$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/rdUZhda3nvxbYPe5c3TnSvWFMZo.roa File: rdUZhda3nvxbYPe5c3TnSvWFMZo.roa (raw, json) Hash identifier: 6cjSsjlPWyIeYFkRzhs3iL1EhuZvxevmkbUuNc+MnJk= Subject key identifier: AD:D5:19:85:D6:B7:9E:FC:5B:60:F7:B9:73:74:E7:4A:F5:85:31:9A Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 136E Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/rdUZhda3nvxbYPe5c3TnSvWFMZo.roa Signing time: Fri 11 Oct 2024 01:12:51 +0000 ROA not before: Fri 11 Oct 2024 01:12:51 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 18811 IP address blocks: 180.223.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4974 (0x136e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Oct 11 01:12:51 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=ADD51985D6B79EFC5B60F7B97374E74AF585319A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:65:86:74:09:9c:ef:02:5b:e6:80:e5:5f:84: 42:12:11:5b:bc:ba:fa:04:f6:63:83:76:3d:58:72: 97:6b:8b:37:f2:cd:c5:56:ad:7e:f0:04:7b:1c:24: 98:a2:15:86:2e:e9:1d:26:54:03:c7:6a:7a:9a:2f: db:d3:25:4b:94:23:91:50:49:f8:e4:96:0f:41:80: f4:c3:6a:41:ee:ef:fd:14:b0:36:3a:20:23:ea:7a: 6e:ab:29:c7:31:74:40:a3:30:e4:1c:c0:4f:41:f9: 1f:fb:b6:57:b8:19:2e:5a:ab:77:2b:c2:36:ca:9c: 6a:cc:3c:79:ec:f5:1c:e0:d8:06:59:8e:bd:5f:cf: 98:60:ec:b8:4a:2c:22:55:f7:58:8e:c3:01:81:b0: f4:35:9c:c1:13:a8:ff:d8:ca:a2:73:fc:ee:60:e7: fb:02:9f:f1:c4:9c:10:bf:25:12:59:b0:6d:7c:51: 48:be:ed:b2:b7:81:0d:05:50:2a:a2:c8:44:ca:55: 9e:f4:d8:73:ae:57:ad:40:c9:8f:2f:45:ca:07:e1: 8b:0b:9d:f9:d4:2e:f5:b2:5c:a9:32:fa:c6:75:10: 27:1a:6b:e3:ab:52:f4:21:c3:00:9c:05:ad:58:af: a2:3a:ec:ba:12:26:a0:e7:71:30:b3:46:ce:df:78: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D5:19:85:D6:B7:9E:FC:5B:60:F7:B9:73:74:E7:4A:F5:85:31:9A X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/rdUZhda3nvxbYPe5c3TnSvWFMZo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.112.0/21 Signature Algorithm: sha256WithRSAEncryption 38:0e:d9:e2:08:7f:94:87:17:0e:51:46:c3:83:c6:b2:a5:46: b6:ff:20:2e:d2:4e:03:cf:64:fc:e0:11:38:e0:e5:0c:f5:c1: 17:ce:10:06:28:c3:0c:98:d8:b0:42:00:37:aa:f8:bd:28:5a: 80:ff:1f:d0:1e:d4:6d:db:4a:d3:df:29:ca:c6:19:de:f2:b5: 32:76:1c:64:14:21:5a:58:57:95:f8:4a:1f:14:c9:f2:d3:7c: 5d:44:7f:eb:9e:14:e7:bb:15:85:5b:b4:31:d1:8b:71:fd:f8: 4e:58:d5:44:22:f5:73:6a:af:7b:00:25:3c:0f:22:80:2d:92: f8:1e:15:56:7c:b0:87:d0:68:e4:2a:f4:10:27:f8:66:2f:92: 23:c7:14:ba:35:4c:88:1f:63:1e:19:ae:ab:75:1d:53:46:43: 2a:56:59:52:2d:e5:03:4e:a0:f5:40:f3:10:ae:43:9d:36:0c: d3:ae:6d:f2:75:9e:a1:01:95:bc:c5:40:08:ec:41:2f:c5:f8: 46:a6:34:be:c9:fd:87:f2:b0:0f:04:41:6f:dd:93:c6:59:b3: c8:e8:c4:3f:27:1c:7f:f1:de:78:57:8e:e3:9b:0f:e8:e3:c2: 38:80:40:f3:4b:73:43:5d:08:e5:b4:db:48:9b:0f:f2:50:eb: 5a:5b:4e:9f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE24wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDEwMTEw MTEyNTFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFERDUxOTg1RDZCNzlF RkM1QjYwRjdCOTczNzRFNzRBRjU4NTMxOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdZYZ0CZzvAlvmgOVfhEISEVu8uvoE9mODdj1YcpdrizfyzcVW rX7wBHscJJiiFYYu6R0mVAPHanqaL9vTJUuUI5FQSfjklg9BgPTDakHu7/0UsDY6 ICPqem6rKccxdECjMOQcwE9B+R/7tle4GS5aq3crwjbKnGrMPHns9Rzg2AZZjr1f z5hg7LhKLCJV91iOwwGBsPQ1nMETqP/YyqJz/O5g5/sCn/HEnBC/JRJZsG18UUi+ 7bK3gQ0FUCqiyETKVZ702HOuV61AyY8vRcoH4YsLnfnULvWyXKky+sZ1ECcaa+Or UvQhwwCcBa1Yr6I67LoSJqDncTCzRs7feCJbAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUrdUZhda3nvxbYPe5c3TnSvWFMZowHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvcmRVWmhkYTNudnhi WVBlNWMzVG5TdldGTVpvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfcDANBgkqhkiG9w0BAQsFAAOCAQEAOA7Z4gh/lIcXDlFGw4PGsqVGtv8g LtJOA89k/OAROODlDPXBF84QBijDDJjYsEIAN6r4vShagP8f0B7UbdtK098pysYZ 3vK1MnYcZBQhWlhXlfhKHxTJ8tN8XUR/654U57sVhVu0MdGLcf34TljVRCL1c2qv ewAlPA8igC2S+B4VVnywh9Bo5Cr0ECf4Zi+SI8cUujVMiB9jHhmuq3UdU0ZDKlZZ Ui3lA06g9UDzEK5DnTYM065t8nWeoQGVvMVACOxBL8X4RqY0vsn9h/KwDwRBb92T xlmzyOjEPyccf/HeeFeO45sP6OPCOIBA80tzQ10I5bTbSJsP8lDrWltOnw== -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:23 2024 by rpki-client on console-ams.rpki-client.org