$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/acKcSulJc7oamfk0Z-K-XnCjMZA.roa File: acKcSulJc7oamfk0Z-K-XnCjMZA.roa (raw, json) Hash identifier: +Xw164qylm6i0WDTJeBC1q7rudJssef1ncc5mnfu0UE= Subject key identifier: 69:C2:9C:4A:E9:49:73:BA:1A:99:F9:34:67:E2:BE:5E:70:A3:31:90 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 166D Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/acKcSulJc7oamfk0Z-K-XnCjMZA.roa Signing time: Thu 27 Feb 2025 05:58:33 +0000 ROA not before: Thu 27 Feb 2025 05:58:33 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 10103 IP address blocks: 180.223.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5741 (0x166d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Feb 27 05:58:33 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=69C29C4AE94973BA1A99F93467E2BE5E70A33190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:45:ae:04:87:ac:60:5a:d9:0a:af:48:d9: 1a:98:c3:be:ed:c4:7c:9d:6b:9e:56:27:cd:2d:57: 2c:70:ff:4d:0b:a7:73:ea:84:b4:d4:52:2c:ef:c8: b9:6b:44:c1:b3:83:08:95:41:88:f2:1f:79:d0:ad: 4b:a7:3c:a6:58:68:35:2c:21:bb:8a:b5:e7:6a:7a: 3a:95:2b:7c:10:87:d0:f9:a7:54:aa:79:89:3e:7e: f3:ff:64:b6:d0:07:54:b4:94:49:84:e0:b2:25:16: c3:99:c6:b5:39:1a:4a:d3:65:34:d0:b7:bd:ae:8a: 2e:20:c7:57:dd:b1:8b:06:95:6e:86:db:a6:91:af: 78:88:cd:31:1c:04:0a:8b:f0:c8:d5:97:2f:f5:15: 3a:bc:44:48:01:56:06:ee:dd:84:a6:45:84:be:7e: 9e:a3:09:60:6a:04:bb:f2:e3:64:78:48:8f:16:59: 19:19:c1:87:43:35:a1:89:58:d0:e1:55:1a:26:4d: 76:0c:a0:21:ba:2b:9e:7d:ce:24:c0:f2:93:62:33: 09:37:f7:eb:de:81:8a:ba:26:6f:ea:fa:59:41:31: c2:e1:15:62:0a:91:9a:18:1b:eb:98:bd:32:a5:98: 7e:0e:7c:25:5d:96:cc:dc:61:f2:04:5b:9e:b7:83: d5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C2:9C:4A:E9:49:73:BA:1A:99:F9:34:67:E2:BE:5E:70:A3:31:90 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/acKcSulJc7oamfk0Z-K-XnCjMZA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.204.0/22 Signature Algorithm: sha256WithRSAEncryption 67:d3:ee:f9:44:15:26:66:4f:39:4c:de:0b:e7:63:75:a8:e5: a6:8d:35:f3:29:ea:90:f6:0f:7e:75:70:4a:5f:92:c1:60:be: 2c:2e:4a:5e:74:0d:65:af:7a:a2:22:b7:ef:51:44:5a:cc:17: 17:2d:ac:f2:f3:47:68:81:d3:9d:10:cc:a9:e9:4e:31:73:10: 27:7d:e5:f4:bb:c7:17:f1:c9:52:e9:ac:01:89:e1:1a:cf:46: 87:a8:27:db:87:02:6d:f5:3c:71:d4:21:db:69:3e:5a:6e:c2: 16:28:ed:a2:2a:8f:bb:4c:02:96:eb:ec:ca:1c:18:dc:13:41: 56:4d:68:6a:f3:0a:ad:f6:3f:6d:95:99:08:a0:40:67:9b:96: cf:7f:aa:ef:32:8b:b5:d7:ef:d9:f7:ab:57:5c:80:69:58:45: 6b:78:62:c1:a1:55:70:1b:9a:8d:06:b5:6d:14:31:ec:de:a4: 84:de:97:6a:cb:04:a0:5f:52:62:84:4b:ce:ae:62:74:f4:de: 93:95:d9:48:e3:86:fa:ac:89:c7:3d:b7:ea:1e:66:7d:1c:2e: 6e:b8:e2:73:37:d3:a2:21:c0:91:ea:80:ef:e6:71:11:97:4d: 00:62:8d:3f:cf:51:77:cd:7f:6f:e6:18:3d:a7:cc:f7:ef:18: ae:a0:5d:38 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMjcw NTU4MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDY5QzI5QzRBRTk0OTcz QkExQTk5RjkzNDY3RTJCRTVFNzBBMzMxOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEf0WuBIesYFrZCq9I2RqYw77txHyda55WJ80tVyxw/00Lp3Pq hLTUUizvyLlrRMGzgwiVQYjyH3nQrUunPKZYaDUsIbuKtedqejqVK3wQh9D5p1Sq eYk+fvP/ZLbQB1S0lEmE4LIlFsOZxrU5GkrTZTTQt72uii4gx1fdsYsGlW6G26aR r3iIzTEcBAqL8MjVly/1FTq8REgBVgbu3YSmRYS+fp6jCWBqBLvy42R4SI8WWRkZ wYdDNaGJWNDhVRomTXYMoCG6K559ziTA8pNiMwk39+vegYq6Jm/q+llBMcLhFWIK kZoYG+uYvTKlmH4OfCVdlszcYfIEW563g9U/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUacKcSulJc7oamfk0Z+K+XnCjMZAwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvYWNLY1N1bEpjN29h bWZrMFotSy1YbkNqTVpBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfzDANBgkqhkiG9w0BAQsFAAOCAQEAZ9Pu+UQVJmZPOUzeC+djdajlpo01 8ynqkPYPfnVwSl+SwWC+LC5KXnQNZa96oiK371FEWswXFy2s8vNHaIHTnRDMqelO MXMQJ33l9LvHF/HJUumsAYnhGs9Gh6gn24cCbfU8cdQh22k+Wm7CFijtoiqPu0wC luvsyhwY3BNBVk1oavMKrfY/bZWZCKBAZ5uWz3+q7zKLtdfv2ferV1yAaVhFa3hi waFVcBuajQa1bRQx7N6khN6XassEoF9SYoRLzq5idPTek5XZSOOG+qyJxz236h5m fRwubrjiczfToiHAkeqA7+ZxEZdNAGKNP89Rd81/b+YYPafM9+8YrqBdOA== -----END CERTIFICATE-----Generated at Sat Apr 26 15:22:59 2025 by rpki-client