$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/8_t58H2To8oNaVQN4cHX28mUULU.roa File: 8_t58H2To8oNaVQN4cHX28mUULU.roa (raw, json) Hash identifier: Qi1kZV8ERPG9jBgycFdVOgtZj8ZVGj9LcRBrzK6kidA= Subject key identifier: F3:FB:79:F0:7D:93:A3:CA:0D:69:54:0D:E1:C1:D7:DB:C9:94:50:B5 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1639 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/8_t58H2To8oNaVQN4cHX28mUULU.roa Signing time: Tue 18 Feb 2025 00:53:21 +0000 ROA not before: Tue 18 Feb 2025 00:53:21 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 398704 IP address blocks: 180.223.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5689 (0x1639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Feb 18 00:53:21 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F3FB79F07D93A3CA0D69540DE1C1D7DBC99450B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:20:17:c4:49:61:0c:b7:52:1c:36:99:70:ba: b4:84:83:7a:2c:48:66:27:0f:54:05:bd:4a:f5:70: bf:ee:97:f6:3f:3f:5b:8a:1b:40:71:91:81:55:8d: 5b:57:b1:d0:fd:55:72:f1:28:77:c7:c4:ca:70:59: 84:3b:dd:b1:8b:94:7a:8f:89:15:fb:bd:b5:d7:62: e8:75:72:6f:22:5a:d8:f7:83:1c:ba:8a:98:af:52: 29:2f:8d:56:ef:24:b2:d9:4d:43:ec:2a:19:97:51: ab:98:7e:12:e4:c7:5b:1d:68:0f:43:f9:98:28:ce: 7b:24:03:4e:3e:69:be:d7:20:a7:18:3e:93:2d:68: c9:e5:a4:f6:5b:53:e0:e7:cd:4b:92:3d:ce:7a:e6: 3f:b6:fa:25:87:9b:be:7e:cd:60:f8:1d:7a:db:3b: a8:1e:11:c9:a9:1d:2c:99:0a:96:50:cb:65:ae:c9: f3:b8:15:08:61:cb:be:c0:3b:d5:6b:ab:d0:cb:c0: de:b0:72:33:d7:98:18:64:24:95:7a:2b:4d:d7:43: ed:52:09:a3:aa:fa:3e:33:47:90:84:61:b5:75:e8: 9a:c2:fb:09:04:53:13:df:a8:70:96:33:4b:d8:fb: 31:62:49:5b:e7:dd:c8:84:4b:39:b8:b7:64:0a:e5: ec:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FB:79:F0:7D:93:A3:CA:0D:69:54:0D:E1:C1:D7:DB:C9:94:50:B5 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/8_t58H2To8oNaVQN4cHX28mUULU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.212.0/22 Signature Algorithm: sha256WithRSAEncryption 56:51:3b:47:78:e5:09:44:12:91:bb:b5:ee:ac:43:3c:21:9a: e2:03:12:f1:cc:ce:8b:de:4c:c5:ea:fc:e1:8f:02:59:a8:32: 75:1f:f8:ac:9b:ed:d5:20:e0:f3:95:fa:5f:3a:ab:a7:df:5d: 36:38:81:20:1a:84:78:6d:c4:70:95:dd:4a:5c:ec:b2:5c:8f: 58:21:63:7c:58:7a:42:32:9d:83:b0:2a:4d:a1:01:d8:1e:b1: ec:6e:29:a2:5b:d9:e9:ec:c4:c4:79:b6:9a:b9:03:0e:fe:fd: 7e:92:13:8f:0f:1f:6e:8c:55:f9:86:e3:8f:d2:da:9f:db:ac: 24:7b:fb:6f:b1:94:3a:19:5a:36:9a:b6:4b:6d:8c:06:54:d7: 43:b2:9d:a8:9b:1c:d2:81:fd:ce:91:42:bf:da:1d:f7:e2:08: d8:87:22:da:cc:d9:e5:67:64:83:86:9f:ff:4e:f9:52:9a:9b: 39:1c:b3:a4:22:67:05:26:6a:22:9d:18:a8:be:ad:89:5a:63: 1f:f5:24:4f:d1:44:7c:14:b5:b8:75:22:10:cb:e5:af:64:66: 28:d7:47:49:93:cf:8b:0a:57:3f:54:a4:48:af:48:a0:e0:09: d5:96:fe:f0:69:47:0f:a5:5e:92:02:db:a6:a1:96:42:f5:98: 72:e0:31:e7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMTgw MDUzMjFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEYzRkI3OUYwN0Q5M0Ez Q0EwRDY5NTQwREUxQzFEN0RCQzk5NDUwQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsIBfESWEMt1IcNplwurSEg3osSGYnD1QFvUr1cL/ul/Y/P1uK G0BxkYFVjVtXsdD9VXLxKHfHxMpwWYQ73bGLlHqPiRX7vbXXYuh1cm8iWtj3gxy6 ipivUikvjVbvJLLZTUPsKhmXUauYfhLkx1sdaA9D+ZgoznskA04+ab7XIKcYPpMt aMnlpPZbU+DnzUuSPc565j+2+iWHm75+zWD4HXrbO6geEcmpHSyZCpZQy2WuyfO4 FQhhy77AO9Vrq9DLwN6wcjPXmBhkJJV6K03XQ+1SCaOq+j4zR5CEYbV16JrC+wkE UxPfqHCWM0vY+zFiSVvn3ciESzm4t2QK5ez5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU8/t58H2To8oNaVQN4cHX28mUULUwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvOF90NThIMlRvOG9O YVZRTjRjSFgyOG1VVUxVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTf1DANBgkqhkiG9w0BAQsFAAOCAQEAVlE7R3jlCUQSkbu17qxDPCGa4gMS 8czOi95Mxer84Y8CWagydR/4rJvt1SDg85X6Xzqrp99dNjiBIBqEeG3EcJXdSlzs slyPWCFjfFh6QjKdg7AqTaEB2B6x7G4polvZ6ezExHm2mrkDDv79fpITjw8fboxV +Ybjj9Lan9usJHv7b7GUOhlaNpq2S22MBlTXQ7KdqJsc0oH9zpFCv9od9+II2Ici 2szZ5Wdkg4af/075UpqbORyzpCJnBSZqIp0YqL6tiVpjH/UkT9FEfBS1uHUiEMvl r2RmKNdHSZPPiwpXP1SkSK9IoOAJ1Zb+8GlHD6VekgLbpqGWQvWYcuAx5w== -----END CERTIFICATE-----Generated at Sun Apr 27 05:44:10 2025 by rpki-client on console.sobornost.net