$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/9XlWwC-yU30NU9T8BigEMtpaSNk.roa File: 9XlWwC-yU30NU9T8BigEMtpaSNk.roa (raw, json) Hash identifier: +nlM0bJ+1/Xiq3DQWhsWCFeTNRVV2lByLpKSHTdar4o= Subject key identifier: F5:79:56:C0:2F:B2:53:7D:0D:53:D4:FC:06:28:04:32:DA:5A:48:D9 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 179E Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/9XlWwC-yU30NU9T8BigEMtpaSNk.roa Signing time: Tue 29 Apr 2025 08:21:34 +0000 ROA not before: Tue 29 Apr 2025 08:21:34 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 2914 IP address blocks: 180.223.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6046 (0x179e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Apr 29 08:21:34 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F57956C02FB2537D0D53D4FC06280432DA5A48D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:64:72:bb:2e:37:6c:b8:56:ab:fb:86:6e:10: 3f:3c:ba:b3:76:00:97:d4:84:5c:e5:05:f7:f4:61: 12:ec:1c:34:25:e0:a7:e1:99:9b:1b:0e:5d:bb:c7: 74:49:be:95:a5:6d:1f:9d:4b:54:7f:bb:7a:cf:b5: 45:b4:25:b2:93:c3:d8:37:5b:6f:5c:33:ea:df:a8: 90:ed:22:78:73:db:4b:1a:be:25:47:a2:aa:39:6d: f4:2e:8b:e5:d4:bd:62:28:51:90:38:1c:bb:39:82: 81:80:12:17:da:64:fd:5c:38:a2:cd:b4:ef:1c:70: c4:1e:5e:3d:32:41:18:27:32:18:01:cb:42:fe:da: e7:f7:14:d5:ec:eb:2e:82:59:42:c9:93:43:db:40: 37:a1:46:ae:a0:f1:9b:65:13:4b:f5:35:84:6e:a3: b4:cc:71:2a:29:02:73:9b:9e:72:ee:7e:0d:70:82: f3:3e:e9:5b:c0:4d:73:83:d5:c4:e3:a0:1b:a0:c2: f0:26:1a:12:1f:27:fd:ed:e1:d8:c8:b1:75:f1:9a: 0c:b9:17:ca:4a:2d:8d:e3:9f:2e:6e:f7:62:26:41: 25:67:7c:e2:d1:63:d9:9f:39:fb:8d:59:9d:bc:e8: e6:2b:76:05:7a:7f:bc:6e:48:76:70:0d:c8:59:70: 39:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:79:56:C0:2F:B2:53:7D:0D:53:D4:FC:06:28:04:32:DA:5A:48:D9 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/9XlWwC-yU30NU9T8BigEMtpaSNk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.64.0/18 Signature Algorithm: sha256WithRSAEncryption 95:1f:88:3f:76:ec:6c:59:08:df:1f:ca:80:d1:3d:a8:9f:2d: e2:33:78:8e:d0:55:bd:a3:a3:85:09:7b:7c:76:8f:e7:bd:e8: 8a:3b:49:68:10:d0:7e:06:e2:3a:66:c0:ad:2b:34:93:e8:17: 46:54:1e:5c:b5:8e:07:aa:3a:ba:4d:0f:27:23:b6:6e:31:dd: 2b:26:da:f0:45:bd:9c:96:91:1c:37:d6:96:2d:92:1d:fc:54: 60:bf:29:ad:5d:ee:15:4c:c4:34:a3:e0:39:97:b0:1b:ac:e1: f9:88:d4:60:38:d4:e8:cd:6b:dc:bb:96:b9:5d:04:15:aa:3d: 18:ca:79:11:12:66:9a:55:e1:92:bb:e5:2e:9b:a4:9e:09:cf: fe:ea:45:c8:63:05:49:c7:22:72:70:8c:f5:08:64:f7:16:1c: 3b:c3:75:b5:bf:94:76:3b:fd:0f:5c:f9:ba:37:96:c0:af:ea: 8f:79:12:0e:0e:31:fc:38:c5:da:7e:63:7a:ec:8d:d4:47:d1: b4:15:ef:ce:df:0f:0d:08:65:d2:1e:93:fa:af:40:1e:c8:6c: 40:e7:fa:d7:d6:a0:2f:e3:5e:f0:98:53:22:42:a3:c1:63:e9: ec:94:c5:92:35:f1:ec:02:be:ee:39:5b:c4:f3:e4:e9:7c:f2: b6:cd:3e:91 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICF54wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA0Mjkw ODIxMzRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEY1Nzk1NkMwMkZCMjUz N0QwRDUzRDRGQzA2MjgwNDMyREE1QTQ4RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvZHK7LjdsuFar+4ZuED88urN2AJfUhFzlBff0YRLsHDQl4Kfh mZsbDl27x3RJvpWlbR+dS1R/u3rPtUW0JbKTw9g3W29cM+rfqJDtInhz20saviVH oqo5bfQui+XUvWIoUZA4HLs5goGAEhfaZP1cOKLNtO8ccMQeXj0yQRgnMhgBy0L+ 2uf3FNXs6y6CWULJk0PbQDehRq6g8ZtlE0v1NYRuo7TMcSopAnObnnLufg1wgvM+ 6VvATXOD1cTjoBugwvAmGhIfJ/3t4djIsXXxmgy5F8pKLY3jny5u92ImQSVnfOLR Y9mfOfuNWZ286OYrdgV6f7xuSHZwDchZcDnVAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU9XlWwC+yU30NU9T8BigEMtpaSNkwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvOVhsV3dDLXlVMzBO VTlUOEJpZ0VNdHBhU05rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBrTfQDANBgkqhkiG9w0BAQsFAAOCAQEAlR+IP3bsbFkI3x/KgNE9qJ8t4jN4 jtBVvaOjhQl7fHaP573oijtJaBDQfgbiOmbArSs0k+gXRlQeXLWOB6o6uk0PJyO2 bjHdKyba8EW9nJaRHDfWli2SHfxUYL8prV3uFUzENKPgOZewG6zh+YjUYDjU6M1r 3LuWuV0EFao9GMp5ERJmmlXhkrvlLpukngnP/upFyGMFSccicnCM9Qhk9xYcO8N1 tb+Udjv9D1z5ujeWwK/qj3kSDg4x/DjF2n5jeuyN1EfRtBXvzt8PDQhl0h6T+q9A HshsQOf619agL+Ne8JhTIkKjwWPp7JTFkjXx7AK+7jlbxPPk6Xzyts0+kQ== -----END CERTIFICATE-----Generated at Wed Jun 4 00:52:19 2025 by rpki-client