$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/Tu9GRLn7wVVYVJNuudd2ghfGfO4.roa File: Tu9GRLn7wVVYVJNuudd2ghfGfO4.roa (raw, json) Hash identifier: IRJzVlt0zL6EiTWRIVCNUN1jNDyhSLLd+hJO9idPFcs= Subject key identifier: 4E:EF:46:44:B9:FB:C1:55:58:54:93:6E:B9:D7:76:82:17:C6:7C:EE Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 07FF Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Tu9GRLn7wVVYVJNuudd2ghfGfO4.roa Signing time: Fri 23 May 2025 07:07:20 +0000 ROA not before: Fri 23 May 2025 07:07:20 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 56040 IP address blocks: 223.160.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2047 (0x7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:07:20 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4EEF4644B9FBC1555854936EB9D7768217C67CEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:19:8f:25:0a:c9:0d:e3:ee:8d:aa:64:0e: cb:10:ac:c6:5e:ab:ca:c3:3e:bd:26:23:61:f0:2e: 79:ab:80:5c:4a:29:d8:33:df:07:09:9b:2f:48:a0: 1d:75:aa:5d:d3:48:b0:ad:3a:ad:0a:e8:7e:79:0d: a6:a8:0a:64:ee:9d:ce:b0:ea:66:db:58:9b:e4:10: 79:03:22:54:c7:0f:6e:18:fe:cd:20:54:01:f9:2a: 0f:33:cb:1c:55:56:c7:9d:51:7e:f4:49:cf:a7:29: ac:5c:be:f7:9e:1f:39:20:8d:dc:e6:7e:e0:4a:c5: 69:9f:d2:ee:71:1c:d8:48:e7:c3:d8:4f:54:69:fb: 8b:12:73:3e:b5:95:c6:00:33:a1:13:f2:c8:92:b4: 8e:d2:aa:f4:f3:e4:fe:4f:0d:76:52:50:3b:da:c0: e1:db:a8:db:a6:ba:64:66:bf:7e:27:24:8f:7f:b1: 4a:aa:9c:2e:47:ad:74:01:b3:c3:dc:99:68:8b:8a: b3:27:5b:f9:2b:55:27:4b:35:1a:2c:29:46:6a:bb: f2:b1:c6:40:60:18:b4:8a:7c:03:80:46:4f:27:f6: 3b:4c:2f:4e:b8:c0:23:3a:ba:08:66:ed:a1:89:0f: de:25:c6:9f:e4:97:91:19:c6:bb:0d:b3:03:2c:d9: 85:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EF:46:44:B9:FB:C1:55:58:54:93:6E:B9:D7:76:82:17:C6:7C:EE X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Tu9GRLn7wVVYVJNuudd2ghfGfO4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.4.0/23 Signature Algorithm: sha256WithRSAEncryption 22:41:f0:75:3d:b5:69:e8:8a:de:13:7f:2d:0f:87:94:f4:65: 61:79:10:c5:a5:a0:8a:03:9c:ff:b5:77:40:63:de:53:a9:09: a5:f1:ce:91:28:6e:49:87:fe:21:22:28:ad:fd:21:6b:3d:d7: 23:4e:76:ea:a8:c3:16:25:cc:5e:51:42:17:f5:cb:00:4e:ee: 5b:2d:a9:de:9a:d0:46:20:63:4e:57:3c:86:8e:64:a8:c3:aa: 3b:e7:5c:d3:56:6e:12:a4:ca:07:82:9f:38:d1:56:33:6a:f9: 40:87:a8:f8:d7:8c:29:09:c1:c4:20:9d:ff:11:69:c5:e2:11: e8:8f:ce:9e:e9:3b:0a:03:57:53:2c:a8:60:fc:f8:6b:37:49: 09:6a:73:9c:e8:35:e3:22:cd:46:ed:aa:d7:28:96:58:68:ee: 0d:a2:a8:e8:3d:62:7c:2a:25:ea:36:72:91:07:d1:9f:8a:e7: c4:d2:de:07:f3:43:5f:0a:c8:1f:94:72:79:ae:66:c7:66:b4: 3d:15:54:f0:31:a8:15:88:03:df:c8:d6:9a:b1:4e:d0:6a:d8: f5:93:36:85:1c:bc:f7:ea:38:8f:de:4d:da:02:1c:11:a6:2e: e9:a4:53:87:3e:a5:80:ff:3b:5c:7b:7b:27:0c:b5:69:77:8d: 0d:e6:da:d0 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzA3MjBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDRFRUY0NjQ0QjlGQkMx NTU1ODU0OTM2RUI5RDc3NjgyMTdDNjdDRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7ThmPJQrJDePujapkDssQrMZeq8rDPr0mI2HwLnmrgFxKKdgz 3wcJmy9IoB11ql3TSLCtOq0K6H55DaaoCmTunc6w6mbbWJvkEHkDIlTHD24Y/s0g VAH5Kg8zyxxVVsedUX70Sc+nKaxcvveeHzkgjdzmfuBKxWmf0u5xHNhI58PYT1Rp +4sScz61lcYAM6ET8siStI7SqvTz5P5PDXZSUDvawOHbqNumumRmv34nJI9/sUqq nC5HrXQBs8PcmWiLirMnW/krVSdLNRosKUZqu/KxxkBgGLSKfAOARk8n9jtML064 wCM6ughm7aGJD94lxp/kl5EZxrsNswMs2YV3AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUTu9GRLn7wVVYVJNuudd2ghfGfO4wHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9UdTlHUkxuN3dWVllWSk51 dWRkMmdoZkdmTzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36AEMA0GCSqGSIb3DQEBCwUAA4IBAQAiQfB1PbVp6IreE38tD4eU9GVheRDFpaCK A5z/tXdAY95TqQml8c6RKG5Jh/4hIiit/SFrPdcjTnbqqMMWJcxeUUIX9csATu5b LanemtBGIGNOVzyGjmSow6o751zTVm4SpMoHgp840VYzavlAh6j414wpCcHEIJ3/ EWnF4hHoj86e6TsKA1dTLKhg/PhrN0kJanOc6DXjIs1G7arXKJZYaO4NoqjoPWJ8 KiXqNnKRB9GfiufE0t4H80NfCsgflHJ5rmbHZrQ9FVTwMagViAPfyNaasU7Qatj1 kzaFHLz36jiP3k3aAhwRpi7ppFOHPqWA/ztce3snDLVpd40N5trQ -----END CERTIFICATE-----Generated at Thu Jun 5 20:28:11 2025 by rpki-client