqYfX6Gp FjlB1LNbo1swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz NC9HOGJacWZTaUpxWWZYNkdwRmpsQjFMTmJvMXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0c4YlpxZlNpSnFZZlg2R3BGamxCMUxOYm8xcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzQvSEJITzh0US16NGhS a3dITXBjdlBZU3N4YlJnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGcCnTANBgkqhkiG9w0BAQsFAAOCAQEAq9Smme1jlrFTaOzv3RCnSI3H3WOT N015BK6QCPBfNRQ80Wwjo7qzFfbr3RVtaGbIAO/hf728JAnIx6BrKOakz77RR3pS ETqeQDAr+XUwGrayGNYFMqGIwGTktjBWlN/Sm9R+eKaPQh27Ltlbbsq9lxsQTUjj ZrWQjEklH3yqG4wsq2JqyJGPP5mKeH5gBJvCaldOAi4gEl8FeswzYGk44szy+leY v9UHT4y67FshaKyKKpR5kSBcyb9UK/ZvxVRQwbIabGihPKAbA9Z1fMfRK9IY0554 aTvldA5BmklpiyB7HVWBzQ9TnnekkjDvpsFJLiWUiJONXhRibnDTNs/07Q== -----END CERTIFICATE-----Generated at Wed Nov 5 16:50:41 2025 by rpki-client