$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/-oarKBaNq-cyK8DlGZcLwP_bfpA.roa File: -oarKBaNq-cyK8DlGZcLwP_bfpA.roa (raw, json) Hash identifier: 4R0mR0kOsfcyggr5ekr6OCydQ4hlqLwdmLga0aCq/SY= Subject key identifier: FA:86:AB:28:16:8D:AB:E7:32:2B:C0:E5:19:97:0B:C0:FF:DB:7E:90 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1573 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/-oarKBaNq-cyK8DlGZcLwP_bfpA.roa Signing time: Fri 17 Jan 2025 01:27:45 +0000 ROA not before: Fri 17 Jan 2025 01:27:45 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 7018 IP address blocks: 180.223.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5491 (0x1573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jan 17 01:27:45 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FA86AB28168DABE7322BC0E519970BC0FFDB7E90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:80:4c:0b:e9:c9:cc:f0:52:ae:77:f7:67:4b: f0:9c:40:be:9d:2f:4e:1c:64:f4:3f:ab:7c:dc:90: 5f:f4:cf:2a:ca:54:a5:5c:e3:82:30:5b:bd:a6:1b: bc:42:f8:89:4f:14:1c:13:9c:ac:25:dc:34:fd:2b: a6:d4:77:2d:07:48:c4:ac:f0:f1:50:ce:d7:79:6a: 33:39:da:9c:24:0a:1b:41:ba:6f:db:f8:9c:99:31: f6:0f:63:92:0a:86:67:58:13:5b:77:73:fd:a4:73: 5b:f8:b4:5e:14:7f:65:2f:1e:5a:9c:a6:ed:e9:24: b3:ce:85:11:e6:ac:3a:4d:55:6f:88:4b:64:db:73: 41:50:e9:39:3f:53:66:57:eb:a0:50:ba:34:7f:84: 38:35:6b:da:9d:24:c3:ad:2e:76:3d:8b:f8:a5:3e: bb:0b:2d:82:b0:e8:29:18:44:da:f9:da:be:a6:a8: e7:9d:01:65:b0:46:d1:a9:c4:76:2b:34:6a:98:f8: 69:8e:6c:87:4f:e0:44:cc:ea:58:50:b7:06:26:e4: 51:b4:7c:83:8d:b8:e0:91:5c:47:d6:ea:e0:5d:a2: 68:2f:e7:a9:13:77:90:56:48:93:0f:79:56:94:42: 62:e1:db:2b:94:18:17:9a:3d:0c:21:8e:db:81:4d: ce:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:86:AB:28:16:8D:AB:E7:32:2B:C0:E5:19:97:0B:C0:FF:DB:7E:90 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/-oarKBaNq-cyK8DlGZcLwP_bfpA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.80.0/21 Signature Algorithm: sha256WithRSAEncryption b2:2a:67:cc:6b:3d:b4:17:ff:f0:53:94:be:de:fc:df:71:82: 78:dd:ad:fc:b2:d6:ea:07:9e:91:9f:8e:e0:a3:bf:ec:48:76: b3:09:3a:2f:73:b6:f7:dc:58:80:d0:38:71:8b:84:0a:3e:4e: 60:3d:43:0f:a4:8a:1f:a5:13:48:f7:23:4c:06:0a:9c:8b:4a: cd:23:90:22:52:98:5c:dd:71:74:5b:e1:2e:12:d2:28:21:f8: 8b:ea:3a:fa:b2:6a:bc:55:9e:1c:b1:de:6c:c3:09:e3:db:aa: a8:d1:ff:ed:8a:84:56:a6:59:5f:96:64:c1:d9:72:31:66:d9: b9:b1:cf:2c:58:16:70:39:87:55:61:8b:6d:d3:48:a0:5c:77: b2:b9:f3:21:37:c8:03:f4:1b:b0:47:05:47:92:ed:6c:74:ea: 0e:69:1a:71:34:78:ea:57:5a:7c:9d:5a:dc:4e:5f:02:74:e9: 32:48:b8:88:0a:c7:73:e7:a2:46:18:2d:72:75:bf:be:82:25: 89:34:f3:28:81:06:85:3b:45:58:0f:69:96:b9:cd:f9:f9:77: 35:f8:55:b4:f6:6e:4d:d3:b3:89:dc:19:39:33:16:2a:f8:0d: 98:4e:9a:dd:d8:c4:b8:e6:28:cb:c0:6c:43:90:8e:be:2b:e0: fe:64:b7:fb -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAxMTcw MTI3NDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZBODZBQjI4MTY4REFC RTczMjJCQzBFNTE5OTcwQkMwRkZEQjdFOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhgEwL6cnM8FKud/dnS/CcQL6dL04cZPQ/q3zckF/0zyrKVKVc 44IwW72mG7xC+IlPFBwTnKwl3DT9K6bUdy0HSMSs8PFQztd5ajM52pwkChtBum/b +JyZMfYPY5IKhmdYE1t3c/2kc1v4tF4Uf2UvHlqcpu3pJLPOhRHmrDpNVW+IS2Tb c0FQ6Tk/U2ZX66BQujR/hDg1a9qdJMOtLnY9i/ilPrsLLYKw6CkYRNr52r6mqOed AWWwRtGpxHYrNGqY+GmObIdP4ETM6lhQtwYm5FG0fIONuOCRXEfW6uBdomgv56kT d5BWSJMPeVaUQmLh2yuUGBeaPQwhjtuBTc5hAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU+oarKBaNq+cyK8DlGZcLwP/bfpAwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvLW9hcktCYU5xLWN5 SzhEbEdaY0x3UF9iZnBBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfUDANBgkqhkiG9w0BAQsFAAOCAQEAsipnzGs9tBf/8FOUvt7833GCeN2t /LLW6geekZ+O4KO/7Eh2swk6L3O299xYgNA4cYuECj5OYD1DD6SKH6UTSPcjTAYK nItKzSOQIlKYXN1xdFvhLhLSKCH4i+o6+rJqvFWeHLHebMMJ49uqqNH/7YqEVqZZ X5ZkwdlyMWbZubHPLFgWcDmHVWGLbdNIoFx3srnzITfIA/QbsEcFR5LtbHTqDmka cTR46ldafJ1a3E5fAnTpMki4iArHc+eiRhgtcnW/voIliTTzKIEGhTtFWA9plrnN +fl3NfhVtPZuTdOzidwZOTMWKvgNmE6a3djEuOYoy8BsQ5COvivg/mS3+w== -----END CERTIFICATE-----Generated at Fri Apr 4 18:36:42 2025 by rpki-client