$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/4IJ5pY64Po_XVNj0wR5HRGl5dI0.roa File: 4IJ5pY64Po_XVNj0wR5HRGl5dI0.roa (raw, json) Hash identifier: Wgg05jB8CjcL1vuJhoEJFpIAjjNLOrwzDwpRCgnEoAI= Subject key identifier: E0:82:79:A5:8E:B8:3E:8F:D7:54:D8:F4:C1:1E:47:44:69:79:74:8D Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1256 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/4IJ5pY64Po_XVNj0wR5HRGl5dI0.roa Signing time: Wed 21 Aug 2024 06:45:23 +0000 ROA not before: Wed 21 Aug 2024 06:45:23 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 398704 IP address blocks: 180.223.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 10:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4694 (0x1256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Aug 21 06:45:23 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=E08279A58EB83E8FD754D8F4C11E47446979748D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:75:7c:7c:0b:15:99:84:da:93:29:68:46: f3:66:29:0d:e5:16:aa:c1:b1:52:da:b5:2b:41:8d: 19:fd:4b:f3:cc:58:f5:13:91:9f:a5:48:1f:96:be: 54:b5:56:37:41:a7:97:93:82:b9:20:5d:48:57:eb: ca:72:3e:d7:9b:80:f5:ab:42:2a:73:cb:ed:ba:a4: 8c:89:a8:a5:03:c7:70:da:1e:72:2b:86:e8:89:a9: 34:64:1e:fc:1b:cb:fd:e9:f7:4e:7b:9c:0f:b0:18: 56:d4:8a:30:6f:70:7d:09:64:55:2c:e4:94:2e:da: 14:9b:ce:bd:7b:ff:41:56:a5:80:84:5c:91:b4:65: 64:30:ae:cc:7c:43:0f:a3:62:aa:66:66:8b:ac:69: a3:81:73:a2:48:8f:4b:b4:bf:67:b3:f3:07:9d:08: 0c:7f:c9:1a:f9:3b:2b:f9:c6:5d:11:57:14:92:ab: 42:27:4d:19:8e:87:87:42:7a:d9:ad:67:b8:20:48: 41:f5:cc:4c:70:a1:90:3d:d3:b9:87:b5:d2:f4:cc: 4d:a7:9a:54:45:7c:79:02:7c:c9:1f:85:71:3e:84: b8:60:70:2e:b4:0c:cd:12:92:6b:06:47:de:11:88: 7d:51:ed:4d:76:8a:7b:c1:1d:15:a6:6b:a9:b6:1c: f3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:82:79:A5:8E:B8:3E:8F:D7:54:D8:F4:C1:1E:47:44:69:79:74:8D X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/4IJ5pY64Po_XVNj0wR5HRGl5dI0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.96.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:42:20:40:04:b2:38:fd:0d:94:41:9e:64:c5:d1:bd:c6:4e: b5:58:df:80:00:60:9e:88:08:23:6c:f2:3e:35:dd:f9:f3:50: 38:c5:89:4e:e4:10:14:f2:0e:e3:37:b2:08:e6:c4:2b:fd:71: 52:67:34:1d:27:3c:04:64:e5:22:32:3a:04:60:f4:90:43:3f: 3f:a5:88:72:92:e1:51:b7:58:82:38:98:4c:13:7f:31:6f:a1: b5:39:f2:93:f7:e9:f5:49:1e:7b:d7:c6:3b:a7:31:66:83:4c: db:cf:76:10:01:ad:f8:9f:70:32:7a:21:f5:be:d3:4b:de:29: 6d:44:23:c7:46:e9:0b:d3:b7:f0:ca:b9:f0:3b:4d:41:a5:73: d9:c5:f2:39:47:09:e7:5b:c2:4b:a7:9b:18:82:4e:f0:52:ab: 51:3e:97:10:bb:1b:53:f3:d6:76:43:68:e5:56:5b:d7:92:7d: 14:33:1f:a4:72:3d:78:2d:16:7d:ca:53:c7:7a:e5:ff:14:84: 58:b6:ba:51:27:02:13:db:1a:28:e2:11:e1:a8:e5:77:48:c2: 0c:0d:68:9c:7b:51:d0:02:9a:ca:55:84:bf:c2:cf:d1:9a:7a: 8f:f1:c7:90:f8:df:01:49:9e:b6:b7:4e:b5:df:35:54:90:af: de:82:b9:53 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICElYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDA4MjEw NjQ1MjNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEUwODI3OUE1OEVCODNF OEZENzU0RDhGNEMxMUU0NzQ0Njk3OTc0OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIlnV8fAsVmYTakyloRvNmKQ3lFqrBsVLatStBjRn9S/PMWPUT kZ+lSB+WvlS1VjdBp5eTgrkgXUhX68pyPtebgPWrQipzy+26pIyJqKUDx3DaHnIr huiJqTRkHvwby/3p9057nA+wGFbUijBvcH0JZFUs5JQu2hSbzr17/0FWpYCEXJG0 ZWQwrsx8Qw+jYqpmZousaaOBc6JIj0u0v2ez8wedCAx/yRr5Oyv5xl0RVxSSq0In TRmOh4dCetmtZ7ggSEH1zExwoZA907mHtdL0zE2nmlRFfHkCfMkfhXE+hLhgcC60 DM0SkmsGR94RiH1R7U12invBHRWma6m2HPMfAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU4IJ5pY64Po/XVNj0wR5HRGl5dI0wHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvNElKNXBZNjRQb19Y Vk5qMHdSNUhSR2w1ZEkwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTfYDANBgkqhkiG9w0BAQsFAAOCAQEATkIgQASyOP0NlEGeZMXRvcZOtVjf gABgnogII2zyPjXd+fNQOMWJTuQQFPIO4zeyCObEK/1xUmc0HSc8BGTlIjI6BGD0 kEM/P6WIcpLhUbdYgjiYTBN/MW+htTnyk/fp9Ukee9fGO6cxZoNM2892EAGt+J9w Mnoh9b7TS94pbUQjx0bpC9O38Mq58DtNQaVz2cXyOUcJ51vCS6ebGIJO8FKrUT6X ELsbU/PWdkNo5VZb15J9FDMfpHI9eC0WfcpTx3rl/xSEWLa6UScCE9saKOIR4ajl d0jCDA1onHtR0AKaylWEv8LP0Zp6j/HHkPjfAUmetrdOtd81VJCv3oK5Uw== -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:10 2024 by rpki-client on console-ams.rpki-client.org