$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/8DWvblbLdZ0UJg_lbZxhFqIwNAo.roa File: 8DWvblbLdZ0UJg_lbZxhFqIwNAo.roa (raw, json) Hash identifier: LobJLnAOnwtBZLm725SmFykS5055ksgKlshhBEuxNhc= Subject key identifier: F0:35:AF:6E:56:CB:75:9D:14:26:0F:E5:6D:9C:61:16:A2:30:34:0A Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 17A0 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/8DWvblbLdZ0UJg_lbZxhFqIwNAo.roa Signing time: Tue 29 Apr 2025 08:21:35 +0000 ROA not before: Tue 29 Apr 2025 08:21:35 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4766 IP address blocks: 180.223.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6048 (0x17a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Apr 29 08:21:35 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F035AF6E56CB759D14260FE56D9C6116A230340A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:48:81:ae:f8:39:c1:b4:ae:7b:1e:9b:db: 54:aa:1f:95:eb:2f:e2:fa:0d:a8:fb:58:67:0b:9b: 78:b6:74:74:5f:9b:d1:c9:5c:8c:bb:9e:12:ac:7e: 32:2a:7a:73:3a:6f:7e:58:4a:15:27:32:89:ec:7a: 0a:fa:2b:3c:34:d5:be:74:db:f1:7f:34:e4:c6:bb: d2:95:ee:9e:0a:1d:44:31:a8:07:46:40:b9:3f:84: 6e:e9:32:58:8d:b1:69:d9:67:ea:0e:73:b8:52:87: 5f:fb:5a:9d:8a:3e:c0:09:5c:9d:3f:67:03:04:fd: 73:93:fc:c3:60:83:3e:34:47:f8:8f:ac:a7:e3:95: 39:22:10:56:54:72:31:70:45:0d:e3:68:cd:5d:34: c0:52:10:74:08:96:f9:a9:ac:68:3a:f8:6b:a6:31: dc:11:8e:0c:05:4c:dc:e7:e3:be:9e:2c:ef:33:c8: 70:47:d1:9d:53:d0:86:09:5d:d2:67:06:ed:59:35: 4a:04:b9:a4:c5:d3:0e:83:e5:9b:75:79:e5:6e:0d: 32:80:ec:42:b9:65:9f:f8:df:4b:32:8a:9c:a7:09: f4:5e:23:5f:6b:7d:2d:f8:92:e3:08:7c:de:65:cc: cf:88:5e:af:11:a8:91:ce:3e:f9:d9:4c:f6:3a:0d: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:35:AF:6E:56:CB:75:9D:14:26:0F:E5:6D:9C:61:16:A2:30:34:0A X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/8DWvblbLdZ0UJg_lbZxhFqIwNAo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.64.0/18 Signature Algorithm: sha256WithRSAEncryption 30:fd:52:7f:9e:19:f9:b1:cf:05:42:00:89:a7:f5:60:10:a9: c6:c2:a5:84:ca:b9:5f:95:5b:40:08:21:77:f5:c6:50:81:a4: d2:5d:af:f6:2b:2b:40:a2:f4:3d:8f:dd:92:2e:6f:d2:c2:f3: 21:1a:ef:57:b6:9a:d2:c6:76:1f:82:55:fb:60:e2:c8:e4:a8: 21:fd:f5:cc:1f:86:80:f0:c3:c6:af:ac:30:06:23:25:a9:36: c2:28:92:e9:38:6a:27:67:22:45:e2:f6:32:df:9a:8d:78:0a: ef:3f:ec:6a:14:d9:a7:b7:bb:c4:da:14:b4:61:44:d9:1f:a0: 18:c7:dd:9d:4e:83:2e:56:22:97:ca:b3:dd:d1:19:73:66:b4: 27:13:80:66:73:ef:2f:5b:32:9c:b8:e7:85:e0:1c:ad:9c:41: 69:9d:02:f6:00:d4:59:a8:6a:b8:af:8d:21:45:7a:48:56:4c: 50:88:8f:2b:e6:fd:09:86:76:c9:93:a4:61:99:1e:b8:a7:3a: d0:43:8e:03:8c:c8:32:4f:37:cc:5d:64:8e:0f:7f:05:8b:cd: ef:7e:b5:76:43:6a:db:7b:01:6b:32:a3:50:f0:aa:c5:8b:23: ce:57:29:15:d9:2f:50:8c:ea:2d:ec:45:7c:6d:e1:50:4b:23: 9d:92:48:5d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICF6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA0Mjkw ODIxMzVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEYwMzVBRjZFNTZDQjc1 OUQxNDI2MEZFNTZEOUM2MTE2QTIzMDM0MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP40iBrvg5wbSuex6b21SqH5XrL+L6Daj7WGcLm3i2dHRfm9HJ XIy7nhKsfjIqenM6b35YShUnMonsegr6Kzw01b502/F/NOTGu9KV7p4KHUQxqAdG QLk/hG7pMliNsWnZZ+oOc7hSh1/7Wp2KPsAJXJ0/ZwME/XOT/MNggz40R/iPrKfj lTkiEFZUcjFwRQ3jaM1dNMBSEHQIlvmprGg6+GumMdwRjgwFTNzn476eLO8zyHBH 0Z1T0IYJXdJnBu1ZNUoEuaTF0w6D5Zt1eeVuDTKA7EK5ZZ/430syipynCfReI19r fS34kuMIfN5lzM+IXq8RqJHOPvnZTPY6DX9bAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU8DWvblbLdZ0UJg/lbZxhFqIwNAowHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvOERXdmJsYkxkWjBV SmdfbGJaeGhGcUl3TkFvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBrTfQDANBgkqhkiG9w0BAQsFAAOCAQEAMP1Sf54Z+bHPBUIAiaf1YBCpxsKl hMq5X5VbQAghd/XGUIGk0l2v9isrQKL0PY/dki5v0sLzIRrvV7aa0sZ2H4JV+2Di yOSoIf31zB+GgPDDxq+sMAYjJak2wiiS6ThqJ2ciReL2Mt+ajXgK7z/sahTZp7e7 xNoUtGFE2R+gGMfdnU6DLlYil8qz3dEZc2a0JxOAZnPvL1synLjnheAcrZxBaZ0C 9gDUWahquK+NIUV6SFZMUIiPK+b9CYZ2yZOkYZkeuKc60EOOA4zIMk83zF1kjg9/ BYvN7361dkNq23sBazKjUPCqxYsjzlcpFdkvUIzqLexFfG3hUEsjnZJIXQ== -----END CERTIFICATE-----Generated at Sat May 17 09:55:20 2025 by rpki-client