$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/TWtbOHnaovi5XpUvR4PMcRhrcZQ.roa File: TWtbOHnaovi5XpUvR4PMcRhrcZQ.roa (raw, json) Hash identifier: V0gnpYmwSriCHLqlN0HvH1B18ydk3UXfnltxJ8eb8Do= Subject key identifier: 4D:6B:5B:38:79:DA:A2:F8:B9:5E:95:2F:47:83:CC:71:18:6B:71:94 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1247 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/TWtbOHnaovi5XpUvR4PMcRhrcZQ.roa Signing time: Tue 20 Aug 2024 12:56:43 +0000 ROA not before: Tue 20 Aug 2024 12:56:43 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 7018 IP address blocks: 180.223.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 03:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4679 (0x1247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Aug 20 12:56:43 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=4D6B5B3879DAA2F8B95E952F4783CC71186B7194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:90:d6:90:35:00:d2:d1:d4:35:6e:9c:78: d7:e4:db:71:06:16:e2:20:62:4e:07:0a:82:b1:6f: fa:69:9d:29:b1:d9:e2:59:e9:dc:76:d8:8e:0a:4b: e5:25:1f:60:e1:fb:ab:79:ff:1f:b1:ab:03:5e:6c: 4d:66:67:42:97:4d:c2:3d:59:e1:35:6f:38:f1:2e: 59:1f:3c:81:d4:f1:bb:27:0b:04:9d:fc:ca:0a:ca: c3:54:3b:1e:3f:c4:71:23:0e:31:81:f1:e5:c0:8e: 2f:04:9e:1b:45:60:76:28:01:01:72:b2:3d:cd:5a: 28:db:1d:c1:07:c9:fa:54:0a:af:b2:6e:3b:37:f5: 42:fd:6e:1f:49:03:e8:74:c6:82:bf:33:b8:2b:d6: 74:bb:bf:a7:59:62:90:37:24:5b:31:8b:17:fe:9c: 9f:58:19:e8:6e:1b:f0:73:83:86:df:db:19:57:de: 67:2f:21:a4:bc:6f:ee:b4:d6:62:b1:9c:42:67:0d: 68:50:2e:09:35:08:b1:e6:e3:41:4c:d1:2c:90:a6: 9e:a0:98:a4:d3:c1:06:1f:d7:c1:52:f1:19:8a:eb: 21:6d:b9:8c:a2:5c:10:a6:66:9b:bc:ac:19:51:22: 94:8e:93:46:2c:08:de:c0:e7:69:d8:4c:6d:66:e8: a6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6B:5B:38:79:DA:A2:F8:B9:5E:95:2F:47:83:CC:71:18:6B:71:94 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/TWtbOHnaovi5XpUvR4PMcRhrcZQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.80.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:fe:ec:72:48:72:28:8c:84:17:aa:12:50:5b:40:20:86:96: fe:a1:89:82:56:96:9e:cf:c0:eb:0a:2f:26:c1:c7:50:90:72: 07:43:13:c9:db:88:4b:74:7c:57:35:ba:db:03:c0:d7:d1:f8: 23:c1:2e:68:0e:63:9e:44:fe:37:91:99:42:57:36:53:18:64: 68:51:c4:2f:cb:41:74:78:3e:d0:ea:65:e1:9e:44:47:01:83: 84:66:80:ca:bd:a8:14:8f:64:5a:0f:78:3c:9c:df:03:e4:e8: 36:c7:16:ce:61:df:6b:5e:15:65:fa:47:94:bb:70:5b:cc:c7: 58:55:e8:7a:78:bc:81:d4:4e:41:7c:53:64:ac:f5:8f:1e:4d: 57:7c:12:c2:63:54:a4:b7:3a:ed:77:3a:a0:bf:3e:75:16:fc: 47:57:da:c9:e3:49:34:2c:76:c3:4b:b7:b5:93:d7:c5:a7:65: 68:45:b3:c7:09:da:1b:88:9c:d3:86:84:98:8f:8c:3f:09:19: fa:ba:5f:5b:63:5f:65:e7:b0:cb:00:ad:a6:6c:2b:15:00:6b: 45:7d:be:7b:5b:07:83:c0:4b:10:52:c5:b2:ec:cc:04:65:28: 9b:47:46:98:99:17:df:f5:01:50:d3:b4:34:3c:ec:74:6b:de: ac:73:55:39 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDA4MjAx MjU2NDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDRENkI1QjM4NzlEQUEy RjhCOTVFOTUyRjQ3ODNDQzcxMTg2QjcxOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiZZDWkDUA0tHUNW6ceNfk23EGFuIgYk4HCoKxb/ppnSmx2eJZ 6dx22I4KS+UlH2Dh+6t5/x+xqwNebE1mZ0KXTcI9WeE1bzjxLlkfPIHU8bsnCwSd /MoKysNUOx4/xHEjDjGB8eXAji8EnhtFYHYoAQFysj3NWijbHcEHyfpUCq+ybjs3 9UL9bh9JA+h0xoK/M7gr1nS7v6dZYpA3JFsxixf+nJ9YGehuG/Bzg4bf2xlX3mcv IaS8b+601mKxnEJnDWhQLgk1CLHm40FM0SyQpp6gmKTTwQYf18FS8RmK6yFtuYyi XBCmZpu8rBlRIpSOk0YsCN7A52nYTG1m6KbBAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUTWtbOHnaovi5XpUvR4PMcRhrcZQwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvVFd0Yk9IbmFvdmk1 WHBVdlI0UE1jUmhyY1pRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfUDANBgkqhkiG9w0BAQsFAAOCAQEAPP7sckhyKIyEF6oSUFtAIIaW/qGJ glaWns/A6wovJsHHUJByB0MTyduIS3R8VzW62wPA19H4I8EuaA5jnkT+N5GZQlc2 UxhkaFHEL8tBdHg+0Opl4Z5ERwGDhGaAyr2oFI9kWg94PJzfA+ToNscWzmHfa14V ZfpHlLtwW8zHWFXoeni8gdROQXxTZKz1jx5NV3wSwmNUpLc67Xc6oL8+dRb8R1fa yeNJNCx2w0u3tZPXxadlaEWzxwnaG4ic04aEmI+MPwkZ+rpfW2NfZeewywCtpmwr FQBrRX2+e1sHg8BLEFLFsuzMBGUom0dGmJkX3/UBUNO0NDzsdGverHNVOQ== -----END CERTIFICATE-----Generated at Mon Nov 25 01:28:32 2024 by rpki-client on console-ams.rpki-client.org