$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/JsSp3mBWK0dIyJEOUyD51IGBewY.roa File: JsSp3mBWK0dIyJEOUyD51IGBewY.roa (raw, json) Hash identifier: AaR3M17e1/qON52hXYromfZ28bFv+a/1CPgjOnzN7TQ= Subject key identifier: 26:C4:A9:DE:60:56:2B:47:48:C8:91:0E:53:20:F9:D4:81:81:7B:06 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0832 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/JsSp3mBWK0dIyJEOUyD51IGBewY.roa Signing time: Fri 23 May 2025 07:41:06 +0000 ROA not before: Fri 23 May 2025 07:41:06 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24445 IP address blocks: 223.161.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2098 (0x832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:41:06 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=26C4A9DE60562B4748C8910E5320F9D481817B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:66:83:f8:e7:43:17:cd:11:94:55:91:dc:bd: 71:69:15:01:f9:3d:bc:3f:ac:52:e5:06:eb:c5:1f: db:11:37:27:43:ee:18:9a:79:36:4b:f4:e9:f8:6f: a0:81:f4:5c:95:56:e3:d0:7f:82:07:ae:6c:2b:cb: f7:20:4b:a7:55:42:f2:71:32:41:e0:bf:c3:2b:4c: 50:2b:0c:b5:ec:82:24:a6:30:6c:f1:2b:4b:0e:ed: d1:ab:d8:62:2f:4b:92:ad:bb:a2:92:a9:54:51:44: 3c:8a:37:0c:7e:e2:d3:d8:f8:a5:67:83:8b:cc:f7: 6b:fa:ee:cf:ef:59:95:e7:45:c3:b6:68:1a:51:90: 35:52:91:5b:ac:93:e7:1c:94:c2:c3:a9:8d:fe:e9: 57:0a:fa:92:83:95:6d:ec:bc:02:46:e7:90:0a:97: a8:85:89:b3:4a:38:e4:f5:88:2e:aa:2f:3a:68:71: db:30:19:b3:44:a9:46:40:e0:35:02:8f:94:be:1c: 5b:a1:f3:4d:35:ad:3f:9e:f3:25:72:0c:7c:03:02: bd:62:1e:bf:ac:63:73:ba:30:fb:48:a7:0e:cc:c5: 2a:8a:bd:fe:75:91:54:2d:c6:dd:b2:67:08:d6:0f: 30:47:96:61:8c:1e:54:65:64:1e:12:1c:98:62:81: b0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C4:A9:DE:60:56:2B:47:48:C8:91:0E:53:20:F9:D4:81:81:7B:06 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/JsSp3mBWK0dIyJEOUyD51IGBewY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.161.250.0/23 Signature Algorithm: sha256WithRSAEncryption 03:50:35:95:d1:f3:01:a1:a3:93:ef:47:37:f4:68:b9:e8:5d: 86:2a:05:28:da:e1:05:99:22:b6:e5:4c:b7:57:7a:60:16:44: 5a:7b:c1:af:78:5a:ce:14:b4:22:a6:b5:82:21:69:7f:9f:d2: e4:58:4e:5c:4c:40:46:23:d8:b9:62:6c:29:ee:55:09:1b:ab: 06:62:90:ad:e4:96:ac:55:d7:c7:61:d4:5d:70:43:68:19:49: 18:e9:59:f5:64:2f:e9:a0:9f:48:e3:d7:cc:3f:67:cf:70:a6: 86:03:e6:fd:45:d5:38:af:84:79:c2:46:7f:d3:e7:6a:d1:83: 54:22:08:01:7d:97:a8:e8:c9:7b:bf:b5:6e:b1:44:86:a0:2e: 58:91:a6:68:4d:67:4c:c6:d9:50:b3:e0:16:05:48:e8:fe:c9: 45:1f:2d:35:08:62:dc:d4:49:ba:48:05:07:fe:85:aa:16:f3: 48:8e:c5:f4:59:ac:be:7a:4b:22:04:fd:bf:18:38:7d:35:2f: 1e:44:02:0b:37:d0:01:ec:c0:83:45:b3:f3:fc:4e:cf:b8:35: 57:03:36:6b:79:71:96:af:38:85:49:78:ae:3e:c8:ff:c4:83: 80:db:f9:63:3d:a5:9c:53:37:b9:01:16:ad:a7:16:6b:af:84: f6:3d:40:76 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzQxMDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDI2QzRBOURFNjA1NjJC NDc0OEM4OTEwRTUzMjBGOUQ0ODE4MTdCMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFZoP450MXzRGUVZHcvXFpFQH5Pbw/rFLlBuvFH9sRNydD7hia eTZL9On4b6CB9FyVVuPQf4IHrmwry/cgS6dVQvJxMkHgv8MrTFArDLXsgiSmMGzx K0sO7dGr2GIvS5Ktu6KSqVRRRDyKNwx+4tPY+KVng4vM92v67s/vWZXnRcO2aBpR kDVSkVusk+cclMLDqY3+6VcK+pKDlW3svAJG55AKl6iFibNKOOT1iC6qLzpocdsw GbNEqUZA4DUCj5S+HFuh8001rT+e8yVyDHwDAr1iHr+sY3O6MPtIpw7MxSqKvf51 kVQtxt2yZwjWDzBHlmGMHlRlZB4SHJhigbAXAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUJsSp3mBWK0dIyJEOUyD51IGBewYwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9Kc1NwM21CV0swZEl5SkVP VXlENTFJR0Jld1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36H6MA0GCSqGSIb3DQEBCwUAA4IBAQADUDWV0fMBoaOT70c39Gi56F2GKgUo2uEF mSK25Uy3V3pgFkRae8GveFrOFLQiprWCIWl/n9LkWE5cTEBGI9i5Ymwp7lUJG6sG YpCt5JasVdfHYdRdcENoGUkY6Vn1ZC/poJ9I49fMP2fPcKaGA+b9RdU4r4R5wkZ/ 0+dq0YNUIggBfZeo6Ml7v7VusUSGoC5YkaZoTWdMxtlQs+AWBUjo/slFHy01CGLc 1Em6SAUH/oWqFvNIjsX0Way+eksiBP2/GDh9NS8eRAILN9AB7MCDRbPz/E7PuDVX AzZreXGWrziFSXiuPsj/xIOA2/ljPaWcUze5ARatpxZrr4T2PUB2 -----END CERTIFICATE-----Generated at Sat Jun 21 03:25:37 2025 by rpki-client