$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/Bnsgwz0NrWnuMZnGKxUarfEV3Cc.roa File: Bnsgwz0NrWnuMZnGKxUarfEV3Cc.roa (raw, json) Hash identifier: o3HCIULYJAKhN91DPxFcvye3T9hhBAkNXS1KCPNs9mQ= Subject key identifier: 06:7B:20:C3:3D:0D:AD:69:EE:31:99:C6:2B:15:1A:AD:F1:15:DC:27 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1568 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Bnsgwz0NrWnuMZnGKxUarfEV3Cc.roa Signing time: Fri 17 Jan 2025 01:27:42 +0000 ROA not before: Fri 17 Jan 2025 01:27:42 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 7018 IP address blocks: 180.223.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5480 (0x1568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jan 17 01:27:42 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=067B20C33D0DAD69EE3199C62B151AADF115DC27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:24:9e:8d:74:8c:3d:e3:2f:60:bc:ab:b0: d5:28:78:02:ef:5d:d7:47:cb:48:5e:74:b8:ef:6c: dd:f6:49:9b:2f:37:d7:5d:ac:72:25:89:6e:1d:57: 91:d5:82:55:f9:f9:f4:0a:81:0a:71:41:f7:40:3a: 0e:5e:af:a8:8a:56:c1:85:59:40:9a:cb:de:74:8e: 31:c6:85:6a:be:23:ec:ce:a4:35:70:b0:1c:ec:de: c2:cb:c3:e2:75:67:b2:e3:d3:2e:ea:7a:73:a8:0b: c2:5b:57:47:48:e3:02:e9:bd:20:3b:e1:92:8f:f1: a7:c2:4f:51:e7:f0:ab:13:0d:5a:fd:ec:74:92:8d: 55:b0:51:bb:d6:31:b1:90:e1:30:ea:64:56:b7:fe: 67:52:c6:02:0e:c0:20:ad:e7:35:7e:09:ef:3b:77: 5f:62:04:29:f3:8c:5a:c6:2d:ad:9f:aa:c3:87:84: c4:17:5d:c8:db:0f:6e:67:9a:42:12:67:ba:a3:c9: 3b:ee:93:c9:31:4b:05:27:53:9c:8b:63:13:7d:f8: 15:e6:56:9d:54:94:1b:8d:53:38:c9:9d:01:11:0c: d0:34:fc:ec:b1:00:57:81:1f:86:e0:e5:50:9f:8b: 0a:b9:7b:72:04:e3:e5:2e:8b:98:07:32:43:5c:1d: 1d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7B:20:C3:3D:0D:AD:69:EE:31:99:C6:2B:15:1A:AD:F1:15:DC:27 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Bnsgwz0NrWnuMZnGKxUarfEV3Cc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.96.0/22 Signature Algorithm: sha256WithRSAEncryption ba:66:0a:b4:62:cd:d6:59:f1:91:ee:d8:9a:7b:bd:21:ff:40: fd:cf:64:6f:7a:71:95:d0:1c:6c:80:76:2f:7d:d6:a5:5e:b0: 71:53:fb:2b:b0:5f:f3:01:6f:46:bf:f8:25:24:bf:d6:22:64: bb:04:72:e7:d3:bd:83:42:a6:86:cb:76:c4:77:81:62:1e:b2: 00:e0:7b:d9:54:ed:00:00:3d:1b:04:e0:7e:06:9b:de:48:22: 9b:ef:cb:26:bd:97:8f:64:a4:48:0f:e6:52:7e:ce:c1:ec:f8: 0c:d1:30:70:f8:de:0c:49:6c:27:b9:9c:9c:80:5d:cf:48:6a: b6:f4:90:ab:48:a3:f0:91:91:bc:7e:6e:ee:9a:fa:1b:ee:0b: 4d:14:26:fc:29:e3:5c:f4:85:48:1a:5d:20:31:cb:74:f7:92: 86:a0:09:18:8c:0f:33:69:03:68:74:b4:33:c3:d7:ab:10:3a: 4e:3b:ad:bb:fb:d7:e0:a4:63:5f:bc:05:09:1f:7a:3b:6c:72: df:6c:08:fd:54:9f:6c:4f:65:bb:0f:82:0c:74:6d:af:01:c8: f9:80:26:76:17:2c:d7:b8:01:a4:06:e8:a9:75:ff:fc:30:4f: 01:c4:ab:7e:a2:45:df:7e:e6:94:9c:5a:69:f3:bd:ee:7c:05: ae:53:14:e0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFWgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAxMTcw MTI3NDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDA2N0IyMEMzM0QwREFE NjlFRTMxOTlDNjJCMTUxQUFERjExNURDMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+TiSejXSMPeMvYLyrsNUoeALvXddHy0hedLjvbN32SZsvN9dd rHIliW4dV5HVglX5+fQKgQpxQfdAOg5er6iKVsGFWUCay950jjHGhWq+I+zOpDVw sBzs3sLLw+J1Z7Lj0y7qenOoC8JbV0dI4wLpvSA74ZKP8afCT1Hn8KsTDVr97HSS jVWwUbvWMbGQ4TDqZFa3/mdSxgIOwCCt5zV+Ce87d19iBCnzjFrGLa2fqsOHhMQX XcjbD25nmkISZ7qjyTvuk8kxSwUnU5yLYxN9+BXmVp1UlBuNUzjJnQERDNA0/Oyx AFeBH4bg5VCfiwq5e3IE4+Uui5gHMkNcHR1fAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUBnsgwz0NrWnuMZnGKxUarfEV3CcwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvQm5zZ3d6ME5yV251 TVpuR0t4VWFyZkVWM0NjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfYDANBgkqhkiG9w0BAQsFAAOCAQEAumYKtGLN1lnxke7Ymnu9If9A/c9k b3pxldAcbIB2L33WpV6wcVP7K7Bf8wFvRr/4JSS/1iJkuwRy59O9g0Kmhst2xHeB Yh6yAOB72VTtAAA9GwTgfgab3kgim+/LJr2Xj2SkSA/mUn7Owez4DNEwcPjeDEls J7mcnIBdz0hqtvSQq0ij8JGRvH5u7pr6G+4LTRQm/CnjXPSFSBpdIDHLdPeShqAJ GIwPM2kDaHS0M8PXqxA6Tjutu/vX4KRjX7wFCR96O2xy32wI/VSfbE9luw+CDHRt rwHI+YAmdhcs17gBpAboqXX//DBPAcSrfqJF337mlJxaafO97nwFrlMU4A== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net