$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/bEs8nhiEoryFgnRq5wr5NH1D-6Q.roa File: bEs8nhiEoryFgnRq5wr5NH1D-6Q.roa (raw, json) Hash identifier: yqOxMXuMD3PsV5KGoKgJgFP+TXxBm++tOqMqAfIEy0w= Subject key identifier: 6C:4B:3C:9E:18:84:A2:BC:85:82:74:6A:E7:0A:F9:34:7D:43:FB:A4 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 082B Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/bEs8nhiEoryFgnRq5wr5NH1D-6Q.roa Signing time: Fri 23 May 2025 07:36:36 +0000 ROA not before: Fri 23 May 2025 07:36:36 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 38019 IP address blocks: 223.161.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 14:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2091 (0x82b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:36:36 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=6C4B3C9E1884A2BC8582746AE70AF9347D43FBA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:ed:91:2e:a2:1b:2f:80:64:ec:05:03:b4: 9e:17:2e:59:65:02:0e:45:b2:0f:70:0e:fd:f5:97: 4b:bf:a2:c6:72:a4:5e:46:fb:1e:37:82:07:7e:ad: ef:95:08:c9:b9:42:a8:9d:e7:0e:74:15:9f:a7:c4: fc:a8:95:02:d7:fd:72:13:39:e2:d4:bb:7f:6d:47: e3:79:34:8d:1f:95:ab:f4:9c:24:1a:94:d3:6c:83: bd:3e:dc:a9:11:36:f9:70:57:09:f6:ec:38:c9:67: d7:d4:02:18:32:44:1a:50:12:5c:98:16:bc:8e:44: 7a:80:df:78:d7:93:8a:09:df:e3:8b:66:f3:68:8c: 2a:8c:14:4e:c1:8a:04:30:6f:49:69:74:7f:b3:ce: 6d:bb:cc:4b:79:97:a0:75:fd:db:1d:f7:2d:35:a3: 02:bc:19:4a:56:02:68:9e:ce:31:69:10:20:5b:d7: 3d:ad:80:83:65:9b:f1:6c:e6:5d:e5:46:06:24:57: 28:2e:95:08:ee:1a:c5:c7:c5:63:79:fd:b5:72:4c: 7b:64:65:c7:49:92:b5:59:27:be:99:61:b4:b3:f4: 7f:5f:fe:ce:bb:9d:11:28:7a:10:4b:16:81:d6:14: 18:96:e1:8b:33:fe:18:12:f9:5d:0d:e8:cd:68:07: fc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4B:3C:9E:18:84:A2:BC:85:82:74:6A:E7:0A:F9:34:7D:43:FB:A4 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/bEs8nhiEoryFgnRq5wr5NH1D-6Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.161.202.0/23 Signature Algorithm: sha256WithRSAEncryption 21:18:74:16:6e:27:5c:29:26:69:fe:0c:bd:09:da:ad:aa:2b: db:fd:cb:a8:72:61:be:8e:21:75:7b:8d:ed:74:44:12:e8:f0: 23:e1:af:ee:06:30:be:e1:df:e3:4f:30:98:5b:c6:76:b6:aa: 9d:87:fd:3b:e9:d2:9c:cd:36:eb:8e:ca:21:da:e3:1c:4f:d0: 8a:d0:78:d3:73:4d:8f:9c:44:5d:bf:97:47:d7:6e:86:63:a8: 8e:44:ea:11:7c:c5:47:4e:06:f6:43:bd:59:36:3e:54:c7:a6: ac:12:a3:3c:62:7a:68:6e:3d:ca:04:3a:a8:0e:ca:9c:6a:90: 7f:e9:9c:08:0c:de:9f:0f:90:31:ff:10:59:2e:74:00:4f:6c: b9:26:ce:e3:1e:a7:91:f4:fa:4f:6e:b8:c4:2d:0d:3d:53:6b: e3:e6:67:14:d8:f8:0f:6c:bf:6f:b6:b2:1e:4e:64:3a:cf:4c: 05:da:40:09:14:d6:3c:b3:26:29:8c:7a:f5:a5:92:dc:2a:2f: 31:06:41:74:f1:e0:06:54:9e:8c:73:e3:6a:dc:06:ed:77:18: 36:2d:08:c7:16:3c:ef:eb:33:57:a7:f4:fe:58:1a:c3:55:a5: 29:10:19:ab:1c:00:c7:ad:2a:21:60:d1:6d:f1:07:b6:4e:d5: 5f:2b:a4:bc -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzM2MzZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDZDNEIzQzlFMTg4NEEy QkM4NTgyNzQ2QUU3MEFGOTM0N0Q0M0ZCQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIjO2RLqIbL4Bk7AUDtJ4XLlllAg5Fsg9wDv31l0u/osZypF5G +x43ggd+re+VCMm5Qqid5w50FZ+nxPyolQLX/XITOeLUu39tR+N5NI0flav0nCQa lNNsg70+3KkRNvlwVwn27DjJZ9fUAhgyRBpQElyYFryORHqA33jXk4oJ3+OLZvNo jCqMFE7BigQwb0lpdH+zzm27zEt5l6B1/dsd9y01owK8GUpWAmiezjFpECBb1z2t gINlm/Fs5l3lRgYkVygulQjuGsXHxWN5/bVyTHtkZcdJkrVZJ76ZYbSz9H9f/s67 nREoehBLFoHWFBiW4Ysz/hgS+V0N6M1oB/w3AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUbEs8nhiEoryFgnRq5wr5NH1D+6QwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9iRXM4bmhpRW9yeUZnblJx NXdyNU5IMUQtNlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36HKMA0GCSqGSIb3DQEBCwUAA4IBAQAhGHQWbidcKSZp/gy9Cdqtqivb/cuocmG+ jiF1e43tdEQS6PAj4a/uBjC+4d/jTzCYW8Z2tqqdh/076dKczTbrjsoh2uMcT9CK 0HjTc02PnERdv5dH126GY6iOROoRfMVHTgb2Q71ZNj5Ux6asEqM8Ynpobj3KBDqo DsqcapB/6ZwIDN6fD5Ax/xBZLnQAT2y5Js7jHqeR9PpPbrjELQ09U2vj5mcU2PgP bL9vtrIeTmQ6z0wF2kAJFNY8syYpjHr1pZLcKi8xBkF08eAGVJ6Mc+Nq3Abtdxg2 LQjHFjzv6zNXp/T+WBrDVaUpEBmrHADHrSohYNFt8Qe2TtVfK6S8 -----END CERTIFICATE-----Generated at Sun Jun 22 13:43:27 2025 by rpki-client