$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/LUCASGKxQ8m7KeAs6oXyEMJkkgU.roa File: LUCASGKxQ8m7KeAs6oXyEMJkkgU.roa (raw, json) Hash identifier: wtWowELodbWa8ZNCqxTbDerpWgm8t5yN27gerVdT3dI= Subject key identifier: 2D:40:80:48:62:B1:43:C9:BB:29:E0:2C:EA:85:F2:10:C2:64:92:05 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1572 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/LUCASGKxQ8m7KeAs6oXyEMJkkgU.roa Signing time: Fri 17 Jan 2025 01:27:45 +0000 ROA not before: Fri 17 Jan 2025 01:27:45 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 398704 IP address blocks: 180.223.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5490 (0x1572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jan 17 01:27:45 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=2D40804862B143C9BB29E02CEA85F210C2649205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ca:71:9e:3f:2c:c3:ab:c5:30:ae:1d:bc:ef: 11:08:2a:13:3e:0b:ba:51:2f:bf:a8:4f:01:60:fd: 78:81:de:12:c6:51:b6:19:65:1e:31:c0:ca:03:bc: 10:48:c9:e9:31:1a:4f:f4:19:33:93:c3:ac:a0:05: 04:66:9e:cf:f6:97:1b:9d:20:6c:ca:6f:46:d5:62: 77:7b:8b:8d:dd:44:05:67:58:a3:d8:d0:0a:49:92: 7a:3e:bd:48:90:e5:ec:83:03:b3:d3:53:42:95:70: 67:29:b6:d5:ac:ce:b5:7c:61:c3:62:02:6e:56:03: 75:f8:f3:b3:6d:18:e5:ce:76:fb:4a:26:4b:19:65: 40:b8:5c:d7:bb:b4:15:8d:0e:bb:ba:b3:fa:84:ee: c3:96:09:eb:a0:51:a8:f7:4e:89:8b:67:78:e7:6f: 31:95:95:b1:fc:2e:1d:32:54:f7:3f:dc:d1:97:52: 66:43:46:cd:4a:72:b2:ee:9c:3c:04:55:f6:5d:0c: c3:a3:a8:33:e0:83:d0:27:7f:45:ac:98:5e:c6:1b: 2f:0d:6b:ac:80:b5:f7:1a:3b:55:60:b3:a3:0b:e9: 6c:84:56:99:c4:f3:19:8e:68:1b:b0:69:cd:4b:4e: eb:dd:df:c3:67:c9:79:ba:12:b4:b4:81:04:c3:53: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:40:80:48:62:B1:43:C9:BB:29:E0:2C:EA:85:F2:10:C2:64:92:05 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/LUCASGKxQ8m7KeAs6oXyEMJkkgU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.120.0/21 Signature Algorithm: sha256WithRSAEncryption 2a:68:0b:3a:e5:2b:6e:a3:9e:93:bb:a5:28:a1:07:1b:36:37: 94:db:a4:26:5f:35:d5:66:a8:b3:dd:ed:6f:66:84:86:a9:b5: 7f:43:b0:59:1b:d1:21:e4:eb:4d:cf:c7:94:e8:b5:23:75:e4: 47:d2:fa:c2:7a:cb:b9:c5:6d:7f:f8:76:b9:9a:59:ea:9c:06: 58:1f:d6:48:3f:58:a1:58:b3:f7:a6:37:88:1b:15:3c:3f:1e: d1:10:3e:56:ba:71:47:1f:8b:5a:56:91:f4:d7:ed:5f:af:0c: 70:df:b7:6a:b4:8f:1f:7b:e9:fc:2f:79:aa:cb:83:01:3f:3f: a9:f0:40:24:d7:f6:68:4f:55:1f:ec:52:95:11:2b:a9:fe:7d: 26:46:39:25:d2:d9:a8:cf:b6:07:77:8c:0f:5d:74:1d:fe:48: 03:12:74:3f:85:2a:0d:74:45:4d:1c:95:ba:24:f8:b1:94:5d: 38:86:fc:59:3f:1b:73:aa:85:8d:e9:76:c1:69:a5:d3:da:ad: 5f:19:d0:3e:cf:18:f1:ec:f9:24:0c:bd:78:68:f3:6b:e5:58: eb:c5:09:42:f1:f9:ca:6d:ec:ad:2e:c6:f5:86:2c:13:bf:41: c1:1a:91:a0:78:f2:c3:42:ad:67:aa:87:7f:79:c4:d0:12:28: 0b:7a:b8:84 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAxMTcw MTI3NDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDJENDA4MDQ4NjJCMTQz QzlCQjI5RTAyQ0VBODVGMjEwQzI2NDkyMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzynGePyzDq8Uwrh287xEIKhM+C7pRL7+oTwFg/XiB3hLGUbYZ ZR4xwMoDvBBIyekxGk/0GTOTw6ygBQRmns/2lxudIGzKb0bVYnd7i43dRAVnWKPY 0ApJkno+vUiQ5eyDA7PTU0KVcGcpttWszrV8YcNiAm5WA3X487NtGOXOdvtKJksZ ZUC4XNe7tBWNDru6s/qE7sOWCeugUaj3TomLZ3jnbzGVlbH8Lh0yVPc/3NGXUmZD Rs1KcrLunDwEVfZdDMOjqDPgg9Anf0WsmF7GGy8Na6yAtfcaO1Vgs6ML6WyEVpnE 8xmOaBuwac1LTuvd38NnyXm6ErS0gQTDUyJDAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQULUCASGKxQ8m7KeAs6oXyEMJkkgUwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvTFVDQVNHS3hROG03 S2VBczZvWHlFTUpra2dVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfeDANBgkqhkiG9w0BAQsFAAOCAQEAKmgLOuUrbqOek7ulKKEHGzY3lNuk Jl811Waos93tb2aEhqm1f0OwWRvRIeTrTc/HlOi1I3XkR9L6wnrLucVtf/h2uZpZ 6pwGWB/WSD9YoViz96Y3iBsVPD8e0RA+VrpxRx+LWlaR9NftX68McN+3arSPH3vp /C95qsuDAT8/qfBAJNf2aE9VH+xSlRErqf59JkY5JdLZqM+2B3eMD110Hf5IAxJ0 P4UqDXRFTRyVuiT4sZRdOIb8WT8bc6qFjel2wWml09qtXxnQPs8Y8ez5JAy9eGjz a+VY68UJQvH5ym3srS7G9YYsE79BwRqRoHjyw0KtZ6qHf3nE0BIoC3q4hA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net