$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/MclEpkJQND4_VAZMQ9HNsS1zu9A.roa File: MclEpkJQND4_VAZMQ9HNsS1zu9A.roa (raw, json) Hash identifier: v6UT6QNl0IcE2DDuia3B9Af+131wYJ1s2Tw0chVLu9I= Subject key identifier: 31:C9:44:A6:42:50:34:3E:3F:54:06:4C:43:D1:CD:B1:2D:73:BB:D0 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1567 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/MclEpkJQND4_VAZMQ9HNsS1zu9A.roa Signing time: Fri 17 Jan 2025 01:27:41 +0000 ROA not before: Fri 17 Jan 2025 01:27:41 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 7018 IP address blocks: 180.223.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 04:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5479 (0x1567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Jan 17 01:27:41 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=31C944A64250343E3F54064C43D1CDB12D73BBD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:14:8f:e8:5a:1b:21:f4:43:3c:54:39:50: 75:c4:75:71:21:0a:ac:dc:53:f9:9d:d8:d6:68:3f: 11:b4:a2:58:43:30:4a:49:8c:f8:80:6e:46:9c:fa: b4:39:53:87:af:c5:f3:58:e3:e5:a6:a4:a3:78:cd: ac:98:f1:9e:bf:6c:b6:24:f5:bb:13:7f:22:02:88: 1f:95:3f:b0:32:01:1e:27:7a:43:32:32:19:0d:25: 3c:7c:55:0f:50:f6:81:aa:f8:62:71:d6:5b:48:41: 63:79:bb:26:61:99:bc:50:42:ce:c4:6d:6b:71:a2: f3:7c:c0:dc:00:80:07:6e:ae:95:ee:31:c4:cf:1f: 80:18:29:11:5c:4f:2e:5e:ef:d5:e6:d3:7e:bb:2e: a6:b7:a2:98:6a:f4:d2:9c:89:02:70:7d:88:d7:e1: e8:72:93:91:f6:5e:86:33:b2:ef:08:8b:63:38:37: 58:f9:08:64:b9:a5:5b:b3:2f:6f:d6:b7:6b:0f:8f: 55:d3:f8:3c:4d:c2:54:19:d2:c2:f8:40:ef:49:f7: f9:77:f6:6c:a0:1a:fd:cd:48:97:7d:a7:a5:dd:bf: 2d:3c:93:e0:c1:2e:3d:65:10:c7:b0:69:b6:8d:b4: 39:42:a7:54:8e:c9:a0:c8:04:05:4d:d7:8d:cc:b3: ea:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C9:44:A6:42:50:34:3E:3F:54:06:4C:43:D1:CD:B1:2D:73:BB:D0 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/MclEpkJQND4_VAZMQ9HNsS1zu9A.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.100.0/22 Signature Algorithm: sha256WithRSAEncryption 38:1d:5c:4b:5d:58:ba:1d:16:58:f6:97:c0:1a:bd:0a:43:78: 68:d6:9f:1a:4b:f5:68:b9:46:63:2a:32:28:15:de:ae:bb:49: 42:82:a8:99:e0:ab:99:6b:e7:70:5b:f9:78:71:97:8f:19:28: 92:ad:37:a2:c5:b8:d1:2d:82:20:8e:1a:c8:4c:62:61:16:36: 7c:0a:ba:25:2a:b1:23:60:fd:30:43:32:57:bb:77:f7:45:d4: 8a:3d:06:27:5b:d3:25:30:ec:83:0b:c8:01:5b:de:e9:6b:2e: 85:9d:c3:be:11:31:f8:c2:32:22:6a:8e:53:3a:d9:2b:ac:05: 54:bb:9f:cf:5c:d5:0a:ed:da:38:71:33:44:55:3d:09:21:05: 28:a2:54:bf:26:b3:88:00:9f:f8:f8:e5:5e:e1:e5:58:8c:ff: 1e:93:e5:54:69:fa:ee:c3:58:8b:54:d3:d9:4a:de:aa:ab:13: bd:32:f9:2c:d5:58:0f:7d:12:39:49:82:8c:14:92:ee:69:5b: 59:6e:77:c2:06:27:a5:9c:4f:33:08:aa:b4:d0:1d:47:1d:66: 95:2a:62:fc:f0:2c:b2:21:cb:64:58:01:36:0e:7a:62:8d:18: 6f:3c:33:17:d1:10:82:5a:46:d0:f2:6f:c6:ac:84:41:25:7a: ad:1e:3a:c1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAxMTcw MTI3NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDMxQzk0NEE2NDI1MDM0 M0UzRjU0MDY0QzQzRDFDREIxMkQ3M0JCRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3RBSP6FobIfRDPFQ5UHXEdXEhCqzcU/md2NZoPxG0olhDMEpJ jPiAbkac+rQ5U4evxfNY4+WmpKN4zayY8Z6/bLYk9bsTfyICiB+VP7AyAR4nekMy MhkNJTx8VQ9Q9oGq+GJx1ltIQWN5uyZhmbxQQs7EbWtxovN8wNwAgAdurpXuMcTP H4AYKRFcTy5e79Xm0367Lqa3ophq9NKciQJwfYjX4ehyk5H2XoYzsu8Ii2M4N1j5 CGS5pVuzL2/Wt2sPj1XT+DxNwlQZ0sL4QO9J9/l39mygGv3NSJd9p6Xdvy08k+DB Lj1lEMewabaNtDlCp1SOyaDIBAVN143Ms+qHAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUMclEpkJQND4/VAZMQ9HNsS1zu9AwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvTWNsRXBrSlFORDRf VkFaTVE5SE5zUzF6dTlBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfZDANBgkqhkiG9w0BAQsFAAOCAQEAOB1cS11Yuh0WWPaXwBq9CkN4aNaf Gkv1aLlGYyoyKBXerrtJQoKomeCrmWvncFv5eHGXjxkokq03osW40S2CII4ayExi YRY2fAq6JSqxI2D9MEMyV7t390XUij0GJ1vTJTDsgwvIAVve6WsuhZ3DvhEx+MIy ImqOUzrZK6wFVLufz1zVCu3aOHEzRFU9CSEFKKJUvyaziACf+PjlXuHlWIz/HpPl VGn67sNYi1TT2UreqqsTvTL5LNVYD30SOUmCjBSS7mlbWW53wgYnpZxPMwiqtNAd Rx1mlSpi/PAssiHLZFgBNg56Yo0YbzwzF9EQglpG0PJvxqyEQSV6rR46wQ== -----END CERTIFICATE-----Generated at Sat May 17 02:35:06 2025 by rpki-client