$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/sI3dS5o0qeprE1cAl9VPomjPW6E.roa File: sI3dS5o0qeprE1cAl9VPomjPW6E.roa (raw, json) Hash identifier: 7uCPrpeBCE5KZID6M8NGfHiIOGwu+yiXZbzDv6bGYLQ= Subject key identifier: B0:8D:DD:4B:9A:34:A9:EA:6B:13:57:00:97:D5:4F:A2:68:CF:5B:A1 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0819 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/sI3dS5o0qeprE1cAl9VPomjPW6E.roa Signing time: Fri 23 May 2025 07:17:25 +0000 ROA not before: Fri 23 May 2025 07:17:25 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 9808 IP address blocks: 223.160.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2073 (0x819) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:17:25 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=B08DDD4B9A34A9EA6B13570097D54FA268CF5BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:a3:1e:ec:36:45:43:61:f8:58:6e:1e:68: 51:40:02:f3:af:f6:e7:f2:f8:a2:a3:5c:1b:3c:5e: a4:7b:2c:97:1b:19:52:46:e4:07:5e:dc:7c:aa:5f: 27:08:dd:7b:91:55:5e:a6:41:0a:c6:dd:1d:e9:99: f3:b4:96:c8:7c:8b:b2:a5:47:91:20:e9:fd:d8:fc: f4:09:94:b9:c6:ef:10:fd:64:95:41:a8:9f:09:83: 77:72:44:f9:2b:33:db:42:16:37:3d:e9:c4:e1:d8: 40:7b:52:b4:02:51:aa:ee:c7:e1:4f:16:3b:21:1d: 98:0e:c1:d0:0b:6c:58:b5:a5:98:7d:90:87:b7:74: a6:90:0a:54:d4:7c:2b:84:b3:cf:9c:8b:fe:d3:d5: 0b:32:73:29:c0:43:b0:47:0e:9c:41:c2:93:78:4a: 4c:35:9a:e3:4b:fc:5f:cd:f1:9f:c2:79:7a:fa:57: c5:8d:7b:2c:92:04:a9:03:e9:f9:13:91:75:a9:96: 2c:4f:01:5f:a0:f8:01:5f:cb:20:63:eb:8c:ae:c6: d4:db:16:d1:06:0c:35:90:73:6d:f4:20:21:5f:50: 1e:df:69:1d:48:aa:85:72:3e:45:dc:8b:6d:a9:dd: 69:16:8a:31:57:a4:b8:6f:45:9e:43:a5:ca:82:fc: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8D:DD:4B:9A:34:A9:EA:6B:13:57:00:97:D5:4F:A2:68:CF:5B:A1 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/sI3dS5o0qeprE1cAl9VPomjPW6E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.232.0/22 Signature Algorithm: sha256WithRSAEncryption 43:29:bd:68:60:da:60:6a:36:2f:e3:bc:05:ea:75:aa:04:c2: 55:3d:f9:50:06:63:93:1d:59:eb:e2:3b:6e:95:f9:d3:b1:d9: 03:3a:5f:ab:bc:42:79:79:d4:31:04:9e:5e:ed:98:f7:6d:55: 66:fa:fd:25:7b:2f:a5:a0:c8:91:6c:d5:03:de:f0:f5:92:db: 02:7a:2f:ce:77:eb:3c:08:03:21:36:2f:1a:d8:4c:f4:dc:54: 4e:b9:7f:d0:41:97:aa:8a:1b:ec:e3:fb:df:f0:32:eb:11:f3: 0f:0a:0c:75:95:2e:1e:bb:ae:e7:f8:00:8d:af:92:a1:62:1b: db:38:2a:71:78:38:39:48:5a:05:b6:c7:a5:e6:7f:fd:cb:cc: df:13:1b:88:32:de:7f:1f:c0:4d:8e:95:a2:e7:e2:1d:dd:65: c6:3f:66:0e:f3:d0:4f:0b:1f:c7:60:f6:c6:0a:c7:78:cd:21: 44:93:60:43:ad:44:5c:f0:28:db:f5:ce:26:96:13:08:79:04: 65:08:a1:1d:2c:56:e4:3b:88:9a:0a:3b:3c:eb:91:ed:6e:c0: 09:4c:46:2e:5d:51:02:ce:0a:a8:e0:33:f8:2d:46:5a:c5:6e: f4:d2:84:2a:2b:e8:07:92:d0:f9:37:e3:43:e6:38:12:38:9a: 68:69:e8:73 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzE3MjVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEIwOERERDRCOUEzNEE5 RUE2QjEzNTcwMDk3RDU0RkEyNjhDRjVCQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0z6Me7DZFQ2H4WG4eaFFAAvOv9ufy+KKjXBs8XqR7LJcbGVJG 5Ade3HyqXycI3XuRVV6mQQrG3R3pmfO0lsh8i7KlR5Eg6f3Y/PQJlLnG7xD9ZJVB qJ8Jg3dyRPkrM9tCFjc96cTh2EB7UrQCUarux+FPFjshHZgOwdALbFi1pZh9kIe3 dKaQClTUfCuEs8+ci/7T1QsycynAQ7BHDpxBwpN4Skw1muNL/F/N8Z/CeXr6V8WN eyySBKkD6fkTkXWplixPAV+g+AFfyyBj64yuxtTbFtEGDDWQc230ICFfUB7faR1I qoVyPkXci22p3WkWijFXpLhvRZ5DpcqC/MYlAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUsI3dS5o0qeprE1cAl9VPomjPW6EwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9zSTNkUzVvMHFlcHJFMWNB bDlWUG9talBXNkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC 36DoMA0GCSqGSIb3DQEBCwUAA4IBAQBDKb1oYNpgajYv47wF6nWqBMJVPflQBmOT HVnr4jtulfnTsdkDOl+rvEJ5edQxBJ5e7Zj3bVVm+v0ley+loMiRbNUD3vD1ktsC ei/Od+s8CAMhNi8a2Ez03FROuX/QQZeqihvs4/vf8DLrEfMPCgx1lS4eu67n+ACN r5KhYhvbOCpxeDg5SFoFtsel5n/9y8zfExuIMt5/H8BNjpWi5+Id3WXGP2YO89BP Cx/HYPbGCsd4zSFEk2BDrURc8Cjb9c4mlhMIeQRlCKEdLFbkO4iaCjs865HtbsAJ TEYuXVECzgqo4DP4LUZaxW700oQqK+gHktD5N+ND5jgSOJpoaehz -----END CERTIFICATE-----Generated at Fri Jul 4 08:15:16 2025 by rpki-client