$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/J_h6IP62vVvib6_bpcHqGmc9gB0.roa File: J_h6IP62vVvib6_bpcHqGmc9gB0.roa (raw, json) Hash identifier: AAi0CdtNJatToNyb4dGxz7EYQVGmPml1Eq97pePytts= Subject key identifier: 27:F8:7A:20:FE:B6:BD:5B:E2:6F:AF:DB:A5:C1:EA:1A:67:3D:80:1D Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CAD Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/J_h6IP62vVvib6_bpcHqGmc9gB0.roa Signing time: Thu 02 Jan 2025 13:58:19 +0000 ROA not before: Thu 02 Jan 2025 13:58:19 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137718 IP address blocks: 180.184.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7341 (0x1cad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:19 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=27F87A20FEB6BD5BE26FAFDBA5C1EA1A673D801D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:1a:46:0d:6e:bb:b7:1e:9b:65:01:3c:77: 6d:86:56:9e:17:1a:4c:52:45:f5:41:0e:b0:af:bd: bb:12:62:18:02:78:47:37:9e:e9:05:9b:52:f2:60: 77:7f:ce:1a:bc:8d:3e:3d:a1:a9:14:b7:85:b8:16: 2d:91:33:dd:dc:b2:a9:6c:dd:25:39:9a:e9:4d:22: 32:f9:63:79:1f:48:4f:1c:b4:e7:6d:36:e3:06:40: 8a:64:4f:b1:00:f9:dd:c2:0e:8f:12:84:ff:ff:38: aa:c5:6d:9a:28:a5:4d:db:ab:f6:af:4d:93:1b:09: f7:5d:e0:38:4d:3f:fe:3d:db:9d:3b:f0:b0:ff:9a: 09:d3:fa:30:68:cb:95:1c:18:81:1c:a9:b1:76:a3: 03:ee:d9:9a:da:79:b1:2b:68:0f:70:84:ec:39:af: 97:91:d0:ec:52:39:e0:c5:46:a4:3a:dc:53:52:a7: 68:f8:12:d9:d1:76:9c:8a:0a:87:e5:cf:1e:59:68: cd:a1:a0:ff:07:49:ad:af:3d:10:5a:42:e6:5d:68: 91:5b:20:65:33:35:a6:57:64:a3:1a:0e:cb:26:e4: 7d:3d:d1:06:4f:5f:c8:69:04:10:80:d9:a8:12:2c: d6:0f:d7:25:36:fd:03:ee:b4:c9:31:94:92:e9:1b: 85:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F8:7A:20:FE:B6:BD:5B:E2:6F:AF:DB:A5:C1:EA:1A:67:3D:80:1D X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/J_h6IP62vVvib6_bpcHqGmc9gB0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.184.0/22 Signature Algorithm: sha256WithRSAEncryption 94:4e:76:1b:6d:7f:35:a9:83:7e:67:aa:01:17:2d:6f:d7:6a: 32:b6:92:9b:f5:98:cd:46:db:af:8a:84:77:03:ab:5c:b9:3a: 62:ed:f0:9b:13:29:c4:d7:b2:a0:19:d3:d1:6b:e0:93:31:c6: fb:20:ea:c6:b5:b6:9d:0f:58:86:a0:11:26:d8:06:21:9f:b7: 3a:d7:e4:9a:de:a6:cb:4f:cd:52:7c:23:87:54:18:cd:46:33: cb:2e:6b:4c:d3:5e:50:18:29:75:55:b5:2b:2d:a1:ec:97:eb: 37:07:78:3d:c9:3f:31:f4:64:18:27:db:e1:67:b1:aa:c0:07: 07:8c:bf:15:2f:b3:be:56:00:fd:da:41:ba:12:8a:ad:f7:9b: b0:c5:12:5e:78:fe:49:9a:73:ce:fb:c5:7e:ea:19:35:28:cf: ca:d5:1c:89:91:f2:27:d4:b0:12:9d:13:42:0b:f4:10:87:81: a2:61:b1:a9:69:c5:cb:85:d2:70:7a:ba:76:7a:43:13:10:32: 86:de:32:33:a5:c0:3c:b7:ec:81:a6:22:51:6a:36:4a:0e:a3: 81:c5:f0:90:11:36:b2:18:80:47:cf:42:fc:46:9a:e6:5f:f1: ac:46:08:16:de:27:bd:c0:82:6c:ea:cf:78:85:83:93:bf:2b: d3:b9:50:d2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDI3Rjg3QTIwRkVCNkJE NUJFMjZGQUZEQkE1QzFFQTFBNjczRDgwMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNdxpGDW67tx6bZQE8d22GVp4XGkxSRfVBDrCvvbsSYhgCeEc3 nukFm1LyYHd/zhq8jT49oakUt4W4Fi2RM93csqls3SU5mulNIjL5Y3kfSE8ctOdt NuMGQIpkT7EA+d3CDo8ShP//OKrFbZoopU3bq/avTZMbCfdd4DhNP/4925078LD/ mgnT+jBoy5UcGIEcqbF2owPu2ZraebEraA9whOw5r5eR0OxSOeDFRqQ63FNSp2j4 EtnRdpyKCoflzx5ZaM2hoP8HSa2vPRBaQuZdaJFbIGUzNaZXZKMaDssm5H090QZP X8hpBBCA2agSLNYP1yU2/QPutMkxlJLpG4V/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUJ/h6IP62vVvib6/bpcHqGmc9gB0wHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvSl9oNklQNjJ2VnZp YjZfYnBjSHFHbWM5Z0IwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArS4uDANBgkqhkiG9w0BAQsFAAOCAQEAlE52G21/NamDfmeqARctb9dqMraS m/WYzUbbr4qEdwOrXLk6Yu3wmxMpxNeyoBnT0WvgkzHG+yDqxrW2nQ9YhqARJtgG IZ+3Otfkmt6my0/NUnwjh1QYzUYzyy5rTNNeUBgpdVW1Ky2h7JfrNwd4Pck/MfRk GCfb4WexqsAHB4y/FS+zvlYA/dpBuhKKrfebsMUSXnj+SZpzzvvFfuoZNSjPytUc iZHyJ9SwEp0TQgv0EIeBomGxqWnFy4XScHq6dnpDExAyht4yM6XAPLfsgaYiUWo2 Sg6jgcXwkBE2shiAR89C/Eaa5l/xrEYIFt4nvcCCbOrPeIWDk78r07lQ0g== -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:52 2025 by rpki-client