$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/33k5It7mcf95N7PCiNwan6YcTL4.roa File: 33k5It7mcf95N7PCiNwan6YcTL4.roa (raw, json) Hash identifier: 9o4ii5A2rE9/IL06uovELBUkUEVgU45D3bCmfDyMVcM= Subject key identifier: DF:79:39:22:DE:E6:71:FF:79:37:B3:C2:88:DC:1A:9F:A6:1C:4C:BE Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 135F Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/33k5It7mcf95N7PCiNwan6YcTL4.roa Signing time: Wed 09 Oct 2024 00:44:13 +0000 ROA not before: Wed 09 Oct 2024 00:44:13 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 2914 IP address blocks: 180.223.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 01:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4959 (0x135f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Oct 9 00:44:13 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DF793922DEE671FF7937B3C288DC1A9FA61C4CBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1d:1f:ae:fc:b6:e8:58:db:8d:34:45:1a:15: 1d:d3:ab:b6:f7:ee:7c:40:7f:52:bc:9c:86:8a:93: c5:a1:43:ad:01:0c:fa:6e:66:e1:f8:48:29:1c:6a: c9:db:c3:25:dd:3e:77:8b:d1:47:3d:33:aa:d3:5c: e6:f0:a2:70:93:ee:25:af:15:37:80:ac:f6:fa:9b: 41:c6:c7:44:f1:e4:40:a9:f3:04:50:81:dd:a3:06: 88:e3:b2:a8:0d:52:8c:39:68:8d:53:06:9c:0f:c0: 7d:1b:30:c2:23:ec:2a:bc:e7:52:88:8f:d4:e2:5a: 3f:1f:06:04:04:46:86:a2:15:59:88:f1:ac:4f:a1: 8f:94:83:ce:30:77:33:44:de:76:0f:d5:9c:5d:4c: e7:53:64:13:2e:67:dc:d6:8d:1f:94:78:6f:62:5e: ff:95:2e:c6:18:6b:6d:29:fe:1a:03:ac:35:e2:7c: 58:f8:b8:1a:0d:60:14:f3:8f:0e:de:04:88:6f:ec: 67:68:5f:2a:c6:41:0d:47:96:f0:8f:7c:c3:2b:57: 3c:46:e9:46:99:b4:ef:79:55:55:aa:7a:ba:4e:58: 0e:90:37:30:5c:91:55:1e:38:25:f6:93:de:9b:57: 13:95:68:28:1c:4d:dd:7a:5b:41:44:a2:bb:e1:d9: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:79:39:22:DE:E6:71:FF:79:37:B3:C2:88:DC:1A:9F:A6:1C:4C:BE X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/33k5It7mcf95N7PCiNwan6YcTL4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.195.0/24 Signature Algorithm: sha256WithRSAEncryption b6:6b:11:ff:73:22:89:9a:33:c4:fd:88:62:9f:22:62:59:c7: 44:24:8b:97:21:fd:8e:cc:44:2b:7e:d7:b5:e2:af:b1:e8:39: 82:c1:c1:10:04:ac:4f:b8:3b:10:49:66:f4:0a:fc:3f:5c:9d: b4:0d:d5:ee:09:21:79:3e:8d:89:9c:b0:ed:0d:a6:db:a7:d2: c4:52:c8:75:98:c4:9c:b0:fb:b5:57:fa:b1:ac:36:e4:c8:7f: 6f:39:49:8e:17:af:1e:c8:b5:5d:b2:89:04:15:26:52:4e:21: b0:1a:79:f7:c6:a1:d8:0c:02:51:d9:aa:b8:aa:52:61:a6:93: 40:44:56:5b:a0:48:cf:44:ed:d9:33:5f:78:89:04:09:07:da: b1:a2:78:94:da:7e:6b:f1:3d:1c:52:75:4c:70:7d:d7:03:56: bd:eb:ea:9d:0b:69:13:78:ad:9e:16:cd:4f:95:9a:24:d1:07: 91:7e:f9:e4:29:96:16:4e:ed:29:ea:13:55:ca:05:fa:ee:31: 41:18:1c:bf:6c:59:22:f8:95:57:9d:e1:26:1c:cb:e1:7f:b5: 63:ef:30:ab:30:b2:3a:dd:69:a1:a0:ba:2d:51:07:9f:d7:6f: 73:d0:0a:40:99:9b:66:59:4a:93:7c:a1:0a:34:a0:a3:cb:78: 90:1c:79:e8 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE18wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDEwMDkw MDQ0MTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERGNzkzOTIyREVFNjcx RkY3OTM3QjNDMjg4REMxQTlGQTYxQzRDQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0HR+u/LboWNuNNEUaFR3Tq7b37nxAf1K8nIaKk8WhQ60BDPpu ZuH4SCkcasnbwyXdPneL0Uc9M6rTXObwonCT7iWvFTeArPb6m0HGx0Tx5ECp8wRQ gd2jBojjsqgNUow5aI1TBpwPwH0bMMIj7Cq851KIj9TiWj8fBgQERoaiFVmI8axP oY+Ug84wdzNE3nYP1ZxdTOdTZBMuZ9zWjR+UeG9iXv+VLsYYa20p/hoDrDXifFj4 uBoNYBTzjw7eBIhv7GdoXyrGQQ1HlvCPfMMrVzxG6UaZtO95VVWqerpOWA6QNzBc kVUeOCX2k96bVxOVaCgcTd16W0FEorvh2XGXAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU33k5It7mcf95N7PCiNwan6YcTL4wHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvMzNrNUl0N21jZjk1 TjdQQ2lOd2FuNlljVEw0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTfwzANBgkqhkiG9w0BAQsFAAOCAQEAtmsR/3MiiZozxP2IYp8iYlnHRCSL lyH9jsxEK37XteKvseg5gsHBEASsT7g7EElm9Ar8P1ydtA3V7gkheT6NiZyw7Q2m 26fSxFLIdZjEnLD7tVf6saw25Mh/bzlJjhevHsi1XbKJBBUmUk4hsBp598ah2AwC UdmquKpSYaaTQERWW6BIz0Tt2TNfeIkECQfasaJ4lNp+a/E9HFJ1THB91wNWvevq nQtpE3itnhbNT5WaJNEHkX755CmWFk7tKeoTVcoF+u4xQRgcv2xZIviVV53hJhzL 4X+1Y+8wqzCyOt1poaC6LVEHn9dvc9AKQJmbZllKk3yhCjSgo8t4kBx56A== -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:26 2024 by rpki-client on console-fra.rpki-client.org