$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/eDVpCKSCjOECYQXGK61_TpJvS2o.roa File: eDVpCKSCjOECYQXGK61_TpJvS2o.roa (raw, json) Hash identifier: PEgLgUhf8PFFXZSGKxa9WlpLw+1acH+JmVO2jjDNgwk= Subject key identifier: 78:35:69:08:A4:82:8C:E1:02:61:05:C6:2B:AD:7F:4E:92:6F:4B:6A Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 064F Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/eDVpCKSCjOECYQXGK61_TpJvS2o.roa Signing time: Tue 04 Mar 2025 06:58:41 +0000 ROA not before: Tue 04 Mar 2025 06:58:41 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 7641 IP address blocks: 211.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Mar 4 06:58:41 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=78356908A4828CE1026105C62BAD7F4E926F4B6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:83:be:b5:e9:33:1d:fc:5a:41:3e:4d:3f: 20:39:f7:ab:5d:d4:42:31:f5:c5:76:fc:ef:13:7c: 20:c5:2c:e5:8d:d0:a1:d9:2d:59:c5:7c:8e:7c:3c: ef:37:04:98:12:ec:6f:83:c7:d3:db:ea:99:9d:a1: 3d:c8:d8:bd:d1:75:a2:49:a0:d2:a6:ad:43:ff:08: c8:eb:7a:2e:85:40:77:81:9a:e3:78:33:f6:25:26: 37:89:f2:81:cc:12:1b:e4:c8:51:83:c1:1f:ea:d3: b2:01:2f:54:80:9a:9b:5e:50:e8:31:f2:6f:81:c1: 47:c4:c5:74:5a:38:73:5b:74:3f:a5:a9:e8:58:b0: 33:25:19:59:87:51:d4:04:e6:58:d2:20:36:e6:e9: 93:02:3f:ad:7d:50:58:74:c9:b5:e3:2e:15:c7:39: fa:cf:2a:f6:5a:f7:90:cd:79:c2:73:5c:bc:c8:ed: 5a:21:24:16:d8:6e:ed:65:11:12:46:c4:ba:e8:76: 79:43:ad:b0:b2:00:76:fb:16:3e:3a:2e:3e:90:e8: a4:63:11:9f:48:f8:44:c5:c3:ab:c6:37:40:90:79: 04:b2:97:ae:47:e7:c0:32:91:2e:f7:b3:6a:50:81: 6c:59:3b:1e:78:1a:31:b7:3f:88:2b:92:a1:28:05: 0a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:35:69:08:A4:82:8C:E1:02:61:05:C6:2B:AD:7F:4E:92:6F:4B:6A X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/eDVpCKSCjOECYQXGK61_TpJvS2o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.89.0.0/16 Signature Algorithm: sha256WithRSAEncryption 45:52:6e:95:6c:f9:23:19:af:64:59:63:02:10:8d:17:ba:d9: 4d:82:c3:92:9d:57:e9:5f:a4:5e:3a:e7:4e:5e:4b:1a:6c:42: 5b:12:9d:51:f4:28:23:78:3e:60:62:1e:cd:df:5e:e5:b7:10: 8d:ea:34:dc:a6:ac:b4:60:e4:33:19:b8:b2:6c:13:28:52:72: 04:e2:44:15:ee:3c:8b:25:f2:6d:1b:79:2d:37:41:ab:c9:46: 74:60:7e:99:2f:1e:32:1e:1b:3c:ab:41:ff:bc:db:53:d6:5b: 4f:62:10:ee:00:37:df:81:c4:56:42:af:06:90:43:92:06:2e: 3a:0a:09:2a:43:8c:82:bf:28:62:f7:84:bd:04:41:91:7f:05: da:e8:59:51:48:ca:a7:ab:17:4e:8e:f6:b8:9f:2c:22:89:5e: 6f:bf:7a:13:a0:e5:47:94:7f:72:a8:c8:ea:25:d1:b4:2a:81: 8d:e7:1d:97:64:2e:d8:d1:34:cd:0d:28:9d:0b:15:24:92:12: 08:4f:d4:26:45:9c:2e:19:d1:ab:7f:1d:14:eb:ed:bd:95:66: a9:8e:6d:21:e9:bd:cf:29:44:77:6c:68:ac:a4:01:6b:4e:b4: 7c:b8:7f:29:29:eb:c9:1e:05:fa:f0:5d:0b:7c:3e:62:8b:d8: 76:7b:cf:b1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTAzMDQw NjU4NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc4MzU2OTA4QTQ4MjhD RTEwMjYxMDVDNjJCQUQ3RjRFOTI2RjRCNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/xYO+tekzHfxaQT5NPyA596td1EIx9cV2/O8TfCDFLOWN0KHZ LVnFfI58PO83BJgS7G+Dx9Pb6pmdoT3I2L3RdaJJoNKmrUP/CMjrei6FQHeBmuN4 M/YlJjeJ8oHMEhvkyFGDwR/q07IBL1SAmpteUOgx8m+BwUfExXRaOHNbdD+lqehY sDMlGVmHUdQE5ljSIDbm6ZMCP619UFh0ybXjLhXHOfrPKvZa95DNecJzXLzI7Voh JBbYbu1lERJGxLrodnlDrbCyAHb7Fj46Lj6Q6KRjEZ9I+ETFw6vGN0CQeQSyl65H 58AykS73s2pQgWxZOx54GjG3P4grkqEoBQqpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeDVpCKSCjOECYQXGK61/TpJvS2owHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9lRFZwQ0tTQ2pPRUNZUVhH SzYxX1RwSnZTMm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA 01kwDQYJKoZIhvcNAQELBQADggEBAEVSbpVs+SMZr2RZYwIQjRe62U2Cw5KdV+lf pF46505eSxpsQlsSnVH0KCN4PmBiHs3fXuW3EI3qNNymrLRg5DMZuLJsEyhScgTi RBXuPIsl8m0beS03QavJRnRgfpkvHjIeGzyrQf+821PWW09iEO4AN9+BxFZCrwaQ Q5IGLjoKCSpDjIK/KGL3hL0EQZF/BdroWVFIyqerF06O9rifLCKJXm+/ehOg5UeU f3KoyOol0bQqgY3nHZdkLtjRNM0NKJ0LFSSSEghP1CZFnC4Z0at/HRTr7b2VZqmO bSHpvc8pRHdsaKykAWtOtHy4fykp68keBfrwXQt8PmKL2HZ7z7E= -----END CERTIFICATE-----Generated at Sat Apr 26 14:37:03 2025 by rpki-client