$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/_MtzjNitONdbQbC41IfGV65z-oA.roa File: _MtzjNitONdbQbC41IfGV65z-oA.roa (raw, json) Hash identifier: 2XunPCHAUDgtlW/+bFiHpO1/yazElI4wpcEp3CSOBM4= Subject key identifier: FC:CB:73:8C:D8:AD:38:D7:5B:41:B0:B8:D4:87:C6:57:AE:73:FA:80 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CBD Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/_MtzjNitONdbQbC41IfGV65z-oA.roa Signing time: Thu 02 Jan 2025 13:58:24 +0000 ROA not before: Thu 02 Jan 2025 13:58:24 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137718 IP address blocks: 180.184.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 01:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7357 (0x1cbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:24 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FCCB738CD8AD38D75B41B0B8D487C657AE73FA80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:85:62:8d:bf:5c:ca:10:fa:2e:4d:21:c8: d5:bf:6a:7a:79:ca:d2:1c:1f:f3:67:17:5b:a7:cf: 44:ee:af:a3:13:28:ad:f4:bf:0f:aa:69:38:60:8b: 52:c8:df:44:58:18:5c:c3:7e:63:c8:79:79:e6:38: 0b:ab:4f:41:90:ab:50:1f:3e:6a:85:8e:85:9f:bd: c4:20:7d:e7:b2:6c:bd:62:98:76:25:6f:ee:2c:2c: 4b:49:18:01:7e:ef:ec:68:a9:8a:23:06:9f:84:e0: 4d:91:ad:41:0a:48:8b:bc:04:a1:d1:93:5b:92:cb: b8:e6:ac:dc:f9:12:12:ec:36:30:01:2d:63:d1:0b: 2a:36:f3:67:c0:80:19:17:98:0d:6a:7c:8b:1e:af: cf:c4:15:c2:5f:04:a9:f5:51:26:2f:a9:e2:6e:cf: 47:0f:5b:2f:d8:ae:d5:c3:93:a6:ca:0f:e8:21:48: 40:c8:95:4f:8a:d7:87:c9:4e:49:85:ac:19:84:6d: 8c:f0:13:df:e5:da:36:15:31:50:7a:dc:10:db:e1: e9:10:4d:34:8f:cd:55:c9:75:78:79:a4:3a:19:71: 89:b1:7c:e6:5a:16:dd:95:51:b4:f0:72:56:cb:1a: 7d:f8:c3:2d:f9:1c:ee:a9:9c:ef:21:d7:85:30:c8: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CB:73:8C:D8:AD:38:D7:5B:41:B0:B8:D4:87:C6:57:AE:73:FA:80 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/_MtzjNitONdbQbC41IfGV65z-oA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.56.0/21 Signature Algorithm: sha256WithRSAEncryption 3d:2c:cf:c7:b5:52:0d:96:50:ae:1d:40:75:c3:0b:67:09:01: ac:e1:11:21:d3:20:38:02:11:4c:f2:dd:7f:83:cc:7f:9c:d1: 3c:50:37:f7:80:84:da:d9:ae:0e:49:b9:a5:2d:0c:2b:89:75: 69:88:bb:9e:30:af:19:1c:4e:d7:f8:ef:5e:a9:85:ed:e2:cf: f8:66:6f:fe:9d:76:82:ad:50:e2:2c:bd:0d:72:3a:05:e2:dd: c8:81:4c:f0:ac:a7:6d:cd:e4:78:7c:67:ca:6e:f8:d5:c2:44: 91:21:a7:67:21:ac:c5:b2:93:99:a7:ef:47:dd:1f:f2:3f:e6: 46:f0:d6:0f:03:37:58:77:b1:dc:c5:7a:69:e6:90:c9:8e:91: c8:e4:4a:b3:ae:83:8b:d4:ce:21:51:d8:a2:19:0e:c8:70:27: cb:ea:f1:e9:ac:7d:55:29:ec:cd:47:38:6f:c1:70:c5:c7:77: cd:a6:45:c5:39:c0:4f:8e:27:1d:bc:3a:fc:e2:bb:5f:35:89: 96:46:4b:af:1a:28:38:58:03:a3:6f:29:4f:39:c0:94:d1:8b: c0:80:f1:85:a9:3a:b0:ca:5c:44:09:4a:bd:c1:80:13:87:7e: 18:90:5f:b0:57:ad:15:41:2e:10:96:86:2d:c9:fa:f4:62:e1: d9:a9:cd:a7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZDQ0I3MzhDRDhBRDM4 RDc1QjQxQjBCOEQ0ODdDNjU3QUU3M0ZBODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKQoVijb9cyhD6Lk0hyNW/anp5ytIcH/NnF1unz0Tur6MTKK30 vw+qaThgi1LI30RYGFzDfmPIeXnmOAurT0GQq1AfPmqFjoWfvcQgfeeybL1imHYl b+4sLEtJGAF+7+xoqYojBp+E4E2RrUEKSIu8BKHRk1uSy7jmrNz5EhLsNjABLWPR Cyo282fAgBkXmA1qfIser8/EFcJfBKn1USYvqeJuz0cPWy/YrtXDk6bKD+ghSEDI lU+K14fJTkmFrBmEbYzwE9/l2jYVMVB63BDb4ekQTTSPzVXJdXh5pDoZcYmxfOZa Ft2VUbTwclbLGn34wy35HO6pnO8h14UwyFWXAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU/MtzjNitONdbQbC41IfGV65z+oAwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvX010empOaXRPTmRi UWJDNDFJZkdWNjV6LW9BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7S4ODANBgkqhkiG9w0BAQsFAAOCAQEAPSzPx7VSDZZQrh1AdcMLZwkBrOER IdMgOAIRTPLdf4PMf5zRPFA394CE2tmuDkm5pS0MK4l1aYi7njCvGRxO1/jvXqmF 7eLP+GZv/p12gq1Q4iy9DXI6BeLdyIFM8Kynbc3keHxnym741cJEkSGnZyGsxbKT mafvR90f8j/mRvDWDwM3WHex3MV6aeaQyY6RyORKs66Di9TOIVHYohkOyHAny+rx 6ax9VSnszUc4b8Fwxcd3zaZFxTnAT44nHbw6/OK7XzWJlkZLrxooOFgDo28pTznA lNGLwIDxhak6sMpcRAlKvcGAE4d+GJBfsFetFUEuEJaGLcn69GLh2anNpw== -----END CERTIFICATE-----Generated at Sat Apr 5 23:06:30 2025 by rpki-client