$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/YUTaitbqeWuGbQ2rr41A4r6MI2o.roa File: YUTaitbqeWuGbQ2rr41A4r6MI2o.roa (raw, json) Hash identifier: oR/TKrNjxqwMLu60JbwdUY9mr4Nx51MHNvwfHggaBJE= Subject key identifier: 61:44:DA:8A:D6:EA:79:6B:86:6D:0D:AB:AF:8D:40:E2:BE:8C:23:6A Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 166C Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/YUTaitbqeWuGbQ2rr41A4r6MI2o.roa Signing time: Thu 27 Feb 2025 05:58:32 +0000 ROA not before: Thu 27 Feb 2025 05:58:32 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 10103 IP address blocks: 180.223.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5740 (0x166c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Feb 27 05:58:32 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6144DA8AD6EA796B866D0DABAF8D40E2BE8C236A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:ea:29:7e:24:d5:73:f0:31:35:6b:5b:ca: 49:6f:d2:23:9a:dd:c8:35:09:09:80:4f:fa:28:9f: ee:99:72:bb:03:a8:7e:62:10:bc:2e:f5:59:8a:f7: 96:8c:34:83:0d:d6:28:74:59:af:6d:9a:5f:7b:e3: df:8f:d1:fc:0b:95:cc:1e:96:7c:0a:ae:16:a8:96: a7:e8:52:c5:ef:b8:10:94:ec:38:69:59:67:9a:ff: 66:ef:76:88:bc:ed:1b:7a:df:92:a3:0d:8b:8d:77: 5c:ce:6e:bd:d1:ad:a4:97:49:f6:18:65:f7:73:6a: ad:25:23:9f:7b:96:8a:98:f5:2a:12:f7:7d:20:f2: 57:01:f4:73:92:25:3f:a2:a8:3e:b6:36:94:1a:2f: 6e:06:d2:a2:e2:81:6e:71:10:63:b5:c8:59:1c:7b: b9:eb:11:6c:b1:33:07:4f:a0:de:44:aa:40:f1:62: 58:51:be:1b:c5:03:d6:d5:1a:84:c8:da:bb:db:4b: 49:64:8b:2e:2b:1c:e1:c4:08:f3:3a:eb:0f:db:b5: 89:a7:2f:ed:45:c9:f2:b4:15:f3:3f:86:b6:38:30: a6:b0:8f:72:89:07:e5:62:01:1c:f2:15:01:1e:8b: 42:b0:08:03:ef:46:98:27:24:2a:19:4e:75:aa:8b: 9f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:44:DA:8A:D6:EA:79:6B:86:6D:0D:AB:AF:8D:40:E2:BE:8C:23:6A X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/YUTaitbqeWuGbQ2rr41A4r6MI2o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.120.0/22 Signature Algorithm: sha256WithRSAEncryption 49:fe:29:1d:fe:cf:5e:08:f7:dc:e8:69:04:10:10:4e:b7:96: 7f:60:32:b4:a6:a1:80:7f:3a:a3:cc:ca:eb:2f:4f:3d:10:99: db:3d:9d:8c:cd:14:b2:17:77:10:db:85:cd:03:ea:3d:86:6b: c6:fc:b3:72:98:d4:2d:ef:33:22:e7:e6:7c:ac:6d:0e:f2:c0: f0:8d:08:3b:58:21:44:18:d5:d6:2f:f3:92:e1:61:8f:89:19: 07:c3:25:0f:28:97:c9:89:5a:b5:c0:f6:92:5a:5b:d3:92:a5: b6:d7:d6:79:be:a9:7b:6f:96:7e:3a:56:3e:b0:62:13:a6:66: 03:28:59:13:34:e8:03:72:66:e0:1b:36:d2:5d:ee:dd:5e:a0: e3:fc:e8:e7:ed:01:70:97:4e:4e:61:35:49:4c:e3:69:84:75: ab:a9:8d:8b:06:34:f4:63:39:be:a4:0b:25:b6:7e:fe:05:4b: dd:d6:f5:f2:e0:0b:74:fa:32:dd:90:1a:b7:23:af:d1:c2:6f: 15:d9:ff:84:33:e5:98:d5:59:5e:be:ff:70:db:8b:33:7f:4b: e0:2c:97:2c:ab:92:b2:1d:f4:e5:e7:f5:3d:79:00:92:10:a5: 35:d8:ab:02:e6:e9:98:31:f0:33:d3:29:d2:27:f0:5c:06:42: c3:03:b8:0b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFmwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMjcw NTU4MzJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYxNDREQThBRDZFQTc5 NkI4NjZEMERBQkFGOEQ0MEUyQkU4QzIzNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEMeopfiTVc/AxNWtbyklv0iOa3cg1CQmAT/oon+6ZcrsDqH5i ELwu9VmK95aMNIMN1ih0Wa9tml9749+P0fwLlcwelnwKrhaolqfoUsXvuBCU7Dhp WWea/2bvdoi87Rt635KjDYuNd1zObr3RraSXSfYYZfdzaq0lI597loqY9SoS930g 8lcB9HOSJT+iqD62NpQaL24G0qLigW5xEGO1yFkce7nrEWyxMwdPoN5EqkDxYlhR vhvFA9bVGoTI2rvbS0lkiy4rHOHECPM66w/btYmnL+1FyfK0FfM/hrY4MKawj3KJ B+ViARzyFQEei0KwCAPvRpgnJCoZTnWqi58RAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUYUTaitbqeWuGbQ2rr41A4r6MI2owHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvWVVUYWl0YnFlV3VH YlEycnI0MUE0cjZNSTJvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfeDANBgkqhkiG9w0BAQsFAAOCAQEASf4pHf7PXgj33OhpBBAQTreWf2Ay tKahgH86o8zK6y9PPRCZ2z2djM0Ushd3ENuFzQPqPYZrxvyzcpjULe8zIufmfKxt DvLA8I0IO1ghRBjV1i/zkuFhj4kZB8MlDyiXyYlatcD2klpb05KlttfWeb6pe2+W fjpWPrBiE6ZmAyhZEzToA3Jm4Bs20l3u3V6g4/zo5+0BcJdOTmE1SUzjaYR1q6mN iwY09GM5vqQLJbZ+/gVL3db18uALdPoy3ZAatyOv0cJvFdn/hDPlmNVZXr7/cNuL M39L4CyXLKuSsh305ef1PXkAkhClNdirAubpmDHwM9Mp0ifwXAZCwwO4Cw== -----END CERTIFICATE-----Generated at Sun May 18 03:10:02 2025 by rpki-client