$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/vaBNN8RhluZH-_Fm0JyXiIiCh_g.roa File: vaBNN8RhluZH-_Fm0JyXiIiCh_g.roa (raw, json) Hash identifier: oURSWZhRMdqLETIGkCOo2THyF2f7v/WwciofCyq5zKs= Subject key identifier: BD:A0:4D:37:C4:61:96:E6:47:FB:F1:66:D0:9C:97:88:88:82:87:F8 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 13D8 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/vaBNN8RhluZH-_Fm0JyXiIiCh_g.roa Signing time: Wed 30 Oct 2024 12:43:42 +0000 ROA not before: Wed 30 Oct 2024 12:43:42 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 984 IP address blocks: 180.223.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 06:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5080 (0x13d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Oct 30 12:43:42 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BDA04D37C46196E647FBF166D09C9788888287F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:21:ca:3e:fc:36:4f:11:24:04:1c:6a:3c:91: 62:c9:c3:1f:44:6f:95:ca:97:1b:a2:2f:9b:27:00: ed:35:e2:9b:27:64:4a:ac:34:d7:0d:97:53:29:ca: d1:52:80:31:e2:6f:bd:ed:b0:96:01:db:7c:a4:3b: 22:a3:88:26:8e:79:ac:61:b8:1b:e6:2f:76:37:5d: cf:6c:80:f3:ac:d0:fc:68:9d:ff:e8:d9:9b:0f:71: c4:c8:bc:7f:5f:05:e5:4a:66:cc:fa:19:b3:b4:82: c6:4e:bc:48:4f:8f:0f:d9:d8:b2:b7:7d:28:f6:56: 93:73:c0:a5:5c:50:5d:6b:c1:bf:ac:3d:16:48:9d: 8a:52:dd:b0:d4:07:ea:f1:89:a8:76:59:1b:da:8a: 59:a3:d5:d3:86:1e:37:1d:82:72:45:02:b4:16:ce: ed:ae:66:1d:df:43:1a:eb:dd:54:a8:36:1d:6b:d4: 27:ad:6c:23:10:26:ac:40:e1:c4:2d:56:8a:9c:9e: 1a:fe:d5:52:fe:b2:e1:fa:8d:19:cc:fe:30:90:1f: e3:c5:f5:68:b5:42:db:5b:9c:7c:f7:2a:fa:fb:fd: a8:0a:96:6c:78:5e:5a:4a:fc:76:e0:30:88:d3:b4: 43:c2:04:a2:77:4d:c2:31:85:0a:24:e0:fb:82:51: 90:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A0:4D:37:C4:61:96:E6:47:FB:F1:66:D0:9C:97:88:88:82:87:F8 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/vaBNN8RhluZH-_Fm0JyXiIiCh_g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.116.0/22 Signature Algorithm: sha256WithRSAEncryption 42:36:76:30:01:d6:78:2f:71:32:90:7b:44:f8:53:39:50:0d: c2:03:0c:bc:ea:eb:aa:7f:20:5e:dd:53:39:e1:be:10:fe:c3: 59:96:65:91:0b:c2:4e:25:33:d5:f7:88:cd:93:c9:74:90:0f: af:ff:1a:a4:4b:88:1d:d5:fd:65:6b:7a:22:d6:d2:73:d4:bf: 3d:14:4e:3b:c8:b3:b2:22:e9:e6:70:90:17:3e:58:5c:9a:34: b6:e6:3b:20:f7:ff:89:fa:f5:de:22:9d:1c:ca:0b:3a:fc:26: d6:0c:18:8c:fe:97:93:ae:4f:a9:fa:ef:a6:80:ad:e1:ab:96: 51:b0:b7:41:65:cb:97:2e:1c:a9:47:c2:07:b7:22:8c:71:fe: a7:c4:5f:50:55:6d:ce:b6:da:d6:2f:2f:35:23:10:68:95:7c: 00:b5:b7:0a:b8:b1:42:a9:dd:33:5e:3f:d3:46:12:9c:e7:37: 46:5d:1c:2d:74:bb:02:77:87:b9:58:63:76:78:31:5c:9c:64: 23:4b:55:6c:43:1e:8c:97:5b:16:5b:32:59:49:39:ab:01:97: 88:08:34:92:6a:98:11:77:57:94:2a:53:98:e2:40:54:39:51: a0:d7:78:c6:72:fd:1e:a8:4c:21:df:e1:50:23:de:18:e3:97: 14:e1:2f:70 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE9gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDEwMzAx MjQzNDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJEQTA0RDM3QzQ2MTk2 RTY0N0ZCRjE2NkQwOUM5Nzg4ODg4Mjg3RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbIco+/DZPESQEHGo8kWLJwx9Eb5XKlxuiL5snAO014psnZEqs NNcNl1MpytFSgDHib73tsJYB23ykOyKjiCaOeaxhuBvmL3Y3Xc9sgPOs0Pxonf/o 2ZsPccTIvH9fBeVKZsz6GbO0gsZOvEhPjw/Z2LK3fSj2VpNzwKVcUF1rwb+sPRZI nYpS3bDUB+rxiah2WRvailmj1dOGHjcdgnJFArQWzu2uZh3fQxrr3VSoNh1r1Cet bCMQJqxA4cQtVoqcnhr+1VL+suH6jRnM/jCQH+PF9Wi1QttbnHz3Kvr7/agKlmx4 XlpK/HbgMIjTtEPCBKJ3TcIxhQok4PuCUZDTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUvaBNN8RhluZH+/Fm0JyXiIiCh/gwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvdmFCTk44UmhsdVpI LV9GbTBKeVhpSWlDaF9nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfdDANBgkqhkiG9w0BAQsFAAOCAQEAQjZ2MAHWeC9xMpB7RPhTOVANwgMM vOrrqn8gXt1TOeG+EP7DWZZlkQvCTiUz1feIzZPJdJAPr/8apEuIHdX9ZWt6ItbS c9S/PRROO8izsiLp5nCQFz5YXJo0tuY7IPf/ifr13iKdHMoLOvwm1gwYjP6Xk65P qfrvpoCt4auWUbC3QWXLly4cqUfCB7cijHH+p8RfUFVtzrba1i8vNSMQaJV8ALW3 CrixQqndM14/00YSnOc3Rl0cLXS7AneHuVhjdngxXJxkI0tVbEMejJdbFlsyWUk5 qwGXiAg0kmqYEXdXlCpTmOJAVDlRoNd4xnL9HqhMId/hUCPeGOOXFOEvcA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:45 2024 by rpki-client on console-ams.rpki-client.org