$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/x940-zVs16xNbCFZjdjxqkCdDfw.roa File: x940-zVs16xNbCFZjdjxqkCdDfw.roa (raw, json) Hash identifier: xsd94GvRXrdO/ewQ/Fm35K3KyjxnjN7InB2kms4Ns+A= Subject key identifier: C7:DE:34:FB:35:6C:D7:AC:4D:6C:21:59:8D:D8:F1:AA:40:9D:0D:FC Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 0D21 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/x940-zVs16xNbCFZjdjxqkCdDfw.roa Signing time: Tue 12 Dec 2023 00:01:28 +0000 ROA not before: Tue 12 Dec 2023 00:01:28 +0000 ROA not after: Tue 08 Oct 2024 00:16:33 +0000 asID: 18811 IP address blocks: 180.223.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 05:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3361 (0xd21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Dec 12 00:01:28 2023 GMT Not After : Oct 8 00:16:33 2024 GMT Subject: CN=C7DE34FB356CD7AC4D6C21598DD8F1AA409D0DFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:09:83:f0:7e:4b:37:14:00:6e:87:5f:16: 1e:aa:44:75:65:5a:3d:57:5d:03:f4:eb:39:8f:ea: ef:e1:7f:99:8d:12:aa:ea:c4:76:eb:58:35:d4:65: 6d:d1:fc:c6:8f:4d:15:13:7c:47:97:7c:de:9f:75: fc:b6:3a:33:dd:16:1c:58:2f:d3:bf:d9:e8:14:ce: d1:dc:37:a9:5d:a4:41:06:b8:a0:fd:4e:0f:5c:a2: 5c:c9:5f:55:1f:d9:9a:08:00:57:0d:0d:c6:0f:1c: 3b:7a:70:08:07:1a:ba:ed:7e:36:a9:c8:9a:a5:2c: 22:eb:2b:6c:61:fb:ad:2e:c6:29:24:f9:23:5e:2e: 49:2e:c3:45:83:07:55:f8:ad:c8:21:55:3e:95:8f: 79:cd:c7:f1:8b:79:1c:b2:2f:f9:3c:2a:71:43:6a: e7:2b:56:aa:c9:92:3b:4d:df:ef:12:1d:86:e8:86: be:e6:b7:6b:81:50:d5:99:ee:72:f1:e2:57:9b:b6: ee:ee:39:03:c7:02:6e:8a:85:f4:94:b0:3c:02:d5: 86:3c:b9:0c:70:ef:6a:60:ae:65:72:eb:95:3e:cd: 75:fb:b2:8c:ce:36:f8:32:79:e1:44:be:a3:39:10: 58:fb:11:19:93:73:30:03:c8:4a:19:c7:9d:b0:41: b2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DE:34:FB:35:6C:D7:AC:4D:6C:21:59:8D:D8:F1:AA:40:9D:0D:FC X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/x940-zVs16xNbCFZjdjxqkCdDfw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.64.0/18 Signature Algorithm: sha256WithRSAEncryption ae:72:41:0e:47:7f:4e:58:93:4b:ad:25:98:76:81:32:ca:0b: 00:a4:c0:40:67:4b:69:77:88:99:0d:15:85:1a:0e:9c:0d:8f: b7:97:94:09:ca:06:1b:a6:12:0f:b2:12:37:57:00:2c:4b:1e: 86:80:22:f4:6b:c9:b0:58:75:1c:1b:e8:86:27:f9:f4:77:b2: 31:90:48:ff:04:f2:cf:0b:5c:75:79:8f:89:41:7b:89:8f:e0: a6:a8:c5:7a:5a:c7:3c:10:5a:61:0c:ea:43:2a:49:bc:7c:5b: 35:df:81:12:ad:c4:b6:81:31:37:7d:5d:16:a1:ce:35:c2:ed: ca:fb:02:93:b3:f6:c9:1f:38:df:40:4d:18:1e:ae:df:41:d1: 15:3b:a8:12:57:0c:c0:5b:dd:ec:60:3a:21:80:46:37:1d:ff: 8e:c2:f6:e8:4c:4d:b6:07:76:14:30:a8:5a:59:b7:35:4c:75: 76:21:98:39:b5:7b:90:b4:5b:0d:de:1c:84:45:db:fd:f2:36: 03:27:ed:5b:e1:0c:9e:71:75:72:8d:14:13:aa:2d:d2:ee:4c: 7c:bc:d9:e8:53:d7:68:81:78:72:0d:be:6f:ff:f6:30:49:7d: 47:4c:e7:1c:fb:bb:7c:7e:d3:1c:76:26:66:f2:98:70:55:06: 76:37:8e:8a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDSEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yMzEyMTIw MDAxMjhaFw0yNDEwMDgwMDE2MzNaMDMxMTAvBgNVBAMTKEM3REUzNEZCMzU2Q0Q3 QUM0RDZDMjE1OThERDhGMUFBNDA5RDBERkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8sgmD8H5LNxQAbodfFh6qRHVlWj1XXQP06zmP6u/hf5mNEqrq xHbrWDXUZW3R/MaPTRUTfEeXfN6fdfy2OjPdFhxYL9O/2egUztHcN6ldpEEGuKD9 Tg9colzJX1Uf2ZoIAFcNDcYPHDt6cAgHGrrtfjapyJqlLCLrK2xh+60uxikk+SNe Lkkuw0WDB1X4rcghVT6Vj3nNx/GLeRyyL/k8KnFDaucrVqrJkjtN3+8SHYbohr7m t2uBUNWZ7nLx4lebtu7uOQPHAm6KhfSUsDwC1YY8uQxw72pgrmVy65U+zXX7sozO NvgyeeFEvqM5EFj7ERmTczADyEoZx52wQbJlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUx940+zVs16xNbCFZjdjxqkCdDfwwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAveDk0MC16VnMxNnhO YkNGWmpkanhxa0NkRGZ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBrTfQDANBgkqhkiG9w0BAQsFAAOCAQEArnJBDkd/TliTS60lmHaBMsoLAKTA QGdLaXeImQ0VhRoOnA2Pt5eUCcoGG6YSD7ISN1cALEsehoAi9GvJsFh1HBvohif5 9HeyMZBI/wTyzwtcdXmPiUF7iY/gpqjFelrHPBBaYQzqQypJvHxbNd+BEq3EtoEx N31dFqHONcLtyvsCk7P2yR8430BNGB6u30HRFTuoElcMwFvd7GA6IYBGNx3/jsL2 6ExNtgd2FDCoWlm3NUx1diGYObV7kLRbDd4chEXb/fI2AyftW+EMnnF1co0UE6ot 0u5MfLzZ6FPXaIF4cg2+b//2MEl9R0znHPu7fH7THHYmZvKYcFUGdjeOig== -----END CERTIFICATE-----Generated at Sun Apr 21 03:42:53 2024 by rpki-client on console-fra.rpki-client.org