$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/uzBgf9POeEEAYvYy8DB1i8c_2qQ.roa File: uzBgf9POeEEAYvYy8DB1i8c_2qQ.roa (raw, json) Hash identifier: NtkBnKMBAqw2hQDlFj/FO4l5MepGW6I8nTvHzkKoM6w= Subject key identifier: BB:30:60:7F:D3:CE:78:41:00:62:F6:32:F0:30:75:8B:C7:3F:DA:A4 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 13B4 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/uzBgf9POeEEAYvYy8DB1i8c_2qQ.roa Signing time: Thu 24 Oct 2024 12:23:41 +0000 ROA not before: Thu 24 Oct 2024 12:23:41 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 398704 IP address blocks: 180.223.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 10:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5044 (0x13b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Oct 24 12:23:41 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BB30607FD3CE78410062F632F030758BC73FDAA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:28:35:a5:77:49:f3:23:71:f2:3c:69:1e: 27:ad:eb:6c:b6:d6:12:e8:2d:05:c2:2b:cc:b2:cc: af:d2:a5:c1:b6:bb:8c:1e:bd:e5:10:fe:e2:5e:56: 86:ef:2d:2f:64:f0:66:76:d1:a6:23:4e:15:c3:0e: c0:d9:9f:33:10:e2:3a:0b:5c:e7:4d:2b:4f:01:bd: 30:6e:0d:a0:fd:0c:e7:48:97:b4:7f:be:4e:05:af: 9c:62:c2:4c:f7:79:23:51:1d:04:a5:dc:51:a5:73: e0:34:bc:b6:ac:0b:02:e0:54:b5:5f:64:a5:3e:b7: fc:7e:74:ed:11:f6:de:40:61:86:26:20:51:68:6f: f1:79:ea:7b:d1:c0:d3:c2:72:26:18:75:b1:58:6f: ab:29:5c:27:b3:36:00:2d:9b:12:e8:ad:9d:fb:fb: 53:4f:74:a3:e6:79:0c:14:43:6d:82:bd:92:97:e8: e7:ca:73:57:b5:07:7c:b0:37:e1:cf:e0:58:32:66: 22:01:06:3c:7a:f9:01:be:2e:cb:ab:56:85:b0:4d: dc:82:68:5b:94:e1:ed:93:dc:77:d0:55:2a:bb:d2: 43:59:58:d4:b6:0c:3e:03:f7:df:76:8e:38:e7:4b: 86:c8:7f:c0:a2:76:50:09:1f:93:78:cd:9d:72:e7: 0e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:30:60:7F:D3:CE:78:41:00:62:F6:32:F0:30:75:8B:C7:3F:DA:A4 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/uzBgf9POeEEAYvYy8DB1i8c_2qQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.204.0/22 Signature Algorithm: sha256WithRSAEncryption 07:f4:68:99:52:7e:70:5f:86:2e:59:b9:fb:a7:cd:10:97:e2: 37:36:9e:62:16:49:f8:41:5a:10:05:48:c8:78:f3:51:28:a8: 58:d7:a0:bb:1d:ce:5a:9e:71:30:4e:6e:54:44:46:ca:ea:48: cd:44:53:0c:ab:ae:22:de:d3:32:6d:ea:1f:4e:eb:0e:fb:a6: 14:4f:4c:9f:a1:38:89:70:85:ac:e5:eb:93:10:27:d7:79:c3: c5:d3:48:0a:03:d8:22:ce:70:58:4c:7d:38:49:40:d0:6e:d2: 4b:6f:52:87:b3:84:04:1e:18:71:57:88:a8:ab:49:db:46:f0: 42:88:7d:3d:0d:d6:b3:bf:dd:10:fd:31:52:5c:ec:e3:05:46: a8:66:ec:b0:6c:3c:b6:e1:d2:31:e8:6b:04:8b:e2:ea:d9:e5: 02:08:d0:0f:94:03:17:6d:2c:a9:31:6e:de:77:e0:82:9e:44: 40:8e:4a:96:c2:38:d6:96:8c:97:a0:7e:a2:06:43:9b:6c:95: 06:95:4a:ee:91:aa:03:70:da:4c:6f:68:05:d7:b3:b2:55:72: c0:d9:7b:cb:07:2c:07:72:4b:83:79:bd:58:53:1a:de:f7:22: e4:87:3d:39:ab:80:c7:75:5a:f0:d9:45:5a:20:88:80:6c:7c: 0d:38:34:21 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE7QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDEwMjQx MjIzNDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJCMzA2MDdGRDNDRTc4 NDEwMDYyRjYzMkYwMzA3NThCQzczRkRBQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKMSg1pXdJ8yNx8jxpHiet62y21hLoLQXCK8yyzK/SpcG2u4we veUQ/uJeVobvLS9k8GZ20aYjThXDDsDZnzMQ4joLXOdNK08BvTBuDaD9DOdIl7R/ vk4Fr5xiwkz3eSNRHQSl3FGlc+A0vLasCwLgVLVfZKU+t/x+dO0R9t5AYYYmIFFo b/F56nvRwNPCciYYdbFYb6spXCezNgAtmxLorZ37+1NPdKPmeQwUQ22CvZKX6OfK c1e1B3ywN+HP4FgyZiIBBjx6+QG+LsurVoWwTdyCaFuU4e2T3HfQVSq70kNZWNS2 DD4D9992jjjnS4bIf8CidlAJH5N4zZ1y5w4rAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUuzBgf9POeEEAYvYy8DB1i8c/2qQwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvdXpCZ2Y5UE9lRUVB WXZZeThEQjFpOGNfMnFRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfzDANBgkqhkiG9w0BAQsFAAOCAQEAB/RomVJ+cF+GLlm5+6fNEJfiNzae YhZJ+EFaEAVIyHjzUSioWNegux3OWp5xME5uVERGyupIzURTDKuuIt7TMm3qH07r DvumFE9Mn6E4iXCFrOXrkxAn13nDxdNICgPYIs5wWEx9OElA0G7SS29Sh7OEBB4Y cVeIqKtJ20bwQoh9PQ3Ws7/dEP0xUlzs4wVGqGbssGw8tuHSMehrBIvi6tnlAgjQ D5QDF20sqTFu3nfggp5EQI5KlsI41paMl6B+ogZDm2yVBpVK7pGqA3DaTG9oBdez slVywNl7ywcsB3JLg3m9WFMa3vci5Ic9OauAx3Va8NlFWiCIgGx8DTg0IQ== -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:11 2024 by rpki-client on console-ams.rpki-client.org