$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/WJ6aiVvwKJA97SdAjkhEigUoREE.roa File: WJ6aiVvwKJA97SdAjkhEigUoREE.roa (raw, json) Hash identifier: qx8Zyo5G9gN6V/5YOG1F48V/T1/cgjivKshYwdZQ1sU= Subject key identifier: 58:9E:9A:89:5B:F0:28:90:3D:ED:27:40:8E:48:44:8A:05:28:44:41 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 07F7 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/WJ6aiVvwKJA97SdAjkhEigUoREE.roa Signing time: Fri 23 May 2025 07:00:01 +0000 ROA not before: Fri 23 May 2025 07:00:01 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 56048 IP address blocks: 223.160.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:00:01 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=589E9A895BF028903DED27408E48448A05284441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:1f:8a:8f:be:07:a5:71:61:6b:d0:9e:02: 26:1a:17:f3:51:1c:eb:c9:b6:dc:74:5a:a9:bb:c2: 52:4c:65:23:75:81:4f:b0:6a:72:c0:f0:f0:87:22: ba:35:0d:64:cf:b5:9c:57:68:e0:37:aa:84:50:c3: 3e:b3:c9:da:7d:0d:86:c8:76:97:c3:31:6e:75:16: 75:fe:1f:60:f8:a1:a6:58:2f:16:51:9f:d5:1b:4c: 78:90:60:9b:32:d0:43:66:93:14:38:b1:03:d5:fe: a8:4a:f2:55:9f:0a:40:f8:e0:bf:37:04:d9:38:31: ae:bd:a3:43:46:f3:f7:1b:a0:be:d4:b5:14:9e:9b: 86:96:67:79:e1:5e:1c:4e:a5:f7:03:7e:86:ad:12: 06:05:7b:86:b0:a6:a0:6d:06:45:be:8d:6d:e1:04: 0f:5b:59:cc:ef:5c:a7:5b:47:90:0c:d2:64:da:f2: 03:9d:4d:5d:df:ec:f0:03:ab:89:cb:df:d2:f5:18: ed:9d:4c:6f:9a:9a:d0:8a:b3:c5:4f:1e:fc:bd:1d: 8d:71:1a:8f:ae:5f:da:89:96:6d:86:da:f5:27:5d: 24:63:e7:36:31:68:51:1b:f8:36:69:c0:ef:42:94: 32:49:fa:df:4b:4c:98:ec:b5:dd:1e:ac:0f:cf:b3: 86:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9E:9A:89:5B:F0:28:90:3D:ED:27:40:8E:48:44:8A:05:28:44:41 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/WJ6aiVvwKJA97SdAjkhEigUoREE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.0.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:dc:d2:5d:3c:9d:6c:6f:07:59:01:58:84:91:49:0c:92:58: c3:b7:b9:63:54:4f:ab:39:96:71:9e:1f:62:7d:30:52:d0:30: 62:90:d9:bc:7b:00:d3:a2:43:8f:17:a5:f6:22:7a:5b:cc:56: 57:5c:e9:7a:91:d5:7a:cb:62:ff:1a:44:2c:b3:23:37:47:89: 05:6f:0a:1e:8c:ca:ec:e1:d9:b7:2c:2d:07:66:7a:e7:d8:9a: e2:f1:34:57:f9:ff:b1:b2:2a:c3:68:f4:39:75:c4:a2:e8:c9: f7:02:29:ee:f5:3c:8c:d4:e8:bc:ba:0b:d6:e0:89:9e:b0:88: a2:04:21:c6:47:aa:aa:e1:b4:f6:65:fe:21:a5:8d:e7:be:f5: 69:17:2a:c3:74:07:1e:76:a3:21:62:6b:88:c6:18:08:b7:aa: f0:27:b6:2f:f6:37:7f:86:81:14:29:24:c3:ce:32:ac:0a:db: a1:7c:b5:18:25:8e:33:c4:6a:4d:31:9b:9f:4f:2e:15:cc:03: 6b:99:fe:f3:df:ae:9c:49:17:9c:f4:a5:6d:f1:f3:4a:c0:4d: 0c:c4:ce:88:61:eb:35:05:b5:be:c8:aa:cb:e2:bc:a1:86:97: 1e:a3:b0:22:fb:90:8f:cc:03:50:0e:a2:45:aa:d5:75:5a:66: 6b:11:85:1b -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzAwMDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDU4OUU5QTg5NUJGMDI4 OTAzREVEMjc0MDhFNDg0NDhBMDUyODQ0NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvaR+Kj74HpXFha9CeAiYaF/NRHOvJttx0Wqm7wlJMZSN1gU+w anLA8PCHIro1DWTPtZxXaOA3qoRQwz6zydp9DYbIdpfDMW51FnX+H2D4oaZYLxZR n9UbTHiQYJsy0ENmkxQ4sQPV/qhK8lWfCkD44L83BNk4Ma69o0NG8/cboL7UtRSe m4aWZ3nhXhxOpfcDfoatEgYFe4awpqBtBkW+jW3hBA9bWczvXKdbR5AM0mTa8gOd TV3f7PADq4nL39L1GO2dTG+amtCKs8VPHvy9HY1xGo+uX9qJlm2G2vUnXSRj5zYx aFEb+DZpwO9ClDJJ+t9LTJjstd0erA/Ps4ZnAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUWJ6aiVvwKJA97SdAjkhEigUoREEwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9XSjZhaVZ2d0tKQTk3U2RB amtoRWlnVW9SRUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36AAMA0GCSqGSIb3DQEBCwUAA4IBAQAO3NJdPJ1sbwdZAViEkUkMkljDt7ljVE+r OZZxnh9ifTBS0DBikNm8ewDTokOPF6X2InpbzFZXXOl6kdV6y2L/GkQssyM3R4kF bwoejMrs4dm3LC0HZnrn2Jri8TRX+f+xsirDaPQ5dcSi6Mn3Ainu9TyM1Oi8ugvW 4ImesIiiBCHGR6qq4bT2Zf4hpY3nvvVpFyrDdAcedqMhYmuIxhgIt6rwJ7Yv9jd/ hoEUKSTDzjKsCtuhfLUYJY4zxGpNMZufTy4VzANrmf7z366cSRec9KVt8fNKwE0M xM6IYes1BbW+yKrL4ryhhpceo7Ai+5CPzANQDqJFqtV1WmZrEYUb -----END CERTIFICATE-----Generated at Wed Jun 4 01:17:53 2025 by rpki-client