$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/jMUL_geqSX_CnGs_AR5C0uy9Wzo.roa File: jMUL_geqSX_CnGs_AR5C0uy9Wzo.roa (raw, json) Hash identifier: emauxXsre4XYK0aBDc+ju3MGEA9D2IW7enVfogFPdGE= Subject key identifier: 8C:C5:0B:FE:07:AA:49:7F:C2:9C:6B:3F:01:1E:42:D2:EC:BD:5B:3A Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 166E Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/jMUL_geqSX_CnGs_AR5C0uy9Wzo.roa Signing time: Thu 27 Feb 2025 05:58:33 +0000 ROA not before: Thu 27 Feb 2025 05:58:33 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 18811 IP address blocks: 180.223.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 06:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5742 (0x166e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Feb 27 05:58:33 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8CC50BFE07AA497FC29C6B3F011E42D2ECBD5B3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:df:60:0a:bb:ba:bd:93:90:c8:12:9b:c2:ea: 4e:90:7d:6c:cc:5d:9c:d7:c0:3d:11:00:c5:c8:c1: 99:03:71:8f:3f:64:14:a7:09:cd:4a:f2:9f:f4:04: bd:59:60:27:12:03:8a:9f:10:62:e4:2e:1d:91:fa: 42:e4:53:b7:7e:56:ae:2e:b4:15:72:e4:d3:ba:4a: 65:6b:93:28:8c:9a:8d:2b:fb:91:65:b7:6d:85:20: d0:83:1c:34:19:f9:35:52:a2:f1:9e:cd:25:52:bb: eb:3e:1a:ef:ee:c3:bc:65:61:f4:a4:d4:35:50:15: 27:0e:37:b0:da:ab:9c:89:c7:42:b5:11:f5:c4:5b: 6f:72:63:e5:a8:4d:d2:83:d4:e5:dc:69:91:54:9c: f7:c9:a7:f6:e5:5c:22:f4:24:70:eb:84:34:f8:46: cf:e5:e4:ab:55:d6:98:86:e8:b5:50:86:f8:6d:db: 7b:a3:1d:a6:d8:48:aa:83:5d:ee:3e:8f:57:0c:76: be:3d:55:26:10:2f:ec:29:72:14:7a:7b:5f:fe:2c: 19:df:6c:75:b1:68:19:b5:5e:e7:13:ed:59:4f:24: 7b:e8:0a:42:31:e4:37:f7:29:44:a9:4f:ff:a1:7e: a0:28:c5:7f:37:05:3a:ee:e6:8e:f9:32:ee:d4:2e: c0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C5:0B:FE:07:AA:49:7F:C2:9C:6B:3F:01:1E:42:D2:EC:BD:5B:3A X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/jMUL_geqSX_CnGs_AR5C0uy9Wzo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.120.0/22 Signature Algorithm: sha256WithRSAEncryption a9:1d:e3:d4:1e:c6:2f:4f:65:d5:ce:2d:c1:50:7a:09:9c:cd: d3:07:11:a4:fc:a6:8b:bb:b3:53:5b:01:2f:7e:15:33:2f:f0: e4:59:a1:6c:07:b2:26:67:e2:55:c2:74:84:79:48:b0:dd:67: c8:27:1e:e9:b0:43:ae:53:3a:2e:be:b8:aa:86:fb:33:b6:e3: 1f:33:74:37:cb:23:5e:7b:0e:68:9b:d6:ad:b0:a3:ba:84:cd: 47:37:52:6e:93:7a:51:bd:4b:b3:9c:3d:37:63:bb:31:1a:65: ac:42:de:a6:d6:12:f3:b8:d7:a2:0e:40:80:01:71:d0:5b:60: 82:f8:8c:f8:94:d3:e9:6b:a4:38:de:a0:08:4f:a7:3b:42:94: 5e:4c:1f:47:9e:62:1f:95:a9:f9:38:d4:b1:56:b3:16:a9:4f: 04:fa:dc:bf:71:51:97:58:81:0d:c1:f1:51:59:08:aa:bf:40: 67:bd:be:33:2c:9f:86:54:95:c5:b8:11:65:1c:84:5a:15:1c: c2:32:ad:3c:96:88:bc:fd:01:03:f2:7d:47:6a:42:ef:68:43: bb:1f:4b:d4:35:02:80:9f:bd:b1:b7:82:50:87:09:22:4f:9c: 6a:c9:63:1a:0e:59:53:c2:c2:0b:2c:92:d6:64:88:4e:cf:ca: 2a:a1:cd:e4 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMjcw NTU4MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhDQzUwQkZFMDdBQTQ5 N0ZDMjlDNkIzRjAxMUU0MkQyRUNCRDVCM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD632AKu7q9k5DIEpvC6k6QfWzMXZzXwD0RAMXIwZkDcY8/ZBSn Cc1K8p/0BL1ZYCcSA4qfEGLkLh2R+kLkU7d+Vq4utBVy5NO6SmVrkyiMmo0r+5Fl t22FINCDHDQZ+TVSovGezSVSu+s+Gu/uw7xlYfSk1DVQFScON7Daq5yJx0K1EfXE W29yY+WoTdKD1OXcaZFUnPfJp/blXCL0JHDrhDT4Rs/l5KtV1piG6LVQhvht23uj HabYSKqDXe4+j1cMdr49VSYQL+wpchR6e1/+LBnfbHWxaBm1XucT7VlPJHvoCkIx 5Df3KUSpT/+hfqAoxX83BTru5o75Mu7ULsCnAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUjMUL/geqSX/CnGs/AR5C0uy9WzowHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvak1VTF9nZXFTWF9D bkdzX0FSNUMwdXk5V3pvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTfeDANBgkqhkiG9w0BAQsFAAOCAQEAqR3j1B7GL09l1c4twVB6CZzN0wcR pPymi7uzU1sBL34VMy/w5FmhbAeyJmfiVcJ0hHlIsN1nyCce6bBDrlM6Lr64qob7 M7bjHzN0N8sjXnsOaJvWrbCjuoTNRzdSbpN6Ub1Ls5w9N2O7MRplrELeptYS87jX og5AgAFx0FtggviM+JTT6WukON6gCE+nO0KUXkwfR55iH5Wp+TjUsVazFqlPBPrc v3FRl1iBDcHxUVkIqr9AZ72+MyyfhlSVxbgRZRyEWhUcwjKtPJaIvP0BA/J9R2pC 72hDux9L1DUCgJ+9sbeCUIcJIk+casljGg5ZU8LCCyyS1mSITs/KKqHN5A== -----END CERTIFICATE-----Generated at Sat May 17 06:05:08 2025 by rpki-client