$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/kMcdy1E4DFO-Jg53Q4WhdY5F1dU.roa File: kMcdy1E4DFO-Jg53Q4WhdY5F1dU.roa (raw, json) Hash identifier: olJLbza9joPjLOUZlWHdKthChKYdp6YVQx/j27noLUU= Subject key identifier: 90:C7:1D:CB:51:38:0C:53:BE:26:0E:77:43:85:A1:75:8E:45:D5:D5 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0652 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/kMcdy1E4DFO-Jg53Q4WhdY5F1dU.roa Signing time: Tue 04 Mar 2025 06:58:42 +0000 ROA not before: Tue 04 Mar 2025 06:58:42 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 7641 IP address blocks: 211.156.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Mar 4 06:58:42 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=90C71DCB51380C53BE260E774385A1758E45D5D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d4:76:d2:c2:8c:92:81:24:59:38:17:2a:01: 51:eb:c5:57:71:5e:26:9d:fd:05:b3:dc:8a:72:ad: 4c:bb:0c:7b:a3:fc:3b:fc:4f:ae:84:84:72:5e:69: bd:bb:b5:bd:d6:35:dd:3c:d1:74:a3:71:ae:cc:6a: 69:ca:73:da:ef:17:9c:cb:60:01:3e:f4:6c:0c:d8: 11:74:dd:2b:fe:2c:74:b9:29:d2:e0:76:c6:5e:64: 45:f6:ba:7a:b3:c2:47:ff:14:6f:3c:ad:db:33:ca: 22:43:68:74:cd:4a:3c:81:58:18:81:1f:8a:86:67: 15:ab:b4:02:16:ae:b4:99:8a:4a:d5:9d:9e:08:a3: 54:fa:17:65:bb:dc:d7:be:ce:8c:b7:62:76:da:d3: b3:99:c8:e3:c5:f2:6d:af:f8:90:7b:65:87:6c:3e: e1:fa:55:f4:d8:1d:10:3d:eb:62:11:9f:de:fc:35: 89:f4:fa:cf:62:de:2e:6d:7d:e7:3d:1d:8c:70:1e: 95:b5:88:8d:5a:af:23:0e:53:47:75:76:d5:9c:f4: 00:42:da:63:53:84:ea:74:b7:23:3d:d8:10:08:41: 46:99:51:a3:ef:d0:3a:cc:02:58:45:01:ee:23:7f: 66:cf:de:0b:a6:0c:13:ef:ab:9a:c6:d3:16:93:af: 69:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C7:1D:CB:51:38:0C:53:BE:26:0E:77:43:85:A1:75:8E:45:D5:D5 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/kMcdy1E4DFO-Jg53Q4WhdY5F1dU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.156.128.0/19 Signature Algorithm: sha256WithRSAEncryption 1a:67:e8:79:97:2f:0e:ea:08:b0:0e:65:82:1e:13:a8:0d:24: 27:d6:63:6f:aa:bd:be:b3:cc:59:1f:c2:9f:26:9e:9a:0c:cc: bb:2c:71:37:b2:48:fe:28:42:65:e0:1d:96:d1:db:a6:94:a9: 72:b0:c0:4c:ef:a1:bb:16:ed:fe:1f:c9:73:14:4f:6f:1b:8b: bc:5c:1a:b0:00:cf:eb:01:99:62:02:fe:73:72:db:eb:3b:50: ce:43:75:aa:ba:f9:d8:5f:6f:dc:5d:de:a3:3f:99:30:f4:83: 75:3e:48:d1:63:fd:3e:7f:4b:19:85:79:e7:d7:72:f6:fe:29: 97:40:34:9b:b0:a8:c2:72:b2:27:6d:de:4f:c9:60:5d:fd:39: c5:0c:77:0f:61:a3:7b:9e:a8:74:1b:d5:ea:69:20:5a:32:ba: 21:f6:09:b6:42:fa:16:a6:05:f0:3d:bf:86:50:fb:86:e3:f7: a8:ba:39:ae:58:41:74:3f:1f:6c:a8:cd:38:be:dc:79:ad:d6: 33:92:f5:fa:bf:41:e6:5d:df:cd:13:7a:ba:27:71:17:8e:69: 2f:81:a7:bb:00:00:fe:4f:07:66:e5:14:88:ce:4e:01:40:d7: 67:3e:ee:52:24:6f:ef:bd:07:a6:16:e9:5a:80:1c:99:ea:90: bb:90:e8:3a -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTAzMDQw NjU4NDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkwQzcxRENCNTEzODBD NTNCRTI2MEU3NzQzODVBMTc1OEU0NUQ1RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDc1HbSwoySgSRZOBcqAVHrxVdxXiad/QWz3IpyrUy7DHuj/Dv8 T66EhHJeab27tb3WNd080XSjca7MamnKc9rvF5zLYAE+9GwM2BF03Sv+LHS5KdLg dsZeZEX2unqzwkf/FG88rdszyiJDaHTNSjyBWBiBH4qGZxWrtAIWrrSZikrVnZ4I o1T6F2W73Ne+zoy3Ynba07OZyOPF8m2v+JB7ZYdsPuH6VfTYHRA962IRn978NYn0 +s9i3i5tfec9HYxwHpW1iI1aryMOU0d1dtWc9ABC2mNThOp0tyM92BAIQUaZUaPv 0DrMAlhFAe4jf2bP3gumDBPvq5rG0xaTr2nFAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUkMcdy1E4DFO+Jg53Q4WhdY5F1dUwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9rTWNkeTFFNERGTy1KZzUz UTRXaGRZNUYxZFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF 05yAMA0GCSqGSIb3DQEBCwUAA4IBAQAaZ+h5ly8O6giwDmWCHhOoDSQn1mNvqr2+ s8xZH8KfJp6aDMy7LHE3skj+KEJl4B2W0dumlKlysMBM76G7Fu3+H8lzFE9vG4u8 XBqwAM/rAZliAv5zctvrO1DOQ3WquvnYX2/cXd6jP5kw9IN1PkjRY/0+f0sZhXnn 13L2/imXQDSbsKjCcrInbd5PyWBd/TnFDHcPYaN7nqh0G9XqaSBaMroh9gm2QvoW pgXwPb+GUPuG4/eoujmuWEF0Px9sqM04vtx5rdYzkvX6v0HmXd/NE3q6J3EXjmkv gae7AAD+Twdm5RSIzk4BQNdnPu5SJG/vvQemFulagByZ6pC7kOg6 -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:43 2025 by rpki-client