$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/Zyp-lEzyX6rJXI4OObT2w32M8TE.roa File: Zyp-lEzyX6rJXI4OObT2w32M8TE.roa (raw, json) Hash identifier: ocXHDzvEHjVALhZ/wkceMWddNnpnFozl5D4EBuN1NFA= Subject key identifier: 67:2A:7E:94:4C:F2:5F:AA:C9:5C:8E:0E:39:B4:F6:C3:7D:8C:F1:31 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1240 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Zyp-lEzyX6rJXI4OObT2w32M8TE.roa Signing time: Tue 20 Aug 2024 12:56:41 +0000 ROA not before: Tue 20 Aug 2024 12:56:41 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 7018 IP address blocks: 180.223.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 03:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4672 (0x1240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Aug 20 12:56:41 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=672A7E944CF25FAAC95C8E0E39B4F6C37D8CF131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c6:2e:7f:b2:70:39:97:74:ac:6d:fa:b4:fb: 4d:66:66:73:9c:4d:fe:10:49:e1:81:03:0c:57:f1: 03:27:25:db:37:45:5a:2a:4b:c4:ae:b7:04:35:d7: c8:f8:1d:34:89:cc:21:bf:95:fa:89:7e:93:a8:45: 7e:00:21:2b:43:09:8a:f4:34:ea:1c:0e:9c:6a:cb: d7:ba:cc:59:4b:6f:25:15:8a:08:4e:5b:00:2e:3a: 6c:27:d9:28:7c:01:ca:a2:90:b3:8f:ee:96:7e:44: de:0f:7d:8d:08:f2:fa:b6:ad:8f:9f:19:7d:d9:83: 6a:ef:54:02:94:8d:43:a6:cb:f5:39:07:32:62:53: e3:7c:55:9e:cc:30:93:f9:23:57:91:90:bf:65:61: 31:9f:b1:4b:2d:6d:c9:6f:1d:00:02:ea:62:42:32: a2:26:00:1a:03:d6:02:68:ea:db:55:c8:80:cd:09: e2:f1:c4:6e:e8:ab:cf:6c:a8:aa:50:26:20:b3:c1: d2:e5:63:5d:fd:34:07:0e:ec:39:97:a8:76:74:c0: 69:7c:f8:25:e6:f5:db:17:79:97:88:9e:9d:9e:05: 95:f3:75:67:5b:42:8b:e3:2a:53:5f:26:46:de:f8: ef:0d:56:13:88:38:03:1d:c5:68:e5:af:07:ec:7d: 8c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2A:7E:94:4C:F2:5F:AA:C9:5C:8E:0E:39:B4:F6:C3:7D:8C:F1:31 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Zyp-lEzyX6rJXI4OObT2w32M8TE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.96.0/22 Signature Algorithm: sha256WithRSAEncryption 58:15:d3:96:19:aa:e4:04:2e:e5:5c:73:61:5f:0d:30:97:c8: 95:71:af:af:c6:1f:69:59:7d:09:5a:01:44:40:56:bf:68:b9: 0a:89:2a:ec:fb:8b:51:4e:9b:56:47:f9:96:f9:f2:f8:de:d9: 28:b1:3b:2b:8e:3c:77:4e:ff:e7:60:44:a0:d1:d2:c6:cd:3c: 9a:8e:05:34:1d:06:3e:12:68:0e:3a:7e:07:ea:64:ca:5c:05: d3:8c:8d:3c:0b:6d:c5:d8:f4:70:f5:a5:58:4d:86:c3:f9:de: 36:7d:8b:39:92:ef:6e:7d:43:01:03:10:2d:b1:fd:c7:e9:cb: 36:69:da:36:89:bf:41:f6:8b:ae:0e:b2:f3:6b:6e:19:04:de: f0:61:9f:58:ce:3d:91:af:15:99:b3:df:aa:81:04:d9:b3:fc: 08:c1:23:d8:47:7a:4c:c4:f9:1f:5f:bb:0a:7c:c3:35:76:ad: 1e:3e:97:c7:c6:5d:bf:d3:fd:bc:21:d6:f7:6c:1e:19:a1:24: 40:22:26:bd:0f:ef:dd:09:c7:09:1a:9e:e2:dc:35:21:25:9c: 2c:9b:b6:c9:5b:3d:c1:04:b2:24:bc:fa:fa:86:f8:cd:d0:72: e0:4a:8a:e6:41:3c:49:16:32:8e:ef:55:f7:97:f5:c9:9b:50: fe:79:d7:29 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDA4MjAx MjU2NDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY3MkE3RTk0NENGMjVG QUFDOTVDOEUwRTM5QjRGNkMzN0Q4Q0YxMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSxi5/snA5l3Ssbfq0+01mZnOcTf4QSeGBAwxX8QMnJds3RVoq S8SutwQ118j4HTSJzCG/lfqJfpOoRX4AIStDCYr0NOocDpxqy9e6zFlLbyUVighO WwAuOmwn2Sh8AcqikLOP7pZ+RN4PfY0I8vq2rY+fGX3Zg2rvVAKUjUOmy/U5BzJi U+N8VZ7MMJP5I1eRkL9lYTGfsUstbclvHQAC6mJCMqImABoD1gJo6ttVyIDNCeLx xG7oq89sqKpQJiCzwdLlY139NAcO7DmXqHZ0wGl8+CXm9dsXeZeInp2eBZXzdWdb QovjKlNfJkbe+O8NVhOIOAMdxWjlrwfsfYwtAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUZyp+lEzyX6rJXI4OObT2w32M8TEwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvWnlwLWxFenlYNnJK WEk0T09iVDJ3MzJNOFRFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfYDANBgkqhkiG9w0BAQsFAAOCAQEAWBXTlhmq5AQu5VxzYV8NMJfIlXGv r8YfaVl9CVoBREBWv2i5Cokq7PuLUU6bVkf5lvny+N7ZKLE7K448d07/52BEoNHS xs08mo4FNB0GPhJoDjp+B+pkylwF04yNPAttxdj0cPWlWE2Gw/neNn2LOZLvbn1D AQMQLbH9x+nLNmnaNom/QfaLrg6y82tuGQTe8GGfWM49ka8VmbPfqoEE2bP8CMEj 2Ed6TMT5H1+7CnzDNXatHj6Xx8Zdv9P9vCHW92weGaEkQCImvQ/v3QnHCRqe4tw1 ISWcLJu2yVs9wQSyJLz6+ob4zdBy4EqK5kE8SRYyju9V95f1yZtQ/nnXKQ== -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:21 2024 by rpki-client on console-fra.rpki-client.org