$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/vDzq0TPK0oEUgLTroCRpkDX_gjU.roa File: vDzq0TPK0oEUgLTroCRpkDX_gjU.roa (raw, json) Hash identifier: nbzdRqraNuinzy2P8KjN3HC8Rp1wc2+O/XC7AeX3Qs0= Subject key identifier: BC:3C:EA:D1:33:CA:D2:81:14:80:B4:EB:A0:24:69:90:35:FF:82:35 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 07FC Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/vDzq0TPK0oEUgLTroCRpkDX_gjU.roa Signing time: Fri 23 May 2025 07:07:19 +0000 ROA not before: Fri 23 May 2025 07:07:19 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 56046 IP address blocks: 223.160.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2044 (0x7fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:07:19 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=BC3CEAD133CAD2811480B4EBA024699035FF8235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:23:eb:ae:ab:27:d9:92:de:29:9a:91:29:83: c7:bc:3f:2e:b5:85:01:17:aa:66:d1:87:8c:e5:d6: d9:43:74:9d:91:7f:38:de:1b:4a:88:85:c5:3f:a0: c5:c1:e1:d2:e4:cf:c1:5e:a3:b3:c4:98:f1:89:b3: c5:7b:ec:05:7a:f0:d1:c5:67:73:ad:54:93:55:28: f1:b9:ea:57:5b:2e:87:b1:71:ec:c2:6a:b4:b6:00: b5:f5:b1:80:96:f8:6a:27:53:c7:4c:e0:5e:4f:56: 2a:7b:86:4c:eb:fa:1b:bb:bd:48:d9:99:e7:7c:bc: 86:70:35:82:73:b7:d2:ce:ac:7c:1f:76:e2:fb:77: 56:a4:18:ce:90:4b:b8:4f:fb:60:90:c9:cb:35:2c: 59:91:47:b9:4a:e5:ea:d1:4d:a1:89:df:8e:04:fd: e3:5e:f9:77:0f:df:82:80:4f:35:9b:d0:10:f3:1f: a6:b7:c4:e3:93:48:9d:2e:21:7d:32:84:d9:5b:37: 22:38:db:0c:80:9e:95:78:97:25:fe:39:d4:2d:21: f5:d5:42:ca:e9:46:04:31:80:6c:73:7b:9c:9e:5c: 7a:77:50:dd:c2:76:70:7c:8f:64:36:9a:21:4e:50: cc:13:49:da:e6:3e:9d:05:51:b3:58:61:66:8c:e6: f3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3C:EA:D1:33:CA:D2:81:14:80:B4:EB:A0:24:69:90:35:FF:82:35 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/vDzq0TPK0oEUgLTroCRpkDX_gjU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.10.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:56:60:06:4c:7d:e7:bf:6c:a9:a3:f3:6f:3e:d6:e8:0f:86: 3a:8f:e3:db:49:e8:bd:a1:c7:62:91:bb:7b:9b:67:7c:61:90: a1:dc:53:4b:bf:09:2a:9e:ac:17:6b:04:06:7e:62:74:d3:f5: 9e:3e:8e:51:c8:71:bd:6e:53:04:6d:4b:27:79:27:8a:34:e8: 9b:54:b6:d8:bc:e8:bc:bd:6a:a3:56:9f:63:ab:2a:5c:9d:a2: 0d:49:9d:4f:08:13:69:e2:af:8f:2a:50:33:32:d9:9a:b4:ee: c7:70:cd:32:87:aa:77:d0:a3:96:a8:1e:95:c5:ca:d9:9b:9e: ca:f0:07:eb:eb:af:3a:69:b5:71:1f:04:2b:60:c2:e0:31:dd: 70:91:42:36:27:81:f3:ad:47:f3:bd:38:38:2e:08:5f:42:c0: 29:e0:92:07:f8:54:85:65:91:45:55:af:45:d1:8b:66:fa:56: 34:ed:5d:80:b3:8e:1b:77:2b:23:8d:2b:a5:e5:09:f6:32:bc: 90:39:d8:80:0f:52:64:23:13:f3:ef:ca:ba:dd:22:60:28:35: 83:ea:72:e4:ee:73:e9:67:20:f9:d8:9b:1c:e9:49:0b:4c:9c: b8:d5:d2:c9:e9:5d:a1:cc:e6:f7:6f:13:7f:68:11:e1:83:0d: 06:16:09:b9 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICB/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzA3MTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEJDM0NFQUQxMzNDQUQy ODExNDgwQjRFQkEwMjQ2OTkwMzVGRjgyMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDyI+uuqyfZkt4pmpEpg8e8Py61hQEXqmbRh4zl1tlDdJ2Rfzje G0qIhcU/oMXB4dLkz8Feo7PEmPGJs8V77AV68NHFZ3OtVJNVKPG56ldbLoexcezC arS2ALX1sYCW+GonU8dM4F5PVip7hkzr+hu7vUjZmed8vIZwNYJzt9LOrHwfduL7 d1akGM6QS7hP+2CQycs1LFmRR7lK5erRTaGJ344E/eNe+XcP34KATzWb0BDzH6a3 xOOTSJ0uIX0yhNlbNyI42wyAnpV4lyX+OdQtIfXVQsrpRgQxgGxze5yeXHp3UN3C dnB8j2Q2miFOUMwTSdrmPp0FUbNYYWaM5vO1AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUvDzq0TPK0oEUgLTroCRpkDX/gjUwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy92RHpxMFRQSzBvRVVnTFRy b0NScGtEWF9nalUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36AKMA0GCSqGSIb3DQEBCwUAA4IBAQANVmAGTH3nv2ypo/NvPtboD4Y6j+PbSei9 ocdikbt7m2d8YZCh3FNLvwkqnqwXawQGfmJ00/WePo5RyHG9blMEbUsneSeKNOib VLbYvOi8vWqjVp9jqypcnaINSZ1PCBNp4q+PKlAzMtmatO7HcM0yh6p30KOWqB6V xcrZm57K8Afr6686abVxHwQrYMLgMd1wkUI2J4HzrUfzvTg4LghfQsAp4JIH+FSF ZZFFVa9F0Ytm+lY07V2As44bdysjjSul5Qn2MryQOdiAD1JkIxPz78q63SJgKDWD 6nLk7nPpZyD52Jsc6UkLTJy41dLJ6V2hzOb3bxN/aBHhgw0GFgm5 -----END CERTIFICATE-----Generated at Thu Jun 5 20:32:07 2025 by rpki-client