$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/9XxOyd1OUAPvWTPUWW2_vJwovyI.roa File: 9XxOyd1OUAPvWTPUWW2_vJwovyI.roa (raw, json) Hash identifier: DMqOmTOkgrY5ytsZTzRh2Pwz/cla5EyKprQeDQUuRu8= Subject key identifier: F5:7C:4E:C9:DD:4E:50:03:EF:59:33:D4:59:6D:BF:BC:9C:28:BF:22 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0834 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/9XxOyd1OUAPvWTPUWW2_vJwovyI.roa Signing time: Fri 23 May 2025 07:41:07 +0000 ROA not before: Fri 23 May 2025 07:41:07 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 9808 IP address blocks: 223.161.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:41:07 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F57C4EC9DD4E5003EF5933D4596DBFBC9C28BF22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:73:76:f6:0a:36:e9:6d:f2:c4:97:39:22: 65:62:0c:1f:7a:c5:71:39:cd:6c:1c:2d:02:48:7a: a9:d7:10:39:fc:99:8a:7b:c2:6a:c3:a1:b0:01:bc: d1:7f:3b:56:2b:a3:e7:a0:fa:40:b1:0f:88:77:c7: d8:57:3d:74:d0:bb:29:04:9d:3e:6f:86:31:1a:a2: d6:0f:48:58:4b:72:e7:23:23:ea:62:ec:50:69:fa: 31:75:6b:e2:ba:b8:3c:e6:eb:71:88:0b:b9:b6:e3: 5b:3c:af:c4:91:8d:60:49:62:ca:ee:2f:02:16:e0: 4e:49:ee:fc:42:61:d2:0c:e1:29:d7:21:52:c3:78: 61:42:b9:cd:a0:bc:c1:04:a2:3c:35:b1:86:20:df: 7b:a0:16:3f:a0:83:27:5a:1b:cf:1b:0e:1c:42:b1: c8:17:06:07:66:9b:bb:17:71:27:09:4d:3a:fd:6f: 5c:c1:60:16:67:2d:7f:ef:58:c5:00:97:7c:80:e4: 95:36:0b:af:58:c7:71:4c:94:97:69:5c:64:2d:1d: 13:0d:08:ad:96:8d:ca:0e:27:c9:c1:f4:d2:a5:84: 8d:9a:e1:d5:2d:70:5d:d7:0c:01:77:7b:a9:28:2f: 9d:6b:26:94:49:21:af:07:93:58:cd:0c:d5:da:3e: 59:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7C:4E:C9:DD:4E:50:03:EF:59:33:D4:59:6D:BF:BC:9C:28:BF:22 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/9XxOyd1OUAPvWTPUWW2_vJwovyI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.161.248.0/23 Signature Algorithm: sha256WithRSAEncryption 59:51:66:48:24:f1:77:eb:2b:57:c8:66:fb:83:16:0d:6e:e1: ba:fa:7f:40:03:ef:39:ff:bf:0b:c3:8d:a6:43:12:dc:40:f3: c5:f8:97:06:75:a7:66:06:d3:ea:19:94:81:08:3b:b5:26:17: 97:76:4d:b3:4e:f3:c8:f5:fa:13:81:37:ce:bd:d9:85:1a:25: 85:e4:6b:c0:55:7b:41:25:8f:27:f0:b0:fa:9f:4c:9b:07:73: ab:47:a9:18:84:f8:aa:58:ff:e2:37:c6:f1:97:7f:1e:e4:03: 58:cc:a4:c7:1b:02:30:3c:cc:f4:b8:a7:b0:8b:19:45:5c:1c: 57:fd:81:8d:8f:6a:13:44:93:04:66:55:f7:02:62:4b:07:4d: 67:e9:14:5e:e0:69:a8:15:ee:a8:55:a9:35:61:70:da:5c:4f: 84:67:04:bb:ec:d0:f9:70:55:8e:5a:45:23:53:91:1c:ba:2b: 6e:74:14:cd:a4:97:1e:ea:31:50:ce:96:e7:2a:6b:f1:ab:2a: 9a:1e:8c:65:ae:8f:79:d2:11:00:2c:38:28:92:8c:f1:a9:cc: 1b:bc:d9:dd:19:4e:c4:a2:d8:6c:64:65:62:56:bf:ed:a3:f2: 5d:09:71:2c:81:fe:56:90:71:a5:c5:95:74:7c:22:29:24:c2: 78:d8:d1:a4 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzQxMDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEY1N0M0RUM5REQ0RTUw MDNFRjU5MzNENDU5NkRCRkJDOUMyOEJGMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq83N29go26W3yxJc5ImViDB96xXE5zWwcLQJIeqnXEDn8mYp7 wmrDobABvNF/O1Yro+eg+kCxD4h3x9hXPXTQuykEnT5vhjEaotYPSFhLcucjI+pi 7FBp+jF1a+K6uDzm63GIC7m241s8r8SRjWBJYsruLwIW4E5J7vxCYdIM4SnXIVLD eGFCuc2gvMEEojw1sYYg33ugFj+ggydaG88bDhxCscgXBgdmm7sXcScJTTr9b1zB YBZnLX/vWMUAl3yA5JU2C69Yx3FMlJdpXGQtHRMNCK2WjcoOJ8nB9NKlhI2a4dUt cF3XDAF3e6koL51rJpRJIa8Hk1jNDNXaPlm1AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU9XxOyd1OUAPvWTPUWW2/vJwovyIwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy85WHhPeWQxT1VBUHZXVFBV V1cyX3ZKd292eUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36H4MA0GCSqGSIb3DQEBCwUAA4IBAQBZUWZIJPF36ytXyGb7gxYNbuG6+n9AA+85 /78Lw42mQxLcQPPF+JcGdadmBtPqGZSBCDu1JheXdk2zTvPI9foTgTfOvdmFGiWF 5GvAVXtBJY8n8LD6n0ybB3OrR6kYhPiqWP/iN8bxl38e5ANYzKTHGwIwPMz0uKew ixlFXBxX/YGNj2oTRJMEZlX3AmJLB01n6RRe4GmoFe6oVak1YXDaXE+EZwS77ND5 cFWOWkUjU5EcuitudBTNpJce6jFQzpbnKmvxqyqaHoxlro950hEALDgokozxqcwb vNndGU7EothsZGViVr/to/JdCXEsgf5WkHGlxZV0fCIpJMJ42NGk -----END CERTIFICATE-----Generated at Fri Jul 4 08:19:56 2025 by rpki-client