$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/1t5GYuc-TX3YgwBIPQJ1vkQKSe4.roa File: 1t5GYuc-TX3YgwBIPQJ1vkQKSe4.roa (raw, json) Hash identifier: t36tguBiKGzX8e5WAkbjhkDz2zmO1pH6wgT3TQyvM38= Subject key identifier: D6:DE:46:62:E7:3E:4D:7D:D8:83:00:48:3D:02:75:BE:44:0A:49:EE Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0822 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/1t5GYuc-TX3YgwBIPQJ1vkQKSe4.roa Signing time: Fri 23 May 2025 07:36:32 +0000 ROA not before: Fri 23 May 2025 07:36:32 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 9808 IP address blocks: 223.161.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:36:32 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=D6DE4662E73E4D7DD88300483D0275BE440A49EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:23:d1:b8:08:8e:31:95:2f:3b:fe:73:70:9b: 08:2e:f5:40:13:50:e6:67:b1:3a:21:b6:e4:05:c3: bc:17:93:9d:9a:9e:3f:fc:34:4b:88:bc:ff:45:8f: cc:44:e0:50:36:c8:1a:0a:08:3a:e8:49:c5:4d:0e: e7:a3:9f:0a:7a:1b:c9:ba:44:b4:c9:e7:a6:be:3a: 51:48:92:86:b1:9b:10:62:05:17:fe:76:f1:b6:d1: 77:ca:df:c2:98:a1:de:7c:78:53:87:23:cf:48:f8: df:e6:cb:2d:7f:c4:25:cf:68:e3:da:67:80:a5:13: b8:3a:28:17:84:b7:1c:8e:40:72:b3:e7:c3:f7:30: 25:ef:55:a4:5b:4b:43:f2:59:55:31:ce:4b:aa:0e: 73:5e:73:3c:57:70:3c:fe:83:61:54:0d:23:bc:06: 33:9f:60:88:ed:63:ab:24:e6:1e:b1:e6:2f:03:c7: 68:cc:67:78:8b:68:66:8f:65:ad:76:8a:be:9f:f4: 5b:55:be:49:f8:f4:21:c7:eb:8c:9a:50:17:56:6e: d7:14:d5:08:ee:7e:bc:ee:dd:e3:3b:79:06:bc:ed: 69:dc:72:3b:43:2a:44:50:d2:8d:24:d1:5c:1b:c0: 65:be:98:60:d7:bd:30:25:64:af:99:2c:8f:69:f6: ab:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DE:46:62:E7:3E:4D:7D:D8:83:00:48:3D:02:75:BE:44:0A:49:EE X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/1t5GYuc-TX3YgwBIPQJ1vkQKSe4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.161.206.0/23 Signature Algorithm: sha256WithRSAEncryption 15:26:4e:0f:7a:0b:7d:83:83:9b:6c:e6:71:20:7a:b9:51:ea: 39:70:04:7a:be:b8:3e:36:75:d3:2d:3e:bf:b8:93:f5:c1:78: b5:51:52:c2:79:d9:9a:f8:91:a8:54:74:b9:3b:d6:88:20:8b: 57:7e:c3:d2:8e:4a:0c:80:e0:0b:ce:89:5f:fc:00:c3:06:59: 5e:6e:58:87:0c:c1:c7:cf:6f:6f:b9:55:0f:61:d6:8b:ae:e0: a4:7b:53:1c:80:af:7b:3f:76:ec:b0:9e:ab:54:d5:7d:14:92: 3a:60:1e:96:af:d3:16:2c:60:7f:9e:ad:d7:f1:e1:a2:39:a6: 26:ed:df:4e:55:ee:05:d0:54:8b:47:7c:6e:65:73:75:99:1e: 4e:9c:84:29:05:40:c7:12:f8:80:ce:5c:e2:b9:ea:f2:74:42: 03:06:d2:e4:a2:af:d5:2c:d1:3d:53:ee:f4:bd:d8:a3:63:ea: 9e:6b:e1:18:28:fa:58:98:f1:dd:61:80:7d:f7:aa:bf:2c:a8: 42:dc:49:34:0d:56:eb:3f:88:28:b4:43:a7:bc:0c:7a:bd:a8: 82:f9:1e:b5:f3:59:c6:88:fb:e5:c1:28:e9:51:ea:4f:10:56: 69:11:98:b0:bf:ca:7f:75:1e:76:53:f7:63:e3:b0:dc:28:1a: f4:96:61:f4 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzM2MzJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQ2REU0NjYyRTczRTRE N0REODgzMDA0ODNEMDI3NUJFNDQwQTQ5RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvI9G4CI4xlS87/nNwmwgu9UATUOZnsTohtuQFw7wXk52anj/8 NEuIvP9Fj8xE4FA2yBoKCDroScVNDuejnwp6G8m6RLTJ56a+OlFIkoaxmxBiBRf+ dvG20XfK38KYod58eFOHI89I+N/myy1/xCXPaOPaZ4ClE7g6KBeEtxyOQHKz58P3 MCXvVaRbS0PyWVUxzkuqDnNeczxXcDz+g2FUDSO8BjOfYIjtY6sk5h6x5i8Dx2jM Z3iLaGaPZa12ir6f9FtVvkn49CHH64yaUBdWbtcU1Qjufrzu3eM7eQa87WnccjtD KkRQ0o0k0VwbwGW+mGDXvTAlZK+ZLI9p9qtpAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU1t5GYuc+TX3YgwBIPQJ1vkQKSe4wHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy8xdDVHWXVjLVRYM1lnd0JJ UFFKMXZrUUtTZTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36HOMA0GCSqGSIb3DQEBCwUAA4IBAQAVJk4Pegt9g4ObbOZxIHq5Ueo5cAR6vrg+ NnXTLT6/uJP1wXi1UVLCedma+JGoVHS5O9aIIItXfsPSjkoMgOALzolf/ADDBlle bliHDMHHz29vuVUPYdaLruCke1McgK97P3bssJ6rVNV9FJI6YB6Wr9MWLGB/nq3X 8eGiOaYm7d9OVe4F0FSLR3xuZXN1mR5OnIQpBUDHEviAzlziuerydEIDBtLkoq/V LNE9U+70vdijY+qea+EYKPpYmPHdYYB996q/LKhC3Ek0DVbrP4gotEOnvAx6vaiC +R6181nGiPvlwSjpUepPEFZpEZiwv8p/dR52U/dj47DcKBr0lmH0 -----END CERTIFICATE-----Generated at Wed Jun 4 00:52:47 2025 by rpki-client