$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/bTTelBX8-cCkuKmCdwhaIkvJQlk.roa File: bTTelBX8-cCkuKmCdwhaIkvJQlk.roa (raw, json) Hash identifier: 6gccRvfg4hORMTXVCTw7W3oUMnWCr3RxUubfaRazmH4= Subject key identifier: 6D:34:DE:94:15:FC:F9:C0:A4:B8:A9:82:77:08:5A:22:4B:C9:42:59 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0801 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/bTTelBX8-cCkuKmCdwhaIkvJQlk.roa Signing time: Fri 23 May 2025 07:07:20 +0000 ROA not before: Fri 23 May 2025 07:07:20 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 56047 IP address blocks: 223.160.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 19:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:07:20 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=6D34DE9415FCF9C0A4B8A98277085A224BC94259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:a8:fb:7c:b2:7d:72:f0:77:f4:4a:2f:1b: 4e:0e:19:26:e5:3b:84:38:98:e1:5a:a1:f9:ea:d3: 92:ba:21:51:1d:4d:12:b3:10:32:5f:61:e9:59:d8: cf:8d:e6:17:f7:0c:37:4b:46:2d:f0:86:a2:2b:84: 18:74:b3:f0:8d:1a:a6:33:41:8d:64:5c:2a:2c:3f: 4d:09:cb:24:47:3c:9d:c4:bb:6d:6b:40:22:0d:3c: e2:9b:ab:c8:47:d5:de:99:b7:71:27:a3:45:cc:ee: 11:a9:21:90:72:4c:85:f1:c4:45:27:07:d1:08:c5: 7e:ee:b3:b4:4f:51:df:8f:9b:b2:15:4b:f1:a6:47: 7b:ff:5e:33:ad:b7:c0:bd:4e:7a:62:7f:72:b1:c8: 8c:de:de:65:84:37:93:35:84:16:a0:bc:2b:72:13: eb:11:3d:95:4a:67:46:34:d9:83:f6:be:2f:8b:d9: fa:7f:fa:30:f3:89:89:81:c9:10:67:6f:9b:70:36: 36:78:64:65:84:93:4e:29:4e:ee:65:ee:28:ce:c9: dc:f8:72:10:51:92:7f:2d:df:57:3d:e4:59:76:a3: 94:80:17:05:c7:06:27:97:7b:c2:c1:de:20:8a:d3: 0f:d4:06:32:e8:30:c4:aa:87:c3:09:58:c5:45:b9: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:34:DE:94:15:FC:F9:C0:A4:B8:A9:82:77:08:5A:22:4B:C9:42:59 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/bTTelBX8-cCkuKmCdwhaIkvJQlk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.112.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:11:03:ad:be:0a:ee:4d:a8:9d:26:a1:9a:d6:3e:ac:74:01: bf:3b:63:4c:09:3c:0f:ad:a2:d3:32:f1:c2:fa:f4:12:c5:5e: e7:97:74:2f:4d:b7:89:d3:9c:21:f4:96:54:1c:f0:80:e5:f1: 40:c6:8e:74:41:3b:d3:40:bf:53:14:09:4a:12:38:64:e8:d0: d8:71:f6:fd:8b:24:48:c6:c5:6d:93:f4:db:0f:6f:2b:44:7f: c9:38:ac:9e:7d:c1:20:8d:b8:5b:ef:c2:da:e2:60:fa:bd:87: 04:e3:a9:55:3d:cd:07:5e:19:ac:10:68:01:53:51:bc:eb:53: fe:04:94:ec:c6:ea:ce:39:2b:3f:86:92:a0:98:56:5f:58:84: 31:48:9f:5c:c2:c5:b8:ae:c9:dc:0d:14:51:09:86:2e:97:c0: f3:12:03:17:b4:7b:a6:3f:6f:8b:68:e9:93:34:0b:ce:89:a1: 0c:c8:f4:14:17:0e:09:f3:93:ca:0c:51:06:7f:fa:db:dc:5f: 0a:50:7d:f3:be:46:93:27:6c:9f:30:ff:35:bf:a6:c9:04:eb: 34:15:14:ba:95:40:9d:62:39:eb:fb:d6:c2:55:4e:01:08:7c: b5:70:47:04:b8:9a:73:77:d7:67:37:37:5c:77:1e:19:41:8a: 64:94:a8:0f -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzA3MjBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDZEMzRERTk0MTVGQ0Y5 QzBBNEI4QTk4Mjc3MDg1QTIyNEJDOTQyNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA2aj7fLJ9cvB39EovG04OGSblO4Q4mOFaofnq05K6IVEdTRKz EDJfYelZ2M+N5hf3DDdLRi3whqIrhBh0s/CNGqYzQY1kXCosP00JyyRHPJ3Eu21r QCINPOKbq8hH1d6Zt3Eno0XM7hGpIZByTIXxxEUnB9EIxX7us7RPUd+Pm7IVS/Gm R3v/XjOtt8C9Tnpif3KxyIze3mWEN5M1hBagvCtyE+sRPZVKZ0Y02YP2vi+L2fp/ +jDziYmByRBnb5twNjZ4ZGWEk04pTu5l7ijOydz4chBRkn8t31c95Fl2o5SAFwXH BieXe8LB3iCK0w/UBjLoMMSqh8MJWMVFuRj/AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUbTTelBX8+cCkuKmCdwhaIkvJQlkwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9iVFRlbEJYOC1jQ2t1S21D ZHdoYUlrdkpRbGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC 36BwMA0GCSqGSIb3DQEBCwUAA4IBAQBuEQOtvgruTaidJqGa1j6sdAG/O2NMCTwP raLTMvHC+vQSxV7nl3QvTbeJ05wh9JZUHPCA5fFAxo50QTvTQL9TFAlKEjhk6NDY cfb9iyRIxsVtk/TbD28rRH/JOKyefcEgjbhb78La4mD6vYcE46lVPc0HXhmsEGgB U1G861P+BJTsxurOOSs/hpKgmFZfWIQxSJ9cwsW4rsncDRRRCYYul8DzEgMXtHum P2+LaOmTNAvOiaEMyPQUFw4J85PKDFEGf/rb3F8KUH3zvkaTJ2yfMP81v6bJBOs0 FRS6lUCdYjnr+9bCVU4BCHy1cEcEuJpzd9dnNzdcdx4ZQYpklKgP -----END CERTIFICATE-----Generated at Fri Jun 20 17:35:36 2025 by rpki-client