$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/gkfnZQ6mHUQuO6gR3DcmAWtxhyo.roa File: gkfnZQ6mHUQuO6gR3DcmAWtxhyo.roa (raw, json) Hash identifier: HKqzm9HwxR+4AIZo34ShgzZzrkaDFDc42C7mN9NoMx0= Subject key identifier: 82:47:E7:65:0E:A6:1D:44:2E:3B:A8:11:DC:37:26:01:6B:71:87:2A Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1861 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/gkfnZQ6mHUQuO6gR3DcmAWtxhyo.roa Signing time: Fri 06 Jun 2025 13:20:46 +0000 ROA not before: Fri 06 Jun 2025 13:20:46 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 398704 IP address blocks: 180.223.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6241 (0x1861) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jun 6 13:20:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=8247E7650EA61D442E3BA811DC3726016B71872A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:a6:d9:03:5e:95:c8:9b:b5:fc:29:14:5f: a6:a5:07:7e:20:d1:90:12:08:3c:17:49:ce:ae:ee: 99:09:7f:4c:cd:58:d4:7f:ba:f6:96:45:28:20:e9: 55:fc:ec:96:e3:d4:b1:b2:bc:e6:75:68:38:e9:6b: a9:fe:7d:1e:51:73:f9:81:10:b8:84:45:f8:5d:e9: c3:1c:c3:ae:b2:41:3a:14:8c:64:06:41:95:b1:66: 6f:0e:2e:02:3c:ba:91:d3:05:7a:dd:d9:e9:1c:6c: a9:b3:57:e2:a5:ba:83:83:e5:ad:03:ec:b2:04:ad: 25:66:1f:1d:d3:18:3a:c6:d5:d0:cf:11:e9:59:a8: e8:55:2d:b5:77:3f:50:e0:a4:df:25:31:01:d4:10: 57:00:8b:1e:73:a0:fd:54:2d:43:bc:97:f5:d4:17: d5:d7:2d:02:20:7d:0f:dd:9c:02:e9:81:ba:c9:b1: b9:0c:11:42:65:82:2a:f9:b7:57:13:e3:fd:56:68: d4:3f:90:2a:b4:2e:a2:ce:a4:a1:93:29:35:f1:a9: d9:04:b4:0c:de:cd:12:ba:a9:b1:47:fb:5a:95:e4: e0:ae:32:c6:b6:b7:c9:b3:30:96:58:c7:06:77:9b: a3:7f:68:2d:da:0f:e9:9b:b1:33:6f:78:33:fc:fa: 58:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:47:E7:65:0E:A6:1D:44:2E:3B:A8:11:DC:37:26:01:6B:71:87:2A X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/gkfnZQ6mHUQuO6gR3DcmAWtxhyo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.127.0/24 Signature Algorithm: sha256WithRSAEncryption 78:7f:3b:69:40:32:10:1d:cb:ed:8c:a8:2a:27:99:b2:7b:4b: 3e:b6:f4:2b:80:e8:29:c4:9d:8d:23:b1:3f:e8:54:f3:7d:00: 03:3a:b8:6c:1c:41:0d:52:c8:e6:62:f6:75:0c:b9:fe:a6:48: 99:45:06:0e:fa:f2:5c:f5:e1:28:ae:a9:a9:97:31:a1:5c:2e: 49:46:d5:61:55:7f:53:af:93:08:78:4b:a6:a6:15:9e:40:02: ab:be:55:9c:fe:73:79:ed:48:d9:79:39:64:89:a7:5c:9c:cc: 39:9f:04:bd:bd:2e:34:e3:33:8d:b3:4f:64:20:76:51:0e:86: 95:16:61:9c:87:46:d1:7a:f3:ce:e0:73:31:c2:a6:cc:e7:96: 00:09:cf:b5:ec:c2:23:c9:13:47:a5:03:9d:b7:5e:60:1a:ae: 33:e3:0b:39:a9:20:8f:37:83:f3:af:6d:21:a7:a5:19:22:62: 21:68:f0:33:5f:c8:2a:fa:9e:3e:fd:e5:79:69:6b:ed:36:7a: f0:f6:8c:8a:68:ff:e6:8b:af:7f:31:fc:a3:5e:65:89:80:65: 9b:49:90:fe:69:27:ff:73:f4:52:a0:ce:f0:4b:fa:fb:bf:33: 5a:30:c7:f8:23:2b:d7:a2:94:a6:d5:04:03:e1:69:01:d3:49: 9b:6f:e2:c3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGGEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA2MDYx MzIwNDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDgyNDdFNzY1MEVBNjFE NDQyRTNCQTgxMURDMzcyNjAxNkI3MTg3MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT/abZA16VyJu1/CkUX6alB34g0ZASCDwXSc6u7pkJf0zNWNR/ uvaWRSgg6VX87Jbj1LGyvOZ1aDjpa6n+fR5Rc/mBELiERfhd6cMcw66yQToUjGQG QZWxZm8OLgI8upHTBXrd2ekcbKmzV+KluoOD5a0D7LIErSVmHx3TGDrG1dDPEelZ qOhVLbV3P1DgpN8lMQHUEFcAix5zoP1ULUO8l/XUF9XXLQIgfQ/dnALpgbrJsbkM EUJlgir5t1cT4/1WaNQ/kCq0LqLOpKGTKTXxqdkEtAzezRK6qbFH+1qV5OCuMsa2 t8mzMJZYxwZ3m6N/aC3aD+mbsTNveDP8+lgNAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUgkfnZQ6mHUQuO6gR3DcmAWtxhyowHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvZ2tmblpRNm1IVVF1 TzZnUjNEY21BV3R4aHlvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTffzANBgkqhkiG9w0BAQsFAAOCAQEAeH87aUAyEB3L7YyoKieZsntLPrb0 K4DoKcSdjSOxP+hU830AAzq4bBxBDVLI5mL2dQy5/qZImUUGDvryXPXhKK6pqZcx oVwuSUbVYVV/U6+TCHhLpqYVnkACq75VnP5zee1I2Xk5ZImnXJzMOZ8Evb0uNOMz jbNPZCB2UQ6GlRZhnIdG0XrzzuBzMcKmzOeWAAnPtezCI8kTR6UDnbdeYBquM+ML OakgjzeD869tIaelGSJiIWjwM1/IKvqePv3leWlr7TZ68PaMimj/5ouvfzH8o15l iYBlm0mQ/mkn/3P0UqDO8Ev6+78zWjDH+CMr16KUptUEA+FpAdNJm2/iww== -----END CERTIFICATE-----Generated at Sat Jun 21 18:48:58 2025 by rpki-client