$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/kOfg6CMy5yxcC4i_SEMMPux55wY.roa File: kOfg6CMy5yxcC4i_SEMMPux55wY.roa (raw, json) Hash identifier: 5oQSr0+YNjZk2GrVJ6TCQ9gX5gakv0/xfXYDjuPcp4A= Subject key identifier: 90:E7:E0:E8:23:32:E7:2C:5C:0B:88:BF:48:43:0C:3E:EC:79:E7:06 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 124A Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/kOfg6CMy5yxcC4i_SEMMPux55wY.roa Signing time: Tue 20 Aug 2024 12:56:44 +0000 ROA not before: Tue 20 Aug 2024 12:56:44 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 398704 IP address blocks: 180.223.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4682 (0x124a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Aug 20 12:56:44 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=90E7E0E82332E72C5C0B88BF48430C3EEC79E706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:94:0d:20:17:51:2d:f6:9d:f7:c9:b3:2d:17: 63:82:9c:0a:1f:7f:9f:10:3f:0f:79:18:f9:cc:75: 89:06:cd:28:db:b3:77:16:bd:c8:c7:a8:c3:41:c6: 3c:41:73:e5:a5:18:27:9d:b1:9e:70:5d:48:7c:f4: 13:9b:cc:2d:c4:19:26:47:5d:4b:c0:50:da:77:74: 4d:2a:f9:b1:71:2f:bb:79:be:82:61:7e:ed:ff:58: bb:ee:d1:59:ff:1e:6a:7a:e2:e1:d1:60:a9:85:39: 38:b6:32:de:f2:95:20:c7:4b:5f:f9:ef:7d:04:2d: 02:74:ce:3e:25:6c:ef:61:09:45:2e:a3:e7:c7:04: 4a:e5:b9:41:2e:cd:b3:d5:4c:37:72:d1:b2:91:13: c7:de:af:a7:71:76:ca:04:3b:dc:e7:14:4e:1d:da: 87:0b:85:2b:6d:36:3d:9a:70:f7:1d:47:7e:52:8d: 5f:7f:62:a4:84:93:36:e0:fd:ed:46:93:6c:16:a1: a8:ba:bf:7c:4d:2e:83:62:ce:ba:12:48:b8:09:cb: 56:ab:19:a2:f3:84:59:6b:fc:0c:36:13:be:7a:cb: d8:54:ba:3b:b6:f6:b7:56:b3:e0:80:28:30:d1:f3: d7:52:00:e9:8f:7f:70:25:7a:18:35:58:95:45:60: 8a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E7:E0:E8:23:32:E7:2C:5C:0B:88:BF:48:43:0C:3E:EC:79:E7:06 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/kOfg6CMy5yxcC4i_SEMMPux55wY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.112.0/21 Signature Algorithm: sha256WithRSAEncryption a7:64:8a:44:ad:09:ba:19:8a:cc:c5:a6:d1:5d:5f:db:70:56: 90:dd:5a:e9:e8:fd:b4:98:0a:8b:83:09:1a:2a:2e:f7:da:5a: da:0a:b6:05:85:cf:1e:53:4e:4b:a8:65:6d:3f:1d:63:02:f5: a7:06:97:24:29:1c:b3:86:89:62:2f:2c:0c:0b:03:a2:3d:f3: ac:74:99:12:b7:8c:01:43:74:6f:64:bf:e3:1f:67:7a:4c:0e: 0f:11:01:6d:8f:9f:1e:7d:a9:ec:1e:3c:49:09:47:80:16:ff: 68:52:81:68:fd:b0:0c:51:7c:ff:ab:80:97:ca:0a:01:da:fb: f9:00:05:4b:ff:f0:a9:5e:76:c5:8b:e7:a9:16:f7:7d:e9:fa: 12:df:da:f8:1c:e5:72:62:71:6a:8d:bb:51:a8:1d:d8:66:10: 80:3f:05:55:f3:e2:1b:a2:00:c1:a2:d5:24:1e:24:f8:29:12: 6b:55:be:79:ba:6c:e2:3a:3f:a0:2a:c0:b8:90:d0:bf:98:16: f2:34:4e:e7:b4:66:9d:b1:8a:e0:da:bc:31:9b:17:4f:e1:9b: a6:e9:7f:69:ae:4c:ce:99:4d:7e:15:f7:81:66:bb:af:24:1f: 0c:f0:41:fa:cc:c7:fc:ab:2b:29:df:a8:a8:aa:ed:4d:b4:a7: 53:51:c5:1f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEkowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDA4MjAx MjU2NDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDkwRTdFMEU4MjMzMkU3 MkM1QzBCODhCRjQ4NDMwQzNFRUM3OUU3MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDplA0gF1Et9p33ybMtF2OCnAoff58QPw95GPnMdYkGzSjbs3cW vcjHqMNBxjxBc+WlGCedsZ5wXUh89BObzC3EGSZHXUvAUNp3dE0q+bFxL7t5voJh fu3/WLvu0Vn/Hmp64uHRYKmFOTi2Mt7ylSDHS1/5730ELQJ0zj4lbO9hCUUuo+fH BErluUEuzbPVTDdy0bKRE8fer6dxdsoEO9znFE4d2ocLhSttNj2acPcdR35SjV9/ YqSEkzbg/e1Gk2wWoai6v3xNLoNizroSSLgJy1arGaLzhFlr/Aw2E756y9hUuju2 9rdWs+CAKDDR89dSAOmPf3Alehg1WJVFYIqfAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUkOfg6CMy5yxcC4i/SEMMPux55wYwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAva09mZzZDTXk1eXhj QzRpX1NFTU1QdXg1NXdZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfcDANBgkqhkiG9w0BAQsFAAOCAQEAp2SKRK0JuhmKzMWm0V1f23BWkN1a 6ej9tJgKi4MJGiou99pa2gq2BYXPHlNOS6hlbT8dYwL1pwaXJCkcs4aJYi8sDAsD oj3zrHSZEreMAUN0b2S/4x9nekwODxEBbY+fHn2p7B48SQlHgBb/aFKBaP2wDFF8 /6uAl8oKAdr7+QAFS//wqV52xYvnqRb3fen6Et/a+BzlcmJxao27Uagd2GYQgD8F VfPiG6IAwaLVJB4k+CkSa1W+ebps4jo/oCrAuJDQv5gW8jRO57RmnbGK4Nq8MZsX T+Gbpul/aa5MzplNfhX3gWa7ryQfDPBB+szH/KsrKd+oqKrtTbSnU1HFHw== -----END CERTIFICATE-----Generated at Fri Nov 22 09:32:44 2024 by rpki-client on console-fra.rpki-client.org