$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/KwPNinQA5hgpYyZB40Al7xp-KU8.roa File: KwPNinQA5hgpYyZB40Al7xp-KU8.roa (raw, json) Hash identifier: 6VEQYun6yfxxf1dsMZ4rWkbgcIRm15El73nOjdCbwz0= Subject key identifier: 2B:03:CD:8A:74:00:E6:18:29:63:26:41:E3:40:25:EF:1A:7E:29:4F Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 082D Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/KwPNinQA5hgpYyZB40Al7xp-KU8.roa Signing time: Fri 23 May 2025 07:36:37 +0000 ROA not before: Fri 23 May 2025 07:36:37 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 9808 IP address blocks: 223.161.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:36:37 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2B03CD8A7400E61829632641E34025EF1A7E294F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:95:15:a3:57:f5:22:f6:f2:99:fb:bd:42:9e: f1:30:13:95:ed:c0:6f:18:3d:77:cb:82:ec:3a:72: ef:16:34:8f:e4:e1:07:24:32:2d:ea:f2:3e:63:dd: 45:46:d9:be:d1:f4:e3:c0:79:c3:4a:b7:1c:4e:9e: e3:5a:f2:d6:9a:96:ce:d9:cc:33:25:ec:11:c1:01: 80:f9:0c:0d:d7:bc:b4:11:9f:a6:52:b9:45:4f:10: 42:f3:a9:2e:6f:a8:ea:fa:ab:b5:6b:6b:1a:6f:e9: 8d:db:60:67:fb:94:9f:e1:9c:16:98:50:32:c3:4e: f0:74:57:ca:2d:c9:6b:69:b5:dc:ef:f5:4b:37:2a: 79:aa:77:65:7e:9d:4b:d4:6c:91:d1:46:07:06:07: fa:12:aa:52:7b:b3:9d:27:04:47:76:8f:ab:ec:12: aa:44:3d:e8:a9:16:d0:21:90:45:10:40:62:5c:09: f2:46:12:bb:f7:36:8b:29:79:32:ad:94:53:3d:4a: d3:c2:e5:d0:ad:c9:31:e7:6c:be:12:8e:33:2a:04: 3b:a9:7f:29:fc:27:2f:4f:db:2f:2b:bd:b6:92:00: 88:45:95:df:55:33:dd:cc:3b:d7:88:c2:8e:84:65: 0c:09:d3:ba:b0:4b:17:13:e7:2d:85:48:11:c0:57: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:03:CD:8A:74:00:E6:18:29:63:26:41:E3:40:25:EF:1A:7E:29:4F X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/KwPNinQA5hgpYyZB40Al7xp-KU8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.161.222.0/23 Signature Algorithm: sha256WithRSAEncryption 98:c5:12:7e:a5:a9:b7:7f:52:e9:7f:42:fa:b6:02:a7:bb:4b: 4b:a3:63:58:21:7a:7f:8b:c4:ef:67:9a:8e:2f:9c:7f:6e:f7: 42:8d:15:34:45:f1:61:e8:3a:a8:a6:9d:69:a7:ea:ed:d6:ab: ee:99:f3:95:e7:51:27:92:0b:7a:58:2b:37:a0:57:1c:b1:84: ba:0a:c7:2f:df:5a:26:70:d2:0c:dd:dd:75:13:ab:de:67:d2: c7:74:f1:c1:6e:ee:56:a4:67:f4:4a:25:20:01:27:2e:24:c1: ed:fc:ee:0e:f0:43:e0:67:ca:d2:e1:0d:1e:a2:d0:f6:77:a3: e9:e0:d3:fe:32:47:44:2c:6d:ec:e0:19:35:a1:66:15:81:1e: 86:a8:98:5d:e2:1a:c0:c9:80:8f:49:61:60:10:d8:52:b7:6e: 80:45:8b:c4:c0:01:c7:21:2f:dd:f0:76:2b:58:a6:80:df:20: 66:60:7c:22:15:0c:86:1c:91:28:d1:0a:aa:21:4d:c8:09:c4: 65:8f:83:66:7d:12:63:5d:26:13:3a:bc:27:c1:e0:98:37:eb: 59:51:07:c0:bb:59:fc:fe:1f:2a:d3:67:b9:50:8e:4f:88:d8: c0:43:a0:de:6f:a0:45:aa:96:77:ff:45:d4:ed:04:b8:4d:38: ac:07:a4:a2 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzM2MzdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDJCMDNDRDhBNzQwMEU2 MTgyOTYzMjY0MUUzNDAyNUVGMUE3RTI5NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDlRWjV/Ui9vKZ+71CnvEwE5XtwG8YPXfLguw6cu8WNI/k4Qck Mi3q8j5j3UVG2b7R9OPAecNKtxxOnuNa8taals7ZzDMl7BHBAYD5DA3XvLQRn6ZS uUVPEELzqS5vqOr6q7Vraxpv6Y3bYGf7lJ/hnBaYUDLDTvB0V8otyWtptdzv9Us3 Knmqd2V+nUvUbJHRRgcGB/oSqlJ7s50nBEd2j6vsEqpEPeipFtAhkEUQQGJcCfJG Erv3NospeTKtlFM9StPC5dCtyTHnbL4SjjMqBDupfyn8Jy9P2y8rvbaSAIhFld9V M93MO9eIwo6EZQwJ07qwSxcT5y2FSBHAVwYbAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUKwPNinQA5hgpYyZB40Al7xp+KU8wHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9Ld1BOaW5RQTVoZ3BZeVpC NDBBbDd4cC1LVTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36HeMA0GCSqGSIb3DQEBCwUAA4IBAQCYxRJ+pam3f1Lpf0L6tgKnu0tLo2NYIXp/ i8TvZ5qOL5x/bvdCjRU0RfFh6Dqopp1pp+rt1qvumfOV51Enkgt6WCs3oFccsYS6 Cscv31omcNIM3d11E6veZ9LHdPHBbu5WpGf0SiUgAScuJMHt/O4O8EPgZ8rS4Q0e otD2d6Pp4NP+MkdELG3s4Bk1oWYVgR6GqJhd4hrAyYCPSWFgENhSt26ARYvEwAHH IS/d8HYrWKaA3yBmYHwiFQyGHJEo0QqqIU3ICcRlj4NmfRJjXSYTOrwnweCYN+tZ UQfAu1n8/h8q02e5UI5PiNjAQ6Deb6BFqpZ3/0XU7QS4TTisB6Si -----END CERTIFICATE-----Generated at Sun Jun 22 17:53:21 2025 by rpki-client