$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/5-e_dWRwLOBRKT5IjQnlDohWE_Y.roa File: 5-e_dWRwLOBRKT5IjQnlDohWE_Y.roa (raw, json) Hash identifier: 645ZAWuL9+IBERhefAoIrug4bDVKHl7LSWQ9S3CG7Ds= Subject key identifier: E7:E7:BF:75:64:70:2C:E0:51:29:3E:48:8D:09:E5:0E:88:56:13:F6 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1628 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/5-e_dWRwLOBRKT5IjQnlDohWE_Y.roa Signing time: Sun 16 Feb 2025 03:31:04 +0000 ROA not before: Sun 16 Feb 2025 03:31:04 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 10103 IP address blocks: 180.223.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5672 (0x1628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Feb 16 03:31:04 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E7E7BF7564702CE051293E488D09E50E885613F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:cb:35:1b:56:a6:04:72:28:fe:b1:5f:d4: 33:75:23:99:5e:cf:13:33:2f:ac:11:c1:92:28:2e: c7:07:af:fa:74:38:27:b1:38:30:bb:a4:42:e4:34: b1:eb:0b:5c:51:eb:e3:74:3c:84:65:64:f0:f8:59: f8:a3:bf:3f:7a:7e:ea:68:03:d0:2c:78:73:05:3f: 69:12:53:12:eb:50:b1:24:45:75:37:10:5e:6a:15: 37:f4:f4:a7:a5:e0:5e:79:84:8b:b7:6f:ae:83:4f: 64:57:ea:94:52:2a:6f:64:fc:7c:19:6b:a9:1b:19: cf:c7:19:dc:db:eb:80:2e:34:d5:19:e9:4f:fb:ee: 26:e9:f5:f1:24:1a:e5:84:81:d8:95:bb:a2:b7:88: 81:bd:5a:ec:40:e6:ce:f6:c7:79:54:93:91:6d:29: 59:64:5d:17:c2:c2:a5:4c:36:50:fe:d8:56:b8:c1: af:f3:35:89:dd:83:6b:6a:20:44:1c:75:e8:05:fd: 3e:be:d0:d9:41:cb:06:b0:25:ba:07:20:bf:50:f2: 10:a0:fd:c3:1c:cf:7b:2a:fa:27:02:4a:43:dc:35: bf:ef:6b:81:59:83:59:0d:65:17:87:7f:24:f9:e2: 15:42:bd:e8:5f:8a:95:bd:07:76:73:7d:67:bf:28: f9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E7:BF:75:64:70:2C:E0:51:29:3E:48:8D:09:E5:0E:88:56:13:F6 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/5-e_dWRwLOBRKT5IjQnlDohWE_Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.248.0/21 Signature Algorithm: sha256WithRSAEncryption 17:fb:04:71:b1:97:34:45:e1:f8:ee:fe:43:47:f7:04:01:c7: 1c:ef:fd:27:09:93:4b:82:9d:3a:6c:1b:63:ad:02:9e:6f:fa: 10:b5:fc:95:3b:3e:6a:75:06:69:3f:fd:c2:af:ba:39:61:1e: 6c:4c:81:36:c8:7e:0e:bb:02:34:d7:96:3a:de:f7:51:41:bf: 90:7e:ad:94:77:5c:8b:12:f0:d0:45:1e:86:04:b6:3a:9b:a0: 00:06:f0:5a:fb:9f:9d:5a:3f:81:81:ef:37:9f:b6:58:43:32: 59:96:7a:97:e9:7a:d2:f8:e2:06:26:b6:73:7f:f7:86:5e:c5: 1c:a1:1e:2f:32:6d:3f:3b:e4:8f:b6:a4:2a:42:6e:65:f6:a2: 5a:05:0b:60:46:28:e8:b2:bf:e8:57:79:86:b4:19:78:97:e8: 2d:43:60:0c:7b:8a:ed:b7:2a:1c:a6:00:81:8b:db:ec:0c:61: 79:c0:f0:df:5e:a7:b9:8e:9a:64:87:6e:fb:9a:df:bf:49:8a: fb:50:9c:6d:88:45:04:91:87:84:f4:e2:3d:65:eb:bb:e6:3e: df:41:71:83:b7:a1:54:70:55:ab:39:02:fb:19:3c:0d:20:f9: 49:f6:31:c8:03:22:0f:1a:6d:1d:86:28:4b:12:86:8f:fb:0b: 19:3e:c2:15 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFigwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMTYw MzMxMDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEU3RTdCRjc1NjQ3MDJD RTA1MTI5M0U0ODhEMDlFNTBFODg1NjEzRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjtcs1G1amBHIo/rFf1DN1I5lezxMzL6wRwZIoLscHr/p0OCex ODC7pELkNLHrC1xR6+N0PIRlZPD4Wfijvz96fupoA9AseHMFP2kSUxLrULEkRXU3 EF5qFTf09Kel4F55hIu3b66DT2RX6pRSKm9k/HwZa6kbGc/HGdzb64AuNNUZ6U/7 7ibp9fEkGuWEgdiVu6K3iIG9WuxA5s72x3lUk5FtKVlkXRfCwqVMNlD+2Fa4wa/z NYndg2tqIEQcdegF/T6+0NlBywawJboHIL9Q8hCg/cMcz3sq+icCSkPcNb/va4FZ g1kNZReHfyT54hVCvehfipW9B3ZzfWe/KPnXAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU5+e/dWRwLOBRKT5IjQnlDohWE/YwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvNS1lX2RXUndMT0JS S1Q1SWpRbmxEb2hXRV9ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7Tf+DANBgkqhkiG9w0BAQsFAAOCAQEAF/sEcbGXNEXh+O7+Q0f3BAHHHO/9 JwmTS4KdOmwbY60Cnm/6ELX8lTs+anUGaT/9wq+6OWEebEyBNsh+DrsCNNeWOt73 UUG/kH6tlHdcixLw0EUehgS2OpugAAbwWvufnVo/gYHvN5+2WEMyWZZ6l+l60vji Bia2c3/3hl7FHKEeLzJtPzvkj7akKkJuZfaiWgULYEYo6LK/6Fd5hrQZeJfoLUNg DHuK7bcqHKYAgYvb7AxhecDw316nuY6aZIdu+5rfv0mK+1CcbYhFBJGHhPTiPWXr u+Y+30Fxg7ehVHBVqzkC+xk8DSD5SfYxyAMiDxptHYYoSxKGj/sLGT7CFQ== -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:16 2025 by rpki-client