$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/EoP4uVImG4QbwrG5AHBX2fVJkTU.roa File: EoP4uVImG4QbwrG5AHBX2fVJkTU.roa (raw, json) Hash identifier: ztQ83EkqSwaBkm5XersvWSm4ctqZ224leKFJ1vy/1EA= Subject key identifier: 12:83:F8:B9:52:26:1B:84:1B:C2:B1:B9:00:70:57:D9:F5:49:91:35 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1618 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/EoP4uVImG4QbwrG5AHBX2fVJkTU.roa Signing time: Sun 16 Feb 2025 03:24:10 +0000 ROA not before: Sun 16 Feb 2025 03:24:10 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 18811 IP address blocks: 180.223.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5656 (0x1618) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Feb 16 03:24:10 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=1283F8B952261B841BC2B1B9007057D9F5499135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:5b:8b:f5:b5:74:af:d0:b5:0f:6b:6f:83: 58:c5:5e:c3:1d:7e:ce:06:4a:f3:41:f3:27:c6:e9: 0e:ea:06:14:51:2f:df:13:e6:81:a8:9a:d7:d8:aa: be:35:c8:55:00:7d:1b:75:77:b8:9b:84:58:91:68: c3:ea:56:2f:1a:c3:be:08:26:e1:bd:b7:df:2f:aa: 28:e5:0b:5d:5b:bf:7d:20:e3:c5:f1:4c:cc:4b:f7: a5:ad:99:7b:f8:0b:a0:dd:e4:ca:90:29:c3:16:ec: 66:e2:f2:ba:91:bd:c4:39:22:1e:8a:aa:07:55:4c: 6f:cb:be:44:6c:30:fe:b8:ae:a7:ab:7a:c9:09:78: bf:15:8d:4c:7d:85:bd:8d:2d:7b:3a:9c:93:75:6f: a2:20:80:8b:4a:df:8d:32:3a:a7:3e:ce:f8:f0:be: 1b:2b:28:22:2d:b3:b4:ae:c7:a8:af:30:02:7d:1f: 38:37:7a:f5:63:86:93:05:63:69:39:dc:d6:c1:8a: c8:24:af:ba:5d:26:37:6e:73:02:f3:96:59:54:a6: 61:40:2d:de:62:e7:2a:61:39:a9:95:37:07:74:a7: d8:a5:6c:89:b2:cc:61:c0:cc:35:97:69:3d:37:00: 7f:c7:d0:07:fc:89:35:66:01:15:3b:5a:6f:10:2e: ed:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:83:F8:B9:52:26:1B:84:1B:C2:B1:B9:00:70:57:D9:F5:49:91:35 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/EoP4uVImG4QbwrG5AHBX2fVJkTU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.124.0/22 Signature Algorithm: sha256WithRSAEncryption 71:85:74:a3:8f:9a:39:59:d9:a0:85:b7:31:c6:ec:7e:bb:7f: 2f:9f:f7:f1:f2:b6:bf:22:4f:5a:6d:a9:8c:99:0c:81:bf:29: 48:14:ab:a9:7b:2a:17:43:53:3d:e9:9f:2d:d5:76:ec:55:0d: 33:cf:ae:90:c8:03:da:a4:70:7f:e0:84:4a:04:3d:bb:58:41: bd:c4:b5:0a:5f:9f:ac:25:56:9d:d5:e5:11:ed:67:c3:91:72: 1b:73:b8:fe:68:69:43:bf:20:f5:e4:6f:42:9f:88:a1:1e:41: 76:19:83:bd:27:73:fa:b3:26:a7:4d:86:f5:1e:63:35:e8:1f: 34:31:80:35:5b:a5:01:a5:60:95:08:0f:ad:9b:dc:83:0b:c2: ac:b6:51:89:c7:90:77:24:08:b0:74:a4:b6:c4:fa:7f:1b:a8: 7b:81:41:14:5d:2c:1a:9c:ff:69:42:41:8f:46:3d:50:2c:94: d9:ab:37:85:ce:a6:13:01:83:f8:77:94:fe:86:41:79:d5:75: 43:98:17:76:d5:18:82:41:7e:e2:77:55:12:7e:5d:e3:6a:dd: 12:c3:bb:97:2b:6c:57:ff:e6:91:a6:ab:37:50:0d:7b:25:7b: 9e:e3:a8:71:c9:a9:03:39:a2:47:60:54:ae:f3:c5:8e:6a:ee: bf:38:b3:35 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFhgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMTYw MzI0MTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDEyODNGOEI5NTIyNjFC ODQxQkMyQjFCOTAwNzA1N0Q5RjU0OTkxMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAi1uL9bV0r9C1D2tvg1jFXsMdfs4GSvNB8yfG6Q7qBhRRL98T 5oGomtfYqr41yFUAfRt1d7ibhFiRaMPqVi8aw74IJuG9t98vqijlC11bv30g48Xx TMxL96WtmXv4C6Dd5MqQKcMW7Gbi8rqRvcQ5Ih6KqgdVTG/LvkRsMP64rqereskJ eL8VjUx9hb2NLXs6nJN1b6IggItK340yOqc+zvjwvhsrKCIts7Sux6ivMAJ9Hzg3 evVjhpMFY2k53NbBisgkr7pdJjducwLzlllUpmFALd5i5yphOamVNwd0p9ilbImy zGHAzDWXaT03AH/H0Af8iTVmARU7Wm8QLu1NAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUEoP4uVImG4QbwrG5AHBX2fVJkTUwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvRW9QNHVWSW1HNFFi d3JHNUFIQlgyZlZKa1RVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTffDANBgkqhkiG9w0BAQsFAAOCAQEAcYV0o4+aOVnZoIW3Mcbsfrt/L5/3 8fK2vyJPWm2pjJkMgb8pSBSrqXsqF0NTPemfLdV27FUNM8+ukMgD2qRwf+CESgQ9 u1hBvcS1Cl+frCVWndXlEe1nw5FyG3O4/mhpQ78g9eRvQp+IoR5BdhmDvSdz+rMm p02G9R5jNegfNDGANVulAaVglQgPrZvcgwvCrLZRiceQdyQIsHSktsT6fxuoe4FB FF0sGpz/aUJBj0Y9UCyU2as3hc6mEwGD+HeU/oZBedV1Q5gXdtUYgkF+4ndVEn5d 42rdEsO7lytsV//mkaarN1ANeyV7nuOoccmpAzmiR2BUrvPFjmruvzizNQ== -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:44 2025 by rpki-client