$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/w7jGpmt1-fmUXSyKYOrOZ8gqwuQ.roa File: w7jGpmt1-fmUXSyKYOrOZ8gqwuQ.roa (raw, json) Hash identifier: L/1aNP8ucL41MdABKhUYqC+0kHFdGnYxaiRGkjXDDvw= Subject key identifier: C3:B8:C6:A6:6B:75:F9:F9:94:5D:2C:8A:60:EA:CE:67:C8:2A:C2:E4 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 081A Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/w7jGpmt1-fmUXSyKYOrOZ8gqwuQ.roa Signing time: Fri 23 May 2025 07:17:26 +0000 ROA not before: Fri 23 May 2025 07:17:26 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24547 IP address blocks: 223.160.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2074 (0x81a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:17:26 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C3B8C6A66B75F9F9945D2C8A60EACE67C82AC2E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:29:43:f4:c4:50:5f:ed:19:2e:77:f9:cd:4d: 37:35:9a:d0:0b:75:f2:0b:54:66:8f:ab:35:f2:1c: d7:ce:af:0e:ed:7f:3a:5f:da:fe:f6:bc:3f:9f:96: a4:b3:30:5e:73:5e:a0:26:9e:71:a3:d8:68:a1:4a: 97:ee:c2:b9:34:13:f7:16:67:0c:1a:65:cc:ee:11: bb:32:c5:cb:8e:3c:4d:31:57:45:17:a1:c2:51:f5: 61:4c:fb:5a:3a:9a:42:90:fa:9d:81:69:eb:02:bd: e8:5f:47:d3:6f:24:61:dc:c6:c0:d3:a6:20:52:b8: a5:2c:3e:71:6e:8f:c3:c4:f6:65:54:0e:86:49:86: 13:3b:9e:0c:f5:d5:a5:67:dd:cc:67:ea:fc:2f:49: 0c:d3:d6:cc:f0:70:11:a2:2b:bd:ed:20:d8:af:87: 36:7d:ee:3f:b4:48:ca:70:3c:46:1c:d4:ca:83:d7: e9:08:19:03:00:cc:24:68:d0:51:aa:15:fe:da:5f: 2b:c4:c4:53:b0:29:47:d5:fd:ec:02:7a:69:fc:17: 23:b7:fd:1d:27:bd:76:71:a1:1e:db:89:15:fb:53: 77:d0:92:76:c9:7b:c9:fd:22:32:80:7b:76:6a:95: 57:58:83:3c:9f:a9:71:f7:ce:70:04:d2:76:35:d5: 26:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B8:C6:A6:6B:75:F9:F9:94:5D:2C:8A:60:EA:CE:67:C8:2A:C2:E4 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/w7jGpmt1-fmUXSyKYOrOZ8gqwuQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.136.0/22 Signature Algorithm: sha256WithRSAEncryption 19:db:85:a2:4d:3a:84:76:ef:45:be:2d:b9:ce:e3:bb:b5:9b: 05:d7:20:7d:36:9c:42:f5:d3:49:cf:e1:0c:4b:f0:1b:d6:55: bc:d4:f0:1b:39:6d:90:63:32:b5:5d:12:05:53:a5:70:1d:64: 02:1f:78:8a:fe:f4:8a:4c:2a:e4:ea:3e:d0:4d:ce:4f:55:70: eb:8c:c0:37:22:5b:ad:3a:03:e9:51:cc:bc:17:81:29:ca:8f: 3d:32:2d:42:f5:d2:67:b3:5f:2b:44:36:31:8a:9e:22:e7:3c: 4a:a9:68:1e:19:90:32:1f:89:81:f5:f2:1f:1a:f4:73:86:3f: 4d:17:86:14:15:4e:3f:03:aa:12:37:d3:a1:a9:2c:03:ec:01: 5e:c1:c1:8c:2d:a0:d7:a5:80:62:17:bd:21:02:9b:23:e8:d0: 53:c3:c1:0e:87:c5:25:67:fc:fd:dd:b9:b1:57:9a:6c:63:1e: 9b:b2:7f:b9:38:41:51:e4:d3:0b:96:f7:b9:47:d5:31:8c:fd: b4:7f:27:a0:4d:73:71:30:6d:5f:5c:dc:b9:fd:14:2a:9a:79: 72:1d:5e:80:d1:65:ec:b3:e1:e0:93:ac:49:c0:26:a4:66:f2: 77:37:10:43:83:2e:a0:2c:f5:e3:7a:07:1c:8e:31:0e:e5:b7: 5d:1f:df:dd -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzE3MjZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEMzQjhDNkE2NkI3NUY5 Rjk5NDVEMkM4QTYwRUFDRTY3QzgyQUMyRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/KUP0xFBf7Rkud/nNTTc1mtALdfILVGaPqzXyHNfOrw7tfzpf 2v72vD+flqSzMF5zXqAmnnGj2GihSpfuwrk0E/cWZwwaZczuEbsyxcuOPE0xV0UX ocJR9WFM+1o6mkKQ+p2BaesCvehfR9NvJGHcxsDTpiBSuKUsPnFuj8PE9mVUDoZJ hhM7ngz11aVn3cxn6vwvSQzT1szwcBGiK73tINivhzZ97j+0SMpwPEYc1MqD1+kI GQMAzCRo0FGqFf7aXyvExFOwKUfV/ewCemn8FyO3/R0nvXZxoR7biRX7U3fQknbJ e8n9IjKAe3ZqlVdYgzyfqXH3znAE0nY11SZXAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUw7jGpmt1+fmUXSyKYOrOZ8gqwuQwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy93N2pHcG10MS1mbVVYU3lL WU9yT1o4Z3F3dVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC 36CIMA0GCSqGSIb3DQEBCwUAA4IBAQAZ24WiTTqEdu9Fvi25zuO7tZsF1yB9NpxC 9dNJz+EMS/Ab1lW81PAbOW2QYzK1XRIFU6VwHWQCH3iK/vSKTCrk6j7QTc5PVXDr jMA3IlutOgPpUcy8F4Epyo89Mi1C9dJns18rRDYxip4i5zxKqWgeGZAyH4mB9fIf GvRzhj9NF4YUFU4/A6oSN9OhqSwD7AFewcGMLaDXpYBiF70hApsj6NBTw8EOh8Ul Z/z93bmxV5psYx6bsn+5OEFR5NMLlve5R9UxjP20fyegTXNxMG1fXNy5/RQqmnly HV6A0WXss+Hgk6xJwCakZvJ3NxBDgy6gLPXjegccjjEO5bddH9/d -----END CERTIFICATE-----Generated at Wed Jun 4 02:03:32 2025 by rpki-client