$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/o_zcDUzA-OddXBnfwyo86qLH_Dk.roa File: o_zcDUzA-OddXBnfwyo86qLH_Dk.roa (raw, json) Hash identifier: Z4TNjqY3Kr2dhXgpfF9Vknvk0MR9Txn0nnaUVXE1FxI= Subject key identifier: A3:FC:DC:0D:4C:C0:F8:E7:5D:5C:19:DF:C3:2A:3C:EA:A2:C7:FC:39 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0805 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/o_zcDUzA-OddXBnfwyo86qLH_Dk.roa Signing time: Fri 23 May 2025 07:07:22 +0000 ROA not before: Fri 23 May 2025 07:07:22 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 56048 IP address blocks: 223.160.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 22:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2053 (0x805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:07:22 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=A3FCDC0D4CC0F8E75D5C19DFC32A3CEAA2C7FC39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:46:02:58:08:a6:67:80:37:44:32:f4:9e: bf:cf:4e:21:6b:2e:6e:cf:4c:2e:c3:c8:22:9e:f1: d5:61:f8:8c:72:9b:48:58:d6:4d:49:09:c7:db:94: ad:ee:18:8a:0b:bc:b6:c7:c7:e1:91:cb:57:85:87: 10:75:ad:ac:fb:83:b9:3a:20:0a:eb:60:32:1a:43: 07:58:18:2e:7e:9b:6d:e3:ef:57:52:ce:de:a7:14: 47:f2:4d:71:55:a8:5d:bc:ec:1e:25:e4:5a:ec:63: 54:14:a2:3f:86:8d:cc:e8:10:dc:7a:3d:7a:6c:16: e4:0f:2f:91:30:fa:d2:00:13:74:54:2b:68:87:e0: 0e:21:26:9e:36:5e:45:87:86:9e:81:0e:ca:35:5b: b3:85:17:c0:59:03:7b:3a:15:77:ce:04:23:52:ef: ba:26:e5:8c:08:3d:4c:a8:1e:ac:73:c2:97:a1:0e: 51:06:92:fc:5e:92:34:c2:7e:6f:dd:f8:72:fe:cc: 5f:a9:da:b5:2e:a9:c3:d3:c7:f6:a0:c0:c4:d6:a3: 24:7c:65:54:26:5b:57:cd:3f:cb:27:02:f7:a3:0f: 38:29:d7:f2:31:69:80:1e:7a:6b:be:04:ba:50:d1: ac:74:cd:18:1f:08:cf:1c:8e:6e:dd:ca:ab:7d:ed: 1b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FC:DC:0D:4C:C0:F8:E7:5D:5C:19:DF:C3:2A:3C:EA:A2:C7:FC:39 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/o_zcDUzA-OddXBnfwyo86qLH_Dk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.128.0/22 Signature Algorithm: sha256WithRSAEncryption 97:e4:a5:fe:c7:5f:06:d1:7c:1b:97:14:a5:70:7d:a1:a9:e8: 8b:8e:a5:40:5b:df:3d:07:3b:e1:2e:dc:77:91:0d:55:bb:4f: a3:c3:70:d0:d5:52:8c:2b:15:de:09:4f:6b:88:59:60:c1:e7: bf:6e:a8:99:09:11:a6:ef:ef:a2:6b:0f:05:d3:a3:bd:04:06: d2:6f:98:28:3c:6c:45:bc:19:fe:65:94:22:5b:e7:60:12:e9: 19:37:a9:2d:b8:cb:8d:6f:80:22:02:ca:0b:f7:27:ea:2b:8c: de:e8:89:e9:f0:12:12:f5:50:80:13:b6:41:40:31:c9:b8:af: 81:c5:a2:25:e9:c1:54:18:ec:c8:02:fb:8a:24:41:be:d5:93: 69:1c:84:0e:32:33:86:fb:9e:0a:3e:e0:1b:2d:13:e3:e9:00: 88:e2:54:95:90:3a:47:eb:4e:6f:6f:c0:0d:56:21:83:7a:8b: e7:6e:49:c6:3e:56:3b:1b:24:df:d1:ef:d8:5a:c5:f9:cb:7e: 63:0a:50:cd:01:06:ee:03:76:99:24:52:d9:63:10:55:35:6e: 0d:c0:de:70:f4:65:7c:ec:c4:74:69:4c:61:58:18:66:52:84: c3:e7:ef:f7:72:59:c4:54:8c:2e:27:60:09:bf:db:33:9d:92: 27:ba:9b:04 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCAUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzA3MjJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEEzRkNEQzBENENDMEY4 RTc1RDVDMTlERkMzMkEzQ0VBQTJDN0ZDMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9OEYCWAimZ4A3RDL0nr/PTiFrLm7PTC7DyCKe8dVh+Ixym0hY 1k1JCcfblK3uGIoLvLbHx+GRy1eFhxB1raz7g7k6IArrYDIaQwdYGC5+m23j71dS zt6nFEfyTXFVqF287B4l5FrsY1QUoj+GjczoENx6PXpsFuQPL5Ew+tIAE3RUK2iH 4A4hJp42XkWHhp6BDso1W7OFF8BZA3s6FXfOBCNS77om5YwIPUyoHqxzwpehDlEG kvxekjTCfm/d+HL+zF+p2rUuqcPTx/agwMTWoyR8ZVQmW1fNP8snAvejDzgp1/Ix aYAeemu+BLpQ0ax0zRgfCM8cjm7dyqt97Rs9AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUo/zcDUzA+OddXBnfwyo86qLH/DkwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9vX3pjRFV6QS1PZGRYQm5m d3lvODZxTEhfRGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC 36CAMA0GCSqGSIb3DQEBCwUAA4IBAQCX5KX+x18G0XwblxSlcH2hqeiLjqVAW989 BzvhLtx3kQ1Vu0+jw3DQ1VKMKxXeCU9riFlgwee/bqiZCRGm7++iaw8F06O9BAbS b5goPGxFvBn+ZZQiW+dgEukZN6ktuMuNb4AiAsoL9yfqK4ze6Inp8BIS9VCAE7ZB QDHJuK+BxaIl6cFUGOzIAvuKJEG+1ZNpHIQOMjOG+54KPuAbLRPj6QCI4lSVkDpH 605vb8ANViGDeovnbknGPlY7GyTf0e/YWsX5y35jClDNAQbuA3aZJFLZYxBVNW4N wN5w9GV87MR0aUxhWBhmUoTD5+/3clnEVIwuJ2AJv9sznZInupsE -----END CERTIFICATE-----Generated at Fri Jul 4 19:14:32 2025 by rpki-client