$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/mJ9Z1Bu7ETEzZKyYIYnKAsZGyAA.roa File: mJ9Z1Bu7ETEzZKyYIYnKAsZGyAA.roa (raw, json) Hash identifier: brP5vYBJmlXY6glkkSMEyfHcO0Kye4xzkhiLPDO0eMk= Subject key identifier: 98:9F:59:D4:1B:BB:11:31:33:64:AC:98:21:89:CA:02:C6:46:C8:00 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 080C Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/mJ9Z1Bu7ETEzZKyYIYnKAsZGyAA.roa Signing time: Fri 23 May 2025 07:17:21 +0000 ROA not before: Fri 23 May 2025 07:17:21 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 9808 IP address blocks: 223.160.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:17:21 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=989F59D41BBB11313364AC982189CA02C646C800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:0a:1a:98:5f:8d:0e:40:7a:f7:7f:ae:af: 82:84:9b:91:88:53:27:33:5d:f2:9a:f9:d9:31:13: 35:5c:03:79:69:aa:59:11:72:08:ed:96:a2:cb:bc: 00:84:a8:da:41:f0:dd:0d:14:ba:f0:69:58:94:9b: c5:c3:03:0e:d4:e7:af:b5:ee:1c:88:8a:71:15:56: 41:ba:78:78:78:3d:6e:0d:a9:e8:5d:b1:79:ec:3e: 93:20:49:3d:78:bf:7d:41:64:99:cb:0e:ea:43:55: de:d8:9d:86:c4:5b:5e:a7:fc:d5:31:93:11:78:b3: 5d:0e:90:55:6a:c1:d1:30:e1:cb:b8:57:e9:70:a4: c7:c2:4e:24:ff:0c:0a:db:54:17:4f:ab:73:c7:2d: 34:88:4c:4b:dd:af:8f:38:d8:2b:83:e4:d5:5e:c1: 03:3c:c0:78:53:01:b5:f8:eb:32:68:15:bf:2d:62: fd:86:7f:40:d6:4b:a7:76:90:fc:e5:cf:7f:ef:22: 70:f0:eb:ce:c8:a4:e9:8a:29:9d:73:10:4b:ba:73: 83:8a:c0:f2:87:84:9a:75:2b:81:28:24:9c:06:d6: cf:58:a3:51:4f:1a:36:14:24:07:eb:91:42:a9:a8: 97:04:88:7f:d0:29:7c:da:c1:29:a9:80:c6:fc:f4: ee:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9F:59:D4:1B:BB:11:31:33:64:AC:98:21:89:CA:02:C6:46:C8:00 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/mJ9Z1Bu7ETEzZKyYIYnKAsZGyAA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.176.0/20 Signature Algorithm: sha256WithRSAEncryption 72:61:44:60:9d:b4:ad:24:82:66:60:80:ed:b0:3c:87:c4:62: 73:b2:ad:3c:8d:d3:94:70:31:5a:a8:3d:35:93:09:d1:ee:16: a9:18:f9:7f:fd:fe:55:e0:68:cc:75:ec:a6:0c:6d:73:0f:5d: 61:43:0a:b8:15:b7:43:3e:8d:d4:1d:50:bc:21:69:1d:29:b2: d1:05:27:b1:46:53:bf:83:8f:14:13:42:d0:79:fb:b2:c0:10: e2:93:b7:cc:62:93:ee:7c:89:78:4a:24:9f:d9:d6:5c:02:9e: 10:28:83:97:b2:fd:ee:fe:d8:54:2e:2d:86:df:f2:a5:5f:10: 09:d7:52:fc:67:a2:66:1d:65:f9:74:19:91:79:44:c0:ae:f7: bc:05:d0:f9:a6:e5:f4:68:a1:a5:17:72:f9:9d:dd:49:b6:1b: 62:9c:5a:df:83:33:0c:3a:84:89:e4:8d:f3:c0:c6:fa:22:d8: e1:66:f4:87:5a:cb:6a:c7:f0:78:87:54:cb:b5:a8:c9:dc:af: c1:91:5c:aa:a1:ba:a9:20:9e:08:1f:6e:30:70:78:91:7d:fd: c0:bb:40:fb:34:9b:85:d7:3a:cb:2c:59:3e:b9:1c:9f:90:73: ac:fe:84:51:1c:89:3f:e5:99:17:a0:9c:99:9e:90:a9:77:80: f9:e2:21:cf -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzE3MjFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDk4OUY1OUQ0MUJCQjEx MzEzMzY0QUM5ODIxODlDQTAyQzY0NkM4MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCJAoamF+NDkB693+ur4KEm5GIUyczXfKa+dkxEzVcA3lpqlkR cgjtlqLLvACEqNpB8N0NFLrwaViUm8XDAw7U56+17hyIinEVVkG6eHh4PW4Nqehd sXnsPpMgST14v31BZJnLDupDVd7YnYbEW16n/NUxkxF4s10OkFVqwdEw4cu4V+lw pMfCTiT/DArbVBdPq3PHLTSITEvdr4842CuD5NVewQM8wHhTAbX46zJoFb8tYv2G f0DWS6d2kPzlz3/vInDw687IpOmKKZ1zEEu6c4OKwPKHhJp1K4EoJJwG1s9Yo1FP GjYUJAfrkUKpqJcEiH/QKXzawSmpgMb89O5xAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUmJ9Z1Bu7ETEzZKyYIYnKAsZGyAAwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9tSjlaMUJ1N0VURXpaS3lZ SVluS0FzWkd5QUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE 36CwMA0GCSqGSIb3DQEBCwUAA4IBAQByYURgnbStJIJmYIDtsDyHxGJzsq08jdOU cDFaqD01kwnR7hapGPl//f5V4GjMdeymDG1zD11hQwq4FbdDPo3UHVC8IWkdKbLR BSexRlO/g48UE0LQefuywBDik7fMYpPufIl4SiSf2dZcAp4QKIOXsv3u/thULi2G 3/KlXxAJ11L8Z6JmHWX5dBmReUTArve8BdD5puX0aKGlF3L5nd1JthtinFrfgzMM OoSJ5I3zwMb6ItjhZvSHWstqx/B4h1TLtajJ3K/BkVyqobqpIJ4IH24wcHiRff3A u0D7NJuF1zrLLFk+uRyfkHOs/oRRHIk/5ZkXoJyZnpCpd4D54iHP -----END CERTIFICATE-----Generated at Sat Jun 21 18:39:50 2025 by rpki-client