$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/hpSk9FtB-5FKH6OsSgpwV_rsR0M.roa File: hpSk9FtB-5FKH6OsSgpwV_rsR0M.roa (raw, json) Hash identifier: aIdx+y/qTmn5HIbaHq/qrQpV2h9fairT3WeXGqtjbpI= Subject key identifier: 86:94:A4:F4:5B:41:FB:91:4A:1F:A3:AC:4A:0A:70:57:FA:EC:47:43 Certificate issuer: /CN=2CB237ABE1A66A755DA9545795F1DD229F0E0311 Certificate serial: 029D Authority key identifier: 2C:B2:37:AB:E1:A6:6A:75:5D:A9:54:57:95:F1:DD:22:9F:0E:03:11 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/hpSk9FtB-5FKH6OsSgpwV_rsR0M.roa Signing time: Wed 05 Nov 2025 02:44:36 +0000 ROA not before: Wed 05 Nov 2025 02:44:36 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 137264 IP address blocks: 165.101.70.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB237ABE1A66A755DA9545795F1DD229F0E0311 Validity Not Before: Nov 5 02:44:36 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=8694A4F45B41FB914A1FA3AC4A0A7057FAEC4743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:34:06:7f:0b:dc:25:7b:2b:b7:1e:5a:76: 09:e5:51:88:0a:c6:e0:36:f6:ec:0b:6b:dd:fa:65: e1:3a:af:64:c9:2d:2d:5f:a2:ba:ec:13:21:ab:87: de:7b:cc:56:10:b6:9b:1d:80:5d:64:73:29:52:42: 61:49:33:63:bf:4a:6b:ae:8f:fb:51:39:69:99:ad: c0:f6:1f:d1:23:df:47:f7:5f:84:01:37:ec:87:f0: fb:da:54:21:33:84:a8:38:54:47:00:99:4e:68:7d: 0a:fa:58:f6:2b:ea:b6:67:ca:83:0f:72:c0:74:0f: 3d:56:62:ed:f1:2a:e5:ce:e5:5d:5b:66:7d:0b:05: 12:36:82:3b:a9:6e:c8:fc:9a:d9:9f:24:e2:e1:d8: 3b:f9:34:3e:48:77:b4:3f:d4:82:05:f9:98:2e:3d: 77:2c:b5:9e:5e:54:ad:47:9b:dc:eb:4b:5a:30:69: 3e:41:57:f6:72:38:34:47:0c:dd:1a:dd:90:92:52: d2:f9:66:1e:7d:10:07:2e:0e:ee:18:4d:8d:7d:bc: 0b:25:71:ad:30:39:f1:72:ce:44:2f:f8:c5:14:bb: f9:47:0a:b7:a2:a1:95:d1:30:78:6f:fa:c6:67:e7: ed:86:96:41:04:45:86:69:61:0e:e9:95:15:f1:fb: 3c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:94:A4:F4:5B:41:FB:91:4A:1F:A3:AC:4A:0A:70:57:FA:EC:47:43 X509v3 Authority Key Identifier: keyid:2C:B2:37:AB:E1:A6:6A:75:5D:A9:54:57:95:F1:DD:22:9F:0E:03:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/hpSk9FtB-5FKH6OsSgpwV_rsR0M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.101.70.0/24 Signature Algorithm: sha256WithRSAEncryption 58:a7:b7:ba:aa:e2:7a:62:06:f0:19:89:39:88:30:8a:e5:33: e5:17:4c:18:d9:c3:99:83:9d:87:80:51:ac:e0:81:4c:98:a2: a6:8c:12:13:cd:94:8a:ea:31:cb:30:68:d8:68:d3:ad:bb:8a: 57:15:4e:79:bb:0c:4d:e3:9a:98:ee:89:70:3f:cd:fa:dd:86: 1b:b7:d0:c9:4f:ef:e6:a7:eb:2f:5e:5e:9e:ae:a6:87:d0:6d: f4:f6:3e:a0:49:89:bd:61:f3:b1:fe:2d:e1:e7:8a:fe:62:d8: 7d:4f:45:8e:b0:8b:a5:fa:81:b7:fb:27:b3:86:a4:f2:e2:48: 1f:1f:6f:79:b6:dc:27:0c:9d:9b:ec:a6:4e:da:f9:3f:e3:74: 76:07:ea:4b:49:7f:09:84:72:1e:0b:1a:dc:c7:c6:46:37:ef: 0e:ff:e0:c6:7f:85:9a:d2:31:6b:28:04:d5:65:6b:20:7d:39: 07:3e:c2:67:b1:52:d5:9a:07:0d:65:91:68:22:44:73:5e:46: 29:4a:4b:c3:29:80:7f:fe:c2:bd:28:50:08:f9:1e:77:1c:aa: 26:5e:48:e0:6f:bc:cd:d8:a6:10:7e:ca:eb:99:63:66:ef:60: a4:bf:30:e2:09:ff:45:80:ff:b2:2c:40:99:6f:f1:75:c2:45: 8f:45:2e:dd -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkNC MjM3QUJFMUE2NkE3NTVEQTk1NDU3OTVGMUREMjI5RjBFMDMxMTAeFw0yNTExMDUw MjQ0MzZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDg2OTRBNEY0NUI0MUZC OTE0QTFGQTNBQzRBMEE3MDU3RkFFQzQ3NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCldzQGfwvcJXsrtx5adgnlUYgKxuA29uwLa936ZeE6r2TJLS1f orrsEyGrh957zFYQtpsdgF1kcylSQmFJM2O/Smuuj/tROWmZrcD2H9Ej30f3X4QB N+yH8PvaVCEzhKg4VEcAmU5ofQr6WPYr6rZnyoMPcsB0Dz1WYu3xKuXO5V1bZn0L BRI2gjupbsj8mtmfJOLh2Dv5ND5Id7Q/1IIF+ZguPXcstZ5eVK1Hm9zrS1owaT5B V/ZyODRHDN0a3ZCSUtL5Zh59EAcuDu4YTY19vAslca0wOfFyzkQv+MUUu/lHCrei oZXRMHhv+sZn5+2GlkEERYZpYQ7plRXx+zwnAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUhpSk9FtB+5FKH6OsSgpwV/rsR0MwHwYDVR0jBBgwFoAULLI3q+GmanVdqVRX lfHdIp8OAxEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 OS9MTEkzcS1HbWFuVmRxVlJYbGZIZElwOE9BeEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xMSTNxLUdtYW5WZHFWUlhsZkhkSXA4T0F4RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzkvaHBTazlGdEItNUZL SDZPc1NncHdWX3JzUjBNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAKVlRjANBgkqhkiG9w0BAQsFAAOCAQEAWKe3uqriemIG8BmJOYgwiuUz5RdM GNnDmYOdh4BRrOCBTJiipowSE82UiuoxyzBo2GjTrbuKVxVOebsMTeOamO6JcD/N +t2GG7fQyU/v5qfrL15enq6mh9Bt9PY+oEmJvWHzsf4t4eeK/mLYfU9FjrCLpfqB t/sns4ak8uJIHx9vebbcJwydm+ymTtr5P+N0dgfqS0l/CYRyHgsa3MfGRjfvDv/g xn+FmtIxaygE1WVrIH05Bz7CZ7FS1ZoHDWWRaCJEc15GKUpLwymAf/7CvShQCPke dxyqJl5I4G+8zdimEH7K65ljZu9gpL8w4gn/RYD/sixAmW/xdcJFj0Uu3Q== -----END CERTIFICATE-----Generated at Wed Nov 5 16:03:52 2025 by rpki-client