$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/Am3i00z5BdYXeTzSVZeG0BWoOzQ.roa File: Am3i00z5BdYXeTzSVZeG0BWoOzQ.roa (raw, json) Hash identifier: 7JYzi8wNmGetBqkqq4TaSTPE6M0T+awLOmkmSp9BLW8= Subject key identifier: 02:6D:E2:D3:4C:F9:05:D6:17:79:3C:D2:55:97:86:D0:15:A8:3B:34 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0655 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Am3i00z5BdYXeTzSVZeG0BWoOzQ.roa Signing time: Tue 04 Mar 2025 06:58:43 +0000 ROA not before: Tue 04 Mar 2025 06:58:43 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 7641 IP address blocks: 103.8.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Mar 4 06:58:43 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=026DE2D34CF905D617793CD2559786D015A83B34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cc:58:fe:7a:5f:89:45:7f:f0:32:c1:77:bf: 0c:57:40:30:81:fa:56:7c:24:96:7c:be:b5:e7:6e: d6:46:5c:6b:49:49:47:48:ca:20:02:b6:99:1c:6d: 55:de:00:6d:c9:df:b2:60:34:2d:64:44:b6:ba:9f: fa:7f:d4:79:59:24:86:ae:4a:8a:80:b7:78:b8:72: ca:8e:b4:c2:be:96:cd:34:0f:77:67:87:b2:aa:1c: a0:2f:83:59:e7:34:81:f8:02:6b:d5:1a:cb:bb:28: 72:f8:f2:4a:40:7f:63:ab:62:56:9b:9b:39:64:7a: 7a:f7:6a:ba:23:1c:d2:cb:14:78:19:90:15:2b:9e: 96:46:d7:d7:03:56:50:e2:71:e3:1d:66:34:37:af: 9b:75:b8:33:09:9e:71:0f:c1:f4:b0:92:5e:fc:15: f6:4d:8b:48:93:56:da:91:ea:24:88:27:83:73:8b: 3a:e6:5a:bb:61:d0:9b:28:8a:0b:32:a1:a1:84:9f: cb:4a:55:49:b0:7a:68:d3:12:01:f1:be:e7:29:6e: 80:1f:fc:f7:cc:bb:45:39:b7:16:b8:cd:41:36:37: ad:e2:e2:cd:0a:6b:e4:04:5f:3b:bd:16:88:9b:7f: 92:68:1e:88:f8:e1:30:c8:d5:08:b0:16:63:08:c5: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6D:E2:D3:4C:F9:05:D6:17:79:3C:D2:55:97:86:D0:15:A8:3B:34 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Am3i00z5BdYXeTzSVZeG0BWoOzQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.8.204.0/22 Signature Algorithm: sha256WithRSAEncryption 21:e6:d3:19:63:5a:1a:d0:9a:77:a8:8a:d6:25:a3:8c:2c:50: c0:bc:88:3c:a6:43:7d:fd:c1:2b:46:54:3f:7b:06:78:c2:82: d9:37:7f:bd:27:d6:92:d8:76:cf:25:fd:ec:fe:8f:18:cd:70: 05:c9:39:6f:6a:df:c1:08:57:96:ef:86:d8:b0:a6:18:8d:cc: 89:17:9d:13:85:b9:26:71:1b:f8:42:a2:50:e4:5e:f5:d9:01: 54:c9:8d:0f:79:e0:97:eb:b4:9b:a7:cb:29:26:3e:84:de:c8: 3b:88:ac:c2:20:6a:19:f1:7b:00:37:95:e8:49:b1:f0:39:b8: ce:6d:64:e0:a9:4e:45:1f:37:ce:36:00:1e:80:f4:9d:2f:29: de:72:83:41:34:b9:16:b1:d3:bd:e8:be:57:f3:bb:84:72:a1: e1:04:72:13:2e:0c:4e:53:59:a2:b1:ec:cf:bb:e0:14:78:7d: 29:41:66:96:d2:85:1c:94:0e:5d:3e:1e:b7:82:75:ad:bc:eb: ba:bf:db:b9:8b:74:98:6a:59:17:ab:8d:94:23:e7:6e:67:66: f2:bd:33:99:aa:60:fc:cc:0c:28:3d:b4:79:d5:d0:1b:39:38: 23:4f:b0:c1:60:99:bd:14:91:fa:3b:5c:ba:b1:57:13:f9:d1: a2:d8:12:3c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTAzMDQw NjU4NDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAyNkRFMkQzNENGOTA1 RDYxNzc5M0NEMjU1OTc4NkQwMTVBODNCMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJzFj+el+JRX/wMsF3vwxXQDCB+lZ8JJZ8vrXnbtZGXGtJSUdI yiACtpkcbVXeAG3J37JgNC1kRLa6n/p/1HlZJIauSoqAt3i4csqOtMK+ls00D3dn h7KqHKAvg1nnNIH4AmvVGsu7KHL48kpAf2OrYlabmzlkenr3arojHNLLFHgZkBUr npZG19cDVlDiceMdZjQ3r5t1uDMJnnEPwfSwkl78FfZNi0iTVtqR6iSIJ4Nzizrm Wrth0JsoigsyoaGEn8tKVUmwemjTEgHxvucpboAf/PfMu0U5txa4zUE2N63i4s0K a+QEXzu9Foibf5JoHoj44TDI1QiwFmMIxXirAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUAm3i00z5BdYXeTzSVZeG0BWoOzQwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9BbTNpMDB6NUJkWVhlVHpT VlplRzBCV29PelEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC ZwjMMA0GCSqGSIb3DQEBCwUAA4IBAQAh5tMZY1oa0Jp3qIrWJaOMLFDAvIg8pkN9 /cErRlQ/ewZ4woLZN3+9J9aS2HbPJf3s/o8YzXAFyTlvat/BCFeW74bYsKYYjcyJ F50ThbkmcRv4QqJQ5F712QFUyY0PeeCX67Sbp8spJj6E3sg7iKzCIGoZ8XsAN5Xo SbHwObjObWTgqU5FHzfONgAegPSdLynecoNBNLkWsdO96L5X87uEcqHhBHITLgxO U1misezPu+AUeH0pQWaW0oUclA5dPh63gnWtvOu6v9u5i3SYalkXq42UI+duZ2by vTOZqmD8zAwoPbR51dAbOTgjT7DBYJm9FJH6O1y6sVcT+dGi2BI8 -----END CERTIFICATE-----Generated at Fri Apr 4 18:48:11 2025 by rpki-client