$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/i-Ka6yqw9yla2wiDdBUs3m7wtc8.roa File: i-Ka6yqw9yla2wiDdBUs3m7wtc8.roa (raw, json) Hash identifier: 8a3s9KqUkQhOrZSBJq2JkK0Sdj3yykOgJrB/OxjID58= Subject key identifier: 8B:E2:9A:EB:2A:B0:F7:29:5A:DB:08:83:74:15:2C:DE:6E:F0:B5:CF Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0661 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/i-Ka6yqw9yla2wiDdBUs3m7wtc8.roa Signing time: Tue 04 Mar 2025 07:58:33 +0000 ROA not before: Tue 04 Mar 2025 07:58:33 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 7641 IP address blocks: 211.146.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Mar 4 07:58:33 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8BE29AEB2AB0F7295ADB088374152CDE6EF0B5CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0e:24:8b:93:23:03:64:f6:1b:ee:f8:19:8b: 39:56:8e:6f:68:05:c9:95:30:6e:f8:aa:f7:f6:48: 51:d8:61:29:d5:87:e0:ad:ce:9d:bd:cc:3a:ea:3a: cd:2a:4e:e1:7e:da:c7:50:ec:bb:27:83:f3:93:12: 3c:ab:ba:74:9e:b3:97:fe:6f:c2:87:f2:a2:96:14: 5a:6e:54:b6:de:77:6a:9b:ee:ec:59:b4:74:d5:aa: 71:e4:c7:f2:79:a4:60:87:96:ca:a5:82:7b:5a:d5: cd:98:57:df:32:6a:d9:1a:0a:86:7c:82:98:3e:c0: 43:b6:4f:b1:d2:ee:b4:66:62:97:75:88:4b:a1:d4: c2:70:3a:5d:61:14:94:38:45:11:5e:27:58:2b:54: 03:21:80:5a:3a:bb:e0:10:7c:7d:08:db:c5:4d:4a: 8c:6c:24:1c:63:d6:19:7d:4b:cf:ec:97:13:4e:b3: 20:33:3d:93:9b:84:69:18:c5:dc:b6:ee:76:f5:7f: 45:1b:67:63:1d:c3:ed:35:69:42:e6:a7:0f:7f:1b: e8:dd:7d:7f:dd:50:d5:ea:7c:67:5f:9c:4f:80:08: f7:bf:6f:48:4b:5b:56:16:d4:f8:49:32:09:3f:03: bc:62:45:67:dc:c7:ba:c7:a5:1e:34:65:12:57:61: 4d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E2:9A:EB:2A:B0:F7:29:5A:DB:08:83:74:15:2C:DE:6E:F0:B5:CF X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/i-Ka6yqw9yla2wiDdBUs3m7wtc8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.146.24.0/21 Signature Algorithm: sha256WithRSAEncryption 70:f0:e7:3c:9e:f0:9f:45:09:94:0d:41:7d:11:84:b9:ee:bd: 96:17:82:3e:9d:43:fb:02:6a:84:ea:36:ae:d3:a9:8f:cb:11: ed:04:7b:93:88:45:8c:04:c4:37:4d:1f:8a:84:1e:15:6b:52: 79:11:2f:99:b2:18:fc:a1:62:9c:08:53:f4:00:3f:e3:70:b0: a0:7e:4d:06:e4:96:e9:8d:91:72:8a:40:b1:17:86:65:79:c8: 09:ce:04:68:e5:59:88:c6:b8:d2:fe:e9:79:39:d9:87:75:75: c9:0f:11:09:e2:05:7e:a7:c8:2e:f5:36:61:1a:4c:02:14:44: 39:58:b9:c3:9e:ce:c1:da:ee:ed:6a:1c:d7:cb:5a:a5:ac:70: 02:00:14:49:8c:b5:e5:30:fd:24:b5:e2:ac:71:3c:9c:2f:09: 94:30:31:f3:1e:fc:8d:e8:a7:4b:1d:d0:f6:0c:e1:91:5d:93: b4:1b:46:e1:45:29:10:ce:94:ef:6b:b2:bf:d8:ac:55:76:77: 2b:bb:2a:e9:0b:3a:23:23:f2:a5:5d:cf:54:86:bd:a8:3f:f8: 86:21:b6:c8:79:11:99:b6:c6:b1:53:57:c0:6b:53:29:61:a5: f6:7f:d0:db:ef:88:0c:61:c3:2f:8b:a5:7e:38:3b:33:49:97: 4c:fd:17:00 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTAzMDQw NzU4MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhCRTI5QUVCMkFCMEY3 Mjk1QURCMDg4Mzc0MTUyQ0RFNkVGMEI1Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiDiSLkyMDZPYb7vgZizlWjm9oBcmVMG74qvf2SFHYYSnVh+Ct zp29zDrqOs0qTuF+2sdQ7Lsng/OTEjyrunSes5f+b8KH8qKWFFpuVLbed2qb7uxZ tHTVqnHkx/J5pGCHlsqlgnta1c2YV98yatkaCoZ8gpg+wEO2T7HS7rRmYpd1iEuh 1MJwOl1hFJQ4RRFeJ1grVAMhgFo6u+AQfH0I28VNSoxsJBxj1hl9S8/slxNOsyAz PZObhGkYxdy27nb1f0UbZ2Mdw+01aULmpw9/G+jdfX/dUNXqfGdfnE+ACPe/b0hL W1YW1PhJMgk/A7xiRWfcx7rHpR40ZRJXYU2NAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUi+Ka6yqw9yla2wiDdBUs3m7wtc8wHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9pLUthNnlxdzl5bGEyd2lE ZEJVczNtN3d0Yzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD 05IYMA0GCSqGSIb3DQEBCwUAA4IBAQBw8Oc8nvCfRQmUDUF9EYS57r2WF4I+nUP7 AmqE6jau06mPyxHtBHuTiEWMBMQ3TR+KhB4Va1J5ES+Zshj8oWKcCFP0AD/jcLCg fk0G5JbpjZFyikCxF4ZlecgJzgRo5VmIxrjS/ul5OdmHdXXJDxEJ4gV+p8gu9TZh GkwCFEQ5WLnDns7B2u7tahzXy1qlrHACABRJjLXlMP0kteKscTycLwmUMDHzHvyN 6KdLHdD2DOGRXZO0G0bhRSkQzpTva7K/2KxVdncruyrpCzojI/KlXc9Uhr2oP/iG IbbIeRGZtsaxU1fAa1MpYaX2f9Db74gMYcMvi6V+ODszSZdM/RcA -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:43 2025 by rpki-client