$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/YTVpv8PhEiRx6zwPzefitdB5lsE.roa File: YTVpv8PhEiRx6zwPzefitdB5lsE.roa (raw, json) Hash identifier: gpKuygw8cKVTsgJRfD0A1TfO3FUSG4DU+rOfk/r2D0k= Subject key identifier: 61:35:69:BF:C3:E1:12:24:71:EB:3C:0F:CD:E7:E2:B5:D0:79:96:C1 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 166A Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/YTVpv8PhEiRx6zwPzefitdB5lsE.roa Signing time: Thu 27 Feb 2025 05:58:32 +0000 ROA not before: Thu 27 Feb 2025 05:58:32 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 18811 IP address blocks: 180.223.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5738 (0x166a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Feb 27 05:58:32 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=613569BFC3E1122471EB3C0FCDE7E2B5D07996C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:53:5d:2c:46:d1:15:11:26:2b:ef:1b:c9: 65:c4:c2:ba:3e:79:69:b4:ab:76:39:8c:12:ee:c3: 42:4f:d3:ee:c1:8a:c2:4e:94:d3:48:37:45:4c:1c: 89:5d:ee:d4:49:4d:65:ac:0d:ee:86:e8:db:f0:cf: ae:3a:35:82:36:49:ed:4c:0d:1b:5c:b2:b5:36:be: b1:ad:b3:97:70:2c:4f:a5:b1:7e:71:5a:a8:ae:f0: cc:57:61:41:f8:e8:3d:3f:0a:f6:30:f7:91:95:55: 36:a6:8a:a1:a8:d5:a2:1a:e7:ec:25:6c:67:71:81: 2a:45:df:7b:35:d6:31:56:d4:76:e3:30:57:da:27: df:96:d3:c2:50:78:19:47:ae:95:bd:97:88:80:d7: 90:d7:f4:d1:40:bd:27:64:0f:4d:1e:54:f2:30:77: cb:f3:ec:39:bb:f0:ba:0f:8b:56:34:ea:17:8a:e7: 1e:95:72:ed:db:30:e3:c6:41:d8:33:85:76:ed:0d: 19:7e:40:fe:d0:8c:41:6b:18:c7:5b:ec:4a:9b:2c: de:a7:c9:88:e8:b3:da:89:4e:57:55:ca:a3:af:b4: bd:3f:d2:f9:5d:d8:db:a8:bf:c5:62:25:58:d1:d5: 66:29:3e:aa:d8:2c:9f:d1:7a:72:cd:0d:83:7e:25: a8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:35:69:BF:C3:E1:12:24:71:EB:3C:0F:CD:E7:E2:B5:D0:79:96:C1 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/YTVpv8PhEiRx6zwPzefitdB5lsE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.204.0/22 Signature Algorithm: sha256WithRSAEncryption 18:1b:a4:d7:82:6b:1b:dd:24:c2:f3:30:23:29:ba:87:10:3c: 05:82:ea:37:83:68:c0:80:b5:fa:0d:5b:f9:91:4a:da:3c:a5: b1:27:94:a8:47:2f:0a:11:62:83:c4:a2:65:b3:90:9a:c2:66: ce:e1:87:44:6a:74:25:e6:88:d1:27:66:d4:88:e5:62:96:d0: 9d:b5:77:0d:29:d1:8d:09:8b:a8:35:91:5d:25:c7:a9:4b:ae: 34:4d:61:b3:78:3c:6c:44:74:4f:e0:c6:9d:f2:ec:b8:f5:92: 5d:73:f8:53:72:e4:78:c5:23:cc:e6:59:0c:1a:0a:35:49:ef: b5:a0:90:1e:5d:42:f1:d5:85:a2:21:1d:b0:77:01:90:6c:27: fd:b9:c8:5a:a6:db:7b:e2:a4:be:94:db:af:c0:c9:66:30:d9: d3:7a:1c:73:45:79:b8:5a:9d:e5:6e:fe:f5:49:d5:da:1e:ce: 4a:5f:a0:bf:1f:54:9e:a4:45:9e:ff:fb:88:36:71:bf:75:2b: d5:2d:d5:cc:80:f8:43:09:91:18:74:ac:c5:a2:19:59:15:c4: e1:f7:2d:9e:16:65:22:fe:61:81:05:92:cb:b3:40:0d:2d:5f: f6:66:08:59:cd:01:ab:6f:ef:e0:ef:05:d6:87:de:86:6a:7c: f6:f4:b9:94 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFmowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMjcw NTU4MzJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYxMzU2OUJGQzNFMTEy MjQ3MUVCM0MwRkNERTdFMkI1RDA3OTk2QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjKlNdLEbRFREmK+8byWXEwro+eWm0q3Y5jBLuw0JP0+7BisJO lNNIN0VMHIld7tRJTWWsDe6G6Nvwz646NYI2Se1MDRtcsrU2vrGts5dwLE+lsX5x Wqiu8MxXYUH46D0/CvYw95GVVTamiqGo1aIa5+wlbGdxgSpF33s11jFW1HbjMFfa J9+W08JQeBlHrpW9l4iA15DX9NFAvSdkD00eVPIwd8vz7Dm78LoPi1Y06heK5x6V cu3bMOPGQdgzhXbtDRl+QP7QjEFrGMdb7EqbLN6nyYjos9qJTldVyqOvtL0/0vld 2Nuov8ViJVjR1WYpPqrYLJ/RenLNDYN+JagvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUYTVpv8PhEiRx6zwPzefitdB5lsEwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvWVRWcHY4UGhFaVJ4 Nnp3UHplZml0ZEI1bHNFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfzDANBgkqhkiG9w0BAQsFAAOCAQEAGBuk14JrG90kwvMwIym6hxA8BYLq N4NowIC1+g1b+ZFK2jylsSeUqEcvChFig8SiZbOQmsJmzuGHRGp0JeaI0Sdm1Ijl YpbQnbV3DSnRjQmLqDWRXSXHqUuuNE1hs3g8bER0T+DGnfLsuPWSXXP4U3LkeMUj zOZZDBoKNUnvtaCQHl1C8dWFoiEdsHcBkGwn/bnIWqbbe+KkvpTbr8DJZjDZ03oc c0V5uFqd5W7+9UnV2h7OSl+gvx9UnqRFnv/7iDZxv3Ur1S3VzID4QwmRGHSsxaIZ WRXE4fctnhZlIv5hgQWSy7NADS1f9mYIWc0Bq2/v4O8F1ofehmp89vS5lA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net