$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/AmfvUsmlYCU_1jo749subqIR8To.roa File: AmfvUsmlYCU_1jo749subqIR8To.roa (raw, json) Hash identifier: i2I8o2q4c+iJDLpn7+GyKb7pmkYIcLITo1FD0ORmfU8= Subject key identifier: 02:67:EF:52:C9:A5:60:25:3F:D6:3A:3B:E3:DB:2E:6E:A2:11:F1:3A Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1637 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/AmfvUsmlYCU_1jo749subqIR8To.roa Signing time: Tue 18 Feb 2025 00:53:21 +0000 ROA not before: Tue 18 Feb 2025 00:53:21 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 398704 IP address blocks: 180.223.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5687 (0x1637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Feb 18 00:53:21 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0267EF52C9A560253FD63A3BE3DB2E6EA211F13A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:23:1c:98:42:5b:27:05:d7:19:f7:09:bf:c4: 3b:80:7f:ac:ea:74:0d:13:71:5b:25:71:44:98:50: 97:19:d3:2b:60:49:95:0d:c1:f2:c7:e6:c0:ee:3b: c7:16:c1:2e:a7:2b:ac:dc:0c:34:2d:02:6f:b7:55: 5f:22:c8:06:a2:c7:fe:7e:f4:69:57:52:9d:2f:de: 08:a3:6e:a1:86:a7:04:c7:8c:47:e0:ae:71:87:65: 7f:d8:78:ce:81:ec:64:10:82:db:42:19:66:d7:39: eb:74:ed:b5:cb:cb:e2:ad:76:9d:06:56:b0:d8:88: fb:03:4e:f6:43:2a:9a:54:ba:38:2d:55:ff:e4:54: 04:3e:07:12:ab:9e:e3:8c:b6:e5:f9:9c:22:e0:89: 87:81:77:5a:a3:c4:af:61:ce:35:2b:83:c7:fc:76: e5:95:a9:44:24:31:7b:24:45:29:4f:f5:58:6c:9a: 96:a8:d4:66:eb:f6:77:b6:81:5e:26:08:8d:b7:bf: 90:25:7a:95:9f:0e:f7:9d:96:e6:6e:73:41:ae:63: ef:da:c0:59:72:58:77:e8:cd:f7:56:20:67:8a:03: fd:7a:8b:19:d1:82:d4:23:f5:58:23:4a:4a:d8:d4: 36:49:33:45:77:eb:76:35:55:20:b6:ce:09:e7:4b: 69:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:67:EF:52:C9:A5:60:25:3F:D6:3A:3B:E3:DB:2E:6E:A2:11:F1:3A X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/AmfvUsmlYCU_1jo749subqIR8To.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.248.0/21 Signature Algorithm: sha256WithRSAEncryption 9c:5a:22:b9:cf:25:11:a5:90:23:41:ad:07:e4:e2:d1:a7:a3: ef:98:dc:c6:ec:42:ac:1e:34:3c:ef:4f:f8:0d:78:4e:df:38: 8c:e4:d9:75:bf:a3:98:ae:a1:9e:4e:2c:b3:26:68:4f:ce:72: 17:6c:d9:1f:93:f9:d4:07:fa:b5:f3:ba:a5:95:40:7c:13:77: a9:96:25:39:89:60:46:f2:70:cc:7f:9c:b7:2e:1c:6e:a6:23: e2:43:5a:6d:ee:da:ef:d7:9a:8c:e2:38:e2:4c:dc:da:e8:c6: 16:7f:82:1a:bb:4e:21:2b:61:f4:bf:a3:b4:84:10:42:07:38: 56:af:32:c5:af:f1:a7:3a:6d:79:c2:d5:9c:6d:e7:47:ac:41: a6:41:ee:5d:2d:6c:8b:0a:e2:15:c6:5d:e3:33:b4:43:89:fa: d5:f1:72:a6:c0:3b:ad:2b:f1:95:cd:d8:89:0e:e1:99:18:0e: 69:1a:7e:02:2d:e4:ba:1e:49:ea:b3:5f:68:13:23:68:d6:19: 63:25:51:9c:2d:3d:0c:97:cf:6c:a1:53:88:69:fc:d2:35:ba: 09:80:a8:55:bf:14:41:58:15:14:4a:56:54:5d:1c:0b:d5:8b: 9f:f9:40:de:ce:40:80:e0:dc:d4:fe:a7:b6:a4:0e:91:3d:e6: b8:64:96:26 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFjcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMTgw MDUzMjFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAyNjdFRjUyQzlBNTYw MjUzRkQ2M0EzQkUzREIyRTZFQTIxMUYxM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdIxyYQlsnBdcZ9wm/xDuAf6zqdA0TcVslcUSYUJcZ0ytgSZUN wfLH5sDuO8cWwS6nK6zcDDQtAm+3VV8iyAaix/5+9GlXUp0v3gijbqGGpwTHjEfg rnGHZX/YeM6B7GQQgttCGWbXOet07bXLy+Ktdp0GVrDYiPsDTvZDKppUujgtVf/k VAQ+BxKrnuOMtuX5nCLgiYeBd1qjxK9hzjUrg8f8duWVqUQkMXskRSlP9Vhsmpao 1Gbr9ne2gV4mCI23v5AlepWfDvedluZuc0GuY+/awFlyWHfozfdWIGeKA/16ixnR gtQj9VgjSkrY1DZJM0V363Y1VSC2zgnnS2mzAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUAmfvUsmlYCU/1jo749subqIR8TowHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvQW1mdlVzbWxZQ1Vf MWpvNzQ5c3VicUlSOFRvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7Tf+DANBgkqhkiG9w0BAQsFAAOCAQEAnFoiuc8lEaWQI0GtB+Ti0aej75jc xuxCrB40PO9P+A14Tt84jOTZdb+jmK6hnk4ssyZoT85yF2zZH5P51Af6tfO6pZVA fBN3qZYlOYlgRvJwzH+cty4cbqYj4kNabe7a79eajOI44kzc2ujGFn+CGrtOISth 9L+jtIQQQgc4Vq8yxa/xpzptecLVnG3nR6xBpkHuXS1siwriFcZd4zO0Q4n61fFy psA7rSvxlc3YiQ7hmRgOaRp+Ai3kuh5J6rNfaBMjaNYZYyVRnC09DJfPbKFTiGn8 0jW6CYCoVb8UQVgVFEpWVF0cC9WLn/lA3s5AgODc1P6ntqQOkT3muGSWJg== -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:59 2025 by rpki-client