$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/hwPvFQ12fDPeaRfHonc4m2tNWxw.roa File: hwPvFQ12fDPeaRfHonc4m2tNWxw.roa (raw, json) Hash identifier: yNLBK4aRzjIDWwRXxafO+h00xwaZxv6SfNcHdWu+MJw= Subject key identifier: 87:03:EF:15:0D:76:7C:33:DE:69:17:C7:A2:77:38:9B:6B:4D:5B:1C Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 15B2 Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/hwPvFQ12fDPeaRfHonc4m2tNWxw.roa Signing time: Mon 20 Oct 2025 09:27:21 +0000 ROA not before: Mon 20 Oct 2025 09:27:21 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 62387 IP address blocks: 123.98.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 08:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5554 (0x15b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Oct 20 09:27:21 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8703EF150D767C33DE6917C7A277389B6B4D5B1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:c7:06:c3:d0:1b:d5:16:2c:97:82:74:a6: 6a:7e:6f:89:18:79:ae:4a:d3:ea:41:00:83:d8:5d: b2:31:94:10:ef:31:74:50:f5:26:9f:25:26:cf:dc: 8a:48:1d:0a:b5:9f:d1:3e:15:2f:4f:d8:fe:2a:74: db:8e:95:13:78:d2:b5:0e:38:82:89:7b:a3:d9:01: 31:41:cc:0f:89:18:8c:d4:71:ed:34:e3:a7:1b:3b: 93:3b:0e:56:07:ea:3d:6a:59:1a:2f:21:42:39:49: 52:93:92:f2:10:50:69:5a:ee:f7:30:36:a9:83:32: 40:eb:76:34:ca:cc:85:06:d6:e4:21:47:74:3f:9d: 3a:45:a4:ca:f1:d3:af:fe:39:90:ea:2b:f5:1e:53: 37:24:04:b1:98:a5:45:97:cb:fd:b9:19:3e:57:fa: 90:fb:01:78:da:19:ff:d6:2c:f3:d9:f9:bb:2e:31: 9a:73:05:7e:7b:8d:eb:92:21:0c:29:a7:7e:2f:70: 1e:b8:7d:0a:ed:58:bf:37:86:32:cf:13:93:3e:86: e2:db:37:9c:b5:4a:32:ea:19:a6:df:23:21:4f:97: 19:7d:08:5c:b3:14:70:b9:b9:9a:ee:24:50:b3:2f: ed:7a:9d:0a:f6:7d:13:cd:1a:0e:26:a0:c3:b4:e8: 12:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:03:EF:15:0D:76:7C:33:DE:69:17:C7:A2:77:38:9B:6B:4D:5B:1C X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/hwPvFQ12fDPeaRfHonc4m2tNWxw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.98.92.0/22 Signature Algorithm: sha256WithRSAEncryption 91:5e:4f:9a:bb:ea:f9:69:5d:69:74:ff:2f:08:6b:70:66:68: 65:cf:10:b0:19:82:d9:b4:0c:60:5d:d0:16:b5:b2:75:ec:c4: f4:0f:af:1a:6f:b0:31:bc:ba:f9:0a:3f:5c:c4:7b:08:c9:2f: d4:08:70:cd:25:cc:af:c2:0a:bd:ef:07:16:3b:96:0d:d5:bb: 50:43:2e:42:06:ce:5d:83:59:e1:a4:92:87:b4:d5:d0:cc:8a: 90:b4:77:76:ae:f1:69:92:ee:42:ef:e8:08:db:02:5a:1b:ae: 10:56:41:bf:4c:3e:72:7f:35:9c:81:ed:74:d9:b1:3d:cd:1d: 2d:ab:05:db:f9:d7:fe:0e:90:e6:d7:2e:90:84:8d:78:f4:a1: 85:92:cb:60:e6:49:b4:d2:ba:6a:84:66:a9:62:44:0c:e4:d4: b6:70:8a:e8:3b:4c:de:ce:6e:98:3d:86:2a:0c:ad:eb:32:a8: a9:ea:32:74:66:bb:75:47:d4:12:91:2f:c7:c4:63:0b:e8:a4: af:6c:1b:7e:58:3a:91:2b:88:49:2e:02:d9:0f:86:88:08:1d: 9c:82:fb:39:ce:e1:9b:25:d9:5a:03:9e:75:06:24:3e:61:de: 7c:33:8a:cd:b7:90:48:0c:f8:b3:c3:6a:54:cf:41:3d:1d:2d: e4:40:77:c1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTEwMjAw OTI3MjFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDg3MDNFRjE1MEQ3NjdD MzNERTY5MTdDN0EyNzczODlCNkI0RDVCMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7iccGw9Ab1RYsl4J0pmp+b4kYea5K0+pBAIPYXbIxlBDvMXRQ 9SafJSbP3IpIHQq1n9E+FS9P2P4qdNuOlRN40rUOOIKJe6PZATFBzA+JGIzUce00 46cbO5M7DlYH6j1qWRovIUI5SVKTkvIQUGla7vcwNqmDMkDrdjTKzIUG1uQhR3Q/ nTpFpMrx06/+OZDqK/UeUzckBLGYpUWXy/25GT5X+pD7AXjaGf/WLPPZ+bsuMZpz BX57jeuSIQwpp34vcB64fQrtWL83hjLPE5M+huLbN5y1SjLqGabfIyFPlxl9CFyz FHC5uZruJFCzL+16nQr2fRPNGg4moMO06BIRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUhwPvFQ12fDPeaRfHonc4m2tNWxwwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL2h3UHZGUTEyZkRQZWFS ZkhvbmM0bTJ0Tld4dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJ7YlwwDQYJKoZIhvcNAQELBQADggEBAJFeT5q76vlpXWl0/y8Ia3BmaGXPELAZ gtm0DGBd0Ba1snXsxPQPrxpvsDG8uvkKP1zEewjJL9QIcM0lzK/CCr3vBxY7lg3V u1BDLkIGzl2DWeGkkoe01dDMipC0d3au8WmS7kLv6AjbAlobrhBWQb9MPnJ/NZyB 7XTZsT3NHS2rBdv51/4OkObXLpCEjXj0oYWSy2DmSbTSumqEZqliRAzk1LZwiug7 TN7Obpg9hioMresyqKnqMnRmu3VH1BKRL8fEYwvopK9sG35YOpEriEkuAtkPhogI HZyC+znO4Zsl2VoDnnUGJD5h3nwzis23kEgM+LPDalTPQT0dLeRAd8E= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:33 2025 by rpki-client