$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/JjuPfSenFrZVTiEEu74GswyJ-sk.roa File: JjuPfSenFrZVTiEEu74GswyJ-sk.roa (raw, json) Hash identifier: eDkeBiEH+VaW3mi5v0Cy2GbZH/oA9mCrQzj+ONPGzLA= Subject key identifier: 26:3B:8F:7D:27:A7:16:B6:55:4E:21:04:BB:BE:06:B3:0C:89:FA:C9 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 065C Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/JjuPfSenFrZVTiEEu74GswyJ-sk.roa Signing time: Tue 04 Mar 2025 07:34:41 +0000 ROA not before: Tue 04 Mar 2025 07:34:41 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 7641 IP address blocks: 211.146.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 17:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1628 (0x65c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Mar 4 07:34:41 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=263B8F7D27A716B6554E2104BBBE06B30C89FAC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:e0:ea:fc:df:41:87:25:90:53:f2:21:cd: c4:dc:25:37:c0:fc:32:c4:5f:74:da:eb:b8:ce:8b: 9c:1d:a3:09:dd:ed:d8:5f:13:28:f1:42:54:69:03: 72:3f:7b:a7:86:5b:ca:0c:6f:ad:1a:de:56:5b:7f: 83:c1:cd:52:22:e2:b2:37:33:fe:33:fe:47:c5:29: 31:ff:51:f6:4a:4f:6f:ab:38:12:30:f2:cd:96:4b: de:1a:7e:a4:7c:03:51:56:5b:35:c4:b0:d6:91:f6: 98:08:6d:6f:cf:0a:b2:95:3b:c6:e1:1c:16:9b:a3: 75:a1:58:02:f0:e3:5a:13:74:06:01:fd:be:a3:85: 64:c2:22:23:f6:3c:ff:ad:86:50:ac:c7:1e:90:92: 62:20:a9:69:fd:da:a6:85:ab:22:6e:9b:f4:bc:58: 6d:fd:1e:68:5b:d6:e1:c9:52:7f:5a:a8:1d:c6:2c: fa:a9:a3:bf:df:e7:72:69:05:eb:5f:f7:91:b6:e2: 27:12:17:73:87:f1:29:14:63:48:ab:53:ef:56:fd: 78:15:3f:52:15:6b:7e:e1:46:37:e0:59:61:a7:a0: c8:3b:b8:4d:65:84:6b:65:e7:b7:9f:10:89:f5:79: 85:56:c0:38:8a:31:9a:ee:d6:91:cc:2b:11:d2:05: 80:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3B:8F:7D:27:A7:16:B6:55:4E:21:04:BB:BE:06:B3:0C:89:FA:C9 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/JjuPfSenFrZVTiEEu74GswyJ-sk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.146.0.0/20 Signature Algorithm: sha256WithRSAEncryption 42:90:87:77:ac:b7:ac:ba:b5:59:9f:43:d2:6d:26:9a:91:5c: 57:01:2b:3b:64:e4:52:57:04:95:a0:99:47:27:96:3e:38:76: 77:5e:d2:85:35:c4:f5:94:74:bf:e4:09:80:e6:0c:a5:21:01: a7:71:83:57:f6:68:c9:25:64:dd:aa:30:b1:ad:6b:8c:9f:2f: e9:3e:bb:7e:7e:b4:cc:39:32:2e:8f:03:3c:b5:b7:b1:ae:a5: e5:06:ce:23:25:3e:3b:51:33:35:c4:ca:cc:75:d5:cb:5c:f2: b3:18:b4:80:4c:95:85:ad:09:bb:99:52:38:c4:30:ea:86:42: d4:91:cc:b1:84:e5:ae:24:6a:94:fa:76:70:ee:6f:93:d0:58: 34:c4:19:ad:af:d7:8a:3b:c3:75:c7:9f:4a:3f:0a:18:b0:98: 31:9f:3d:fe:af:04:6b:ce:f3:37:54:ed:98:b3:4b:38:c7:78: f1:de:de:09:79:68:96:14:da:43:76:d2:0c:43:0e:6a:fa:ad: d4:98:cb:18:13:fc:8a:f8:4f:3b:59:2e:ce:82:ac:73:ed:7c: d2:00:d1:a4:4a:dc:9c:26:64:d0:fb:20:33:1a:79:44:cf:03: d9:bd:c9:43:3c:e0:9e:69:32:b3:c3:24:fe:5c:04:74:05:0f: 01:7a:c0:a0 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTAzMDQw NzM0NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDI2M0I4RjdEMjdBNzE2 QjY1NTRFMjEwNEJCQkUwNkIzMEM4OUZBQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKh+Dq/N9BhyWQU/IhzcTcJTfA/DLEX3Ta67jOi5wdownd7dhf EyjxQlRpA3I/e6eGW8oMb60a3lZbf4PBzVIi4rI3M/4z/kfFKTH/UfZKT2+rOBIw 8s2WS94afqR8A1FWWzXEsNaR9pgIbW/PCrKVO8bhHBabo3WhWALw41oTdAYB/b6j hWTCIiP2PP+thlCsxx6QkmIgqWn92qaFqyJum/S8WG39Hmhb1uHJUn9aqB3GLPqp o7/f53JpBetf95G24icSF3OH8SkUY0irU+9W/XgVP1IVa37hRjfgWWGnoMg7uE1l hGtl57efEIn1eYVWwDiKMZru1pHMKxHSBYDNAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUJjuPfSenFrZVTiEEu74GswyJ+skwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9KanVQZlNlbkZyWlZUaUVF dTc0R3N3eUotc2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE 05IAMA0GCSqGSIb3DQEBCwUAA4IBAQBCkId3rLesurVZn0PSbSaakVxXASs7ZORS VwSVoJlHJ5Y+OHZ3XtKFNcT1lHS/5AmA5gylIQGncYNX9mjJJWTdqjCxrWuMny/p Prt+frTMOTIujwM8tbexrqXlBs4jJT47UTM1xMrMddXLXPKzGLSATJWFrQm7mVI4 xDDqhkLUkcyxhOWuJGqU+nZw7m+T0Fg0xBmtr9eKO8N1x59KPwoYsJgxnz3+rwRr zvM3VO2Ys0s4x3jx3t4JeWiWFNpDdtIMQw5q+q3UmMsYE/yK+E87WS7Ogqxz7XzS ANGkStycJmTQ+yAzGnlEzwPZvclDPOCeaTKzwyT+XAR0BQ8BesCg -----END CERTIFICATE-----Generated at Fri Jul 4 15:10:59 2025 by rpki-client