$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/B-v7-Lm9xjoglB4tLBrnDEh88p0.roa File: B-v7-Lm9xjoglB4tLBrnDEh88p0.roa (raw, json) Hash identifier: dqOVq3IuQfntKXwqK+VWkLUerEmgI23wdaLZMsVZ9nM= Subject key identifier: 07:EB:FB:F8:B9:BD:C6:3A:20:94:1E:2D:2C:1A:E7:0C:48:7C:F2:9D Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1622 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/B-v7-Lm9xjoglB4tLBrnDEh88p0.roa Signing time: Sun 16 Feb 2025 03:29:02 +0000 ROA not before: Sun 16 Feb 2025 03:29:02 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4766 IP address blocks: 180.223.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Mar 2025 10:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5666 (0x1622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Feb 16 03:29:02 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=07EBFBF8B9BDC63A20941E2D2C1AE70C487CF29D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0c:f9:f4:c2:ef:3c:89:eb:bc:76:5b:fa:bc: 4a:24:8b:b5:2b:14:20:f3:6e:bc:b6:ec:3e:fa:a5: bf:c4:38:df:c5:a1:cb:97:66:19:47:5b:ce:93:f0: ef:60:c5:c4:ad:e1:a4:94:20:06:9e:7f:50:22:37: 14:43:50:cb:ee:48:67:46:8b:20:0f:d4:3e:1f:44: 6c:c0:19:7e:98:7b:0d:d3:fb:83:1f:35:a5:2b:4d: 8c:c8:50:5f:e0:5a:23:b7:2e:f9:76:19:d6:ee:2b: 38:f3:43:58:bf:12:77:3c:fd:c3:3b:f5:8a:d9:0e: bd:c2:4b:82:3e:3e:16:40:57:50:00:f9:44:c8:e7: 87:32:35:33:bf:94:db:13:da:5d:79:19:6d:f9:96: e0:63:40:7a:61:5a:3b:2f:ea:7e:25:c1:96:7e:06: 58:0a:6b:66:99:62:1d:d0:74:a3:aa:1e:37:cc:23: 4e:fc:d5:71:24:14:cb:5a:a7:50:a3:50:75:18:56: 38:54:c2:f3:9f:37:71:a3:76:b6:1f:f0:f5:ba:1f: 07:48:01:75:b6:0b:6a:81:d8:62:26:75:1e:e5:11: 61:4c:e4:fe:4d:82:be:88:f8:1b:32:ab:48:c5:da: d5:c2:ac:76:5d:d0:dc:09:be:d8:71:90:c7:00:15: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EB:FB:F8:B9:BD:C6:3A:20:94:1E:2D:2C:1A:E7:0C:48:7C:F2:9D X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/B-v7-Lm9xjoglB4tLBrnDEh88p0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.232.0/21 Signature Algorithm: sha256WithRSAEncryption 98:ca:fe:6c:9a:dd:61:d7:28:8b:dd:d1:cb:d0:d5:c0:c8:38: b9:57:62:7f:a2:bf:ec:70:6e:b5:56:f2:1a:69:bf:4c:95:21: 1a:99:f3:cc:44:51:5d:6a:64:78:3d:df:09:df:2a:3f:59:f1: 2b:81:ad:a2:98:28:8e:42:89:ed:ac:37:89:67:99:00:79:ea: 82:41:1f:ac:1d:2d:d2:ee:ef:44:93:23:f9:0c:3f:3c:ea:75: 40:c0:0d:7d:74:68:bb:c6:dd:3d:9b:5d:57:f4:f5:1c:9a:2e: 20:ca:e2:12:35:89:29:15:00:71:62:3c:fe:91:4f:84:52:0e: 31:31:43:2f:43:e9:7b:d0:46:e2:60:53:c4:ec:00:ce:e3:ea: 83:db:c4:20:e8:c3:ed:1d:31:ad:da:73:ab:d1:7d:fb:89:3e: 8d:c0:ad:67:13:a2:34:f1:46:1c:ca:ed:4c:26:ca:92:7b:0f: 66:77:77:0e:a5:54:37:15:6a:78:c8:57:13:0a:94:ce:71:c0: 3c:fb:5d:b9:4c:6f:68:b3:ce:22:6c:67:0e:6e:ea:f0:5d:00: c2:a2:fa:a3:92:93:d2:0d:2d:51:a3:52:13:17:2c:b5:11:c2: f6:2e:da:d5:59:7b:98:16:77:84:e6:a7:24:84:1b:c6:a8:b8: 50:af:36:47 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMTYw MzI5MDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDA3RUJGQkY4QjlCREM2 M0EyMDk0MUUyRDJDMUFFNzBDNDg3Q0YyOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmDPn0wu88ieu8dlv6vEoki7UrFCDzbry27D76pb/EON/FocuX ZhlHW86T8O9gxcSt4aSUIAaef1AiNxRDUMvuSGdGiyAP1D4fRGzAGX6Yew3T+4Mf NaUrTYzIUF/gWiO3Lvl2GdbuKzjzQ1i/Enc8/cM79YrZDr3CS4I+PhZAV1AA+UTI 54cyNTO/lNsT2l15GW35luBjQHphWjsv6n4lwZZ+BlgKa2aZYh3QdKOqHjfMI078 1XEkFMtap1CjUHUYVjhUwvOfN3GjdrYf8PW6HwdIAXW2C2qB2GImdR7lEWFM5P5N gr6I+Bsyq0jF2tXCrHZd0NwJvthxkMcAFagRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUB+v7+Lm9xjoglB4tLBrnDEh88p0wHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvQi12Ny1MbTl4am9n bEI0dExCcm5ERWg4OHAwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7Tf6DANBgkqhkiG9w0BAQsFAAOCAQEAmMr+bJrdYdcoi93Ry9DVwMg4uVdi f6K/7HButVbyGmm/TJUhGpnzzERRXWpkeD3fCd8qP1nxK4GtopgojkKJ7aw3iWeZ AHnqgkEfrB0t0u7vRJMj+Qw/POp1QMANfXRou8bdPZtdV/T1HJouIMriEjWJKRUA cWI8/pFPhFIOMTFDL0Ppe9BG4mBTxOwAzuPqg9vEIOjD7R0xrdpzq9F9+4k+jcCt ZxOiNPFGHMrtTCbKknsPZnd3DqVUNxVqeMhXEwqUznHAPPtduUxvaLPOImxnDm7q 8F0AwqL6o5KT0g0tUaNSExcstRHC9i7a1Vl7mBZ3hOanJIQbxqi4UK82Rw== -----END CERTIFICATE-----Generated at Thu Mar 13 07:15:45 2025 by rpki-client