$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/0uE1nTZWK7MFHae-Bykd-3vaeeQ.roa File: 0uE1nTZWK7MFHae-Bykd-3vaeeQ.roa (raw, json) Hash identifier: jhqW7Cm/YRW1/zfRUT3XUk8mOHySIYiMc2R5HPLI2O4= Subject key identifier: D2:E1:35:9D:36:56:2B:B3:05:1D:A7:BE:07:29:1D:FB:7B:DA:79:E4 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1558 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/0uE1nTZWK7MFHae-Bykd-3vaeeQ.roa Signing time: Tue 14 Jan 2025 06:39:08 +0000 ROA not before: Tue 14 Jan 2025 06:39:08 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 23532 IP address blocks: 180.223.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Feb 2025 13:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5464 (0x1558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jan 14 06:39:08 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D2E1359D36562BB3051DA7BE07291DFB7BDA79E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f0:45:ba:3c:8a:31:88:36:09:7f:9c:bd:55: ff:34:16:70:1c:51:e4:7d:3e:cb:4a:32:c7:d4:22: 94:36:56:5e:a4:6d:70:1d:9f:57:48:80:5a:54:17: 01:13:90:73:bb:f0:3a:7d:b6:3c:a9:d1:03:cb:d2: 58:3f:4f:fb:44:9c:18:87:42:9b:1d:f9:d7:cb:21: 75:62:4c:10:8a:28:8a:04:79:95:13:a3:68:bf:ef: 67:67:02:7f:7d:3e:8a:c8:e3:2f:10:d7:c8:a6:3f: cf:24:27:ce:ec:d9:97:3a:9c:b6:87:e8:44:8c:79: b1:e6:fb:13:2a:32:33:0f:b5:8c:08:bc:1a:22:83: bc:29:d7:f8:ca:0c:7e:4a:b7:ff:f2:02:a9:40:7c: ab:25:3b:1e:3f:5d:59:44:6b:16:2f:d7:26:ce:95: 9a:1e:a1:0d:fc:2d:2f:71:6d:a9:c7:16:50:4f:87: d5:7f:88:0f:d9:90:4e:1c:33:fc:97:35:af:4e:9a: 64:4f:c9:05:ce:13:c3:c6:eb:12:af:4f:14:ca:49: d2:00:fc:5c:29:ca:38:3f:41:7a:3d:5a:cc:45:7a: fe:8f:aa:a9:16:30:2c:17:a1:af:c3:2e:be:cc:8e: 2d:82:3b:7d:64:fe:d0:56:be:74:d1:de:c0:0c:42: f0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E1:35:9D:36:56:2B:B3:05:1D:A7:BE:07:29:1D:FB:7B:DA:79:E4 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/0uE1nTZWK7MFHae-Bykd-3vaeeQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.148.0/22 Signature Algorithm: sha256WithRSAEncryption d0:36:17:98:c2:4e:d9:ab:0a:2a:a4:03:48:e3:ae:4c:78:ed: 53:fd:ac:73:72:9d:41:34:9a:53:63:c8:96:62:a8:7b:7c:18: 6e:c7:44:b5:af:68:a8:ea:e9:22:89:2d:2f:de:97:52:29:f4: 68:19:80:7e:12:27:72:92:77:5d:26:4f:38:ac:1d:dc:a4:27: 96:c3:30:e1:74:82:e9:0e:1b:3f:0d:c2:e1:51:b1:ce:9e:40: 65:f7:b4:b3:70:74:5f:9f:a2:cd:ab:1f:5d:27:a0:7d:f7:b2: 71:d7:4e:32:c7:fa:9c:b7:3a:ee:c5:ab:d9:03:6d:79:45:94: 4d:d3:a6:89:3f:cf:64:46:a1:1b:47:30:16:a7:30:a4:eb:55: e2:3b:0a:6a:4a:15:c9:95:79:8f:a7:f6:50:3f:75:f3:1a:f0: 3b:61:35:2e:be:eb:f9:54:a0:23:bc:e6:99:a4:d7:b4:cd:9e: 81:b7:77:21:2b:aa:cc:f4:cc:1c:74:0b:c2:08:1a:1c:46:17: 6b:b3:5d:96:cb:a6:89:44:16:85:33:f3:ff:15:47:d2:64:43: 0b:04:2b:0d:72:5f:7d:b9:d0:2d:45:cb:9d:a0:10:aa:a8:7c: e9:04:ea:96:81:fb:34:6e:38:59:22:d8:7a:79:d1:3b:47:09: d7:36:30:83 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAxMTQw NjM5MDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQyRTEzNTlEMzY1NjJC QjMwNTFEQTdCRTA3MjkxREZCN0JEQTc5RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/8EW6PIoxiDYJf5y9Vf80FnAcUeR9PstKMsfUIpQ2Vl6kbXAd n1dIgFpUFwETkHO78Dp9tjyp0QPL0lg/T/tEnBiHQpsd+dfLIXViTBCKKIoEeZUT o2i/72dnAn99PorI4y8Q18imP88kJ87s2Zc6nLaH6ESMebHm+xMqMjMPtYwIvBoi g7wp1/jKDH5Kt//yAqlAfKslOx4/XVlEaxYv1ybOlZoeoQ38LS9xbanHFlBPh9V/ iA/ZkE4cM/yXNa9OmmRPyQXOE8PG6xKvTxTKSdIA/Fwpyjg/QXo9WsxFev6PqqkW MCwXoa/DLr7Mji2CO31k/tBWvnTR3sAMQvB1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU0uE1nTZWK7MFHae+Bykd+3vaeeQwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvMHVFMW5UWldLN01G SGFlLUJ5a2QtM3ZhZWVRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTflDANBgkqhkiG9w0BAQsFAAOCAQEA0DYXmMJO2asKKqQDSOOuTHjtU/2s c3KdQTSaU2PIlmKoe3wYbsdEta9oqOrpIoktL96XUin0aBmAfhIncpJ3XSZPOKwd 3KQnlsMw4XSC6Q4bPw3C4VGxzp5AZfe0s3B0X5+izasfXSegffeycddOMsf6nLc6 7sWr2QNteUWUTdOmiT/PZEahG0cwFqcwpOtV4jsKakoVyZV5j6f2UD918xrwO2E1 Lr7r+VSgI7zmmaTXtM2egbd3ISuqzPTMHHQLwggaHEYXa7NdlsumiUQWhTPz/xVH 0mRDCwQrDXJffbnQLUXLnaAQqqh86QTqloH7NG44WSLYennRO0cJ1zYwgw== -----END CERTIFICATE-----Generated at Wed Feb 5 09:53:14 2025 by rpki-client