$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/roNbvnzntd4hFggqzvSOvD8GBo4.roa File: roNbvnzntd4hFggqzvSOvD8GBo4.roa (raw, json) Hash identifier: jnQeeDRNvGc6YPUue6KtT9CoBJ8jcHEkTD4xddJyMXs= Subject key identifier: AE:83:5B:BE:7C:E7:B5:DE:21:16:08:2A:CE:F4:8E:BC:3F:06:06:8E Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CC4 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/roNbvnzntd4hFggqzvSOvD8GBo4.roa Signing time: Thu 02 Jan 2025 13:58:26 +0000 ROA not before: Thu 02 Jan 2025 13:58:26 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4811 IP address blocks: 180.184.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 07:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7364 (0x1cc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:26 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=AE835BBE7CE7B5DE2116082ACEF48EBC3F06068E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:8f:64:9f:d5:bf:86:89:7a:31:b7:49:f6: 26:65:d6:f6:8e:4a:73:4c:14:9d:19:2c:d0:7a:fb: 7e:14:bd:bb:87:ca:45:04:92:79:1d:85:6b:af:8d: 1c:e2:ee:ff:f6:c6:3d:b3:38:38:84:49:47:cc:ea: 5e:8a:33:56:44:4b:65:ae:71:e1:b6:39:e0:a3:13: ba:07:67:8c:b8:37:9a:df:bf:95:bc:a8:70:f2:6e: db:c1:98:fb:bb:f9:24:30:d5:f9:94:ff:bc:91:f1: d4:53:f2:7d:59:56:37:b8:85:45:a1:9f:2a:30:3e: f2:d0:a5:5a:f5:30:a1:66:0b:a1:31:1a:04:10:7c: ee:3b:6b:c8:a1:10:46:ec:54:98:22:bd:ee:8e:c6: a6:75:8f:99:ba:3b:12:05:34:e9:22:d7:fc:f4:9c: 3c:24:54:d5:5d:c2:7b:cf:a7:44:5d:c6:e5:b5:3c: af:6f:48:47:8d:34:f9:3c:3e:b9:47:39:a7:e1:a2: b3:b9:30:df:05:8f:f9:0e:ee:6c:f7:0b:60:36:f7: 12:9e:24:3b:cc:90:cf:f9:0d:71:fc:5d:e7:03:e2: 16:ff:2f:ff:71:34:74:7c:05:50:3a:2d:de:cc:14: 01:4d:6f:0c:0b:0d:bf:9f:fa:e6:3f:03:1e:dc:12: ef:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:83:5B:BE:7C:E7:B5:DE:21:16:08:2A:CE:F4:8E:BC:3F:06:06:8E X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/roNbvnzntd4hFggqzvSOvD8GBo4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.168.0/21 Signature Algorithm: sha256WithRSAEncryption af:8d:af:4e:8f:a1:c9:d7:90:31:5b:87:e2:67:b8:8e:de:cb: 6b:e5:29:64:82:d6:af:27:e7:6d:85:d9:89:2f:0d:b6:1e:0d: 87:26:c0:07:73:ed:48:04:ad:89:53:2e:ad:92:83:c2:7a:d5: de:36:26:21:7c:28:f0:f4:f2:f6:81:c7:91:4a:cb:31:11:94: c6:35:a6:fa:49:1b:41:7c:84:b5:13:d2:89:54:eb:d2:27:18: 6f:e7:4a:39:7b:89:ad:07:4d:97:cd:4e:49:e4:dc:df:61:9a: 68:dd:a1:63:37:31:24:ac:b1:95:db:77:9c:f9:f3:3d:9a:16: 69:99:ed:d4:f4:e4:d0:c4:43:8c:34:25:7f:04:f8:85:66:5c: 5d:53:54:e3:ee:39:22:8c:d7:29:b2:05:60:ee:4a:60:37:13: de:0f:76:11:35:00:f0:2b:a2:f6:24:eb:04:6d:03:23:bf:b3: 11:21:6d:b2:b0:cc:95:44:7f:57:21:88:0d:fe:28:7b:4c:24: 4d:99:c3:e5:fa:57:7f:1c:0b:d3:43:cd:4a:d8:b6:11:54:91: 05:9f:29:7e:8f:07:3d:30:3d:68:5e:f2:cf:87:9f:60:a3:ce: fb:ca:1a:54:1f:89:16:ef:41:3a:a2:40:70:05:ff:9f:4c:d4: 89:48:90:45 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFFODM1QkJFN0NFN0I1 REUyMTE2MDgyQUNFRjQ4RUJDM0YwNjA2OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1XI9kn9W/hol6MbdJ9iZl1vaOSnNMFJ0ZLNB6+34UvbuHykUE knkdhWuvjRzi7v/2xj2zODiESUfM6l6KM1ZES2WuceG2OeCjE7oHZ4y4N5rfv5W8 qHDybtvBmPu7+SQw1fmU/7yR8dRT8n1ZVje4hUWhnyowPvLQpVr1MKFmC6ExGgQQ fO47a8ihEEbsVJgive6OxqZ1j5m6OxIFNOki1/z0nDwkVNVdwnvPp0RdxuW1PK9v SEeNNPk8PrlHOafhorO5MN8Fj/kO7mz3C2A29xKeJDvMkM/5DXH8XecD4hb/L/9x NHR8BVA6Ld7MFAFNbwwLDb+f+uY/Ax7cEu/1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUroNbvnzntd4hFggqzvSOvD8GBo4wHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvcm9OYnZuem50ZDRo RmdncXp2U092RDhHQm80LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7S4qDANBgkqhkiG9w0BAQsFAAOCAQEAr42vTo+hydeQMVuH4me4jt7La+Up ZILWryfnbYXZiS8Nth4NhybAB3PtSAStiVMurZKDwnrV3jYmIXwo8PTy9oHHkUrL MRGUxjWm+kkbQXyEtRPSiVTr0icYb+dKOXuJrQdNl81OSeTc32GaaN2hYzcxJKyx ldt3nPnzPZoWaZnt1PTk0MRDjDQlfwT4hWZcXVNU4+45IozXKbIFYO5KYDcT3g92 ETUA8Cui9iTrBG0DI7+zESFtsrDMlUR/VyGIDf4oe0wkTZnD5fpXfxwL00PNSti2 EVSRBZ8pfo8HPTA9aF7yz4efYKPO+8oaVB+JFu9BOqJAcAX/n0zUiUiQRQ== -----END CERTIFICATE-----Generated at Sat Apr 5 07:24:15 2025 by rpki-client