$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/V59B_FMJowB0U0UVYaDqchEDTsw.roa File: V59B_FMJowB0U0UVYaDqchEDTsw.roa (raw, json) Hash identifier: q2+ZeOncWEFMukf5MZaFMlSIi8MKKgNFcJmxLA+jKl8= Subject key identifier: 57:9F:41:FC:53:09:A3:00:74:53:45:15:61:A0:EA:72:11:03:4E:CC Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1571 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/V59B_FMJowB0U0UVYaDqchEDTsw.roa Signing time: Fri 17 Jan 2025 01:27:45 +0000 ROA not before: Fri 17 Jan 2025 01:27:45 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 398704 IP address blocks: 180.223.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5489 (0x1571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jan 17 01:27:45 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=579F41FC5309A3007453451561A0EA7211034ECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:f5:79:90:84:79:d4:ad:95:31:e4:a4:9d: 86:4b:bb:c6:8e:38:e2:94:b3:4c:06:e9:e1:e6:3d: 57:7f:d9:32:89:04:39:a6:94:de:e5:d6:3b:9a:11: 75:4a:fb:97:f2:f1:27:5a:e9:33:48:22:c7:c6:69: 16:72:4a:29:34:13:a8:e3:52:d9:ee:e8:bf:75:3a: e6:05:1a:db:cf:74:c8:1f:40:1c:ea:7c:e3:08:f8: 00:e5:28:6f:86:c2:4e:42:0d:9b:e2:94:ea:be:24: 97:72:48:9c:ad:26:b8:9d:5a:00:b1:e3:ec:89:f3: 02:b2:6b:5b:2b:98:42:f1:ad:2e:91:73:28:76:2d: 6c:3c:47:7b:c6:f8:fb:8f:7d:2f:19:86:9f:20:da: cc:0e:4b:ad:f7:3f:21:92:d6:1b:07:79:ef:aa:60: 04:19:50:74:1e:17:bd:3a:3a:22:f3:e5:19:85:6c: 3a:f6:57:8d:87:57:83:e4:40:ec:53:98:e6:47:c4: 2f:69:2b:ee:10:16:9e:d1:e5:d2:a1:3a:6c:d8:29: 68:ed:20:2b:21:c5:4b:3e:85:0e:95:8d:91:74:b3: 35:7a:d1:e3:31:a3:be:a8:ef:e2:f2:48:97:6f:5e: 04:95:bf:ae:fb:54:fe:f8:bc:9d:2b:8c:f9:7e:d1: 3f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9F:41:FC:53:09:A3:00:74:53:45:15:61:A0:EA:72:11:03:4E:CC X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/V59B_FMJowB0U0UVYaDqchEDTsw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.112.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:d4:80:16:9b:89:8c:35:28:d4:51:d2:c2:f5:1e:c6:5f:3c: 37:e8:b6:5a:77:bd:04:4a:fd:79:ff:0f:9f:e8:e5:3a:8e:55: 25:9d:0c:cd:2d:5c:2c:c6:d4:61:c1:0c:50:c8:bb:1d:f7:70: ef:5a:7c:dc:4c:db:dc:78:d7:bc:d9:a0:11:90:60:c9:32:7a: 69:c4:54:50:a6:c6:3b:e9:ef:ff:4e:26:f9:93:d4:da:64:96: b2:44:f4:62:02:26:34:92:0d:19:69:54:74:9d:7b:81:d3:a8: c7:4c:a8:8f:9d:77:f6:6d:24:6f:89:e6:83:9f:0c:43:ac:07: 24:6d:66:b8:b4:4a:1a:1e:02:54:3c:37:6e:d5:6e:b4:b7:58: 8d:67:11:77:4b:0b:27:d9:14:73:c9:2a:ef:28:f1:88:ac:29: 04:90:f8:e3:48:7b:7e:fd:18:c5:6d:29:70:cc:c7:0b:bd:b6: 27:13:59:e9:fa:c6:5c:71:da:d8:d6:fb:4e:63:99:0c:47:31: 8f:34:2b:ae:9c:7e:e7:5c:d2:dc:48:4e:d0:fe:16:0b:28:82: 26:30:fe:de:2a:ac:ba:52:cc:90:86:d2:85:55:8c:66:45:57: 75:97:fa:e4:05:b9:1f:92:28:af:ce:78:4d:8d:5e:5a:8f:20: c4:84:fc:71 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAxMTcw MTI3NDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDU3OUY0MUZDNTMwOUEz MDA3NDUzNDUxNTYxQTBFQTcyMTEwMzRFQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEJvV5kIR51K2VMeSknYZLu8aOOOKUs0wG6eHmPVd/2TKJBDmm lN7l1juaEXVK+5fy8Sda6TNIIsfGaRZySik0E6jjUtnu6L91OuYFGtvPdMgfQBzq fOMI+ADlKG+Gwk5CDZvilOq+JJdySJytJridWgCx4+yJ8wKya1srmELxrS6Rcyh2 LWw8R3vG+PuPfS8Zhp8g2swOS633PyGS1hsHee+qYAQZUHQeF706OiLz5RmFbDr2 V42HV4PkQOxTmOZHxC9pK+4QFp7R5dKhOmzYKWjtICshxUs+hQ6VjZF0szV60eMx o76o7+LySJdvXgSVv677VP74vJ0rjPl+0T/lAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUV59B/FMJowB0U0UVYaDqchEDTswwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvVjU5Ql9GTUpvd0Iw VTBVVllhRHFjaEVEVHN3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfcDANBgkqhkiG9w0BAQsFAAOCAQEALdSAFpuJjDUo1FHSwvUexl88N+i2 Wne9BEr9ef8Pn+jlOo5VJZ0MzS1cLMbUYcEMUMi7Hfdw71p83Ezb3HjXvNmgEZBg yTJ6acRUUKbGO+nv/04m+ZPU2mSWskT0YgImNJINGWlUdJ17gdOox0yoj5139m0k b4nmg58MQ6wHJG1muLRKGh4CVDw3btVutLdYjWcRd0sLJ9kUc8kq7yjxiKwpBJD4 40h7fv0YxW0pcMzHC722JxNZ6frGXHHa2Nb7TmOZDEcxjzQrrpx+51zS3EhO0P4W CyiCJjD+3iqsulLMkIbShVWMZkVXdZf65AW5H5Ior854TY1eWo8gxIT8cQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net