$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/Ejst_Levwl0Ag-CmDaam_eiSEPw.roa File: Ejst_Levwl0Ag-CmDaam_eiSEPw.roa (raw, json) Hash identifier: EAkru/zf5wHbpgtCIdoLbHyirLXnREvtMhuLJFoRQRY= Subject key identifier: 12:3B:2D:FC:B7:AF:C2:5D:00:83:E0:A6:0D:A6:A6:FD:E8:92:10:FC Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0808 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Ejst_Levwl0Ag-CmDaam_eiSEPw.roa Signing time: Fri 23 May 2025 07:17:20 +0000 ROA not before: Fri 23 May 2025 07:17:20 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 56041 IP address blocks: 223.160.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2056 (0x808) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:17:20 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=123B2DFCB7AFC25D0083E0A60DA6A6FDE89210FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:25:1a:bc:47:2e:91:b6:16:60:d4:30:e7:9a: 94:df:c4:5c:9e:c2:ea:63:91:59:ce:78:a2:fe:b2: 1d:87:f0:4c:f3:ad:ac:ac:5f:df:a7:bf:2d:e4:56: 1f:cd:25:ac:a1:5e:da:7e:ba:f1:dd:b4:cf:f2:34: 27:d1:fd:46:ad:b0:97:71:7d:25:54:46:10:dc:0e: cc:35:e2:b8:69:82:7b:37:14:a8:a9:c5:87:10:ea: ac:f0:44:fb:51:6d:a6:a7:15:47:c2:e1:ea:94:c4: 91:a0:d7:ec:40:3c:ad:67:b7:0d:8f:a1:fa:99:e9: 37:eb:25:c1:b7:ce:50:65:75:de:4c:5c:f8:c6:f5: ac:d9:71:9c:25:05:1b:95:ea:eb:25:7b:f9:97:6d: 81:0e:8a:f1:9b:f6:2f:af:f4:fd:c2:b7:bc:28:ee: b6:d0:66:bf:99:0e:39:69:ad:d8:bf:1e:87:f1:10: 06:9b:c7:d1:e4:9b:e4:fd:15:6c:59:e9:a4:37:8d: b3:b5:c7:ce:a1:84:26:15:7f:60:2c:8c:ba:24:59: fb:08:89:8b:fe:1a:7e:6d:d7:15:a4:ff:f4:3f:56: 35:1b:31:a2:d8:53:23:5e:79:95:c0:58:b4:f3:c5: e3:bc:c4:c1:16:bd:66:e8:4a:b1:b0:10:85:88:15: 0c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3B:2D:FC:B7:AF:C2:5D:00:83:E0:A6:0D:A6:A6:FD:E8:92:10:FC X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Ejst_Levwl0Ag-CmDaam_eiSEPw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.208.0/21 Signature Algorithm: sha256WithRSAEncryption 72:1c:ed:75:70:58:ee:58:30:67:3d:b7:01:ff:39:12:11:dd: a3:68:73:46:2a:46:32:1a:50:ef:0a:b9:66:61:3e:4b:fa:ec: 93:d2:9b:9b:d1:19:40:8a:2c:7c:0d:b2:3c:13:66:07:13:e2: 50:c7:28:bc:e2:f7:eb:28:4d:e8:da:d5:56:4c:64:84:8b:bd: 70:33:e5:11:45:f9:ae:77:9a:10:e3:f1:d8:2d:05:f4:85:cc: 64:57:2b:f0:b4:13:a8:ed:19:bc:4d:cf:33:b0:00:6a:55:ae: 8e:f2:04:32:54:83:28:b4:07:b5:03:a9:74:a1:98:fc:fd:cb: 59:7e:7d:fa:91:9f:67:56:22:9d:26:48:81:f2:db:13:db:25: 86:e1:62:7f:94:b6:dd:d9:15:24:16:e7:38:76:03:de:76:78: f7:a7:cc:7d:bf:5a:9c:dd:bf:96:4a:3f:87:37:e4:24:64:bb: 75:b0:20:5d:f0:c5:58:8f:20:b7:39:53:0a:71:44:14:2f:a6: 00:4c:3b:a5:77:0a:d9:cb:0f:56:23:ec:5d:18:3e:56:8c:eb: 40:66:ce:3a:dd:48:8c:49:76:05:e3:6c:da:df:82:5d:dc:f6: 98:60:e5:5a:1b:80:7e:6e:33:43:88:48:e2:9c:f6:07:20:ca: f5:fd:ba:14 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCAgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzE3MjBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDEyM0IyREZDQjdBRkMy NUQwMDgzRTBBNjBEQTZBNkZERTg5MjEwRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpJRq8Ry6RthZg1DDnmpTfxFyewupjkVnOeKL+sh2H8Ezzrays X9+nvy3kVh/NJayhXtp+uvHdtM/yNCfR/UatsJdxfSVURhDcDsw14rhpgns3FKip xYcQ6qzwRPtRbaanFUfC4eqUxJGg1+xAPK1ntw2PofqZ6TfrJcG3zlBldd5MXPjG 9azZcZwlBRuV6usle/mXbYEOivGb9i+v9P3Ct7wo7rbQZr+ZDjlprdi/HofxEAab x9Hkm+T9FWxZ6aQ3jbO1x86hhCYVf2AsjLokWfsIiYv+Gn5t1xWk//Q/VjUbMaLY UyNeeZXAWLTzxeO8xMEWvWboSrGwEIWIFQwNAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUEjst/Levwl0Ag+CmDaam/eiSEPwwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9FanN0X0xldndsMEFnLUNt RGFhbV9laVNFUHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD 36DQMA0GCSqGSIb3DQEBCwUAA4IBAQByHO11cFjuWDBnPbcB/zkSEd2jaHNGKkYy GlDvCrlmYT5L+uyT0pub0RlAiix8DbI8E2YHE+JQxyi84vfrKE3o2tVWTGSEi71w M+URRfmud5oQ4/HYLQX0hcxkVyvwtBOo7Rm8Tc8zsABqVa6O8gQyVIMotAe1A6l0 oZj8/ctZfn36kZ9nViKdJkiB8tsT2yWG4WJ/lLbd2RUkFuc4dgPednj3p8x9v1qc 3b+WSj+HN+QkZLt1sCBd8MVYjyC3OVMKcUQUL6YATDuldwrZyw9WI+xdGD5WjOtA Zs463UiMSXYF42za34Jd3PaYYOVaG4B+bjNDiEjinPYHIMr1/boU -----END CERTIFICATE-----Generated at Thu Jun 19 19:01:02 2025 by rpki-client