$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/IZab1wzE5kcb0MVm-Hb3beBBUYY.roa File: IZab1wzE5kcb0MVm-Hb3beBBUYY.roa (raw, json) Hash identifier: AalBbPiIxJrk7N0ZzogP/qT3Dvagp8ymqb1ICTafhxs= Subject key identifier: 21:96:9B:D7:0C:C4:E6:47:1B:D0:C5:66:F8:76:F7:6D:E0:41:51:86 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1862 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/IZab1wzE5kcb0MVm-Hb3beBBUYY.roa Signing time: Fri 06 Jun 2025 13:20:46 +0000 ROA not before: Fri 06 Jun 2025 13:20:46 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 398704 IP address blocks: 180.223.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 09:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6242 (0x1862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jun 6 13:20:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=21969BD70CC4E6471BD0C566F876F76DE0415186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:8f:d7:a9:24:11:4b:aa:ee:a6:43:16:fc: ef:d6:33:4e:7a:7f:fa:0b:c0:24:7f:51:12:17:7f: fe:a5:5d:bd:4a:c4:87:32:0d:c4:b8:d8:ed:73:71: 27:83:f3:f6:63:d7:92:20:b3:18:71:02:cc:5b:6f: e0:60:dc:10:ed:10:ab:11:d1:97:8d:b3:0d:d2:e4: 42:66:b5:79:cc:14:a7:55:58:d5:42:6a:65:32:8a: a3:3c:00:14:67:fb:34:55:8c:41:a4:eb:e3:b8:8e: 7d:63:40:f2:e8:1f:48:9f:c9:3c:86:22:f5:0c:03: 1c:4c:ac:fb:ac:9f:ea:52:3f:df:f0:31:c9:43:ba: bd:a5:12:b4:c0:56:1d:e4:14:ff:10:66:04:9f:57: ea:da:15:7b:ba:1e:d5:6f:e5:3c:a9:b9:3e:d5:06: bf:37:16:25:29:9b:8e:40:68:fb:d3:b0:ce:f1:8b: d6:ac:b0:59:91:cc:38:29:a4:41:f9:82:a3:65:7c: e8:6d:da:e2:ad:09:38:59:93:b7:4b:28:0e:bc:87: 18:0f:40:ec:76:10:f4:97:50:ba:2a:df:d6:0d:ab: 76:e0:e1:93:a9:8e:68:3b:a5:3b:cf:14:9e:29:fd: 7e:5e:48:8d:f5:90:be:84:e9:bf:45:6e:95:a5:71: a9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:96:9B:D7:0C:C4:E6:47:1B:D0:C5:66:F8:76:F7:6D:E0:41:51:86 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/IZab1wzE5kcb0MVm-Hb3beBBUYY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.213.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:7b:f3:2b:85:28:63:27:d7:f4:59:bd:a2:b1:35:ba:81:2f: e7:bc:68:ca:63:53:ca:90:9d:a9:10:7e:53:c9:f7:08:8f:44: 74:fd:f9:c8:63:c4:66:7d:ee:24:08:90:62:b8:0f:8a:51:4e: 55:80:04:9a:b3:9c:c5:62:29:5d:d7:8d:a6:ef:e3:f1:69:41: e7:44:4b:ea:20:b9:9d:0a:58:54:93:40:0a:6b:e0:45:ca:de: 60:af:2b:a4:3a:bf:e8:00:5c:7e:b2:83:b9:ad:95:dd:24:0e: 3d:94:98:8e:f8:48:ae:92:6d:a2:ab:07:0d:cb:cd:99:ea:5d: 2f:4f:bb:dd:09:ab:46:89:73:fc:3a:a1:b7:ec:32:46:97:08: c7:ce:c7:a2:18:d3:13:d3:0b:07:a3:e4:89:e6:80:bf:8a:ac: cd:a8:fc:5c:06:a9:60:bb:e7:97:f5:20:8a:ed:8f:d6:db:8d: ea:3e:5c:6b:49:57:90:0a:9b:23:e0:b1:20:5b:39:d2:40:0a: 7e:08:93:4f:25:2a:4d:38:cb:f9:dc:92:8b:80:26:04:37:2d: 8d:67:b6:2d:38:29:d1:86:58:c9:36:88:30:09:57:7b:8f:8b: 84:dd:96:4f:e7:a0:83:b6:49:0d:49:b5:76:19:93:29:8e:e2: 45:f3:45:ab -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA2MDYx MzIwNDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIxOTY5QkQ3MENDNEU2 NDcxQkQwQzU2NkY4NzZGNzZERTA0MTUxODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsQI/XqSQRS6rupkMW/O/WM056f/oLwCR/URIXf/6lXb1KxIcy DcS42O1zcSeD8/Zj15IgsxhxAsxbb+Bg3BDtEKsR0ZeNsw3S5EJmtXnMFKdVWNVC amUyiqM8ABRn+zRVjEGk6+O4jn1jQPLoH0ifyTyGIvUMAxxMrPusn+pSP9/wMclD ur2lErTAVh3kFP8QZgSfV+raFXu6HtVv5TypuT7VBr83FiUpm45AaPvTsM7xi9as sFmRzDgppEH5gqNlfOht2uKtCThZk7dLKA68hxgPQOx2EPSXULoq39YNq3bg4ZOp jmg7pTvPFJ4p/X5eSI31kL6E6b9FbpWlcalxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUIZab1wzE5kcb0MVm+Hb3beBBUYYwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvSVphYjF3ekU1a2Ni ME1WbS1IYjNiZUJCVVlZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTf1TANBgkqhkiG9w0BAQsFAAOCAQEACnvzK4UoYyfX9Fm9orE1uoEv57xo ymNTypCdqRB+U8n3CI9EdP35yGPEZn3uJAiQYrgPilFOVYAEmrOcxWIpXdeNpu/j 8WlB50RL6iC5nQpYVJNACmvgRcreYK8rpDq/6ABcfrKDua2V3SQOPZSYjvhIrpJt oqsHDcvNmepdL0+73QmrRolz/Dqht+wyRpcIx87HohjTE9MLB6PkieaAv4qszaj8 XAapYLvnl/Ugiu2P1tuN6j5ca0lXkAqbI+CxIFs50kAKfgiTTyUqTTjL+dySi4Am BDctjWe2LTgp0YZYyTaIMAlXe4+LhN2WT+egg7ZJDUm1dhmTKY7iRfNFqw== -----END CERTIFICATE-----Generated at Sun Jun 15 08:47:01 2025 by rpki-client