$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/6VJ3I9gVxrNq254SurBMn_yI6JQ.roa File: 6VJ3I9gVxrNq254SurBMn_yI6JQ.roa (raw, json) Hash identifier: jTtbej68JJYLVVqe7IYv305BXe6aBAlCRrv+Mr3w7to= Subject key identifier: E9:52:77:23:D8:15:C6:B3:6A:DB:9E:12:BA:B0:4C:9F:FC:88:E8:94 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1569 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/6VJ3I9gVxrNq254SurBMn_yI6JQ.roa Signing time: Fri 17 Jan 2025 01:27:42 +0000 ROA not before: Fri 17 Jan 2025 01:27:42 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 2914 IP address blocks: 180.223.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5481 (0x1569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jan 17 01:27:42 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E9527723D815C6B36ADB9E12BAB04C9FFC88E894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2c:38:01:64:58:68:a5:a5:f1:8e:8f:bf:56: 89:91:ad:9f:ea:1a:97:4e:5c:fb:e5:27:38:b1:3c: 7b:38:b7:7a:3d:15:d7:55:e9:8f:89:b4:19:ff:66: 70:00:6f:aa:68:5e:17:ec:c6:09:4c:8f:43:58:c9: 05:e7:fc:07:eb:77:c1:c4:fa:41:3b:8b:b3:36:c7: 95:0f:1a:84:67:37:5b:6b:9a:89:0c:37:b1:81:48: 3a:a4:b3:84:e4:92:8a:0a:91:19:99:4c:86:ba:63: 23:57:a4:2f:59:ca:ae:30:f9:32:2c:85:fa:df:e1: 43:1a:60:22:9e:1d:c6:67:c4:47:0a:17:e6:ba:7d: 83:63:20:d0:ea:82:ed:e3:99:f0:8f:9b:ea:08:19: 5e:e4:97:53:42:c9:b7:37:b8:43:71:8d:ad:61:66: 68:c8:94:b8:b0:9b:d2:0a:06:52:17:8f:c2:b6:dd: 5f:d9:5e:56:d2:cb:ca:e4:d6:07:98:d6:96:40:6a: 11:6e:f0:69:94:27:9a:3e:54:0b:93:aa:b3:f8:a9: d0:5b:19:8c:82:f9:f6:d0:c6:8c:3a:b5:08:c5:1f: 1b:20:ba:7b:d3:0e:16:f3:7c:aa:85:46:17:6f:41: 9b:cd:65:42:83:0a:99:f3:00:be:07:be:7a:43:da: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:52:77:23:D8:15:C6:B3:6A:DB:9E:12:BA:B0:4C:9F:FC:88:E8:94 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/6VJ3I9gVxrNq254SurBMn_yI6JQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.232.0/21 Signature Algorithm: sha256WithRSAEncryption 71:01:bb:9d:56:85:ee:a1:8f:6b:f8:6b:ee:a3:2b:e1:1e:41: 1b:61:ec:2c:4c:59:2b:cd:f3:53:82:06:55:a8:19:9a:e9:49: b1:4b:0a:51:33:e6:da:f3:76:ba:48:43:1c:27:f2:bd:da:13: 62:b1:78:fd:70:0c:cf:5a:97:bd:90:76:eb:ad:52:01:86:2e: a2:92:66:a4:3a:1b:6f:0e:45:f8:1a:ec:a8:13:3c:51:06:b2: 0c:94:28:3a:7a:2d:df:2f:93:bc:19:a2:9b:52:82:be:09:b2: e0:1c:a8:95:87:3e:c1:ac:e9:d0:13:c4:d0:b3:38:44:e0:2a: 7e:bf:8e:8c:c8:7c:ab:14:59:bf:f2:e8:f5:f2:71:a9:9b:05: 1d:d1:03:fa:41:07:79:58:b5:64:6b:50:47:d6:e3:25:9e:23: 0c:f3:6f:f0:1b:ae:9e:2d:4b:0b:c4:6e:f4:26:dc:0b:e9:9f: 26:d3:26:30:f4:38:82:18:17:a5:26:03:85:e8:4b:01:a8:d0: b4:e5:74:d1:17:1a:8a:b2:1f:46:78:1b:4f:e5:c8:7f:a9:3f: 85:3c:55:3e:88:7b:01:02:ba:2b:95:e5:51:9d:4b:3c:66:5c: 0b:60:94:c9:a9:7c:92:f7:0b:09:a8:fb:87:60:b3:b7:ec:bd: 3c:5b:fc:c0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAxMTcw MTI3NDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEU5NTI3NzIzRDgxNUM2 QjM2QURCOUUxMkJBQjA0QzlGRkM4OEU4OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgLDgBZFhopaXxjo+/VomRrZ/qGpdOXPvlJzixPHs4t3o9FddV 6Y+JtBn/ZnAAb6poXhfsxglMj0NYyQXn/Afrd8HE+kE7i7M2x5UPGoRnN1trmokM N7GBSDqks4TkkooKkRmZTIa6YyNXpC9Zyq4w+TIshfrf4UMaYCKeHcZnxEcKF+a6 fYNjINDqgu3jmfCPm+oIGV7kl1NCybc3uENxja1hZmjIlLiwm9IKBlIXj8K23V/Z XlbSy8rk1geY1pZAahFu8GmUJ5o+VAuTqrP4qdBbGYyC+fbQxow6tQjFHxsgunvT DhbzfKqFRhdvQZvNZUKDCpnzAL4HvnpD2r6bAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU6VJ3I9gVxrNq254SurBMn/yI6JQwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvNlZKM0k5Z1Z4ck5x MjU0U3VyQk1uX3lJNkpRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7Tf6DANBgkqhkiG9w0BAQsFAAOCAQEAcQG7nVaF7qGPa/hr7qMr4R5BG2Hs LExZK83zU4IGVagZmulJsUsKUTPm2vN2ukhDHCfyvdoTYrF4/XAMz1qXvZB2661S AYYuopJmpDobbw5F+BrsqBM8UQayDJQoOnot3y+TvBmim1KCvgmy4ByolYc+wazp 0BPE0LM4ROAqfr+OjMh8qxRZv/Lo9fJxqZsFHdED+kEHeVi1ZGtQR9bjJZ4jDPNv 8Buuni1LC8Ru9CbcC+mfJtMmMPQ4ghgXpSYDhehLAajQtOV00RcairIfRngbT+XI f6k/hTxVPoh7AQK6K5XlUZ1LPGZcC2CUyal8kvcLCaj7h2Czt+y9PFv8wA== -----END CERTIFICATE-----Generated at Fri Apr 4 18:33:09 2025 by rpki-client