$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/Ywp6yX2CqKmQ2MP06ZmNZYbPQ1M.roa File: Ywp6yX2CqKmQ2MP06ZmNZYbPQ1M.roa (raw, json) Hash identifier: IhCK6llY47OfM3Rhlq+7LSA32WJxEl2lnhdovbYO1EI= Subject key identifier: 63:0A:7A:C9:7D:82:A8:A9:90:D8:C3:F4:E9:99:8D:65:86:CF:43:53 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 115A Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Ywp6yX2CqKmQ2MP06ZmNZYbPQ1M.roa Signing time: Thu 11 Jul 2024 15:11:14 +0000 ROA not before: Thu 11 Jul 2024 15:11:14 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 136897 IP address blocks: 180.223.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jul 2024 15:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4442 (0x115a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jul 11 15:11:14 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=630A7AC97D82A8A990D8C3F4E9998D6586CF4353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:19:e4:76:41:e4:89:d4:01:7d:53:00:6c: 11:50:73:69:f0:90:6f:4a:4b:47:a1:7e:65:af:6f: 53:23:e1:4b:56:7a:d0:38:46:a1:b7:c6:c4:90:01: 38:51:70:0d:d9:e2:58:cd:c4:af:36:ca:6c:ca:87: 1b:73:03:00:00:24:33:52:e1:ba:2b:a3:93:6a:78: ba:58:2d:67:81:aa:53:7f:49:b3:12:25:4c:97:e1: 03:d7:52:58:d0:c1:74:a3:b2:ca:0e:b1:75:62:f3: b8:42:b4:6c:d2:67:db:29:71:51:34:fc:e4:40:e3: d8:4f:71:27:1c:48:5b:3d:30:0f:e9:07:09:c0:44: 33:bb:38:7a:7d:11:62:64:d9:7e:27:e0:fd:65:9d: 5d:5b:ae:d1:40:34:2a:f2:29:5c:e8:05:c3:e5:0b: d7:fe:b3:d3:fd:33:b7:ca:3e:75:6a:b8:70:55:10: a7:84:67:c7:50:bb:02:1e:b0:01:4b:c0:d5:36:83: 59:bc:75:b9:1b:f7:1a:14:7c:df:18:4e:05:f5:59: f7:02:a0:98:39:1c:29:c1:c5:5c:4d:22:90:69:66: 43:d8:f0:1a:3b:46:f7:57:a8:3b:0f:59:a6:a5:e1: cb:58:16:e5:1a:ca:0d:98:5b:e4:ef:e4:35:9b:36: f0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0A:7A:C9:7D:82:A8:A9:90:D8:C3:F4:E9:99:8D:65:86:CF:43:53 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Ywp6yX2CqKmQ2MP06ZmNZYbPQ1M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.232.0/21 Signature Algorithm: sha256WithRSAEncryption 2a:70:5c:67:e6:5d:63:d8:e5:c6:c4:aa:b1:29:46:f6:3f:46: 0f:fa:47:be:4e:34:07:7a:2e:54:18:30:89:af:17:b5:42:b7: e2:25:2a:d9:4f:0f:a9:59:c7:20:a5:dc:64:51:c0:4d:3b:95: 67:7b:20:87:6d:47:41:b0:6a:11:a4:18:dc:41:6e:a4:97:06: fc:6b:0d:06:d4:66:34:17:cc:7a:bf:60:34:59:45:ca:b6:75: 11:23:19:29:93:7f:ec:ce:02:08:b0:de:a8:76:65:dc:59:1c: f0:d5:f3:c2:72:e5:03:b3:39:b9:19:56:1f:d2:72:f3:54:35: cd:cd:a1:1e:20:a1:67:9f:93:cb:0b:56:a8:02:6e:d2:0d:a6: 59:81:40:99:6a:5a:f5:13:e8:cb:1f:6e:a0:58:a7:82:a2:b0: 5e:c7:31:02:bc:76:77:c8:60:ee:a6:6b:ca:44:00:c5:4e:fd: e8:0e:9f:fa:5a:33:3a:5e:cf:1c:43:c7:23:df:25:ec:5a:b4: d1:96:fa:49:66:59:e3:39:3e:f1:71:1c:92:16:20:32:8e:30: 4d:40:2d:f9:59:bc:39:51:10:b2:9d:cf:8c:cb:14:f5:b7:c7: be:cd:8c:1b:66:46:86:27:28:b8:5f:67:20:f4:88:e0:b1:da: 6c:43:bc:a7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDA3MTEx NTExMTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDYzMEE3QUM5N0Q4MkE4 QTk5MEQ4QzNGNEU5OTk4RDY1ODZDRjQzNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClGxnkdkHkidQBfVMAbBFQc2nwkG9KS0ehfmWvb1Mj4UtWetA4 RqG3xsSQAThRcA3Z4ljNxK82ymzKhxtzAwAAJDNS4boro5NqeLpYLWeBqlN/SbMS JUyX4QPXUljQwXSjssoOsXVi87hCtGzSZ9spcVE0/ORA49hPcSccSFs9MA/pBwnA RDO7OHp9EWJk2X4n4P1lnV1brtFANCryKVzoBcPlC9f+s9P9M7fKPnVquHBVEKeE Z8dQuwIesAFLwNU2g1m8dbkb9xoUfN8YTgX1WfcCoJg5HCnBxVxNIpBpZkPY8Bo7 RvdXqDsPWaal4ctYFuUayg2YW+Tv5DWbNvB7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUYwp6yX2CqKmQ2MP06ZmNZYbPQ1MwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvWXdwNnlYMkNxS21R Mk1QMDZabU5aWWJQUTFNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7Tf6DANBgkqhkiG9w0BAQsFAAOCAQEAKnBcZ+ZdY9jlxsSqsSlG9j9GD/pH vk40B3ouVBgwia8XtUK34iUq2U8PqVnHIKXcZFHATTuVZ3sgh21HQbBqEaQY3EFu pJcG/GsNBtRmNBfMer9gNFlFyrZ1ESMZKZN/7M4CCLDeqHZl3Fkc8NXzwnLlA7M5 uRlWH9Jy81Q1zc2hHiChZ5+TywtWqAJu0g2mWYFAmWpa9RPoyx9uoFingqKwXscx Arx2d8hg7qZrykQAxU796A6f+lozOl7PHEPHI98l7Fq00Zb6SWZZ4zk+8XEckhYg Mo4wTUAt+Vm8OVEQsp3PjMsU9bfHvs2MG2ZGhicouF9nIPSI4LHabEO8pw== -----END CERTIFICATE-----Generated at Sun Jul 14 11:10:07 2024 by rpki-client on console.sobornost.net