$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/KofTQezOKO0tRcxGvhhrzeIHajI.roa File: KofTQezOKO0tRcxGvhhrzeIHajI.roa (raw, json) Hash identifier: 7czSbGHciu/s/5L42o3q2c0zkZWTCYUIkVFVzPR58PY= Subject key identifier: 2A:87:D3:41:EC:CE:28:ED:2D:45:CC:46:BE:18:6B:CD:E2:07:6A:32 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CB6 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/KofTQezOKO0tRcxGvhhrzeIHajI.roa Signing time: Thu 02 Jan 2025 13:58:22 +0000 ROA not before: Thu 02 Jan 2025 13:58:22 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137718 IP address blocks: 180.184.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7350 (0x1cb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:22 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=2A87D341ECCE28ED2D45CC46BE186BCDE2076A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:98:cf:20:85:3e:87:48:3f:2f:d1:8e:e0:b5: 57:8c:25:8d:f0:b6:d6:2e:f8:29:4d:9b:a1:f4:e8: fb:2f:b6:12:30:1e:18:41:98:b2:5f:f7:b4:09:c9: 43:f1:5c:80:19:d1:72:1c:2e:67:b7:e4:40:54:47: 79:6d:77:90:54:80:d3:72:22:cc:fe:cf:6d:6a:bd: ae:59:50:72:17:8b:bb:0b:64:fe:1b:c5:44:4f:e0: 86:91:ef:ed:de:50:bf:45:dd:1e:0c:25:ec:21:b3: 17:d8:80:d8:ce:f6:98:59:35:4f:2d:02:3c:e5:4e: f0:35:f9:83:3b:20:2b:37:2f:da:69:a2:38:5b:33: 71:7b:db:14:f2:63:6d:71:2f:03:27:74:d6:a3:a5: 12:68:d2:5e:da:31:38:7a:92:f7:80:82:94:6d:ee: 74:92:fc:85:ef:c6:09:e5:83:35:6a:41:90:3d:05: a5:c3:44:fc:ec:87:b3:e0:d6:b1:95:35:1b:a5:89: 51:ef:47:77:ee:d1:fb:8d:c6:e7:21:ec:fd:fe:92: 05:74:e6:95:e3:84:00:ef:1d:f8:9c:37:d0:6d:16: e2:34:47:32:d5:38:4b:f6:8e:e4:84:da:36:59:b4: 11:77:e0:2c:ca:08:e7:80:ec:6f:9a:b7:9b:6c:d1: b1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:87:D3:41:EC:CE:28:ED:2D:45:CC:46:BE:18:6B:CD:E2:07:6A:32 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/KofTQezOKO0tRcxGvhhrzeIHajI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.144.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:f0:28:d7:0c:92:b1:1f:0d:ff:f3:c4:ea:9d:21:b5:a6:0e: 44:35:a8:6e:4c:ee:bb:b7:43:65:cd:34:65:00:6a:dd:9c:18: f0:e4:c8:5a:2e:ee:4c:65:20:2d:a8:1d:0d:9b:b4:01:10:43: ec:89:3d:9e:cd:43:2a:73:d9:d0:ce:01:a9:8b:80:7d:7d:ef: 4d:68:85:1e:8c:c4:bf:17:df:be:fe:36:a1:bd:28:e4:a3:47: 9a:fd:cf:2b:b9:06:34:ca:02:e4:bd:e0:f5:6e:02:1c:88:80: 8a:bd:34:4c:0a:d6:52:f1:90:97:23:3b:53:b5:e5:d8:89:34: 53:18:33:19:24:a1:a5:a0:ac:34:ed:9e:dd:af:d3:df:11:81: e4:d2:75:38:09:32:19:30:4b:9f:10:fb:9e:79:01:be:83:3b: 16:cf:3e:4d:01:62:fc:b8:7d:89:b6:2b:6b:00:cf:14:28:55: bb:5a:d4:f7:f0:54:89:2c:3f:f2:78:9b:8c:81:be:05:b1:ff: 6b:a2:ae:68:d8:c5:c1:7a:ef:47:2d:1d:d4:1c:0d:9e:02:6b: 66:24:05:64:a5:72:90:d7:3c:ef:04:9d:57:0a:93:6f:17:da: 68:0b:3b:dd:40:8d:41:b6:fc:f0:22:14:2b:35:3a:af:a3:9b: db:ab:c7:90 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHLYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDJBODdEMzQxRUNDRTI4 RUQyRDQ1Q0M0NkJFMTg2QkNERTIwNzZBMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDumM8ghT6HSD8v0Y7gtVeMJY3wttYu+ClNm6H06PsvthIwHhhB mLJf97QJyUPxXIAZ0XIcLme35EBUR3ltd5BUgNNyIsz+z21qva5ZUHIXi7sLZP4b xURP4IaR7+3eUL9F3R4MJewhsxfYgNjO9phZNU8tAjzlTvA1+YM7ICs3L9ppojhb M3F72xTyY21xLwMndNajpRJo0l7aMTh6kveAgpRt7nSS/IXvxgnlgzVqQZA9BaXD RPzsh7Pg1rGVNRuliVHvR3fu0fuNxuch7P3+kgV05pXjhADvHficN9BtFuI0RzLV OEv2juSE2jZZtBF34CzKCOeA7G+at5ts0bHbAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUKofTQezOKO0tRcxGvhhrzeIHajIwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvS29mVFFlek9LTzB0 UmN4R3ZoaHJ6ZUlIYWpJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7S4kDANBgkqhkiG9w0BAQsFAAOCAQEAG/Ao1wySsR8N//PE6p0htaYORDWo bkzuu7dDZc00ZQBq3ZwY8OTIWi7uTGUgLagdDZu0ARBD7Ik9ns1DKnPZ0M4BqYuA fX3vTWiFHozEvxffvv42ob0o5KNHmv3PK7kGNMoC5L3g9W4CHIiAir00TArWUvGQ lyM7U7Xl2Ik0UxgzGSShpaCsNO2e3a/T3xGB5NJ1OAkyGTBLnxD7nnkBvoM7Fs8+ TQFi/Lh9ibYrawDPFChVu1rU9/BUiSw/8nibjIG+BbH/a6KuaNjFwXrvRy0d1BwN ngJrZiQFZKVykNc87wSdVwqTbxfaaAs73UCNQbb88CIUKzU6r6Ob26vHkA== -----END CERTIFICATE-----Generated at Sat Apr 26 15:33:28 2025 by rpki-client