$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/jg4Nhg6lQNBUy_vQl7UJBCNRVXc.roa File: jg4Nhg6lQNBUy_vQl7UJBCNRVXc.roa (raw, json) Hash identifier: MP1lNYsMFzByV8LGwgdCEleKGfrknEqxvBGeB5F6LhM= Subject key identifier: 8E:0E:0D:86:0E:A5:40:D0:54:CB:FB:D0:97:B5:09:04:23:51:55:77 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1362 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/jg4Nhg6lQNBUy_vQl7UJBCNRVXc.roa Signing time: Wed 09 Oct 2024 00:44:14 +0000 ROA not before: Wed 09 Oct 2024 00:44:14 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 2914 IP address blocks: 180.223.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 01:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4962 (0x1362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Oct 9 00:44:14 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8E0E0D860EA540D054CBFBD097B5090423515577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:69:34:a2:fc:9e:14:fb:b1:ed:8c:5f:93:43: 62:ac:f9:4a:51:a2:23:db:17:9d:5e:18:9c:60:5b: 06:3a:9a:2a:59:ea:8a:6b:8b:69:d9:fd:a4:ba:2d: 8b:00:00:c0:85:24:98:64:a7:d6:01:5c:9c:cc:4a: a4:b5:e8:0d:68:e6:e1:2c:3e:8a:29:c6:45:77:87: 0a:d4:db:57:a0:12:df:b8:05:37:63:83:d8:5b:57: d0:e4:bb:9b:e0:0c:2f:0a:85:7a:86:23:5d:63:cd: 8b:73:50:88:b9:a1:fa:96:0b:d5:ba:9a:42:6c:71: 8c:a9:d9:24:2b:7e:11:4a:eb:90:b5:5f:c3:22:af: 9b:b8:7e:c6:57:eb:51:45:74:14:88:22:b8:99:e8: ad:d3:c5:04:e9:11:90:95:df:8c:9f:fd:84:62:55: 88:cc:66:67:89:88:ef:cb:4e:c5:20:4d:37:e0:bf: a2:69:f0:5f:94:f0:1d:a9:71:30:83:0f:57:bc:d0: 55:ed:84:1e:53:64:3f:a6:2f:53:32:65:da:00:75: 66:ba:98:c3:5b:50:0c:3f:4a:04:15:85:6d:e3:3b: d0:64:9f:8b:86:74:ef:9a:6d:f8:50:2f:a7:3e:c2: 9d:f4:61:41:a4:78:38:bd:e5:be:99:44:ce:e0:2f: ce:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0E:0D:86:0E:A5:40:D0:54:CB:FB:D0:97:B5:09:04:23:51:55:77 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/jg4Nhg6lQNBUy_vQl7UJBCNRVXc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.196.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:62:20:43:fd:65:56:58:22:36:24:09:16:21:b6:3d:29:8c: 60:03:e6:8d:49:69:6f:f9:d4:c8:6e:15:39:f4:ef:f5:9a:01: 33:00:8c:ee:27:24:e8:5d:43:30:a7:d9:58:37:f8:04:31:c9: 2c:fd:07:31:f5:6b:ce:ba:d9:3c:e4:67:78:e0:2b:42:dc:c0: 46:49:f2:e7:d1:71:fd:4a:d8:eb:8e:62:a5:9c:ef:33:43:84: 5d:b8:cb:e1:88:4f:91:cf:fb:35:d0:2f:21:ca:6b:74:3c:dc: 74:aa:61:37:7e:08:28:60:6a:3f:b7:9c:8f:99:f4:7d:18:26: 7e:6d:10:6c:d8:3d:06:68:b6:ff:a9:35:96:d3:69:39:fc:25: 43:cf:18:60:eb:06:95:54:2f:78:5a:b3:5f:d3:a6:76:6c:e1: cc:0c:c4:30:80:63:fd:0c:71:49:36:9c:90:66:4e:59:4d:f5: f2:95:a7:9c:f4:01:1f:36:65:53:a4:89:bc:b3:9c:b4:09:e3: 8f:1a:3e:3e:6f:b2:8d:0b:a7:e0:20:d2:79:2a:b9:0b:57:a4: cb:d6:43:f9:0c:7c:03:14:ba:69:67:ba:4f:76:9c:94:3d:dd: 90:46:de:86:ef:72:0a:08:bd:3f:75:45:da:5a:47:c0:64:55: a0:d9:83:ff -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE2IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDEwMDkw MDQ0MTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhFMEUwRDg2MEVBNTQw RDA1NENCRkJEMDk3QjUwOTA0MjM1MTU1NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtaTSi/J4U+7HtjF+TQ2Ks+UpRoiPbF51eGJxgWwY6mipZ6opr i2nZ/aS6LYsAAMCFJJhkp9YBXJzMSqS16A1o5uEsPoopxkV3hwrU21egEt+4BTdj g9hbV9Dku5vgDC8KhXqGI11jzYtzUIi5ofqWC9W6mkJscYyp2SQrfhFK65C1X8Mi r5u4fsZX61FFdBSIIriZ6K3TxQTpEZCV34yf/YRiVYjMZmeJiO/LTsUgTTfgv6Jp 8F+U8B2pcTCDD1e80FXthB5TZD+mL1MyZdoAdWa6mMNbUAw/SgQVhW3jO9Bkn4uG dO+abfhQL6c+wp30YUGkeDi95b6ZRM7gL847AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUjg4Nhg6lQNBUy/vQl7UJBCNRVXcwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvamc0TmhnNmxRTkJV eV92UWw3VUpCQ05SVlhjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTfxDANBgkqhkiG9w0BAQsFAAOCAQEAL2IgQ/1lVlgiNiQJFiG2PSmMYAPm jUlpb/nUyG4VOfTv9ZoBMwCM7ick6F1DMKfZWDf4BDHJLP0HMfVrzrrZPORneOAr QtzARkny59Fx/UrY645ipZzvM0OEXbjL4YhPkc/7NdAvIcprdDzcdKphN34IKGBq P7ecj5n0fRgmfm0QbNg9Bmi2/6k1ltNpOfwlQ88YYOsGlVQveFqzX9OmdmzhzAzE MIBj/QxxSTackGZOWU318pWnnPQBHzZlU6SJvLOctAnjjxo+Pm+yjQun4CDSeSq5 C1eky9ZD+Qx8AxS6aWe6T3aclD3dkEbehu9yCgi9P3VF2lpHwGRVoNmD/w== -----END CERTIFICATE-----Generated at Thu Nov 21 23:43:03 2024 by rpki-client on console-ams.rpki-client.org