$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/Tgo2UalC6bYN3cuohaOJh4-z75g.roa File: Tgo2UalC6bYN3cuohaOJh4-z75g.roa (raw, json) Hash identifier: cSW2xNecbkNlatrGyY1RoXGp18g76R8Vll7U8KvNzfg= Subject key identifier: 4E:0A:36:51:A9:42:E9:B6:0D:DD:CB:A8:85:A3:89:87:8F:B3:EF:98 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 065F Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Tgo2UalC6bYN3cuohaOJh4-z75g.roa Signing time: Tue 04 Mar 2025 07:52:16 +0000 ROA not before: Tue 04 Mar 2025 07:52:16 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 7641 IP address blocks: 211.146.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Mar 4 07:52:16 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4E0A3651A942E9B60DDDCBA885A389878FB3EF98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:af:4f:21:1e:0d:29:86:03:a4:2a:e7:39:91: 14:87:95:7c:4b:d3:73:81:94:c4:ce:60:9e:57:72: ef:3a:dd:54:00:2f:92:54:0a:a1:e7:24:8b:5a:ad: 5c:ac:fb:37:32:e5:67:72:f2:53:50:22:e7:7b:db: d9:19:68:4a:dc:bf:b5:bd:70:8f:ee:1c:63:93:5b: b7:7e:ec:5c:ce:73:5d:9a:0e:ae:b5:31:f4:12:88: c0:fe:ef:e8:d9:c1:c6:21:82:9c:2d:64:0d:2a:95: 45:73:8a:0a:a4:b9:99:df:86:79:a9:ec:7e:dc:81: 31:6e:41:eb:cb:49:47:d4:6d:c7:60:ad:9c:6b:20: 47:fb:66:6c:8d:7d:c9:18:7c:bf:8b:6a:1f:6f:f5: af:9f:d6:e4:29:67:2c:4b:f6:9c:45:de:8c:a0:c4: aa:e6:c7:d5:90:15:57:55:d0:7d:23:46:bd:e1:55: af:c3:53:32:8b:0d:bb:2c:26:97:49:0f:ed:2d:1d: 30:20:b6:fe:53:6d:7d:56:be:f6:d0:d6:1a:b5:18: b9:b5:bb:bd:bf:6e:f0:1a:fb:c6:3d:6d:f2:b1:c4: 19:99:c4:a1:46:eb:b8:55:6f:21:2c:0c:e7:01:5c: 15:c1:6e:3d:24:bf:71:c0:8d:e2:6e:67:f1:ab:80: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0A:36:51:A9:42:E9:B6:0D:DD:CB:A8:85:A3:89:87:8F:B3:EF:98 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Tgo2UalC6bYN3cuohaOJh4-z75g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.146.32.0/19 Signature Algorithm: sha256WithRSAEncryption 04:59:08:b5:88:ae:ea:4d:dd:d0:6d:ee:f4:7a:5a:2c:fd:9b: 2b:f1:4b:81:27:ec:6f:8d:3e:c2:b8:21:ec:40:5a:52:f9:fa: 50:9c:7d:b7:54:ee:79:31:95:06:ea:d9:07:20:ad:33:1a:53: 69:28:7f:75:9e:5d:42:61:b1:ff:51:28:94:79:a4:96:02:6e: 4b:fb:86:68:0d:91:84:86:b0:ef:c0:3e:a7:34:38:fd:e4:bf: ac:9b:84:a4:18:6c:ac:87:35:d7:b6:6f:7e:bf:f5:34:c1:78: 50:be:61:2a:ef:ce:eb:e6:5d:03:b7:97:f1:ec:c7:92:31:f1: cb:5d:e9:c4:1c:15:cd:25:6b:73:e4:23:d7:df:4a:dd:62:b6: 52:42:8c:2e:ea:79:84:ad:1f:a3:ee:af:dc:64:00:03:bf:83: a1:f3:23:96:af:d5:65:1a:33:25:5e:4b:08:c8:c7:be:c2:be: c5:c8:da:2d:b9:f4:71:df:9a:59:e2:4d:f8:37:30:d9:45:e6: 1c:b8:db:6d:bc:5b:8e:f6:3b:a5:63:1e:7f:5f:c5:c8:e7:62: b3:ee:31:99:b8:fb:ef:87:04:c3:18:bf:bc:c9:ce:2b:a2:92: 04:42:a1:2c:31:e7:fc:f8:e7:04:c7:b4:d6:ea:6b:0d:99:d0: 9b:db:63:82 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTAzMDQw NzUyMTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRFMEEzNjUxQTk0MkU5 QjYwREREQ0JBODg1QTM4OTg3OEZCM0VGOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxr08hHg0phgOkKuc5kRSHlXxL03OBlMTOYJ5Xcu863VQAL5JU CqHnJItarVys+zcy5Wdy8lNQIud729kZaErcv7W9cI/uHGOTW7d+7FzOc12aDq61 MfQSiMD+7+jZwcYhgpwtZA0qlUVzigqkuZnfhnmp7H7cgTFuQevLSUfUbcdgrZxr IEf7ZmyNfckYfL+Lah9v9a+f1uQpZyxL9pxF3oygxKrmx9WQFVdV0H0jRr3hVa/D UzKLDbssJpdJD+0tHTAgtv5TbX1WvvbQ1hq1GLm1u72/bvAa+8Y9bfKxxBmZxKFG 67hVbyEsDOcBXBXBbj0kv3HAjeJuZ/GrgD2jAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUTgo2UalC6bYN3cuohaOJh4+z75gwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9UZ28yVWFsQzZiWU4zY3Vv aGFPSmg0LXo3NWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF 05IgMA0GCSqGSIb3DQEBCwUAA4IBAQAEWQi1iK7qTd3Qbe70elos/Zsr8UuBJ+xv jT7CuCHsQFpS+fpQnH23VO55MZUG6tkHIK0zGlNpKH91nl1CYbH/USiUeaSWAm5L +4ZoDZGEhrDvwD6nNDj95L+sm4SkGGyshzXXtm9+v/U0wXhQvmEq787r5l0Dt5fx 7MeSMfHLXenEHBXNJWtz5CPX30rdYrZSQowu6nmErR+j7q/cZAADv4Oh8yOWr9Vl GjMlXksIyMe+wr7FyNotufRx35pZ4k34NzDZReYcuNttvFuO9julYx5/X8XI52Kz 7jGZuPvvhwTDGL+8yc4ropIEQqEsMef8+OcEx7TW6msNmdCb22OC -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:23 2025 by rpki-client