$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/uQz-t5HJCKW_m1jHEgeRRnACcxg.roa File: uQz-t5HJCKW_m1jHEgeRRnACcxg.roa (raw, json) Hash identifier: Cr40DIZbapkUsEflmVVypju7WDrbAEeQ8EMW+iG78cE= Subject key identifier: B9:0C:FE:B7:91:C9:08:A5:BF:9B:58:C7:12:07:91:46:70:02:73:18 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1616 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/uQz-t5HJCKW_m1jHEgeRRnACcxg.roa Signing time: Sun 16 Feb 2025 03:24:10 +0000 ROA not before: Sun 16 Feb 2025 03:24:10 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 10103 IP address blocks: 180.223.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 21:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5654 (0x1616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Feb 16 03:24:10 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B90CFEB791C908A5BF9B58C71207914670027318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:85:3a:7d:5c:bf:3e:ef:ac:4f:e7:53:57:70: 98:a2:b5:a2:92:1a:9f:65:39:bf:cf:22:c2:38:54: cf:b8:03:fc:6d:b0:bb:4f:58:be:3d:ce:8b:1c:8d: ad:98:24:94:30:0e:db:5a:7b:4e:3e:21:67:27:3e: 23:c9:72:52:8c:af:b6:77:56:12:a7:62:31:d1:d7: d4:9c:48:a7:8d:68:f7:84:56:0d:ff:72:f6:7e:ab: 51:96:0e:61:51:9f:bc:86:c1:17:bc:d0:39:7e:21: b3:f4:2f:ec:c6:88:2d:a3:a1:f0:66:0c:d9:eb:c0: 3a:07:33:a2:ea:2b:78:73:4e:80:6a:33:37:ae:6f: 58:e0:61:1f:00:e2:ac:b4:74:3d:45:cf:d8:00:53: 62:8b:76:bb:b8:fd:4d:f4:7c:24:23:08:2b:f7:b5: d4:b0:dc:1c:36:7b:34:f3:86:7e:26:5d:5a:9e:9d: 54:44:1e:f0:f5:89:bd:a0:c4:7d:31:6b:5d:70:73: a5:b4:cb:3d:e7:4d:f2:93:39:08:3a:80:57:43:e6: 61:6e:4e:17:a1:46:cf:97:16:2e:7f:c2:99:ef:cc: db:9b:ff:2c:e8:ce:b7:10:d2:40:b0:2d:a4:aa:a7: b2:39:1e:f3:23:65:50:dd:64:1f:54:05:df:ae:6a: 0d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0C:FE:B7:91:C9:08:A5:BF:9B:58:C7:12:07:91:46:70:02:73:18 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/uQz-t5HJCKW_m1jHEgeRRnACcxg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.124.0/22 Signature Algorithm: sha256WithRSAEncryption d1:5d:9b:45:05:3d:3a:73:6c:20:d4:fa:3b:97:f9:cc:0e:ee: 14:93:a1:df:66:9b:73:04:5f:79:5c:d4:46:9c:e2:c7:60:7c: 13:e5:55:a2:dd:ab:91:8b:93:d5:25:1f:85:0b:cc:a3:58:87: 09:18:ff:b0:42:eb:8d:1b:ca:2f:42:0e:a2:a8:15:95:82:cf: 27:25:80:f9:2d:e6:b0:ba:5a:d9:08:9d:cd:0f:34:bc:ab:86: 95:7b:67:14:a1:83:b2:62:7f:d4:f4:ea:fb:f1:a9:33:5b:25: d6:0a:98:39:d7:8c:4e:c4:bf:d6:ee:14:e4:9d:39:c1:da:95: c4:f7:e5:32:76:91:ab:5a:36:bc:cb:7c:e6:fa:16:e7:17:3c: b5:ad:f9:85:96:71:29:12:d7:0c:98:9a:2a:6e:2c:ca:33:2f: d8:97:ab:79:c3:16:90:2a:62:99:bc:eb:3a:25:0e:f0:c6:d7: ed:f5:ae:80:7f:e2:f5:5c:34:3b:89:99:7c:42:04:c0:ae:a4: 3a:f9:9c:e1:48:80:6a:9c:b1:02:1f:10:d6:0a:4d:30:a2:a1: 4b:60:00:5d:22:73:29:26:33:64:b8:ec:89:40:6b:f8:9e:e9: 8d:fc:6c:de:55:18:68:e9:d5:18:0a:0b:c4:33:1a:a8:42:25: 17:b6:a3:8f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMTYw MzI0MTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI5MENGRUI3OTFDOTA4 QTVCRjlCNThDNzEyMDc5MTQ2NzAwMjczMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjhTp9XL8+76xP51NXcJiitaKSGp9lOb/PIsI4VM+4A/xtsLtP WL49zoscja2YJJQwDttae04+IWcnPiPJclKMr7Z3VhKnYjHR19ScSKeNaPeEVg3/ cvZ+q1GWDmFRn7yGwRe80Dl+IbP0L+zGiC2jofBmDNnrwDoHM6LqK3hzToBqMzeu b1jgYR8A4qy0dD1Fz9gAU2KLdru4/U30fCQjCCv3tdSw3Bw2ezTzhn4mXVqenVRE HvD1ib2gxH0xa11wc6W0yz3nTfKTOQg6gFdD5mFuThehRs+XFi5/wpnvzNub/yzo zrcQ0kCwLaSqp7I5HvMjZVDdZB9UBd+uag1NAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUuQz+t5HJCKW/m1jHEgeRRnACcxgwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvdVF6LXQ1SEpDS1df bTFqSEVnZVJSbkFDY3hnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTffDANBgkqhkiG9w0BAQsFAAOCAQEA0V2bRQU9OnNsINT6O5f5zA7uFJOh 32abcwRfeVzURpzix2B8E+VVot2rkYuT1SUfhQvMo1iHCRj/sELrjRvKL0IOoqgV lYLPJyWA+S3msLpa2QidzQ80vKuGlXtnFKGDsmJ/1PTq+/GpM1sl1gqYOdeMTsS/ 1u4U5J05wdqVxPflMnaRq1o2vMt85voW5xc8ta35hZZxKRLXDJiaKm4syjMv2Jer ecMWkCpimbzrOiUO8MbX7fWugH/i9Vw0O4mZfEIEwK6kOvmc4UiAapyxAh8Q1gpN MKKhS2AAXSJzKSYzZLjsiUBr+J7pjfxs3lUYaOnVGAoLxDMaqEIlF7ajjw== -----END CERTIFICATE-----Generated at Sat Apr 26 18:17:49 2025 by rpki-client