$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/WgK6jIMoLigCeQ0qqvYq5JHft_0.roa File: WgK6jIMoLigCeQ0qqvYq5JHft_0.roa (raw, json) Hash identifier: hMzf3QsUaInMyV/rUkR7PYcwCmoif2XKZ5qyPb3DH1I= Subject key identifier: 5A:02:BA:8C:83:28:2E:28:02:79:0D:2A:AA:F6:2A:E4:91:DF:B7:FD Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0811 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/WgK6jIMoLigCeQ0qqvYq5JHft_0.roa Signing time: Fri 23 May 2025 07:17:23 +0000 ROA not before: Fri 23 May 2025 07:17:23 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134810 IP address blocks: 223.160.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2065 (0x811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:17:23 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=5A02BA8C83282E2802790D2AAAF62AE491DFB7FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:81:58:71:20:d7:dd:a4:21:ff:d6:6c:0a: 19:b8:e5:f0:2e:3a:f7:88:23:92:a9:67:de:4c:14: 20:ed:e9:f4:dc:df:35:f2:db:10:41:55:d6:49:f4: 53:84:9a:21:cb:79:ed:a5:d2:6f:40:bf:52:7b:a1: 36:87:70:7b:74:6d:cb:98:60:f3:a7:f1:af:e9:38: 16:86:c1:01:45:81:bd:dc:2e:f0:13:0a:7b:a6:3d: a2:7a:fc:8b:3c:94:e2:af:1c:1f:50:79:48:0b:e8: ed:1f:99:93:bb:17:d4:2b:ba:06:94:cc:64:6d:66: 89:64:f7:c4:e6:bb:bb:c5:95:a5:f7:53:5f:a9:b0: b8:69:82:40:e1:c7:aa:39:b7:5f:29:c6:33:45:bb: f4:cb:14:00:f9:ba:9f:9b:38:f3:66:11:31:89:65: 29:e9:97:5f:00:6c:aa:35:5f:db:32:63:4a:57:b8: 92:0b:9e:91:22:24:9a:c4:c1:00:26:1b:08:1c:5c: 51:d8:47:f1:8f:fe:d8:e9:7d:06:84:2e:9b:a4:7f: 99:f8:49:4c:a4:cb:3d:38:b8:78:62:8c:1d:a7:b9: 63:b0:5c:ab:4d:5d:a7:14:f4:dd:ed:31:6d:3f:f3: 5e:df:2b:c8:f0:b8:43:99:58:56:f9:de:de:58:06: 18:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:02:BA:8C:83:28:2E:28:02:79:0D:2A:AA:F6:2A:E4:91:DF:B7:FD X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/WgK6jIMoLigCeQ0qqvYq5JHft_0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.146.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:a1:46:0f:42:62:e2:67:0d:63:65:ab:0b:77:51:de:e1:02: 25:c2:78:da:56:4c:fc:c6:ba:d4:a7:54:f1:ac:8c:fc:8a:eb: c6:4c:cb:8c:8b:0f:79:e8:58:f0:3e:bf:ce:bc:d0:cf:ee:e9: 0e:fc:6e:86:91:a8:32:3a:b2:2d:73:6d:64:db:9b:c8:83:c0: e5:df:f8:3f:50:a7:13:90:f3:7e:b3:b3:74:87:73:6a:2e:97: 3f:03:aa:b6:5e:1e:a4:e9:4c:da:3a:3c:73:ae:60:5d:66:04: aa:1b:50:2c:2d:0a:2c:60:02:03:05:90:11:6c:86:f4:18:85: ab:d4:0d:36:db:08:d6:f1:f7:a3:6c:74:d6:5b:d0:f1:63:54: 93:c3:74:2f:36:e8:fe:76:85:4c:2d:01:14:c9:be:22:27:83: cb:5b:cd:7d:96:79:a7:d9:d4:c2:60:06:a9:b2:85:0d:a9:18: f1:31:78:9f:db:8d:38:12:13:58:40:c3:42:92:98:9e:10:d1: 72:9f:c1:9b:23:d3:af:f1:cf:0b:1c:72:2a:b4:b7:29:78:14: 19:d7:92:82:94:3b:6f:39:e6:07:6b:f6:41:f2:72:a4:ab:a7: ba:8a:1f:1a:ab:c8:7d:14:32:d1:78:5b:28:9d:25:bf:73:43: 97:72:3a:0c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzE3MjNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVBMDJCQThDODMyODJF MjgwMjc5MEQyQUFBRjYyQUU0OTFERkI3RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCruIFYcSDX3aQh/9ZsChm45fAuOveII5KpZ95MFCDt6fTc3zXy 2xBBVdZJ9FOEmiHLee2l0m9Av1J7oTaHcHt0bcuYYPOn8a/pOBaGwQFFgb3cLvAT CnumPaJ6/Is8lOKvHB9QeUgL6O0fmZO7F9QrugaUzGRtZolk98Tmu7vFlaX3U1+p sLhpgkDhx6o5t18pxjNFu/TLFAD5up+bOPNmETGJZSnpl18AbKo1X9syY0pXuJIL npEiJJrEwQAmGwgcXFHYR/GP/tjpfQaELpukf5n4SUykyz04uHhijB2nuWOwXKtN XacU9N3tMW0/817fK8jwuEOZWFb53t5YBhiVAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUWgK6jIMoLigCeQ0qqvYq5JHft/0wHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9XZ0s2aklNb0xpZ0NlUTBx cXZZcTVKSGZ0XzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36CSMA0GCSqGSIb3DQEBCwUAA4IBAQBuoUYPQmLiZw1jZasLd1He4QIlwnjaVkz8 xrrUp1TxrIz8iuvGTMuMiw956FjwPr/OvNDP7ukO/G6GkagyOrItc21k25vIg8Dl 3/g/UKcTkPN+s7N0h3NqLpc/A6q2Xh6k6UzaOjxzrmBdZgSqG1AsLQosYAIDBZAR bIb0GIWr1A022wjW8fejbHTWW9DxY1STw3QvNuj+doVMLQEUyb4iJ4PLW819lnmn 2dTCYAapsoUNqRjxMXif2404EhNYQMNCkpieENFyn8GbI9Ov8c8LHHIqtLcpeBQZ 15KClDtvOeYHa/ZB8nKkq6e6ih8aq8h9FDLReFsonSW/c0OXcjoM -----END CERTIFICATE-----Generated at Fri Jun 20 01:53:25 2025 by rpki-client