$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/U4tECBVY0YH05JAeaOiWPC4eXWQ.roa File: U4tECBVY0YH05JAeaOiWPC4eXWQ.roa (raw, json) Hash identifier: xF9dkMK9CE5zZdxQIVxOfOAxVQI9tUzdQu3w2tYyTYs= Subject key identifier: 53:8B:44:08:15:58:D1:81:F4:E4:90:1E:68:E8:96:3C:2E:1E:5D:64 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1615 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/U4tECBVY0YH05JAeaOiWPC4eXWQ.roa Signing time: Sun 16 Feb 2025 03:24:09 +0000 ROA not before: Sun 16 Feb 2025 03:24:09 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 18811 IP address blocks: 180.223.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5653 (0x1615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Feb 16 03:24:09 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=538B44081558D181F4E4901E68E8963C2E1E5D64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:84:ae:3d:48:a7:fd:e1:95:3a:0d:23:24:9e: 47:8a:3d:fa:b9:89:73:2a:00:79:6d:6e:92:84:45: 83:72:fc:f4:54:f0:50:df:7c:b5:03:a8:64:20:75: c1:ce:04:4a:0c:05:e4:52:65:d3:40:d4:45:dc:39: 1e:fe:4a:51:e4:4c:fc:7c:4e:11:07:0e:1c:32:ac: a0:c2:79:52:f1:aa:ad:4d:d6:ce:3a:06:78:5c:0c: d8:32:cf:99:5c:31:60:3b:f8:c7:2c:bf:6b:13:69: 06:5a:fc:e9:79:8b:a8:ca:4e:2b:86:c4:75:3f:7d: 72:b2:37:56:ec:22:c9:87:ec:b9:8a:fb:a2:41:00: 7f:b2:3e:bf:2e:8b:9d:ee:5f:9c:3d:02:d7:cb:93: a1:56:6c:5d:74:90:04:39:9e:ec:ba:35:05:33:6e: ed:ca:58:df:0b:fd:82:43:59:ae:1b:d5:8e:1f:14: de:80:a0:bf:3e:a5:99:bb:4c:67:c7:ca:78:76:f7: 88:7b:fa:3e:80:4c:e5:34:f9:f6:55:0a:4d:52:93: 7c:65:9c:54:dc:59:b5:54:c5:58:c9:f4:e1:60:d5: 22:ba:1b:ac:72:79:ed:d8:a6:38:eb:5a:c1:67:02: 11:1e:3d:a1:9d:e1:8f:ed:65:78:f6:a2:bb:64:f0: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8B:44:08:15:58:D1:81:F4:E4:90:1E:68:E8:96:3C:2E:1E:5D:64 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/U4tECBVY0YH05JAeaOiWPC4eXWQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.212.0/22 Signature Algorithm: sha256WithRSAEncryption d5:e1:96:18:05:9b:dd:ca:23:be:4a:e2:a1:95:c6:e9:d2:6a: 8a:ad:b9:6d:50:4b:11:d0:1d:b7:cb:cb:23:f1:2e:7a:4e:dd: ff:a8:a1:8e:ba:7d:f2:4f:3b:4e:8a:2e:c1:d6:a3:05:1f:27: a5:74:30:18:6b:7c:24:73:07:5e:6e:9a:54:9b:a7:2e:3c:1f: e8:b0:d8:79:81:96:75:fc:a1:89:25:05:44:a5:2b:38:a1:11: 4c:9d:81:5d:ca:14:77:5a:58:88:f1:3c:1f:b9:48:c9:20:9c: b4:ee:ea:3c:fc:7b:ff:ac:28:3e:1e:30:f2:2e:55:06:ff:ee: b5:ad:0f:de:9e:ee:28:7d:c3:d7:e8:ab:1a:f3:d9:4b:b7:e9: cb:4f:95:63:e0:c4:ca:35:d1:3b:69:72:1d:d0:23:10:79:fa: 6d:5c:0f:9c:61:cf:34:17:1c:3e:cc:57:ba:a9:05:63:7e:14: b4:95:e5:b0:b7:40:3b:ee:09:e7:2a:46:2d:9c:14:fc:8b:e5: ea:c9:f4:3b:47:c3:b4:11:01:bf:3c:ab:cc:ad:dd:64:7c:18: 6c:36:88:60:56:b8:55:63:2c:23:ce:70:6d:83:38:d3:b7:64: d6:c0:32:03:6b:59:e1:fa:ff:bf:8a:e0:48:17:6e:5a:f7:a4: f8:51:2d:ac -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFhUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMTYw MzI0MDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDUzOEI0NDA4MTU1OEQx ODFGNEU0OTAxRTY4RTg5NjNDMkUxRTVENjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDThK49SKf94ZU6DSMknkeKPfq5iXMqAHltbpKERYNy/PRU8FDf fLUDqGQgdcHOBEoMBeRSZdNA1EXcOR7+SlHkTPx8ThEHDhwyrKDCeVLxqq1N1s46 BnhcDNgyz5lcMWA7+Mcsv2sTaQZa/Ol5i6jKTiuGxHU/fXKyN1bsIsmH7LmK+6JB AH+yPr8ui53uX5w9AtfLk6FWbF10kAQ5nuy6NQUzbu3KWN8L/YJDWa4b1Y4fFN6A oL8+pZm7TGfHynh294h7+j6ATOU0+fZVCk1Sk3xlnFTcWbVUxVjJ9OFg1SK6G6xy ee3YpjjrWsFnAhEePaGd4Y/tZXj2ortk8DUdAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUU4tECBVY0YH05JAeaOiWPC4eXWQwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvVTR0RUNCVlkwWUgw NUpBZWFPaVdQQzRlWFdRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTf1DANBgkqhkiG9w0BAQsFAAOCAQEA1eGWGAWb3cojvkrioZXG6dJqiq25 bVBLEdAdt8vLI/Euek7d/6ihjrp98k87ToouwdajBR8npXQwGGt8JHMHXm6aVJun Ljwf6LDYeYGWdfyhiSUFRKUrOKERTJ2BXcoUd1pYiPE8H7lIySCctO7qPPx7/6wo Ph4w8i5VBv/uta0P3p7uKH3D1+irGvPZS7fpy0+VY+DEyjXRO2lyHdAjEHn6bVwP nGHPNBccPsxXuqkFY34UtJXlsLdAO+4J5ypGLZwU/Ivl6sn0O0fDtBEBvzyrzK3d ZHwYbDaIYFa4VWMsI85wbYM407dk1sAyA2tZ4fr/v4rgSBduWvek+FEtrA== -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:31 2025 by rpki-client