$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/bV3JSpaifNaIG_CFxEx-B_kb2LM.roa File: bV3JSpaifNaIG_CFxEx-B_kb2LM.roa (raw, json) Hash identifier: UQ/I/6snl0KEL2LBZsItrGlbSlsmeZWFO8grfY5rtbw= Subject key identifier: 6D:5D:C9:4A:96:A2:7C:D6:88:1B:F0:85:C4:4C:7E:07:F9:1B:D8:B3 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0817 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/bV3JSpaifNaIG_CFxEx-B_kb2LM.roa Signing time: Fri 23 May 2025 07:17:24 +0000 ROA not before: Fri 23 May 2025 07:17:24 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 9808 IP address blocks: 223.160.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 12:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2071 (0x817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:17:24 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=6D5DC94A96A27CD6881BF085C44C7E07F91BD8B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:87:34:87:df:e6:3e:49:ef:21:32:6c:b2:b1: 3d:c0:7d:97:1f:be:ef:1a:94:0e:1e:48:f3:e5:0c: ae:5a:ce:54:87:75:b7:b6:2e:e9:ee:a1:61:95:5e: 58:8e:63:46:6c:4f:f5:1d:5d:5a:7c:90:6a:e5:cf: 09:d5:57:44:d0:2a:2e:71:2f:96:b0:a3:ba:a4:82: fa:97:fc:2c:09:ef:c9:3c:32:75:77:0a:af:b9:4b: eb:b9:e7:f2:9d:5f:a3:68:31:d5:f6:a6:78:3a:63: 07:8e:1c:4a:47:76:9b:4e:29:cf:0b:25:c1:ad:be: 67:e6:bd:df:87:0b:1c:8a:83:c0:05:b7:6c:c7:47: e4:25:b0:b3:38:f0:98:1d:e0:78:54:e3:db:ff:20: 1f:ad:87:09:54:35:f5:b7:2d:6b:32:fa:00:7f:6e: f2:77:d6:56:b3:05:84:a7:5d:ff:ac:75:39:4e:94: ba:b6:b1:54:53:e8:cc:5d:b2:05:a9:b6:07:61:d3: 24:61:1f:d2:8b:dd:c8:b3:7e:96:08:20:7e:62:21: 33:27:8f:6b:ab:30:95:b1:89:11:37:d4:71:d9:a1: 4f:0f:74:e3:4e:06:ca:f1:ef:b9:24:a7:d5:98:4c: 8c:7f:06:e3:af:94:5c:bc:a3:e6:db:1d:a3:d1:46: b3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5D:C9:4A:96:A2:7C:D6:88:1B:F0:85:C4:4C:7E:07:F9:1B:D8:B3 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/bV3JSpaifNaIG_CFxEx-B_kb2LM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.142.0/23 Signature Algorithm: sha256WithRSAEncryption 11:44:cb:a7:00:0b:17:b6:4b:82:38:1b:19:41:22:02:5f:50: 0a:96:b5:71:af:d7:f5:35:ae:7a:64:96:ac:ad:17:b9:6a:cf: d4:0b:1e:6b:9a:7a:64:9c:dc:bf:ae:c0:5a:27:5a:0c:c7:0b: 9b:d1:31:e5:63:c4:bc:cf:ec:97:1a:6a:a8:2f:29:d7:1d:80: eb:4d:2e:54:ee:3d:40:06:3a:32:79:f6:f2:93:15:1e:7c:fd: 6f:33:19:06:83:a2:48:f6:32:a7:17:c9:a6:df:20:97:29:12: 9c:56:8c:5b:ba:a7:99:74:e2:dd:11:6a:fa:e2:e6:44:4b:e9: c2:0f:5c:35:74:21:e0:b2:fc:c1:7c:d4:fc:97:14:17:4b:c7: 29:d2:55:c5:47:a1:fd:ed:30:d4:c2:6c:50:1f:69:b7:7b:9d: 5c:79:c9:11:08:0a:ed:c7:aa:fd:14:bf:59:b4:90:37:0d:23: 82:ef:54:62:73:39:bc:61:bb:ed:09:ee:5e:90:8d:29:25:8f: 07:45:9f:1d:c6:70:16:f0:de:0f:cf:9c:71:fb:98:68:74:25: eb:aa:b4:b1:92:74:61:35:27:c1:0b:7f:1c:d4:54:ed:9d:92: 76:26:d8:b4:29:48:a0:13:2c:ce:74:85:6d:b6:72:86:18:c3: a1:20:82:07 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzE3MjRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDZENURDOTRBOTZBMjdD RDY4ODFCRjA4NUM0NEM3RTA3RjkxQkQ4QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZhzSH3+Y+Se8hMmyysT3AfZcfvu8alA4eSPPlDK5azlSHdbe2 LunuoWGVXliOY0ZsT/UdXVp8kGrlzwnVV0TQKi5xL5awo7qkgvqX/CwJ78k8MnV3 Cq+5S+u55/KdX6NoMdX2png6YweOHEpHdptOKc8LJcGtvmfmvd+HCxyKg8AFt2zH R+QlsLM48Jgd4HhU49v/IB+thwlUNfW3LWsy+gB/bvJ31lazBYSnXf+sdTlOlLq2 sVRT6MxdsgWptgdh0yRhH9KL3cizfpYIIH5iITMnj2urMJWxiRE31HHZoU8PdONO Bsrx77kkp9WYTIx/BuOvlFy8o+bbHaPRRrNJAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUbV3JSpaifNaIG/CFxEx+B/kb2LMwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9iVjNKU3BhaWZOYUlHX0NG eEV4LUJfa2IyTE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36COMA0GCSqGSIb3DQEBCwUAA4IBAQARRMunAAsXtkuCOBsZQSICX1AKlrVxr9f1 Na56ZJasrRe5as/UCx5rmnpknNy/rsBaJ1oMxwub0THlY8S8z+yXGmqoLynXHYDr TS5U7j1ABjoyefbykxUefP1vMxkGg6JI9jKnF8mm3yCXKRKcVoxbuqeZdOLdEWr6 4uZES+nCD1w1dCHgsvzBfNT8lxQXS8cp0lXFR6H97TDUwmxQH2m3e51ceckRCArt x6r9FL9ZtJA3DSOC71Riczm8YbvtCe5ekI0pJY8HRZ8dxnAW8N4Pz5xx+5hodCXr qrSxknRhNSfBC38c1FTtnZJ2Jti0KUigEyzOdIVttnKGGMOhIIIH -----END CERTIFICATE-----Generated at Fri Jul 4 10:35:31 2025 by rpki-client