$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/YTRYJgCPzVXcemyulZTpqcRPZ-U.roa File: YTRYJgCPzVXcemyulZTpqcRPZ-U.roa (raw, json) Hash identifier: GH1m2/EevdWgYMCgG8Sdzmk1hWZkzLlu94OqrorpLjU= Subject key identifier: 61:34:58:26:00:8F:CD:55:DC:7A:6C:AE:95:94:E9:A9:C4:4F:67:E5 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0818 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/YTRYJgCPzVXcemyulZTpqcRPZ-U.roa Signing time: Fri 23 May 2025 07:17:25 +0000 ROA not before: Fri 23 May 2025 07:17:25 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24444 IP address blocks: 223.160.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2072 (0x818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:17:25 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=61345826008FCD55DC7A6CAE9594E9A9C44F67E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:38:e8:32:62:33:56:4b:fb:11:32:5d:e7:2d: b5:4d:a5:f0:3f:74:4b:fb:70:1d:8a:93:46:49:27: 99:dd:d8:35:c6:ba:36:23:ec:6b:69:a5:10:da:ea: 32:4f:b4:8e:05:c9:76:f8:6a:f2:a1:e6:a0:18:73: d5:db:63:12:04:3c:48:e2:e2:68:18:22:cb:b0:11: 83:b1:01:8d:1b:f8:3b:9b:85:30:86:8c:00:5b:b4: 6d:ce:78:57:50:2f:17:3a:8f:a9:1b:65:fe:9b:e7: 74:bf:d4:fa:67:e5:17:92:61:88:60:ad:6a:13:ea: de:6f:5a:09:56:54:a6:19:90:59:59:96:37:ab:a2: bf:c4:e6:bb:df:f5:61:ec:fa:ec:d9:e7:93:19:42: d6:5e:64:9f:0b:9d:60:69:e8:d8:28:d7:40:10:6c: 20:ef:ab:f2:21:e7:c1:30:83:b5:1b:48:58:11:1b: 3d:94:29:3e:71:49:88:d2:fb:ff:7f:89:89:43:5e: 22:a7:16:69:7e:02:91:d4:3a:c8:38:95:47:67:09: fb:83:1e:09:3d:ca:a2:c7:cc:89:80:f7:29:f0:97: d5:91:0e:65:b2:72:bc:02:7e:cf:19:57:aa:c7:91: 37:a8:b0:5b:d9:c5:cb:e3:d9:b0:a3:41:7d:fc:02: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:34:58:26:00:8F:CD:55:DC:7A:6C:AE:95:94:E9:A9:C4:4F:67:E5 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/YTRYJgCPzVXcemyulZTpqcRPZ-U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.160.0/21 Signature Algorithm: sha256WithRSAEncryption 2b:91:06:84:d4:48:f8:8c:51:8c:ab:6b:51:75:14:46:69:bc: f6:2c:b8:08:4f:f6:d1:56:bc:88:3b:e7:bb:e0:f5:f0:d6:64: 51:51:bd:b9:72:5b:01:e6:f1:e9:99:d9:b0:5b:6c:3a:83:c2: d6:12:e3:39:d5:a6:ac:99:ba:f3:89:eb:02:1e:e4:b7:d1:bc: 43:07:df:4e:84:85:69:e0:ce:60:08:09:b2:93:f9:7b:04:82: 33:47:7a:c1:2f:24:cf:b7:da:8d:9d:87:2c:4a:f5:64:da:29: 65:1a:7e:25:64:b9:27:5e:33:8a:a8:0f:f0:c5:36:e6:8e:38: 04:35:1f:ea:0d:3d:15:a9:55:a6:a8:3a:62:ef:cf:2d:4f:72: b1:36:eb:c0:5d:88:ba:07:a5:48:49:d5:3e:13:21:65:14:b5: 56:aa:c6:7d:25:27:89:b8:dd:af:f9:fb:c9:dd:80:e6:c2:26: fa:d4:eb:7f:1a:53:3b:e9:6d:92:a9:b8:42:57:ea:a3:d9:70: f0:e4:f1:e8:84:c1:67:9c:51:67:f9:c5:57:c2:5c:e0:ad:11: 88:ad:60:74:f7:3c:10:68:dc:58:18:78:a8:f5:91:43:ea:10: 5a:fd:09:12:2f:ff:5b:91:3d:b9:ff:d9:40:c4:c7:9e:a9:27: e4:9b:cd:b6 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCBgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzE3MjVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYxMzQ1ODI2MDA4RkNE NTVEQzdBNkNBRTk1OTRFOUE5QzQ0RjY3RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIOOgyYjNWS/sRMl3nLbVNpfA/dEv7cB2Kk0ZJJ5nd2DXGujYj 7GtppRDa6jJPtI4FyXb4avKh5qAYc9XbYxIEPEji4mgYIsuwEYOxAY0b+DubhTCG jABbtG3OeFdQLxc6j6kbZf6b53S/1Ppn5ReSYYhgrWoT6t5vWglWVKYZkFlZljer or/E5rvf9WHs+uzZ55MZQtZeZJ8LnWBp6Ngo10AQbCDvq/Ih58Ewg7UbSFgRGz2U KT5xSYjS+/9/iYlDXiKnFml+ApHUOsg4lUdnCfuDHgk9yqLHzImA9ynwl9WRDmWy crwCfs8ZV6rHkTeosFvZxcvj2bCjQX38AoSrAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUYTRYJgCPzVXcemyulZTpqcRPZ+UwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9ZVFJZSmdDUHpWWGNlbXl1 bFpUcHFjUlBaLVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD 36CgMA0GCSqGSIb3DQEBCwUAA4IBAQArkQaE1Ej4jFGMq2tRdRRGabz2LLgIT/bR VryIO+e74PXw1mRRUb25clsB5vHpmdmwW2w6g8LWEuM51aasmbrziesCHuS30bxD B99OhIVp4M5gCAmyk/l7BIIzR3rBLyTPt9qNnYcsSvVk2illGn4lZLknXjOKqA/w xTbmjjgENR/qDT0VqVWmqDpi788tT3KxNuvAXYi6B6VISdU+EyFlFLVWqsZ9JSeJ uN2v+fvJ3YDmwib61Ot/GlM76W2SqbhCV+qj2XDw5PHohMFnnFFn+cVXwlzgrRGI rWB09zwQaNxYGHio9ZFD6hBa/QkSL/9bkT25/9lAxMeeqSfkm822 -----END CERTIFICATE-----Generated at Thu Jun 5 20:26:22 2025 by rpki-client