$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/RPEfXc1dkjGqL9go8dr3KVCsF3g.roa File: RPEfXc1dkjGqL9go8dr3KVCsF3g.roa (raw, json) Hash identifier: ncMwdLHJzi//ZjYbMIieV+i4Cti3lba6NeGEFupHKFE= Subject key identifier: 44:F1:1F:5D:CD:5D:92:31:AA:2F:D8:28:F1:DA:F7:29:50:AC:17:78 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 0FAA Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/RPEfXc1dkjGqL9go8dr3KVCsF3g.roa Signing time: Wed 17 Apr 2024 08:17:23 +0000 ROA not before: Wed 17 Apr 2024 08:17:23 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 136897 IP address blocks: 180.223.112.0/21 maxlen: 24 180.223.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4010 (0xfaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Apr 17 08:17:23 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=44F11F5DCD5D9231AA2FD828F1DAF72950AC1778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:a5:1c:3c:7e:9e:c3:62:48:95:70:17:9c: 32:23:38:f1:52:12:ad:5b:d4:b9:9b:7e:8b:3f:48: 7f:b6:31:b6:22:8a:b7:e4:10:c1:8a:60:4c:f0:52: 74:72:f3:22:88:86:64:37:70:73:dd:9d:1f:c4:5b: 89:dc:c3:81:e0:95:d0:08:7c:3f:2f:47:6f:bf:5a: 3d:26:f3:da:37:01:d5:42:ce:96:a3:05:22:64:e6: 7d:c0:28:bf:cd:7a:ee:40:8a:80:68:2a:d3:e3:53: 4a:8c:d6:33:66:4b:db:11:91:ae:7e:d4:06:17:24: e5:37:d9:09:85:f2:75:1b:85:df:4f:3d:e3:6f:6f: a8:c3:de:72:dd:76:73:bb:37:cd:a5:39:9c:ac:16: e1:c5:99:02:40:ff:a3:e9:a8:d1:e4:af:a6:bf:88: 92:93:8c:f4:3b:4a:5d:5f:4c:ee:65:61:09:ad:4a: c8:ee:fb:be:e5:1f:d6:66:cd:4c:9c:7b:c1:26:d9: a6:1c:fd:6a:84:4d:b7:f4:a2:cc:b0:9d:01:ee:dc: 2d:be:0c:84:7f:90:a9:2f:81:cd:b4:39:94:e9:ab: 9d:4b:0a:ea:f7:5e:4a:2b:e9:71:fe:5c:ba:cc:d2: 9b:b9:a6:d2:0d:9f:e1:1a:15:e0:90:98:d3:d6:a2: d2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F1:1F:5D:CD:5D:92:31:AA:2F:D8:28:F1:DA:F7:29:50:AC:17:78 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/RPEfXc1dkjGqL9go8dr3KVCsF3g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.112.0/20 Signature Algorithm: sha256WithRSAEncryption 83:e6:ec:4c:bb:55:78:60:22:9b:ed:76:90:32:71:1f:e3:b0: e6:4e:d2:f6:a5:38:80:90:74:1b:a8:6d:15:a8:36:3e:5d:84: 19:a8:eb:b1:16:75:9c:76:58:6e:24:98:21:56:87:71:6c:ac: e5:f6:0e:c2:07:1d:9d:91:b2:b3:08:5a:aa:9c:ef:43:d1:d7: 47:99:ad:38:6a:30:48:df:f5:e2:96:9f:1a:99:61:47:99:4b: 7c:f0:c2:55:5d:c0:56:b5:dd:3d:c1:3f:8b:ad:c8:37:c6:a5: 1a:31:3e:13:f8:bb:78:7e:43:50:2d:44:eb:72:4e:e9:45:a5: 50:1b:e6:f8:01:a9:93:4d:dd:4d:b8:b1:ff:0f:f5:f2:7d:c1: 35:73:48:9a:32:a9:33:6b:f8:e0:3e:6d:25:b2:12:39:0f:47: e3:5e:9d:13:04:81:b3:ea:65:3b:f8:14:11:b7:27:4e:96:cf: 40:89:4d:ca:08:4e:75:b2:bf:d5:f8:b6:c2:05:3d:86:75:16: 0e:b3:f6:49:ed:10:73:04:6b:6a:01:ad:4f:26:b4:16:77:40: e4:a1:a1:64:56:43:68:2e:f2:94:b9:6e:5f:07:5b:14:c0:3b: 26:b4:0e:8a:29:38:42:06:95:e2:c1:24:2c:7e:35:3b:9e:5f: 41:c9:f2:a0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICD6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDA0MTcw ODE3MjNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ0RjExRjVEQ0Q1RDky MzFBQTJGRDgyOEYxREFGNzI5NTBBQzE3NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLlaUcPH6ew2JIlXAXnDIjOPFSEq1b1Lmbfos/SH+2MbYiirfk EMGKYEzwUnRy8yKIhmQ3cHPdnR/EW4ncw4HgldAIfD8vR2+/Wj0m89o3AdVCzpaj BSJk5n3AKL/Neu5AioBoKtPjU0qM1jNmS9sRka5+1AYXJOU32QmF8nUbhd9PPeNv b6jD3nLddnO7N82lOZysFuHFmQJA/6PpqNHkr6a/iJKTjPQ7Sl1fTO5lYQmtSsju +77lH9ZmzUyce8Em2aYc/WqETbf0osywnQHu3C2+DIR/kKkvgc20OZTpq51LCur3 Xkor6XH+XLrM0pu5ptINn+EaFeCQmNPWotJ3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQURPEfXc1dkjGqL9go8dr3KVCsF3gwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvUlBFZlhjMWRrakdx TDlnbzhkcjNLVkNzRjNnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBLTfcDANBgkqhkiG9w0BAQsFAAOCAQEAg+bsTLtVeGAim+12kDJxH+Ow5k7S 9qU4gJB0G6htFag2Pl2EGajrsRZ1nHZYbiSYIVaHcWys5fYOwgcdnZGyswhaqpzv Q9HXR5mtOGowSN/14pafGplhR5lLfPDCVV3AVrXdPcE/i63IN8alGjE+E/i7eH5D UC1E63JO6UWlUBvm+AGpk03dTbix/w/18n3BNXNImjKpM2v44D5tJbISOQ9H416d EwSBs+plO/gUEbcnTpbPQIlNyghOdbK/1fi2wgU9hnUWDrP2Se0QcwRragGtTya0 FndA5KGhZFZDaC7ylLluXwdbFMA7JrQOiik4QgaV4sEkLH41O55fQcnyoA== -----END CERTIFICATE-----Generated at Tue May 21 20:54:31 2024 by rpki-client on console-fra.rpki-client.org