$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/DGPYcWFG-nYQxUXX1kJpl6dDPDY.roa File: DGPYcWFG-nYQxUXX1kJpl6dDPDY.roa (raw, json) Hash identifier: 9PDKm4JZpXibHSFm180tOMfxzEaaX+7hWJqmWQFV8wA= Subject key identifier: 0C:63:D8:71:61:46:FA:76:10:C5:45:D7:D6:42:69:97:A7:43:3C:36 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 15DE Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/DGPYcWFG-nYQxUXX1kJpl6dDPDY.roa Signing time: Thu 06 Feb 2025 08:17:37 +0000 ROA not before: Thu 06 Feb 2025 08:17:37 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4766 IP address blocks: 180.223.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Mar 2025 10:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5598 (0x15de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Feb 6 08:17:37 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0C63D8716146FA7610C545D7D6426997A7433C36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:e0:55:07:35:70:d2:cc:17:19:3a:75:9a: 6e:5f:1a:d7:52:87:ce:7d:29:87:3a:65:ac:f1:fa: 40:64:88:ff:20:e8:cf:eb:0e:4a:ed:c2:c2:dd:8a: ed:a1:40:fd:ab:a8:ce:4e:52:4d:28:a0:9d:e4:ec: 36:9b:35:ac:46:01:6e:c9:c3:87:dc:aa:6e:70:5f: 0d:52:6d:26:03:18:92:94:f5:d5:b5:69:a3:1e:84: 25:ba:2b:e2:fc:2f:df:78:72:31:2d:dc:8f:97:84: 09:2e:44:58:b9:15:c2:07:71:05:13:89:a9:c1:e7: 0c:ef:87:10:46:5a:59:c8:d4:22:9d:cd:c2:4b:1f: 94:23:aa:bc:9e:00:97:06:ac:54:12:c0:a1:5e:80: c8:92:7a:00:51:04:7d:f9:ff:06:96:e3:a1:12:ab: 36:18:34:b1:4d:48:78:22:57:c3:c8:e2:23:67:7b: c7:49:7d:64:62:7a:0a:e4:f3:45:54:6e:95:7f:c4: 91:67:c1:18:98:b9:59:55:51:a5:2a:70:20:60:47: da:8a:fb:c7:e9:39:37:ec:4d:7a:4f:b1:47:f0:d8: 14:33:0f:25:9b:fe:17:65:fe:e4:8e:df:3e:7a:05: b8:63:7b:8d:e7:e4:06:e2:6c:a2:64:b2:fc:e0:5b: 20:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:63:D8:71:61:46:FA:76:10:C5:45:D7:D6:42:69:97:A7:43:3C:36 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/DGPYcWFG-nYQxUXX1kJpl6dDPDY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.224.0/21 Signature Algorithm: sha256WithRSAEncryption 34:d1:d3:e6:f1:30:6f:32:54:57:03:5d:9f:e6:4e:f1:2b:1a: c3:dc:a3:22:7c:1d:a2:95:85:1a:76:1c:5e:97:a1:d7:30:ab: 2b:28:6e:d0:b2:ee:6b:6d:3b:eb:9a:7e:49:00:a1:31:46:8c: 5c:54:89:5e:07:d0:46:f4:80:15:f3:a0:d2:29:66:69:70:64: da:10:da:71:ba:ea:e6:58:89:c9:c9:a9:07:71:86:5e:ca:c5: 9b:af:62:66:bd:93:4d:37:da:37:26:ea:f8:05:79:2d:d0:f5: 18:76:15:e2:b8:4f:f7:eb:10:39:b0:8c:78:63:f5:1b:98:f9: 0d:6d:b9:a5:a2:eb:79:4c:13:90:37:8c:15:22:7b:5d:a7:f5: b3:41:a1:3b:5e:21:8c:82:13:43:a2:df:09:26:54:1d:9a:27: 43:6e:75:27:8e:bf:f0:a6:a3:0a:6f:ca:1f:3e:b6:54:fa:36: 11:ab:2e:96:ff:ee:e7:c1:15:1a:a5:af:87:b2:7a:ee:34:66: b8:ac:ee:04:81:c9:03:4f:9b:57:85:f3:4e:b4:f4:d9:2d:de: ed:e6:03:7f:73:d6:34:ac:a7:b8:3c:cc:cb:97:57:29:50:28: 57:95:be:64:53:e3:41:d2:21:00:31:49:86:f5:a2:28:c3:6e: 5e:ba:95:ec -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMDYw ODE3MzdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBDNjNEODcxNjE0NkZB NzYxMEM1NDVEN0Q2NDI2OTk3QTc0MzNDMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7XuBVBzVw0swXGTp1mm5fGtdSh859KYc6Zazx+kBkiP8g6M/r DkrtwsLdiu2hQP2rqM5OUk0ooJ3k7DabNaxGAW7Jw4fcqm5wXw1SbSYDGJKU9dW1 aaMehCW6K+L8L994cjEt3I+XhAkuRFi5FcIHcQUTianB5wzvhxBGWlnI1CKdzcJL H5QjqryeAJcGrFQSwKFegMiSegBRBH35/waW46ESqzYYNLFNSHgiV8PI4iNne8dJ fWRiegrk80VUbpV/xJFnwRiYuVlVUaUqcCBgR9qK+8fpOTfsTXpPsUfw2BQzDyWb /hdl/uSO3z56Bbhje43n5AbibKJksvzgWyD1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUDGPYcWFG+nYQxUXX1kJpl6dDPDYwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvREdQWWNXRkctbllR eFVYWDFrSnBsNmREUERZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7Tf4DANBgkqhkiG9w0BAQsFAAOCAQEANNHT5vEwbzJUVwNdn+ZO8Ssaw9yj InwdopWFGnYcXpeh1zCrKyhu0LLua20765p+SQChMUaMXFSJXgfQRvSAFfOg0ilm aXBk2hDacbrq5liJycmpB3GGXsrFm69iZr2TTTfaNybq+AV5LdD1GHYV4rhP9+sQ ObCMeGP1G5j5DW25paLreUwTkDeMFSJ7Xaf1s0GhO14hjIITQ6LfCSZUHZonQ251 J46/8KajCm/KHz62VPo2Easulv/u58EVGqWvh7J67jRmuKzuBIHJA0+bV4XzTrT0 2S3e7eYDf3PWNKynuDzMy5dXKVAoV5W+ZFPjQdIhADFJhvWiKMNuXrqV7A== -----END CERTIFICATE-----Generated at Thu Mar 13 07:17:21 2025 by rpki-client