$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/9CIys0KmRBCm7sYZy8sSCaeZGGk.roa File: 9CIys0KmRBCm7sYZy8sSCaeZGGk.roa (raw, json) Hash identifier: 0+roc2AekaggKrCxaZufiMPypK2W00+KHNLCppKG41Y= Subject key identifier: F4:22:32:B3:42:A6:44:10:A6:EE:C6:19:CB:CB:12:09:A7:99:18:69 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1507 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/9CIys0KmRBCm7sYZy8sSCaeZGGk.roa Signing time: Mon 30 Dec 2024 04:21:09 +0000 ROA not before: Mon 30 Dec 2024 04:21:09 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 2914 IP address blocks: 180.223.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5383 (0x1507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Dec 30 04:21:09 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F42232B342A64410A6EEC619CBCB1209A7991869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:b2:25:1c:47:39:8e:75:87:97:a8:e8:20: 5a:25:8b:df:e2:d3:fd:20:7a:00:b1:91:af:57:92: 53:d7:cf:91:ae:da:01:5c:7b:76:9e:97:98:0b:3d: 97:9c:01:9d:98:e8:d2:df:d3:ce:04:d0:4b:0d:a9: b6:df:21:91:b6:a2:1b:80:6a:51:20:cc:02:2f:5a: 6a:80:e1:51:24:26:3a:d4:d2:62:75:22:e6:73:06: bf:87:f8:1e:a9:4d:89:9f:31:18:51:64:6c:1c:90: 47:e6:7e:4a:9c:9f:bb:4b:69:a6:d3:be:fd:38:a3: 17:84:fb:df:24:14:ec:38:ec:9a:db:48:09:47:54: 82:44:ef:04:1c:68:66:9d:1b:75:cd:56:4d:58:3a: 75:37:f7:2b:2e:d8:38:79:7c:91:2f:d5:27:55:d8: 3b:66:da:c1:bf:91:6f:1c:a7:4b:1f:f8:b7:e2:db: e1:81:85:b7:4a:8a:60:05:71:d2:4b:02:89:6a:8b: a1:fa:66:a8:f4:0e:1c:4c:b3:4d:f0:ac:60:c3:b9: b9:b5:26:9a:50:62:18:9a:6f:dc:07:ee:47:8d:fa: c2:4e:c3:b8:ac:bb:ba:19:62:8f:a1:d4:1d:d5:d9: f1:17:91:f7:96:c5:50:bf:5a:53:25:d2:f9:12:15: a6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:22:32:B3:42:A6:44:10:A6:EE:C6:19:CB:CB:12:09:A7:99:18:69 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/9CIys0KmRBCm7sYZy8sSCaeZGGk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.120.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:c7:c0:dc:e6:66:92:56:4f:78:82:ce:04:ff:da:7f:23:0e: 72:f2:f7:41:8a:bf:c1:23:de:5f:9d:cc:2d:86:02:d4:a7:d8: 1d:da:a1:e1:38:e7:82:7e:f8:89:8e:93:0e:70:f3:81:86:7d: 3f:1d:0c:76:bc:ec:9f:35:9e:d5:75:48:28:fc:ac:3a:99:ab: f9:ae:68:38:15:37:18:84:3b:cc:97:1c:d7:0f:e7:9c:e8:2d: ef:85:00:5b:78:74:b2:db:e0:4a:54:b1:28:c5:54:e2:55:d5: f4:5f:d7:b9:75:d6:65:4b:b6:33:48:64:bb:f4:a6:b9:e4:4f: 99:cc:30:96:3c:63:68:fa:53:0d:4f:c0:7a:a8:a4:43:51:88: 35:db:55:fc:80:77:86:00:e2:4d:3d:e0:5a:80:f6:d6:cf:c7: 84:85:c9:84:28:1c:a5:d5:2a:de:44:ec:69:0b:bf:4d:56:a6: 95:5e:64:34:68:5b:bb:da:14:61:8e:f1:63:75:d9:70:34:85: 64:47:86:42:d1:51:8f:a7:44:64:04:b9:69:55:59:cc:cf:81: 52:2e:fa:bd:e0:35:2c:ed:d4:76:19:8f:ce:b2:df:e1:93:f7: 51:91:9a:88:17:da:95:24:77:cc:59:86:a3:5e:2f:2a:63:16: 93:82:11:0a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDEyMzAw NDIxMDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEY0MjIzMkIzNDJBNjQ0 MTBBNkVFQzYxOUNCQ0IxMjA5QTc5OTE4NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+87IlHEc5jnWHl6joIFoli9/i0/0gegCxka9XklPXz5Gu2gFc e3ael5gLPZecAZ2Y6NLf084E0EsNqbbfIZG2ohuAalEgzAIvWmqA4VEkJjrU0mJ1 IuZzBr+H+B6pTYmfMRhRZGwckEfmfkqcn7tLaabTvv04oxeE+98kFOw47JrbSAlH VIJE7wQcaGadG3XNVk1YOnU39ysu2Dh5fJEv1SdV2Dtm2sG/kW8cp0sf+Lfi2+GB hbdKimAFcdJLAolqi6H6Zqj0DhxMs03wrGDDubm1JppQYhiab9wH7keN+sJOw7is u7oZYo+h1B3V2fEXkfeWxVC/WlMl0vkSFaaTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU9CIys0KmRBCm7sYZy8sSCaeZGGkwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvOUNJeXMwS21SQkNt N3NZWnk4c1NDYWVaR0drLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfeDANBgkqhkiG9w0BAQsFAAOCAQEAXMfA3OZmklZPeILOBP/afyMOcvL3 QYq/wSPeX53MLYYC1KfYHdqh4Tjngn74iY6TDnDzgYZ9Px0MdrzsnzWe1XVIKPys Opmr+a5oOBU3GIQ7zJcc1w/nnOgt74UAW3h0stvgSlSxKMVU4lXV9F/XuXXWZUu2 M0hku/SmueRPmcwwljxjaPpTDU/AeqikQ1GINdtV/IB3hgDiTT3gWoD21s/HhIXJ hCgcpdUq3kTsaQu/TVamlV5kNGhbu9oUYY7xY3XZcDSFZEeGQtFRj6dEZAS5aVVZ zM+BUi76veA1LO3UdhmPzrLf4ZP3UZGaiBfalSR3zFmGo14vKmMWk4IRCg== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net