$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/Azoc-91zXDLxvv3xBd-PKdLYdqU.roa File: Azoc-91zXDLxvv3xBd-PKdLYdqU.roa (raw, json) Hash identifier: nxU+CDKTYCIRA4+qrT4bkptlCZnZ/PUr7AkT/2uVV6E= Subject key identifier: 03:3A:1C:FB:DD:73:5C:32:F1:BE:FD:F1:05:DF:8F:29:D2:D8:76:A5 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CC5 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/Azoc-91zXDLxvv3xBd-PKdLYdqU.roa Signing time: Thu 02 Jan 2025 13:58:26 +0000 ROA not before: Thu 02 Jan 2025 13:58:26 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 58542 IP address blocks: 180.184.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7365 (0x1cc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:26 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=033A1CFBDD735C32F1BEFDF105DF8F29D2D876A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:65:b5:bf:0e:aa:6e:f7:18:e2:ad:12:77:57: d8:16:4a:25:e2:1a:83:d6:47:8d:ae:cb:df:e7:8b: 76:a1:00:ed:7f:30:a8:d8:d9:3f:22:2d:92:0d:18: bf:00:9a:9c:a0:95:1d:37:e0:0d:1d:61:d0:e9:93: 22:34:94:1c:e6:ab:b8:32:6c:ab:16:03:51:36:1d: fd:06:69:cd:f6:7a:86:4e:b5:fa:59:38:3a:b6:67: 00:fa:a2:da:19:8a:df:34:83:32:e3:62:0c:7e:33: b0:12:e7:72:bb:18:05:fc:e1:ba:ac:12:61:ac:25: 33:c2:54:4a:0f:00:09:92:c6:62:a4:17:ca:f0:54: c1:63:9e:7e:d4:af:cc:5f:b0:9d:67:45:a2:74:b7: 3c:80:ea:eb:48:de:4f:ce:00:49:63:ab:ed:2e:d2: a5:ac:5a:96:61:57:05:bb:3b:42:1f:17:ff:33:b7: ce:e3:3b:ca:6e:a4:b9:34:97:e7:3c:9d:df:02:f7: 0b:ad:ba:4a:e1:ad:2d:8b:8c:5b:42:35:d5:c6:d5: 22:26:00:4a:a6:3c:5a:e8:4a:f4:f9:7a:38:4e:5a: 6d:ab:52:bb:58:c1:2c:a7:04:5d:d2:0e:4b:10:6d: 23:50:0d:03:bc:9b:ca:d2:ca:29:7e:0a:78:80:62: 78:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3A:1C:FB:DD:73:5C:32:F1:BE:FD:F1:05:DF:8F:29:D2:D8:76:A5 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/Azoc-91zXDLxvv3xBd-PKdLYdqU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.56.0/21 Signature Algorithm: sha256WithRSAEncryption 43:e3:ba:7f:fe:5c:9b:45:2e:26:e6:02:9f:40:58:d7:ca:f0: 6a:36:63:49:13:7b:e3:15:02:10:72:05:8a:82:4d:b7:7e:22: 41:b9:33:75:dd:f0:12:27:ab:15:0e:aa:e9:e0:81:27:a8:1e: b3:24:e9:2a:8b:64:a8:13:a0:a5:85:54:9b:a2:db:ee:12:4e: 23:59:ee:45:60:5a:1d:48:93:8f:fa:3f:7c:12:9e:eb:34:bc: 14:dc:83:fd:17:f4:31:54:29:33:9e:34:43:1f:be:ef:59:32: 3a:9f:d5:60:d1:46:1b:3d:15:7c:58:58:4c:50:f3:4a:56:2f: 51:b6:ba:47:5d:22:b2:7b:95:ce:33:8d:c7:b3:d9:1f:dc:7c: 16:df:88:2d:20:30:8d:4f:e1:01:a1:88:9c:38:38:e8:53:8b: 82:77:1c:5b:cb:7d:2d:a3:22:71:84:bd:23:16:2e:f7:a5:ad: 11:f4:3c:6d:00:80:40:b2:45:96:fd:3e:d8:9b:79:3c:c4:64: e8:7b:bb:cc:2d:20:1e:32:ef:ec:ef:dc:54:08:4c:f1:49:70: 96:fc:f3:b0:30:10:1b:fe:23:01:a1:96:c7:86:f7:33:37:3c: 4b:9d:23:e4:c2:7b:70:9c:80:4d:1b:f0:b4:31:d6:b1:2a:7a: af:e5:f0:51 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAzM0ExQ0ZCREQ3MzVD MzJGMUJFRkRGMTA1REY4RjI5RDJEODc2QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgZbW/Dqpu9xjirRJ3V9gWSiXiGoPWR42uy9/ni3ahAO1/MKjY 2T8iLZINGL8AmpyglR034A0dYdDpkyI0lBzmq7gybKsWA1E2Hf0Gac32eoZOtfpZ ODq2ZwD6otoZit80gzLjYgx+M7AS53K7GAX84bqsEmGsJTPCVEoPAAmSxmKkF8rw VMFjnn7Ur8xfsJ1nRaJ0tzyA6utI3k/OAEljq+0u0qWsWpZhVwW7O0IfF/8zt87j O8pupLk0l+c8nd8C9wutukrhrS2LjFtCNdXG1SImAEqmPFroSvT5ejhOWm2rUrtY wSynBF3SDksQbSNQDQO8m8rSyil+CniAYnjhAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUAzoc+91zXDLxvv3xBd+PKdLYdqUwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvQXpvYy05MXpYREx4 dnYzeEJkLVBLZExZZHFVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7S4ODANBgkqhkiG9w0BAQsFAAOCAQEAQ+O6f/5cm0UuJuYCn0BY18rwajZj SRN74xUCEHIFioJNt34iQbkzdd3wEierFQ6q6eCBJ6gesyTpKotkqBOgpYVUm6Lb 7hJOI1nuRWBaHUiTj/o/fBKe6zS8FNyD/Rf0MVQpM540Qx++71kyOp/VYNFGGz0V fFhYTFDzSlYvUba6R10isnuVzjONx7PZH9x8Ft+ILSAwjU/hAaGInDg46FOLgncc W8t9LaMicYS9IxYu96WtEfQ8bQCAQLJFlv0+2Jt5PMRk6Hu7zC0gHjLv7O/cVAhM 8UlwlvzzsDAQG/4jAaGWx4b3Mzc8S50j5MJ7cJyATRvwtDHWsSp6r+XwUQ== -----END CERTIFICATE-----Generated at Sat Apr 26 15:32:51 2025 by rpki-client