$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/Hs4CGVy2AJeboVLmK1LZU-rHJls.roa File: Hs4CGVy2AJeboVLmK1LZU-rHJls.roa (raw, json) Hash identifier: /Ho5BiAJ2vx6oqIG7m5D8X6Q5yJcCNzBHeymYn9146s= Subject key identifier: 1E:CE:02:19:5C:B6:00:97:9B:A1:52:E6:2B:52:D9:53:EA:C7:26:5B Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0814 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Hs4CGVy2AJeboVLmK1LZU-rHJls.roa Signing time: Fri 23 May 2025 07:17:23 +0000 ROA not before: Fri 23 May 2025 07:17:23 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 56046 IP address blocks: 223.160.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 19:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2068 (0x814) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:17:23 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1ECE02195CB600979BA152E62B52D953EAC7265B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:71:85:60:c6:af:3a:db:72:cc:9e:05:38: a8:ec:dc:23:99:67:56:3b:da:13:d7:10:92:58:ce: ca:d3:70:09:f5:6f:d4:32:01:ee:d2:d1:36:84:d9: f7:39:7e:16:67:8a:0b:59:05:65:3e:4d:ce:f8:b2: 0b:e5:ca:62:ad:c8:9b:71:57:ab:e1:e3:db:72:63: c2:74:57:af:50:42:2a:27:73:eb:90:82:85:0c:aa: f3:62:12:53:9c:90:9f:24:b5:1a:17:99:a1:e7:86: f8:be:2d:eb:c4:11:dd:9e:22:5a:8b:c9:cc:ff:10: 5c:10:cc:8c:ef:dc:43:16:63:ab:07:de:5a:62:44: 53:a9:4a:bd:f5:aa:2f:0a:5a:61:56:c7:81:bf:18: 50:05:dd:9a:a9:8a:2c:f5:fa:f7:f7:2e:67:37:5e: e9:95:e5:05:ca:c7:ff:58:91:e0:f7:02:54:2b:36: ac:f9:92:80:79:b5:11:c0:b5:4f:df:1a:5b:32:09: 72:4c:e4:7b:8e:68:f4:95:47:72:43:62:39:f1:4b: 97:1f:c7:1c:8d:91:ba:f6:6d:e0:c7:3c:fa:4d:2a: 5a:c9:1d:49:a3:df:29:c3:cc:5e:b2:eb:03:03:ac: e1:f8:f7:35:c3:ca:9d:a4:27:5b:7d:72:de:5b:2f: c4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CE:02:19:5C:B6:00:97:9B:A1:52:E6:2B:52:D9:53:EA:C7:26:5B X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Hs4CGVy2AJeboVLmK1LZU-rHJls.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.152.0/21 Signature Algorithm: sha256WithRSAEncryption 9b:4c:4e:2a:25:fa:d1:93:5e:fc:3a:e5:b6:65:c9:3b:7a:e5: f4:9d:a7:68:44:a0:25:88:9b:43:5a:16:e9:24:52:e6:78:6f: 80:0f:05:c7:54:8b:0d:33:63:f0:c8:1e:2c:03:2d:c6:26:ba: ac:55:d3:ab:db:84:a3:d3:ab:81:3a:23:5e:c6:6f:1b:ab:ff: d2:d0:dc:f3:db:6b:28:0c:39:c3:11:15:ce:68:21:ce:95:13: fe:ad:6b:e8:8b:7e:46:f7:ab:29:1f:9a:53:a4:93:82:70:17: c4:40:68:14:2e:52:f7:9f:48:b9:d7:8a:3e:d5:f1:99:0c:d0: b2:de:e3:8e:2c:dc:d1:cf:6f:4e:5a:0c:6a:ab:dc:43:ea:7f: 22:af:25:a5:ad:a8:07:e0:a0:2b:0a:6b:53:ce:7e:bb:18:cf: 90:ff:23:ac:b4:0f:8f:d4:6c:6e:71:dd:12:aa:a4:93:78:a6: cb:e0:56:d7:10:31:bb:03:5b:3d:63:48:61:2f:37:33:78:71: 77:e4:8a:a8:df:ae:22:05:07:8d:14:d9:4c:7a:23:d8:15:08: e4:7c:35:49:6e:eb:f7:db:b9:cd:8b:b7:41:82:c2:2d:7d:3d: df:71:ef:cd:7a:82:40:47:ba:f5:a1:d7:ba:28:fd:97:3d:57: 4c:dc:84:eb -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzE3MjNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFFQ0UwMjE5NUNCNjAw OTc5QkExNTJFNjJCNTJEOTUzRUFDNzI2NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtiHGFYMavOttyzJ4FOKjs3COZZ1Y72hPXEJJYzsrTcAn1b9Qy Ae7S0TaE2fc5fhZnigtZBWU+Tc74sgvlymKtyJtxV6vh49tyY8J0V69QQionc+uQ goUMqvNiElOckJ8ktRoXmaHnhvi+LevEEd2eIlqLycz/EFwQzIzv3EMWY6sH3lpi RFOpSr31qi8KWmFWx4G/GFAF3Zqpiiz1+vf3Lmc3XumV5QXKx/9YkeD3AlQrNqz5 koB5tRHAtU/fGlsyCXJM5HuOaPSVR3JDYjnxS5cfxxyNkbr2beDHPPpNKlrJHUmj 3ynDzF6y6wMDrOH49zXDyp2kJ1t9ct5bL8QFAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUHs4CGVy2AJeboVLmK1LZU+rHJlswHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9IczRDR1Z5MkFKZWJvVkxt SzFMWlUtckhKbHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD 36CYMA0GCSqGSIb3DQEBCwUAA4IBAQCbTE4qJfrRk178OuW2Zck7euX0nadoRKAl iJtDWhbpJFLmeG+ADwXHVIsNM2PwyB4sAy3GJrqsVdOr24Sj06uBOiNexm8bq//S 0Nzz22soDDnDERXOaCHOlRP+rWvoi35G96spH5pTpJOCcBfEQGgULlL3n0i514o+ 1fGZDNCy3uOOLNzRz29OWgxqq9xD6n8iryWlragH4KArCmtTzn67GM+Q/yOstA+P 1Gxucd0SqqSTeKbL4FbXEDG7A1s9Y0hhLzczeHF35Iqo364iBQeNFNlMeiPYFQjk fDVJbuv327nNi7dBgsItfT3fce/NeoJAR7r1ode6KP2XPVdM3ITr -----END CERTIFICATE-----Generated at Fri Jun 20 16:01:44 2025 by rpki-client