$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/zKw0BaGm42oXo1MqQfbVDmTnbPI.roa File: zKw0BaGm42oXo1MqQfbVDmTnbPI.roa (raw, json) Hash identifier: Y7+hELQnMlWEWoSmuf9L4/+l69G3BCHTT1x8eSQ5EKA= Subject key identifier: CC:AC:34:05:A1:A6:E3:6A:17:A3:53:2A:41:F6:D5:0E:64:E7:6C:F2 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0828 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/zKw0BaGm42oXo1MqQfbVDmTnbPI.roa Signing time: Fri 23 May 2025 07:36:34 +0000 ROA not before: Fri 23 May 2025 07:36:34 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24400 IP address blocks: 223.161.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2088 (0x828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:36:34 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=CCAC3405A1A6E36A17A3532A41F6D50E64E76CF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:d1:a6:07:40:a2:81:db:95:57:e4:0d:bc: e9:30:f6:e3:47:b4:61:3e:17:11:41:31:aa:75:e1: ec:72:d6:f9:e0:37:bb:ee:47:26:bb:48:97:8c:c1: 96:83:ef:28:7d:e7:96:e1:a2:61:22:8b:4f:56:f4: f8:a7:4b:1b:c4:a2:e9:b3:8b:b9:a1:e9:4a:43:a3: b7:21:8e:75:8f:aa:58:c8:ee:d2:15:18:b1:f8:d0: d4:34:6a:d4:3d:c8:7d:d2:5a:e1:91:fc:a3:6a:e0: c7:97:67:f4:bd:80:04:fc:f8:8d:67:49:73:84:cf: aa:b5:f1:2a:92:6c:b4:3f:72:68:76:35:a0:8f:00: eb:b2:14:ab:67:ad:6e:7e:14:44:9a:a4:97:01:4a: 22:61:11:14:2c:6d:da:96:3c:05:05:ab:c1:25:36: 6a:ab:6b:4a:9e:aa:9a:40:d9:49:a8:f0:0d:4d:5f: 27:65:bb:0c:0d:d7:84:89:14:44:5c:ac:98:75:2b: a6:e7:62:d7:f1:30:98:0c:44:70:d1:d7:a7:e2:43: 44:c5:4f:a5:81:a5:0b:89:da:9a:eb:60:a6:73:00: e2:04:bd:6c:94:cd:9b:46:b3:ac:7b:9f:13:23:f5: e3:e7:de:3d:da:13:c4:1e:51:bc:08:ea:f8:b2:9b: a0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AC:34:05:A1:A6:E3:6A:17:A3:53:2A:41:F6:D5:0E:64:E7:6C:F2 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/zKw0BaGm42oXo1MqQfbVDmTnbPI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.161.238.0/23 Signature Algorithm: sha256WithRSAEncryption 22:53:5a:a4:68:3a:53:e5:3a:f4:31:e1:63:cc:18:70:1f:7c: 94:49:13:8e:45:c7:46:c2:f3:c0:31:d9:ea:74:10:34:01:fc: b9:f8:21:5a:e6:96:52:54:15:c4:ff:86:8d:0c:c0:8a:3e:11: b8:a5:a5:fb:50:f9:87:64:79:00:95:e1:a8:5c:20:94:5d:7d: 49:df:5b:49:eb:d7:94:1e:c5:11:32:6f:a5:cd:43:fb:f2:7e: 8b:16:8c:32:94:64:02:3f:e2:d6:d2:f0:dd:12:08:67:77:ad: 8a:24:57:f0:6e:d8:08:ff:d0:37:de:8b:9d:fa:1a:31:5b:d2: 64:34:43:97:39:1e:36:62:45:8d:8e:e2:90:f6:5c:1d:ad:a9: 1b:cf:89:b5:18:09:36:e7:c8:6c:c3:90:d0:61:06:cb:8d:eb: 07:5e:89:cd:8e:4a:5e:19:74:0f:83:7d:7c:4f:50:14:2f:bd: 73:5d:1d:31:15:f3:17:bc:d6:0f:9a:0c:e8:6d:6c:73:6c:d0: d6:f0:f6:d6:b0:05:4f:a7:60:6b:2a:9c:09:7f:92:48:3f:69: 06:2e:1c:9b:79:d8:37:75:98:3b:69:92:ff:57:2f:9b:ea:25: 43:7c:6e:dc:bc:c6:61:f3:e2:85:c0:f8:a7:15:82:6d:f3:77: b0:a6:f4:5a -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzM2MzRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENDQUMzNDA1QTFBNkUz NkExN0EzNTMyQTQxRjZENTBFNjRFNzZDRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC40tGmB0CigduVV+QNvOkw9uNHtGE+FxFBMap14exy1vngN7vu Rya7SJeMwZaD7yh955bhomEii09W9PinSxvEoumzi7mh6UpDo7chjnWPqljI7tIV GLH40NQ0atQ9yH3SWuGR/KNq4MeXZ/S9gAT8+I1nSXOEz6q18SqSbLQ/cmh2NaCP AOuyFKtnrW5+FESapJcBSiJhERQsbdqWPAUFq8ElNmqra0qeqppA2Umo8A1NXydl uwwN14SJFERcrJh1K6bnYtfxMJgMRHDR16fiQ0TFT6WBpQuJ2prrYKZzAOIEvWyU zZtGs6x7nxMj9ePn3j3aE8QeUbwI6viym6BJAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUzKw0BaGm42oXo1MqQfbVDmTnbPIwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy96S3cwQmFHbTQyb1hvMU1x UWZiVkRtVG5iUEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36HuMA0GCSqGSIb3DQEBCwUAA4IBAQAiU1qkaDpT5Tr0MeFjzBhwH3yUSROORcdG wvPAMdnqdBA0Afy5+CFa5pZSVBXE/4aNDMCKPhG4paX7UPmHZHkAleGoXCCUXX1J 31tJ69eUHsURMm+lzUP78n6LFowylGQCP+LW0vDdEghnd62KJFfwbtgI/9A33oud +hoxW9JkNEOXOR42YkWNjuKQ9lwdrakbz4m1GAk258hsw5DQYQbLjesHXonNjkpe GXQPg318T1AUL71zXR0xFfMXvNYPmgzobWxzbNDW8PbWsAVPp2BrKpwJf5JIP2kG Lhybedg3dZg7aZL/Vy+b6iVDfG7cvMZh8+KFwPinFYJt83ewpvRa -----END CERTIFICATE-----Generated at Sat Jun 21 22:22:08 2025 by rpki-client