$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/_2jpYc8o-12vDu0Y3xFr00T3HcQ.roa File: _2jpYc8o-12vDu0Y3xFr00T3HcQ.roa (raw, json) Hash identifier: wt2l6kNZMyL9dX1DuVEZ4ctW5NaOgC82DkLYWLi3PIc= Subject key identifier: FF:68:E9:61:CF:28:FB:5D:AF:0E:ED:18:DF:11:6B:D3:44:F7:1D:C4 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 163A Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/_2jpYc8o-12vDu0Y3xFr00T3HcQ.roa Signing time: Tue 18 Feb 2025 00:53:22 +0000 ROA not before: Tue 18 Feb 2025 00:53:22 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 398704 IP address blocks: 180.223.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5690 (0x163a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Feb 18 00:53:22 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FF68E961CF28FB5DAF0EED18DF116BD344F71DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:f2:f8:0e:5e:92:d9:c8:32:8b:23:f8:f7: f2:77:84:b3:15:71:d0:91:9d:f8:b6:f3:af:0d:6d: 86:14:42:c7:4a:8c:56:a5:59:23:3b:e1:dd:f2:ef: 8f:b7:ef:4f:f3:69:ab:d1:10:50:49:1f:60:41:ac: ee:66:b5:a2:a0:63:d2:ff:06:93:87:07:1d:a0:3e: a1:bb:39:06:4d:1a:70:6b:f2:2f:8f:d7:43:5b:4f: 91:a5:cc:c4:16:50:c4:eb:97:19:8e:73:44:b0:82: 0f:5d:7a:b7:a4:ea:12:85:0a:39:7c:82:a6:1f:e9: 73:44:1e:a2:c9:9b:1f:51:8a:56:5a:7a:f8:d2:a9: 1b:83:d6:cb:b9:43:f8:1a:b9:1c:7a:6e:c9:be:95: 78:0d:fc:73:04:4b:0c:2f:f8:fc:bb:bd:1b:5b:60: d1:e9:6f:9a:cc:00:ea:45:12:86:51:27:5c:aa:fa: 5b:97:53:dd:9e:46:6a:c2:75:66:83:a1:be:a3:0d: 43:e8:f1:89:fc:cd:c1:06:0f:bb:2b:f3:49:4a:30: eb:97:81:69:b9:dd:41:9f:ef:a6:32:da:5f:2d:1a: 5d:30:55:f9:ab:ed:d0:1d:bb:c5:b4:13:bc:be:64: 5f:e6:32:84:24:4e:95:e0:34:5b:9c:1f:5b:37:7f: 97:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:68:E9:61:CF:28:FB:5D:AF:0E:ED:18:DF:11:6B:D3:44:F7:1D:C4 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/_2jpYc8o-12vDu0Y3xFr00T3HcQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.124.0/22 Signature Algorithm: sha256WithRSAEncryption b8:de:6f:ad:3c:7a:cc:98:18:72:84:8c:21:16:9c:55:26:66: fd:03:4a:9a:38:7b:af:82:95:79:b3:16:0a:e0:8d:bd:37:0f: b5:6a:f5:d0:9c:0b:6d:b0:c3:59:e4:a7:a5:f7:90:04:ae:a6: d8:5c:ce:f7:be:cc:b9:6b:29:1a:19:0b:db:04:3a:8c:b8:19: d2:bd:37:57:12:e5:95:a7:da:78:56:5a:a0:74:ef:c3:9b:87: e0:f7:ea:1a:2a:49:0c:a9:26:8c:6c:ae:53:e2:d3:f7:59:18: 81:8f:57:d1:67:96:ca:66:f0:7d:41:ed:3c:61:0f:01:9b:45: 0c:6a:49:b1:98:47:02:c1:97:45:e0:4c:7f:65:8a:2d:be:7f: 05:9d:ca:0a:37:c2:47:ac:cd:5e:ef:01:5f:a3:be:d7:2d:f7: 45:f7:5b:a8:c4:b0:cf:70:fc:e6:34:47:81:47:0e:49:34:f8: 8c:80:2d:5d:37:1e:dc:07:33:5d:cf:41:03:ce:f0:1b:3c:5b: fc:03:c6:42:6f:60:2e:62:d9:1d:b0:9b:c3:38:fd:e0:94:32: f3:1a:6e:15:66:d0:b0:95:11:aa:5f:8a:10:c3:da:e2:5e:d3: 0e:4d:9c:bd:22:a7:1c:5d:3e:24:3b:b0:aa:c5:89:f3:62:14: 4d:7b:80:fb -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMTgw MDUzMjJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZGNjhFOTYxQ0YyOEZC NURBRjBFRUQxOERGMTE2QkQzNDRGNzFEQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDETvL4Dl6S2cgyiyP49/J3hLMVcdCRnfi2868NbYYUQsdKjFal WSM74d3y74+370/zaavREFBJH2BBrO5mtaKgY9L/BpOHBx2gPqG7OQZNGnBr8i+P 10NbT5GlzMQWUMTrlxmOc0Swgg9derek6hKFCjl8gqYf6XNEHqLJmx9RilZaevjS qRuD1su5Q/gauRx6bsm+lXgN/HMESwwv+Py7vRtbYNHpb5rMAOpFEoZRJ1yq+luX U92eRmrCdWaDob6jDUPo8Yn8zcEGD7sr80lKMOuXgWm53UGf76Yy2l8tGl0wVfmr 7dAdu8W0E7y+ZF/mMoQkTpXgNFucH1s3f5dbAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU/2jpYc8o+12vDu0Y3xFr00T3HcQwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvXzJqcFljOG8tMTJ2 RHUwWTN4RnIwMFQzSGNRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTffDANBgkqhkiG9w0BAQsFAAOCAQEAuN5vrTx6zJgYcoSMIRacVSZm/QNK mjh7r4KVebMWCuCNvTcPtWr10JwLbbDDWeSnpfeQBK6m2FzO977MuWspGhkL2wQ6 jLgZ0r03VxLllafaeFZaoHTvw5uH4PfqGipJDKkmjGyuU+LT91kYgY9X0WeWymbw fUHtPGEPAZtFDGpJsZhHAsGXReBMf2WKLb5/BZ3KCjfCR6zNXu8BX6O+1y33Rfdb qMSwz3D85jRHgUcOSTT4jIAtXTce3AczXc9BA87wGzxb/APGQm9gLmLZHbCbwzj9 4JQy8xpuFWbQsJURql+KEMPa4l7TDk2cvSKnHF0+JDuwqsWJ82IUTXuA+w== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net