$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/YWL88wxKTPVgXrqZ75UTCINKn3Q.roa File: YWL88wxKTPVgXrqZ75UTCINKn3Q.roa (raw, json) Hash identifier: +dUueZ6IHuIEQ3uDH8MucMBp012pJdlJbENHoAT0vvk= Subject key identifier: 61:62:FC:F3:0C:4A:4C:F5:60:5E:BA:99:EF:95:13:08:83:4A:9F:74 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 081E Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/YWL88wxKTPVgXrqZ75UTCINKn3Q.roa Signing time: Fri 23 May 2025 07:36:31 +0000 ROA not before: Fri 23 May 2025 07:36:31 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 56042 IP address blocks: 223.161.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2078 (0x81e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:36:31 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=6162FCF30C4A4CF5605EBA99EF951308834A9F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e3:46:46:e1:23:6c:33:9f:12:04:80:93:3d: 8a:a7:d2:2b:20:7b:22:e9:23:c4:d4:c4:e6:01:1d: 0d:a5:39:5b:f6:8f:74:c3:d6:16:4b:19:46:e4:a8: f2:37:c4:cd:90:39:63:f8:1d:ec:79:45:bf:33:1a: 12:ad:50:6b:b6:e2:a3:cc:cb:1c:fa:dc:c0:c1:1b: f6:d7:13:0b:f2:c9:b3:3f:14:3d:89:08:52:37:16: 3e:2c:f4:4f:86:45:56:e4:35:30:d6:c6:aa:e2:aa: 13:52:e0:02:56:90:fc:a9:45:c4:79:40:b5:9c:7e: 66:32:b9:28:23:ce:6c:75:f0:54:a0:1d:d6:7b:8c: 61:75:ff:13:84:84:72:21:ea:f0:ba:3a:16:44:42: 90:35:10:3d:55:5a:1c:00:24:78:3c:d2:32:9b:cd: e8:c1:2e:dc:a6:d7:c2:1c:3c:65:97:e1:e1:bb:ce: e6:95:80:40:83:72:5a:e3:7e:a8:38:69:21:ff:b0: 2c:20:bc:60:a0:0c:98:3a:e0:49:4a:9d:ec:10:1d: 9d:02:c6:ff:f6:60:22:6e:18:c3:89:50:6b:b7:c4: 0c:e2:19:67:3a:66:4a:3c:fb:4b:c8:02:b9:4b:9a: 4e:c0:5f:34:26:ab:93:b9:01:24:52:93:74:21:5b: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:62:FC:F3:0C:4A:4C:F5:60:5E:BA:99:EF:95:13:08:83:4A:9F:74 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/YWL88wxKTPVgXrqZ75UTCINKn3Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.161.204.0/23 Signature Algorithm: sha256WithRSAEncryption 48:6f:2f:04:0d:d9:ee:35:ea:1b:fe:f2:10:f7:39:be:59:62: a3:d6:c6:e1:5d:74:21:d3:29:89:91:61:af:c3:b5:d8:ef:6d: 22:cf:f1:c6:92:8b:8a:2e:7c:43:fd:bd:96:a6:8b:48:54:e8: 01:93:3a:d3:08:83:a4:65:58:30:36:11:0a:e6:41:0c:70:bd: 31:ae:a9:9d:b7:48:f2:8f:6e:30:88:ba:5c:6d:55:bc:56:06: 9f:16:e9:c8:de:9a:9d:36:22:fe:d7:ab:ed:bc:f7:f4:2f:36: f6:7c:f4:a7:83:82:3c:b9:77:b3:d4:25:21:90:18:88:f2:e7: ba:be:8f:ca:e2:84:37:ba:b9:33:71:c8:05:fb:92:24:00:df: 91:b4:bf:d2:51:d9:75:dd:79:48:53:bb:9e:37:59:29:24:f8: ac:99:eb:42:ab:dc:33:ca:7e:db:d8:37:96:43:d9:39:8a:75: 4b:66:38:a6:e8:d0:2b:0d:1b:35:57:e1:4a:76:9e:c7:98:2a: bc:3a:06:a5:d2:46:ac:ce:81:54:65:c9:76:04:f1:5f:95:ba: 70:a0:16:70:69:ec:be:8e:d7:63:5f:9c:e9:9f:9f:ff:ba:1e: 3f:49:dd:9b:e9:a6:50:87:5a:b4:6f:fc:7b:f5:d4:64:67:10: 91:13:0a:f8 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzM2MzFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYxNjJGQ0YzMEM0QTRD RjU2MDVFQkE5OUVGOTUxMzA4ODM0QTlGNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDe40ZG4SNsM58SBICTPYqn0isgeyLpI8TUxOYBHQ2lOVv2j3TD 1hZLGUbkqPI3xM2QOWP4Hex5Rb8zGhKtUGu24qPMyxz63MDBG/bXEwvyybM/FD2J CFI3Fj4s9E+GRVbkNTDWxqriqhNS4AJWkPypRcR5QLWcfmYyuSgjzmx18FSgHdZ7 jGF1/xOEhHIh6vC6OhZEQpA1ED1VWhwAJHg80jKbzejBLtym18IcPGWX4eG7zuaV gECDclrjfqg4aSH/sCwgvGCgDJg64ElKnewQHZ0Cxv/2YCJuGMOJUGu3xAziGWc6 Zko8+0vIArlLmk7AXzQmq5O5ASRSk3QhW0RFAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUYWL88wxKTPVgXrqZ75UTCINKn3QwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9ZV0w4OHd4S1RQVmdYcnFa NzVVVENJTktuM1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36HMMA0GCSqGSIb3DQEBCwUAA4IBAQBIby8EDdnuNeob/vIQ9zm+WWKj1sbhXXQh 0ymJkWGvw7XY720iz/HGkouKLnxD/b2WpotIVOgBkzrTCIOkZVgwNhEK5kEMcL0x rqmdt0jyj24wiLpcbVW8VgafFunI3pqdNiL+16vtvPf0Lzb2fPSng4I8uXez1CUh kBiI8ue6vo/K4oQ3urkzccgF+5IkAN+RtL/SUdl13XlIU7ueN1kpJPismetCq9wz yn7b2DeWQ9k5inVLZjim6NArDRs1V+FKdp7HmCq8Ogal0kaszoFUZcl2BPFflbpw oBZwaey+jtdjX5zpn5//uh4/Sd2b6aZQh1q0b/x79dRkZxCREwr4 -----END CERTIFICATE-----Generated at Sat Jun 21 23:17:47 2025 by rpki-client