$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/HtIAupUjx0BuvwGrwS1Q7FQRonM.roa File: HtIAupUjx0BuvwGrwS1Q7FQRonM.roa (raw, json) Hash identifier: v6pkMnY8FTuTjmVmQUVqJqh++qia8YsYk35C0tcKg+s= Subject key identifier: 1E:D2:00:BA:95:23:C7:40:6E:BF:01:AB:C1:2D:50:EC:54:11:A2:73 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 140F Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/HtIAupUjx0BuvwGrwS1Q7FQRonM.roa Signing time: Sun 10 Nov 2024 07:11:46 +0000 ROA not before: Sun 10 Nov 2024 07:11:46 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 398704 IP address blocks: 180.223.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 10:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5135 (0x140f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Nov 10 07:11:46 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=1ED200BA9523C7406EBF01ABC12D50EC5411A273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:10:84:e6:b9:2b:c5:4a:8d:7e:da:53:3e: ab:a9:7f:ff:32:83:91:6e:91:d1:e3:02:f8:19:50: 1b:ab:1d:9d:07:6e:a1:b5:5d:37:b4:33:ca:8e:13: 97:c3:f4:a4:4c:b9:cf:5c:9b:0f:0d:7b:11:5a:4c: 8e:ed:91:5d:3b:18:f9:c3:8d:99:32:46:f6:2a:2a: f4:4f:12:5a:ad:f7:2f:47:c8:3f:a6:d0:52:7f:62: 6f:7f:33:d4:09:8d:85:ea:e6:2b:93:13:bc:f8:09: 32:f0:93:25:fe:9d:3a:9a:78:0c:42:a2:52:48:1f: e5:17:3f:f7:5a:a7:e4:9f:43:87:4d:9b:3f:9f:38: c8:d8:e3:d5:ce:40:d3:f6:e1:62:fd:93:4a:f1:14: ce:78:bb:d5:0e:53:fe:e6:71:17:ae:a2:f3:87:bb: 7a:72:12:65:c1:1e:2c:d9:bc:89:de:e5:b4:c9:1c: 0c:0b:80:be:8f:ea:6e:91:1e:4c:f4:c3:a1:b6:99: da:da:91:94:30:11:98:40:20:a1:6d:cf:37:d4:de: 01:e9:ef:60:f6:ba:3a:73:90:13:60:3b:e8:4c:92: 91:0a:b3:e3:fc:f0:1a:ba:d3:3f:c2:1b:21:59:6b: f2:97:7b:ab:2c:0b:1e:9d:e0:a0:33:05:f4:27:35: 83:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D2:00:BA:95:23:C7:40:6E:BF:01:AB:C1:2D:50:EC:54:11:A2:73 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/HtIAupUjx0BuvwGrwS1Q7FQRonM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.192.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:7c:1d:57:85:b3:49:f0:5e:bb:38:e2:ae:86:bd:2b:b4:ed: a7:9e:58:63:b4:0b:e8:1c:11:15:c7:89:ee:c1:65:3a:8e:70: c8:fc:e5:20:8d:ba:bc:fa:b8:60:98:ba:51:b2:7f:f6:0f:7a: 7b:b5:d0:02:3b:bf:f7:5f:72:46:87:8d:63:4f:10:31:90:00: 30:69:98:a9:04:2c:ac:8d:3b:46:12:44:0a:9a:71:bc:fd:54: 5b:3a:a9:38:69:1f:3d:7d:11:52:5f:2c:f7:21:80:5d:e8:18: ff:93:84:a0:40:72:f8:00:94:e4:66:19:4f:94:cb:5f:8f:82: 3f:1b:e6:88:1f:47:e9:d8:7c:a3:53:e1:9b:db:dd:86:9a:3a: 1b:53:32:17:a8:60:d6:f9:b6:c7:47:56:fd:58:ff:17:01:f2: 41:84:4f:6b:07:23:9d:77:6a:80:8d:b9:19:91:6e:44:d5:94: 37:db:b8:4c:73:65:af:db:c4:6e:2b:3c:0b:4c:de:7a:07:78: bd:44:60:bb:59:ff:b4:2e:5e:31:1a:f9:93:7a:4d:a3:34:6f: da:32:28:0b:1f:21:1a:35:fc:38:d3:44:bc:a8:c0:01:47:58: dd:a1:4c:da:37:bc:78:97:b0:c9:45:68:d0:0c:c2:69:8a:e0: 0f:45:2d:b3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFA8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDExMTAw NzExNDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDFFRDIwMEJBOTUyM0M3 NDA2RUJGMDFBQkMxMkQ1MEVDNTQxMUEyNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEWhCE5rkrxUqNftpTPqupf/8yg5FukdHjAvgZUBurHZ0HbqG1 XTe0M8qOE5fD9KRMuc9cmw8NexFaTI7tkV07GPnDjZkyRvYqKvRPElqt9y9HyD+m 0FJ/Ym9/M9QJjYXq5iuTE7z4CTLwkyX+nTqaeAxColJIH+UXP/dap+SfQ4dNmz+f OMjY49XOQNP24WL9k0rxFM54u9UOU/7mcReuovOHu3pyEmXBHizZvIne5bTJHAwL gL6P6m6RHkz0w6G2mdrakZQwEZhAIKFtzzfU3gHp72D2ujpzkBNgO+hMkpEKs+P8 8Bq60z/CGyFZa/KXe6ssCx6d4KAzBfQnNYN7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUHtIAupUjx0BuvwGrwS1Q7FQRonMwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvSHRJQXVwVWp4MEJ1 dndHcndTMVE3RlFSb25NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfwDANBgkqhkiG9w0BAQsFAAOCAQEAHnwdV4WzSfBeuzjiroa9K7Ttp55Y Y7QL6BwRFceJ7sFlOo5wyPzlII26vPq4YJi6UbJ/9g96e7XQAju/919yRoeNY08Q MZAAMGmYqQQsrI07RhJECppxvP1UWzqpOGkfPX0RUl8s9yGAXegY/5OEoEBy+ACU 5GYZT5TLX4+CPxvmiB9H6dh8o1Phm9vdhpo6G1MyF6hg1vm2x0dW/Vj/FwHyQYRP awcjnXdqgI25GZFuRNWUN9u4THNlr9vEbis8C0zeegd4vURgu1n/tC5eMRr5k3pN ozRv2jIoCx8hGjX8ONNEvKjAAUdY3aFM2je8eJewyUVo0AzCaYrgD0Utsw== -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:10 2024 by rpki-client on console-ams.rpki-client.org