$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/R9txMPuZG2S6aYddE4rUKEGN1Mw.roa File: R9txMPuZG2S6aYddE4rUKEGN1Mw.roa (raw, json) Hash identifier: PY4wEXWSpJ2A4pmHLPKFwkZQ7SpPUzOckLUk+iMS2x8= Subject key identifier: 47:DB:71:30:FB:99:1B:64:BA:69:87:5D:13:8A:D4:28:41:8D:D4:CC Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0656 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/R9txMPuZG2S6aYddE4rUKEGN1Mw.roa Signing time: Tue 04 Mar 2025 06:58:44 +0000 ROA not before: Tue 04 Mar 2025 06:58:44 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 7641 IP address blocks: 112.128.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Mar 4 06:58:44 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=47DB7130FB991B64BA69875D138AD428418DD4CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:ab:b7:46:e1:4e:f0:3e:5d:b4:ae:2d:e7: e1:7f:ed:fd:c7:9c:18:78:38:60:31:4b:5e:a4:a6: bd:23:52:1e:e9:06:02:60:97:96:90:6f:9c:65:4b: c9:94:80:5d:5e:50:2a:a0:92:65:77:04:33:0b:60: 91:6b:f9:af:d6:63:49:c8:d2:e9:74:7d:a3:53:c4: 7e:73:2d:f0:8e:a3:23:6a:38:68:ac:3d:06:b3:5c: 5b:1c:62:73:1d:2b:74:b6:1e:e0:0d:9c:63:29:49: 96:b7:43:fc:cf:6a:ee:8c:8f:5f:de:d6:e1:88:2f: ff:7c:9b:65:19:ba:31:b0:a6:d4:c9:e0:3d:b7:b0: 7b:4e:d3:83:06:b8:59:dd:30:7b:28:72:0f:86:1a: dc:ac:9f:20:f7:8d:70:ae:a6:a0:e1:9d:f3:4e:fd: ff:13:21:fd:30:44:99:67:3b:6c:0d:5a:19:9d:7e: 48:01:bf:f1:f1:bf:0f:c5:6f:ac:c2:69:11:f0:44: 0e:6b:ef:0b:5f:f7:35:4e:1a:2d:73:43:0c:93:fa: 80:3f:de:7e:df:ef:4f:71:37:45:5e:c8:1c:43:0c: 16:67:25:87:a6:85:fc:09:6e:88:43:b8:e4:f5:c0: 79:71:17:d9:7c:d4:df:9b:4c:d0:96:69:8d:46:29: c0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DB:71:30:FB:99:1B:64:BA:69:87:5D:13:8A:D4:28:41:8D:D4:CC X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/R9txMPuZG2S6aYddE4rUKEGN1Mw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.128.0.0/14 Signature Algorithm: sha256WithRSAEncryption 4d:e1:0f:48:b8:57:31:8b:6f:58:82:01:8e:bc:7d:f2:a4:9b: 2a:ad:67:72:fa:69:e2:a6:b3:e0:56:cd:10:a1:61:9f:fe:fe: 1a:16:f5:03:b5:60:21:b7:e6:0d:9b:0c:45:a9:65:e9:48:4b: 3c:cb:b1:fb:46:08:41:c6:15:80:1e:50:be:bf:77:fc:c7:33: da:99:e1:bd:40:83:ed:cd:b8:7a:69:66:58:fd:b9:bc:46:68: 00:85:9c:4f:39:64:c2:a0:71:89:88:a8:b0:51:1e:a5:c2:cb: cd:fe:b8:cb:f1:61:a4:fc:88:3a:68:e4:da:7a:b6:a2:96:c3: 43:6f:57:76:c5:0f:d8:81:d6:85:93:da:49:67:54:c3:fe:d5: 34:7b:c8:f4:15:7e:e1:f7:e5:3e:cd:68:cf:20:d0:3d:cd:81: 8d:4c:a5:29:50:e6:19:86:86:66:04:e8:c3:d7:61:b5:6a:e0: c7:a2:62:d8:82:08:2c:97:5f:d2:19:6b:71:8d:14:10:75:b9: 24:ff:69:8e:5e:9f:af:0f:da:d1:be:72:50:b2:9e:7e:3e:84: 47:fe:c3:62:b6:9c:92:70:b3:0a:db:09:cd:c0:78:8d:cf:ab: cb:9d:05:32:f5:06:1f:1d:28:52:38:e6:c0:65:67:98:fe:a6: c9:31:79:f4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTAzMDQw NjU4NDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ3REI3MTMwRkI5OTFC NjRCQTY5ODc1RDEzOEFENDI4NDE4REQ0Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOa6u3RuFO8D5dtK4t5+F/7f3HnBh4OGAxS16kpr0jUh7pBgJg l5aQb5xlS8mUgF1eUCqgkmV3BDMLYJFr+a/WY0nI0ul0faNTxH5zLfCOoyNqOGis PQazXFscYnMdK3S2HuANnGMpSZa3Q/zPau6Mj1/e1uGIL/98m2UZujGwptTJ4D23 sHtO04MGuFndMHsocg+GGtysnyD3jXCupqDhnfNO/f8TIf0wRJlnO2wNWhmdfkgB v/Hxvw/Fb6zCaRHwRA5r7wtf9zVOGi1zQwyT+oA/3n7f709xN0VeyBxDDBZnJYem hfwJbohDuOT1wHlxF9l81N+bTNCWaY1GKcD5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUR9txMPuZG2S6aYddE4rUKEGN1MwwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9SOXR4TVB1WkcyUzZhWWRk RTRyVUtFR04xTXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMC cIAwDQYJKoZIhvcNAQELBQADggEBAE3hD0i4VzGLb1iCAY68ffKkmyqtZ3L6aeKm s+BWzRChYZ/+/hoW9QO1YCG35g2bDEWpZelISzzLsftGCEHGFYAeUL6/d/zHM9qZ 4b1Ag+3NuHppZlj9ubxGaACFnE85ZMKgcYmIqLBRHqXCy83+uMvxYaT8iDpo5Np6 tqKWw0NvV3bFD9iB1oWT2klnVMP+1TR7yPQVfuH35T7NaM8g0D3NgY1MpSlQ5hmG hmYE6MPXYbVq4MeiYtiCCCyXX9IZa3GNFBB1uST/aY5en68P2tG+clCynn4+hEf+ w2K2nJJwswrbCc3AeI3Pq8udBTL1Bh8dKFI45sBlZ5j+pskxefQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:48 2025 by rpki-client