$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/yNZy3mcJRYUZlgsEnB33lz2n_qo.roa File: yNZy3mcJRYUZlgsEnB33lz2n_qo.roa (raw, json) Hash identifier: Exh0giT1ojnuDuBMTVwWy/DUmX9QLHx9+Id3MuF1NFo= Subject key identifier: C8:D6:72:DE:67:09:45:85:19:96:0B:04:9C:1D:F7:97:3D:A7:FE:AA Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0810 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/yNZy3mcJRYUZlgsEnB33lz2n_qo.roa Signing time: Fri 23 May 2025 07:17:22 +0000 ROA not before: Fri 23 May 2025 07:17:22 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 9808 IP address blocks: 223.160.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 00:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:17:22 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C8D672DE6709458519960B049C1DF7973DA7FEAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:09:33:33:b5:49:30:2b:79:7f:09:1a:7e: 57:4b:1e:12:cf:b5:17:02:5a:0d:ab:5e:e2:03:05: 66:93:f2:f1:5a:24:70:5f:d2:4b:c1:1e:c5:4c:46: 57:85:75:66:d3:30:47:07:e5:53:42:63:4f:7a:a9: a9:a6:be:4b:b4:95:f1:f7:26:1a:57:0b:e8:91:cb: 27:af:75:c7:f8:82:c3:ed:1b:93:05:c7:06:5d:73: d3:9f:70:4f:d0:c7:65:2d:4d:3d:a4:83:5f:f7:f6: e3:be:15:5e:63:67:68:33:f4:41:96:53:ac:8d:14: 49:e0:79:57:db:17:ca:a1:9c:57:28:e3:3c:1e:c5: 3e:6a:8c:85:81:34:31:77:9e:69:06:13:5f:fa:df: f7:80:42:d6:5f:45:0a:47:22:11:4b:51:7f:af:17: 06:e2:b0:c2:1f:0f:cd:ae:6a:2b:ac:2b:66:73:fb: 6e:fb:d3:1f:ee:cf:86:f8:89:ab:7b:ca:02:ee:2c: d6:be:c7:48:12:e0:d9:a3:89:9e:39:e3:f0:46:91: 41:69:04:41:3a:8d:70:78:1e:77:1c:b3:78:c9:11: b5:a1:42:10:bf:4b:8b:b6:a0:eb:82:04:ee:8a:cd: aa:d4:4f:55:20:f7:a4:bc:33:9e:da:3a:cb:65:c4: 84:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D6:72:DE:67:09:45:85:19:96:0B:04:9C:1D:F7:97:3D:A7:FE:AA X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/yNZy3mcJRYUZlgsEnB33lz2n_qo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.168.0/21 Signature Algorithm: sha256WithRSAEncryption 69:2c:71:d4:1b:dc:0b:58:78:71:5b:82:b8:f8:0b:10:2f:aa: 9c:28:d6:8e:d2:54:99:25:5c:b0:47:fe:1f:47:6b:11:29:d7: bb:a9:03:89:22:79:f7:72:55:71:53:20:f8:80:19:f7:c0:5f: bf:53:9f:54:4d:9c:9d:81:60:e6:aa:4f:e5:50:f1:d3:4c:db: 57:c8:37:84:1f:7b:fa:ff:70:0e:b7:1e:85:94:f1:df:0a:c9: 85:cb:a2:a6:50:70:ab:55:cb:a3:90:91:18:67:1b:e9:08:08: e8:69:47:aa:09:01:af:fb:3d:d3:c5:f5:85:28:5d:6d:a3:b5: 1c:b7:e3:fa:ac:3a:ac:a4:8b:c2:22:97:5c:d0:8d:83:f1:1a: 01:42:40:83:cd:fe:fb:6a:0d:5c:47:5a:7a:ee:0d:44:50:1c: 36:b4:98:59:22:1f:5e:4d:fe:56:26:0b:d9:b0:13:8e:b6:8e: a3:ca:92:e4:93:68:21:59:47:0d:29:88:84:c6:45:5e:5e:98: b6:f1:cc:0b:e3:52:79:f8:65:90:89:c6:02:a4:63:df:a6:9e: c3:88:e7:27:b5:b2:2b:53:03:93:c3:91:94:a6:ec:8b:27:a0: 25:64:0f:f5:a6:55:81:41:b5:f6:60:51:08:ee:6f:81:cc:cc: 24:8a:e9:ef -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzE3MjJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM4RDY3MkRFNjcwOTQ1 ODUxOTk2MEIwNDlDMURGNzk3M0RBN0ZFQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvEwkzM7VJMCt5fwkafldLHhLPtRcCWg2rXuIDBWaT8vFaJHBf 0kvBHsVMRleFdWbTMEcH5VNCY096qammvku0lfH3JhpXC+iRyyevdcf4gsPtG5MF xwZdc9OfcE/Qx2UtTT2kg1/39uO+FV5jZ2gz9EGWU6yNFEngeVfbF8qhnFco4zwe xT5qjIWBNDF3nmkGE1/63/eAQtZfRQpHIhFLUX+vFwbisMIfD82uaiusK2Zz+277 0x/uz4b4iat7ygLuLNa+x0gS4NmjiZ454/BGkUFpBEE6jXB4Hnccs3jJEbWhQhC/ S4u2oOuCBO6KzarUT1Ug96S8M57aOstlxIT/AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUyNZy3mcJRYUZlgsEnB33lz2n/qowHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy95Tlp5M21jSlJZVVpsZ3NF bkIzM2x6Mm5fcW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD 36CoMA0GCSqGSIb3DQEBCwUAA4IBAQBpLHHUG9wLWHhxW4K4+AsQL6qcKNaO0lSZ JVywR/4fR2sRKde7qQOJInn3clVxUyD4gBn3wF+/U59UTZydgWDmqk/lUPHTTNtX yDeEH3v6/3AOtx6FlPHfCsmFy6KmUHCrVcujkJEYZxvpCAjoaUeqCQGv+z3TxfWF KF1to7Uct+P6rDqspIvCIpdc0I2D8RoBQkCDzf77ag1cR1p67g1EUBw2tJhZIh9e Tf5WJgvZsBOOto6jypLkk2ghWUcNKYiExkVeXpi28cwL41J5+GWQicYCpGPfpp7D iOcntbIrUwOTw5GUpuyLJ6AlZA/1plWBQbX2YFEI7m+BzMwkiunv -----END CERTIFICATE-----Generated at Sun Jun 22 23:56:14 2025 by rpki-client