$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/18KS5iIQxL6lUlsauyk7X8rMfEw.roa File: 18KS5iIQxL6lUlsauyk7X8rMfEw.roa (raw, json) Hash identifier: rHsJlzHQ3gRwPJ3n/LUiFjs0ZOofpjpP4rVKXGr7eSM= Subject key identifier: D7:C2:92:E6:22:10:C4:BE:A5:52:5B:1A:BB:29:3B:5F:CA:CC:7C:4C Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CB9 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/18KS5iIQxL6lUlsauyk7X8rMfEw.roa Signing time: Thu 02 Jan 2025 13:58:23 +0000 ROA not before: Thu 02 Jan 2025 13:58:23 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138421 IP address blocks: 180.184.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 10:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7353 (0x1cb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:23 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D7C292E62210C4BEA5525B1ABB293B5FCACC7C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cb:ae:82:52:07:d2:72:bd:33:2d:fe:fb:79: b2:dd:58:b6:d3:c8:d2:6b:52:5a:3d:ec:89:23:ee: fb:5c:25:ac:0b:5e:16:84:d1:13:ff:73:fa:f3:4c: 1e:85:3f:00:8f:85:93:a7:a4:4f:6a:0b:c2:6a:19: 32:c8:86:59:f0:4e:ad:63:4d:e9:a7:5a:ba:fb:f7: c9:0a:43:f4:bb:8f:18:06:b7:dc:0c:b8:a8:74:17: 3e:71:8e:22:18:39:03:1f:e7:be:9c:6c:74:fb:88: 20:00:c1:41:78:e2:ba:0f:24:a4:2f:71:81:c3:25: 40:2e:92:fc:0b:8c:eb:7b:55:2a:05:61:84:41:61: 08:75:fb:e3:29:7a:02:8c:4a:fb:50:6b:c1:70:2e: 2c:7b:0d:34:25:c7:43:2d:d1:df:09:63:1d:fe:e0: 93:59:69:07:db:4c:db:a9:c8:62:53:d4:3e:7f:ab: 8a:4a:3b:69:8d:7a:16:70:40:d0:d0:af:1c:d7:0e: 63:ad:36:c8:a5:99:f6:88:07:dc:38:34:1e:23:52: 74:ec:49:04:e9:59:f8:d1:79:05:99:f6:d9:d6:23: f1:86:17:df:38:71:62:ac:30:69:e2:7f:93:4a:c4: b7:53:33:f1:12:18:e5:60:df:a0:e2:ed:8b:93:ca: 4b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C2:92:E6:22:10:C4:BE:A5:52:5B:1A:BB:29:3B:5F:CA:CC:7C:4C X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/18KS5iIQxL6lUlsauyk7X8rMfEw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.144.0/21 Signature Algorithm: sha256WithRSAEncryption 79:6e:4f:fa:ba:a9:93:7b:eb:09:58:5a:eb:5d:fd:87:57:a3: a5:dd:16:d5:bd:61:2f:b2:92:a3:64:2f:ba:5c:f8:02:65:7d: 62:62:a6:df:9a:7c:bd:94:d6:0b:66:d9:22:9d:68:a0:a5:f4: e3:96:7c:be:e7:9a:fd:7d:57:a6:c2:49:f6:d9:ae:04:3c:dc: ca:21:5c:97:16:d4:f7:be:d9:30:f0:1f:b8:d6:cd:c7:79:4c: eb:f4:d1:9e:30:b1:8e:54:73:89:f8:0f:1b:ae:67:4d:07:55: 4f:6f:49:dd:98:9a:e0:22:b1:44:44:83:fd:64:74:5e:7d:57: 4d:cb:03:b6:3e:88:44:2a:68:30:12:ed:70:1c:c3:4a:27:d9: b4:b7:df:cc:a3:ed:e9:2d:5d:ba:3b:41:1a:03:3a:5a:0c:37: 15:9b:84:5b:76:67:b5:16:c0:ca:05:45:2d:6d:6c:ab:85:53: 8b:42:f2:97:e4:ba:60:e5:0a:71:76:54:27:8a:60:10:d6:e4: fc:b6:1b:f0:f6:ec:48:49:21:24:d4:82:80:3c:36:a1:d8:f0: a7:72:0e:4f:15:d2:12:46:92:f2:d6:32:f6:54:1a:28:df:24: c7:95:1d:b6:81:98:8f:44:9c:50:bc:32:a8:d1:8f:ca:4d:5c: 28:0e:b2:01 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHLkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQ3QzI5MkU2MjIxMEM0 QkVBNTUyNUIxQUJCMjkzQjVGQ0FDQzdDNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYy66CUgfScr0zLf77ebLdWLbTyNJrUlo97Ikj7vtcJawLXhaE 0RP/c/rzTB6FPwCPhZOnpE9qC8JqGTLIhlnwTq1jTemnWrr798kKQ/S7jxgGt9wM uKh0Fz5xjiIYOQMf576cbHT7iCAAwUF44roPJKQvcYHDJUAukvwLjOt7VSoFYYRB YQh1++MpegKMSvtQa8FwLix7DTQlx0Mt0d8JYx3+4JNZaQfbTNupyGJT1D5/q4pK O2mNehZwQNDQrxzXDmOtNsilmfaIB9w4NB4jUnTsSQTpWfjReQWZ9tnWI/GGF984 cWKsMGnif5NKxLdTM/ESGOVg36Di7YuTykupAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU18KS5iIQxL6lUlsauyk7X8rMfEwwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvMThLUzVpSVF4TDZs VWxzYXV5azdYOHJNZkV3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7S4kDANBgkqhkiG9w0BAQsFAAOCAQEAeW5P+rqpk3vrCVha6139h1ejpd0W 1b1hL7KSo2Qvulz4AmV9YmKm35p8vZTWC2bZIp1ooKX045Z8vuea/X1XpsJJ9tmu BDzcyiFclxbU977ZMPAfuNbNx3lM6/TRnjCxjlRzifgPG65nTQdVT29J3Zia4CKx RESD/WR0Xn1XTcsDtj6IRCpoMBLtcBzDSifZtLffzKPt6S1dujtBGgM6Wgw3FZuE W3ZntRbAygVFLW1sq4VTi0Lyl+S6YOUKcXZUJ4pgENbk/LYb8PbsSEkhJNSCgDw2 odjwp3IOTxXSEkaS8tYy9lQaKN8kx5UdtoGYj0ScULwyqNGPyk1cKA6yAQ== -----END CERTIFICATE-----Generated at Sat Apr 12 09:21:23 2025 by rpki-client