$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/FGhJzTZgAbOaCugp01PQT-MbvtM.roa File: FGhJzTZgAbOaCugp01PQT-MbvtM.roa (raw, json) Hash identifier: 3b8fJvvr1oVvTUqlzo6lo1QbtehEdfKeEGZpYMiLNds= Subject key identifier: 14:68:49:CD:36:60:01:B3:9A:0A:E8:29:D3:53:D0:4F:E3:1B:BE:D3 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1556 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/FGhJzTZgAbOaCugp01PQT-MbvtM.roa Signing time: Tue 14 Jan 2025 06:39:08 +0000 ROA not before: Tue 14 Jan 2025 06:39:08 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 10103 IP address blocks: 180.223.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5462 (0x1556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jan 14 06:39:08 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=146849CD366001B39A0AE829D353D04FE31BBED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:2f:78:8a:8c:94:f7:8c:d5:81:f2:a2:37: 4d:9e:09:fc:a9:e8:80:71:70:da:70:31:94:14:cd: d0:02:07:a6:f5:a3:56:a7:26:c8:74:38:b3:e8:97: 4a:a1:7d:80:c9:05:43:20:83:ab:c2:cd:dd:51:29: 3f:d7:02:c3:70:fe:22:23:a3:06:26:10:4b:a9:08: 46:5d:0f:c6:eb:11:01:ee:3c:fc:81:e2:7b:2b:ad: 26:ec:16:42:00:65:22:04:d4:de:bc:ab:27:cc:43: f7:1e:73:5e:04:83:7e:70:77:1e:2b:88:6a:2d:46: da:0c:25:a1:50:17:37:c0:63:47:82:bd:77:64:3a: 1f:78:7e:a4:bb:e4:03:c7:17:fe:09:06:e5:3f:ae: 2a:96:b0:5f:29:f4:76:69:56:61:49:d7:3d:bc:dc: ac:83:43:bd:ac:83:09:c0:e2:0e:73:f0:88:53:ca: fa:80:cb:8a:29:8c:a3:be:d8:f5:ec:8e:f6:b2:cc: f3:8a:3c:3c:47:b8:31:f2:ee:51:51:20:b1:be:97: a5:4c:52:99:37:6a:7c:e6:2b:d6:b7:58:15:31:c7: 08:ac:4d:55:57:9f:12:a0:16:a4:f6:6a:b8:8e:72: 4a:35:14:8a:37:23:43:2a:cf:35:e4:af:3b:d4:32: 74:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:68:49:CD:36:60:01:B3:9A:0A:E8:29:D3:53:D0:4F:E3:1B:BE:D3 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/FGhJzTZgAbOaCugp01PQT-MbvtM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.148.0/22 Signature Algorithm: sha256WithRSAEncryption 56:a6:d4:51:03:c6:9d:1c:01:f1:e4:7a:1b:01:df:76:f9:33: 18:6a:8e:99:33:9e:26:eb:d8:0a:a8:4e:07:89:8e:76:c2:b2: 87:92:62:ba:98:6e:b8:8f:55:12:84:38:da:df:f5:66:7a:ea: 78:d0:53:12:20:9d:ec:8a:08:f0:71:f1:06:e9:20:63:73:91: 18:7b:60:1e:47:7a:1a:8d:7d:ab:08:1f:29:9b:3c:bf:74:ee: 51:47:44:19:35:c1:91:63:b9:cd:bd:ab:a4:1b:f6:b6:b0:4c: 35:f9:97:b3:bc:da:8d:39:eb:97:66:09:3d:c9:d2:18:5d:fe: 81:8d:e7:c0:ea:ad:f4:d7:d5:b2:a2:c2:11:db:b9:70:64:da: b3:fa:56:97:60:ba:f5:2c:a1:a8:c6:27:8f:1b:26:b9:09:00: 96:6b:d4:eb:62:f2:7c:7e:46:d0:5f:0c:b2:c6:75:0a:88:16: fb:fe:2e:2c:f7:55:21:b3:52:20:07:b7:a3:0f:94:d7:92:c6: 90:e9:03:ec:f3:f1:dd:56:68:62:68:70:30:be:79:54:cd:f2: 0b:cc:19:a5:cd:7b:29:17:57:07:0a:f8:d7:25:e1:39:ed:87: eb:27:61:b2:fd:92:a8:27:56:4a:28:5b:89:df:1d:e1:41:8a: 28:34:35:0c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAxMTQw NjM5MDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE0Njg0OUNEMzY2MDAx QjM5QTBBRTgyOUQzNTNEMDRGRTMxQkJFRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwQy94ioyU94zVgfKiN02eCfyp6IBxcNpwMZQUzdACB6b1o1an Jsh0OLPol0qhfYDJBUMgg6vCzd1RKT/XAsNw/iIjowYmEEupCEZdD8brEQHuPPyB 4nsrrSbsFkIAZSIE1N68qyfMQ/cec14Eg35wdx4riGotRtoMJaFQFzfAY0eCvXdk Oh94fqS75APHF/4JBuU/riqWsF8p9HZpVmFJ1z283KyDQ72sgwnA4g5z8IhTyvqA y4opjKO+2PXsjvayzPOKPDxHuDHy7lFRILG+l6VMUpk3anzmK9a3WBUxxwisTVVX nxKgFqT2ariOcko1FIo3I0MqzzXkrzvUMnQTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUFGhJzTZgAbOaCugp01PQT+MbvtMwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvRkdoSnpUWmdBYk9h Q3VncDAxUFFULU1idnRNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTflDANBgkqhkiG9w0BAQsFAAOCAQEAVqbUUQPGnRwB8eR6GwHfdvkzGGqO mTOeJuvYCqhOB4mOdsKyh5JiuphuuI9VEoQ42t/1ZnrqeNBTEiCd7IoI8HHxBukg Y3ORGHtgHkd6Go19qwgfKZs8v3TuUUdEGTXBkWO5zb2rpBv2trBMNfmXs7zajTnr l2YJPcnSGF3+gY3nwOqt9NfVsqLCEdu5cGTas/pWl2C69SyhqMYnjxsmuQkAlmvU 62LyfH5G0F8MssZ1CogW+/4uLPdVIbNSIAe3ow+U15LGkOkD7PPx3VZoYmhwML55 VM3yC8wZpc17KRdXBwr41yXhOe2H6ydhsv2SqCdWSihbid8d4UGKKDQ1DA== -----END CERTIFICATE-----Generated at Wed Jun 4 00:51:59 2025 by rpki-client