$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/8pAtL3GeE3X0Wg1U7szOj_RxbzY.roa File: 8pAtL3GeE3X0Wg1U7szOj_RxbzY.roa (raw, json) Hash identifier: S6scOWYxPhKO7lytvD9FQVNxhndo0YA4D03FU7hwrkk= Subject key identifier: F2:90:2D:2F:71:9E:13:75:F4:5A:0D:54:EE:CC:CE:8F:F4:71:6F:36 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 161D Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/8pAtL3GeE3X0Wg1U7szOj_RxbzY.roa Signing time: Sun 16 Feb 2025 03:24:12 +0000 ROA not before: Sun 16 Feb 2025 03:24:12 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 10103 IP address blocks: 180.223.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 14:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5661 (0x161d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Feb 16 03:24:12 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F2902D2F719E1375F45A0D54EECCCE8FF4716F36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0e:98:6c:3f:0a:61:4c:d7:0d:93:9a:a1:73: e3:8a:7d:1a:2c:de:d7:e2:cd:c4:58:81:1e:06:60: 91:10:cb:ba:83:ea:dc:7c:e4:f2:da:87:ce:14:70: 15:1e:7f:af:56:9a:62:18:8e:8c:0f:9e:f4:ce:18: fa:28:bc:a3:08:c7:a0:46:da:0c:77:c6:78:5f:b4: bd:2c:04:38:93:24:c0:84:aa:00:e7:3d:20:68:fc: 0c:d9:a2:ff:30:73:cf:a5:cb:22:34:c4:0a:bd:2d: c6:7e:f9:8a:80:5e:8d:ef:66:a7:ae:c0:df:76:ff: 3e:54:bb:f8:e9:d1:5c:a2:52:00:db:93:a9:91:45: f1:1a:8b:2d:44:4b:e9:41:dc:a0:f4:d7:15:4e:eb: 67:50:27:ea:b2:9a:4a:48:b4:86:7f:eb:73:da:eb: 60:f6:f6:8c:ac:ee:44:5f:14:ab:3f:92:57:e6:61: c4:93:57:44:ee:8e:41:bc:b6:c1:08:b4:60:86:c9: 66:97:75:85:72:88:72:af:77:d9:a8:f8:03:63:e3: 02:64:57:94:c2:46:5a:cd:d6:5f:09:82:7d:f4:5d: 18:e2:bb:64:37:30:1a:0b:05:2b:dd:bf:98:c4:7a: 59:dd:23:a4:f9:bb:21:84:53:b3:37:bd:14:0b:80: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:90:2D:2F:71:9E:13:75:F4:5A:0D:54:EE:CC:CE:8F:F4:71:6F:36 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/8pAtL3GeE3X0Wg1U7szOj_RxbzY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.212.0/22 Signature Algorithm: sha256WithRSAEncryption 01:bb:62:7a:bd:fd:e3:fe:a0:b2:35:2c:35:df:e6:2c:ae:35: f9:84:af:61:16:78:d1:b9:ff:cc:9b:8c:b0:33:b8:93:13:10: eb:01:81:d1:2a:62:92:b9:36:63:fb:ed:f1:63:58:80:91:62: a2:70:e7:45:de:20:81:76:4a:d7:5f:2d:2b:25:14:c3:c5:5e: 33:a3:f9:58:55:0e:e2:83:40:8a:95:d5:f9:8d:ed:36:66:3b: a5:85:66:ef:db:d2:e2:bf:25:ee:bc:39:b1:61:fd:25:5e:55: db:16:c0:1e:03:30:0a:2c:f0:cb:78:e6:39:6f:10:99:05:92: ec:bf:46:95:bb:23:bb:78:0f:51:06:44:34:99:35:e3:03:60: c8:f2:f0:1a:a9:38:a9:ef:88:dd:be:18:71:09:f6:0a:72:30: d0:17:14:a8:45:05:e1:5d:20:8c:85:ca:f0:70:b0:d4:d7:3a: cb:e2:4b:5e:ee:1b:c1:ae:ef:f6:8c:95:38:0f:db:f9:9b:c0: ab:89:f2:bc:99:e3:86:3b:69:d9:c3:7d:16:99:25:b6:e0:42: d0:44:89:14:73:84:62:f4:ae:33:79:d7:f1:b8:72:f3:87:28: f1:db:3b:ca:98:0b:d1:59:32:88:2f:ea:2f:66:6e:0d:17:bf: 36:21:84:0b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMTYw MzI0MTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEYyOTAyRDJGNzE5RTEz NzVGNDVBMEQ1NEVFQ0NDRThGRjQ3MTZGMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2DphsPwphTNcNk5qhc+OKfRos3tfizcRYgR4GYJEQy7qD6tx8 5PLah84UcBUef69WmmIYjowPnvTOGPoovKMIx6BG2gx3xnhftL0sBDiTJMCEqgDn PSBo/AzZov8wc8+lyyI0xAq9LcZ++YqAXo3vZqeuwN92/z5Uu/jp0VyiUgDbk6mR RfEaiy1ES+lB3KD01xVO62dQJ+qymkpItIZ/63Pa62D29oys7kRfFKs/klfmYcST V0TujkG8tsEItGCGyWaXdYVyiHKvd9mo+ANj4wJkV5TCRlrN1l8Jgn30XRjiu2Q3 MBoLBSvdv5jEelndI6T5uyGEU7M3vRQLgECtAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU8pAtL3GeE3X0Wg1U7szOj/RxbzYwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvOHBBdEwzR2VFM1gw V2cxVTdzek9qX1J4YnpZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTf1DANBgkqhkiG9w0BAQsFAAOCAQEAAbtier394/6gsjUsNd/mLK41+YSv YRZ40bn/zJuMsDO4kxMQ6wGB0Spikrk2Y/vt8WNYgJFionDnRd4ggXZK118tKyUU w8VeM6P5WFUO4oNAipXV+Y3tNmY7pYVm79vS4r8l7rw5sWH9JV5V2xbAHgMwCizw y3jmOW8QmQWS7L9Glbsju3gPUQZENJk14wNgyPLwGqk4qe+I3b4YcQn2CnIw0BcU qEUF4V0gjIXK8HCw1Nc6y+JLXu4bwa7v9oyVOA/b+ZvAq4nyvJnjhjtp2cN9Fpkl tuBC0ESJFHOEYvSuM3nX8bhy84co8ds7ypgL0VkyiC/qL2ZuDRe/NiGECw== -----END CERTIFICATE-----Generated at Sun May 18 14:21:39 2025 by rpki-client