$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/fqhuozlBrtff98veExy-YwUrTw0.roa File: fqhuozlBrtff98veExy-YwUrTw0.roa (raw, json) Hash identifier: SoW5KqNHxhcvKBUoWhDGCxvWss3O5ILfwqepBJsOlPk= Subject key identifier: 7E:A8:6E:A3:39:41:AE:D7:DF:F7:CB:DE:13:1C:BE:63:05:2B:4F:0D Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0663 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/fqhuozlBrtff98veExy-YwUrTw0.roa Signing time: Tue 04 Mar 2025 07:59:56 +0000 ROA not before: Tue 04 Mar 2025 07:59:56 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 7641 IP address blocks: 211.146.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Mar 4 07:59:56 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=7EA86EA33941AED7DFF7CBDE131CBE63052B4F0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:60:3c:25:b1:1f:ae:b5:53:59:cc:4d:37:05: 23:99:63:3a:cc:9f:83:69:28:0a:bc:96:b9:ef:61: 5e:5c:12:c3:6b:92:8d:d3:f4:1a:48:cf:d2:fb:74: bd:d5:e7:df:f0:12:fa:d9:88:ca:98:ee:4d:ab:44: 2c:86:62:71:bf:7a:88:83:a3:20:0a:1d:ed:03:b9: c4:da:00:56:5b:17:7e:d2:f0:57:09:a0:07:f8:89: 41:de:85:73:4f:bf:76:4b:ec:8d:e0:c6:38:2b:73: 75:e8:68:4b:13:a7:b3:cd:b2:04:7b:a3:56:25:f3: 65:97:a4:52:2b:64:fb:f8:a4:29:72:7e:49:75:07: 23:2e:c2:73:80:07:7b:7e:87:31:5c:18:7a:de:4b: d8:5f:c3:d9:51:14:56:63:3f:5d:b7:1f:7e:e2:be: 7f:85:3f:2e:ab:7d:b3:ce:ac:dd:82:1e:d9:33:64: 05:54:19:74:59:ec:a2:e3:c6:bf:07:3a:04:d5:0e: 4b:df:10:8b:89:39:75:fe:6e:ff:25:e9:ef:f7:18: 56:7a:78:2c:06:7b:46:6e:04:96:9c:69:1d:c1:c9: c7:c8:8e:48:bc:6f:8c:4e:cf:ab:85:13:d5:d2:66: 89:e3:cf:d5:be:67:ca:f8:0f:21:b5:f8:50:d6:9d: 42:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A8:6E:A3:39:41:AE:D7:DF:F7:CB:DE:13:1C:BE:63:05:2B:4F:0D X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/fqhuozlBrtff98veExy-YwUrTw0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.146.20.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:0b:0f:1b:25:38:95:4f:5c:cf:90:b4:2c:77:d2:3a:09:1e: e5:e2:32:f7:b2:f6:6c:86:5f:b4:f8:e9:45:0f:1d:1f:de:24: 14:90:d5:b8:5d:8a:d4:19:f9:9a:69:c9:7f:7d:55:86:05:8d: 56:5a:00:c9:39:f7:c3:74:b1:b2:cf:1e:ed:34:fc:81:98:bf: ac:bf:0f:01:83:74:a4:76:84:42:74:70:c3:c9:e0:f2:41:65: f1:e2:50:96:7d:51:9f:54:92:d7:09:07:e7:e1:94:8b:5b:ac: 52:40:25:fe:a7:be:6f:a1:8c:80:f9:d9:8a:86:ea:fb:aa:ba: bc:e9:9a:4b:d1:8f:1a:6f:59:46:58:80:49:cb:dd:58:03:cd: 58:46:f3:95:97:fd:e8:1f:29:e0:e1:2e:64:7f:e6:ab:72:8e: 8d:2a:74:62:00:af:2d:3c:96:38:72:c1:ce:ab:c3:0a:97:cc: f5:0a:ed:c9:31:60:7b:e3:b2:59:7e:a2:cd:14:85:46:52:63: 4e:85:c7:88:c6:be:62:5c:8c:08:38:37:f1:00:11:84:c6:f1: e6:f4:f7:00:98:27:4f:b4:e5:cb:27:7a:14:21:ed:09:42:56: e4:e0:43:bd:7a:bb:c9:0d:85:56:d8:e9:49:48:1d:90:c8:5e: ce:cc:c0:00 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTAzMDQw NzU5NTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDdFQTg2RUEzMzk0MUFF RDdERkY3Q0JERTEzMUNCRTYzMDUyQjRGMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcYDwlsR+utVNZzE03BSOZYzrMn4NpKAq8lrnvYV5cEsNrko3T 9BpIz9L7dL3V59/wEvrZiMqY7k2rRCyGYnG/eoiDoyAKHe0DucTaAFZbF37S8FcJ oAf4iUHehXNPv3ZL7I3gxjgrc3XoaEsTp7PNsgR7o1Yl82WXpFIrZPv4pClyfkl1 ByMuwnOAB3t+hzFcGHreS9hfw9lRFFZjP123H37ivn+FPy6rfbPOrN2CHtkzZAVU GXRZ7KLjxr8HOgTVDkvfEIuJOXX+bv8l6e/3GFZ6eCwGe0ZuBJacaR3BycfIjki8 b4xOz6uFE9XSZonjz9W+Z8r4DyG1+FDWnUKtAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUfqhuozlBrtff98veExy+YwUrTw0wHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9mcWh1b3psQnJ0ZmY5OHZl RXh5LVl3VXJUdzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC 05IUMA0GCSqGSIb3DQEBCwUAA4IBAQBKCw8bJTiVT1zPkLQsd9I6CR7l4jL3svZs hl+0+OlFDx0f3iQUkNW4XYrUGfmaacl/fVWGBY1WWgDJOffDdLGyzx7tNPyBmL+s vw8Bg3SkdoRCdHDDyeDyQWXx4lCWfVGfVJLXCQfn4ZSLW6xSQCX+p75voYyA+dmK hur7qrq86ZpL0Y8ab1lGWIBJy91YA81YRvOVl/3oHyng4S5kf+arco6NKnRiAK8t PJY4csHOq8MKl8z1Cu3JMWB747JZfqLNFIVGUmNOhceIxr5iXIwIODfxABGExvHm 9PcAmCdPtOXLJ3oUIe0JQlbk4EO9ervJDYVW2OlJSB2QyF7OzMAA -----END CERTIFICATE-----Generated at Fri Apr 4 18:45:46 2025 by rpki-client