$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/F5z6E0ollmvFgQ6SaLIPKONmDLU.roa File: F5z6E0ollmvFgQ6SaLIPKONmDLU.roa (raw, json) Hash identifier: SUa2aUrS3d4xVdxEQJex9kOa2tojpd90laIq6JPx9hg= Subject key identifier: 17:9C:FA:13:4A:25:96:6B:C5:81:0E:92:68:B2:0F:28:E3:66:0C:B5 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 081C Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/F5z6E0ollmvFgQ6SaLIPKONmDLU.roa Signing time: Fri 23 May 2025 07:36:31 +0000 ROA not before: Fri 23 May 2025 07:36:31 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 56048 IP address blocks: 223.161.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:36:31 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=179CFA134A25966BC5810E9268B20F28E3660CB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:51:fe:3e:01:b1:b7:74:78:40:5c:d9:00:ee: b1:73:8f:b5:04:3c:36:9b:da:11:55:7e:79:ec:9c: df:7b:ce:02:0b:9b:1d:cf:83:2c:7d:5f:08:2f:bf: b1:13:38:33:b9:88:fc:f9:2d:18:c4:94:d5:1b:d6: 21:61:76:34:53:f3:9a:cb:a6:ee:19:14:f4:d7:21: 50:f6:02:d2:ca:aa:61:f9:9b:63:f5:0a:69:71:6b: d7:b1:32:47:bc:26:d0:bc:a1:8f:9f:19:58:88:dd: 99:58:cf:25:80:26:e0:da:77:b9:81:1c:11:1f:8d: f1:72:74:75:4b:a4:f4:18:e3:f2:73:a0:88:81:4d: f3:23:db:f9:45:2b:ce:e6:09:70:89:0c:42:72:72: c2:79:12:0e:3c:f4:7c:6b:9e:7b:d0:08:86:87:5e: 15:30:89:10:ba:8e:8d:ff:a5:2a:af:92:03:0c:44: 9c:9c:41:69:35:d7:36:82:11:c4:6d:f7:34:4d:8b: d6:26:45:46:0c:df:59:d7:c8:bc:bb:01:7b:05:e3: 61:1e:d4:05:f8:09:c9:18:85:3b:c0:a2:68:81:2a: 02:5a:7a:3f:0b:91:2e:1f:b7:0a:c1:bc:8e:8c:3a: df:66:6d:56:c5:15:e3:c8:17:f8:47:17:ed:39:4e: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9C:FA:13:4A:25:96:6B:C5:81:0E:92:68:B2:0F:28:E3:66:0C:B5 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/F5z6E0ollmvFgQ6SaLIPKONmDLU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.161.196.0/23 Signature Algorithm: sha256WithRSAEncryption 46:72:ea:0b:d9:b6:fb:35:7b:16:7e:e2:07:b9:d2:cd:e0:54: 67:d2:25:ab:6f:68:61:84:97:ae:db:17:c3:fa:a9:d2:6f:c7: 53:13:64:f6:a8:69:cf:e7:49:82:8d:95:fe:32:cd:34:51:20: bb:8f:13:23:13:b3:8a:2a:2c:39:24:67:8e:2d:8a:fe:cd:49: 9d:3d:f4:a4:98:95:a4:6e:a6:c1:c1:0f:2a:8b:a0:6e:17:eb: 70:88:40:8a:99:1f:60:8a:68:2f:1b:f8:30:40:6d:30:a1:3d: 5c:a8:86:40:94:ab:3a:54:2e:0a:b8:3c:cf:b0:b8:04:a4:9a: b2:95:fc:ea:dd:a7:5c:c8:79:21:d7:22:df:9a:ff:6d:39:35: a3:54:07:dd:d1:3f:d1:e9:31:7e:57:c1:1d:bb:8e:4f:5b:88: d4:0a:da:6e:81:15:f8:84:3d:5c:f7:3f:45:ea:dd:9e:ec:f5: 4a:89:13:f6:80:b4:7e:db:86:0f:d8:fe:2f:5a:f7:b5:68:7c: 44:6c:9e:dd:2a:3c:33:ac:9e:18:18:e8:8d:a6:b9:69:17:5f: 5d:3a:1a:00:17:45:b1:0b:cc:b0:1d:eb:17:62:b0:e0:7a:cd: ba:76:87:68:6b:47:11:b0:68:80:b6:7a:6f:e7:62:86:70:72: 17:3e:4f:f6 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzM2MzFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDE3OUNGQTEzNEEyNTk2 NkJDNTgxMEU5MjY4QjIwRjI4RTM2NjBDQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkUf4+AbG3dHhAXNkA7rFzj7UEPDab2hFVfnnsnN97zgILmx3P gyx9Xwgvv7ETODO5iPz5LRjElNUb1iFhdjRT85rLpu4ZFPTXIVD2AtLKqmH5m2P1 Cmlxa9exMke8JtC8oY+fGViI3ZlYzyWAJuDad7mBHBEfjfFydHVLpPQY4/JzoIiB TfMj2/lFK87mCXCJDEJycsJ5Eg489HxrnnvQCIaHXhUwiRC6jo3/pSqvkgMMRJyc QWk11zaCEcRt9zRNi9YmRUYM31nXyLy7AXsF42Ee1AX4CckYhTvAomiBKgJaej8L kS4ftwrBvI6MOt9mbVbFFePIF/hHF+05TvxNAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUF5z6E0ollmvFgQ6SaLIPKONmDLUwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9GNXo2RTBvbGxtdkZnUTZT YUxJUEtPTm1ETFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36HEMA0GCSqGSIb3DQEBCwUAA4IBAQBGcuoL2bb7NXsWfuIHudLN4FRn0iWrb2hh hJeu2xfD+qnSb8dTE2T2qGnP50mCjZX+Ms00USC7jxMjE7OKKiw5JGeOLYr+zUmd PfSkmJWkbqbBwQ8qi6BuF+twiECKmR9gimgvG/gwQG0woT1cqIZAlKs6VC4KuDzP sLgEpJqylfzq3adcyHkh1yLfmv9tOTWjVAfd0T/R6TF+V8Edu45PW4jUCtpugRX4 hD1c9z9F6t2e7PVKiRP2gLR+24YP2P4vWve1aHxEbJ7dKjwzrJ4YGOiNprlpF19d OhoAF0WxC8ywHesXYrDges26dodoa0cRsGiAtnpv52KGcHIXPk/2 -----END CERTIFICATE-----Generated at Wed Nov 5 23:07:57 2025 by rpki-client