$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/yACR8lpCRzyPkfq4JvsphlwvZ-g.roa File: yACR8lpCRzyPkfq4JvsphlwvZ-g.roa (raw, json) Hash identifier: WbnfNgBkE4U8Gc0KLtyTt+L+FFrQ2v0/R7MxYIQpiCA= Subject key identifier: C8:00:91:F2:5A:42:47:3C:8F:91:FA:B8:26:FB:29:86:5C:2F:67:E8 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 082C Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/yACR8lpCRzyPkfq4JvsphlwvZ-g.roa Signing time: Fri 23 May 2025 07:36:36 +0000 ROA not before: Fri 23 May 2025 07:36:36 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 9808 IP address blocks: 223.161.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:36:36 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C80091F25A42473C8F91FAB826FB29865C2F67E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8d:03:f4:6d:25:a5:c2:c6:85:33:4c:f7:98: 36:ba:b1:eb:54:dc:1d:df:74:be:73:12:19:43:6a: e9:cc:1a:3b:91:54:0d:f2:73:67:b0:00:f2:17:7f: a5:02:e2:dd:ca:bd:03:c1:73:7e:0a:17:56:b7:82: e5:22:91:a9:f4:5e:44:f3:b1:bb:ea:a7:c8:84:dd: 67:a4:16:75:be:55:8c:94:dc:14:34:83:fc:ae:3f: 5c:90:7c:05:81:4f:a6:f6:84:38:fe:9a:b6:b5:87: 46:1c:42:14:2b:73:1b:ab:a2:4c:07:b9:7b:a9:ef: 3c:99:b9:fd:72:72:5b:c2:29:76:79:64:0d:fd:96: 70:e6:86:28:f9:28:ca:11:c3:a3:b4:de:71:e9:f5: 7a:df:fa:f5:ff:aa:b0:10:05:27:95:ea:13:52:2e: 77:80:e5:96:93:c4:5f:ad:24:74:c5:9f:47:8a:5c: 51:b3:76:26:5e:5c:73:c5:bb:54:1e:27:07:ff:23: a1:65:ab:e8:f5:38:59:a9:a1:03:84:f0:94:0d:b7: 3d:7b:d7:19:b7:7c:1c:bd:25:5b:2d:b2:11:e9:f0: 36:2a:6e:f8:06:54:8d:25:c6:88:60:a5:d7:d7:a2: ea:8f:d4:6d:a8:eb:95:5c:df:d9:5d:61:e8:8c:d5: 3e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:00:91:F2:5A:42:47:3C:8F:91:FA:B8:26:FB:29:86:5C:2F:67:E8 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/yACR8lpCRzyPkfq4JvsphlwvZ-g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.161.216.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:fc:fb:fe:5d:78:fa:fe:81:df:85:c8:4c:d2:88:aa:71:5b: 6a:50:67:42:70:08:f7:82:15:e5:d1:14:ff:b5:b7:12:cc:9d: 26:fd:c6:24:a8:f7:3f:cc:0f:a6:5d:df:ff:c4:7b:21:32:af: 5f:32:a5:7c:ae:b6:31:75:43:ba:4c:88:e2:d7:66:d0:fe:04: cd:77:f7:1f:45:9c:45:36:bb:15:e8:12:24:4b:7c:59:92:bf: df:fd:af:f5:a8:bc:04:b5:fe:c4:44:fd:9f:11:7e:7e:ac:11: 41:3a:78:b5:3b:c9:08:ee:0e:c4:25:f4:53:0f:98:5a:d4:ca: 1b:d9:42:21:c7:f2:17:e2:ba:88:84:ee:a0:d0:02:1d:21:9d: 2e:62:14:fc:7d:03:88:6d:d8:21:40:ba:c9:96:91:58:36:9a: d9:e2:1e:ca:5c:05:92:0b:3e:5e:4e:83:bf:69:b8:68:e2:be: e3:42:cd:12:14:59:64:4f:e2:ea:7f:28:52:3f:b5:78:4c:20: ff:cb:e3:6d:90:39:38:87:5e:38:37:8f:95:22:c9:14:77:31: 40:c9:e6:1c:0c:26:ee:9e:6f:54:72:86:0d:a4:08:94:6e:e3: 7c:7c:bc:ff:22:e1:79:70:d1:52:0b:ea:41:87:cd:04:74:4b: 1f:93:b8:cf -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzM2MzZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM4MDA5MUYyNUE0MjQ3 M0M4RjkxRkFCODI2RkIyOTg2NUMyRjY3RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpjQP0bSWlwsaFM0z3mDa6setU3B3fdL5zEhlDaunMGjuRVA3y c2ewAPIXf6UC4t3KvQPBc34KF1a3guUikan0XkTzsbvqp8iE3WekFnW+VYyU3BQ0 g/yuP1yQfAWBT6b2hDj+mra1h0YcQhQrcxurokwHuXup7zyZuf1yclvCKXZ5ZA39 lnDmhij5KMoRw6O03nHp9Xrf+vX/qrAQBSeV6hNSLneA5ZaTxF+tJHTFn0eKXFGz diZeXHPFu1QeJwf/I6Flq+j1OFmpoQOE8JQNtz171xm3fBy9JVstshHp8DYqbvgG VI0lxohgpdfXouqP1G2o65Vc39ldYeiM1T7DAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUyACR8lpCRzyPkfq4JvsphlwvZ+gwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy95QUNSOGxwQ1J6eVBrZnE0 SnZzcGhsd3ZaLWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC 36HYMA0GCSqGSIb3DQEBCwUAA4IBAQBO/Pv+XXj6/oHfhchM0oiqcVtqUGdCcAj3 ghXl0RT/tbcSzJ0m/cYkqPc/zA+mXd//xHshMq9fMqV8rrYxdUO6TIji12bQ/gTN d/cfRZxFNrsV6BIkS3xZkr/f/a/1qLwEtf7ERP2fEX5+rBFBOni1O8kI7g7EJfRT D5ha1Mob2UIhx/IX4rqIhO6g0AIdIZ0uYhT8fQOIbdghQLrJlpFYNprZ4h7KXAWS Cz5eToO/abho4r7jQs0SFFlkT+LqfyhSP7V4TCD/y+NtkDk4h144N4+VIskUdzFA yeYcDCbunm9UcoYNpAiUbuN8fLz/IuF5cNFSC+pBh80EdEsfk7jP -----END CERTIFICATE-----Generated at Fri Jul 4 08:30:51 2025 by rpki-client