$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/w9pyRzgx0MYiecZtcVfwwBK8-co.roa File: w9pyRzgx0MYiecZtcVfwwBK8-co.roa (raw, json) Hash identifier: lEDsc1g5G4ahlHdoYd1+71gojJ6zOE9d6jS7R3MrP80= Subject key identifier: C3:DA:72:47:38:31:D0:C6:22:79:C6:6D:71:57:F0:C0:12:BC:F9:CA Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 135C Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/w9pyRzgx0MYiecZtcVfwwBK8-co.roa Signing time: Wed 09 Oct 2024 00:44:12 +0000 ROA not before: Wed 09 Oct 2024 00:44:12 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 2914 IP address blocks: 180.223.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 01:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4956 (0x135c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Oct 9 00:44:12 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C3DA72473831D0C62279C66D7157F0C012BCF9CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:64:7b:cb:7f:f7:ed:13:c4:08:11:d3:17:3e: b2:57:33:d8:20:1c:90:35:c0:6a:56:bd:9d:a5:38: 45:98:fa:aa:1f:5a:25:52:70:9e:9a:43:f3:af:68: 20:f6:b6:95:31:e3:2f:17:60:ff:c7:cc:ec:6e:ff: 3e:d2:0d:b6:00:5b:cd:ee:a5:0f:d4:d8:b0:2c:7c: f9:4e:65:11:dc:56:e0:68:ca:f3:3f:31:50:92:f6: 64:f8:9d:f5:11:83:ea:46:da:de:04:9a:7a:27:61: c8:c0:ef:28:96:58:4b:14:19:df:45:f6:3b:01:61: f4:cb:47:6b:30:cd:d4:d0:48:80:ae:8d:e2:cc:bb: 31:3a:6f:c2:d1:18:d1:ea:92:76:86:64:f8:3f:a5: d8:ee:df:10:1e:fa:50:1f:88:89:2f:49:3b:b1:73: f4:a2:71:a0:16:45:65:f0:48:8d:16:a6:5f:5e:73: 05:88:f7:7a:2f:30:9d:78:8e:0d:4f:af:83:12:ce: a8:b1:0c:1f:1f:30:81:dc:19:c3:5a:d1:7f:8d:a3: ac:42:36:c4:3b:cd:c7:54:b3:dd:e7:e8:e7:f2:d9: ad:b0:8d:c3:34:5d:25:25:cc:42:a4:bf:90:a6:83: e8:b9:02:ab:09:ff:e6:a0:68:cb:f9:c5:ff:7f:b9: 88:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DA:72:47:38:31:D0:C6:22:79:C6:6D:71:57:F0:C0:12:BC:F9:CA X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/w9pyRzgx0MYiecZtcVfwwBK8-co.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.194.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:ad:d5:4e:06:f5:06:86:52:a7:87:cd:43:3b:83:ad:9d:cf: 58:e1:d0:6d:10:01:f8:6a:94:81:76:a8:a3:9e:41:4f:b6:ee: 21:46:68:e1:79:27:28:27:c0:ef:9c:2b:6f:80:43:a5:ba:d9: 46:cd:ea:e9:25:70:cc:fc:c6:57:6c:bf:71:10:bc:54:15:4c: 7b:3e:ba:86:b3:27:33:51:5a:89:19:c4:c2:fe:fa:96:71:e2: 0b:7e:b3:09:94:f2:e2:c3:ed:8c:e5:e6:3a:f7:9a:33:6d:4a: 7f:02:d1:7c:44:e3:ab:c6:fe:f1:9b:11:23:df:0c:88:81:89: f4:15:8d:31:66:4d:4e:8b:9c:0f:3d:bb:a4:f1:f7:1a:1d:f1: 8c:bf:7b:f6:dd:54:75:19:74:70:e1:d3:1c:c0:df:6b:43:c0: fb:a8:9b:f6:99:8d:37:ac:81:45:90:87:03:e5:5f:24:6a:5f: c8:8b:25:d3:d8:0c:00:cc:aa:f1:07:c7:f5:51:af:3d:b8:1c: f8:c0:fb:07:cb:58:f5:3a:d5:38:8d:07:6d:9a:88:17:b1:69: ed:33:50:61:5e:f3:cc:0b:25:00:f6:44:63:c1:6b:62:d9:ea: b0:c9:c1:2c:63:37:f0:02:52:e9:e6:a4:4d:1e:42:b8:7f:91: 07:bf:ff:9a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE1wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDEwMDkw MDQ0MTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEMzREE3MjQ3MzgzMUQw QzYyMjc5QzY2RDcxNTdGMEMwMTJCQ0Y5Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMZHvLf/ftE8QIEdMXPrJXM9ggHJA1wGpWvZ2lOEWY+qofWiVS cJ6aQ/OvaCD2tpUx4y8XYP/HzOxu/z7SDbYAW83upQ/U2LAsfPlOZRHcVuBoyvM/ MVCS9mT4nfURg+pG2t4EmnonYcjA7yiWWEsUGd9F9jsBYfTLR2swzdTQSICujeLM uzE6b8LRGNHqknaGZPg/pdju3xAe+lAfiIkvSTuxc/SicaAWRWXwSI0Wpl9ecwWI 93ovMJ14jg1Pr4MSzqixDB8fMIHcGcNa0X+No6xCNsQ7zcdUs93n6Ofy2a2wjcM0 XSUlzEKkv5Cmg+i5AqsJ/+agaMv5xf9/uYiPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUw9pyRzgx0MYiecZtcVfwwBK8+cowHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvdzlweVJ6Z3gwTVlp ZWNadGNWZnd3Qks4LWNvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTfwjANBgkqhkiG9w0BAQsFAAOCAQEAa63VTgb1BoZSp4fNQzuDrZ3PWOHQ bRAB+GqUgXaoo55BT7buIUZo4XknKCfA75wrb4BDpbrZRs3q6SVwzPzGV2y/cRC8 VBVMez66hrMnM1FaiRnEwv76lnHiC36zCZTy4sPtjOXmOveaM21KfwLRfETjq8b+ 8ZsRI98MiIGJ9BWNMWZNToucDz27pPH3Gh3xjL979t1UdRl0cOHTHMDfa0PA+6ib 9pmNN6yBRZCHA+VfJGpfyIsl09gMAMyq8QfH9VGvPbgc+MD7B8tY9TrVOI0HbZqI F7Fp7TNQYV7zzAslAPZEY8FrYtnqsMnBLGM38AJS6eakTR5CuH+RB7//mg== -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:27 2024 by rpki-client on console-fra.rpki-client.org