$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/gjWiTT_VQ2bn68fGawe6oIO2_S0.roa File: gjWiTT_VQ2bn68fGawe6oIO2_S0.roa (raw, json) Hash identifier: BkWsHeV1KDkEmsUKsFm/vFyb5VqZw0273JHoxzP0Nzs= Subject key identifier: 82:35:A2:4D:3F:D5:43:66:E7:EB:C7:C6:6B:07:BA:A0:83:B6:FD:2D Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Certificate serial: 15ED Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/gjWiTT_VQ2bn68fGawe6oIO2_S0.roa Signing time: Wed 13 Mar 2024 01:22:28 +0000 ROA not before: Wed 13 Mar 2024 01:22:28 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 18257 IP address blocks: 118.184.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Sep 2024 23:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5613 (0x15ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Validity Not Before: Mar 13 01:22:28 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=8235A24D3FD54366E7EBC7C66B07BAA083B6FD2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:17:f3:c9:14:97:77:2b:ed:81:cb:d4:02:c2: e2:93:12:dc:c1:76:1b:a5:84:fe:85:b6:28:3d:4e: 83:44:d0:55:50:c6:09:9e:b0:9a:b6:15:8c:aa:fe: 50:d1:dc:db:c1:aa:b0:d2:f2:40:a6:4c:ed:6d:3d: c9:86:4f:38:e3:e7:7e:f8:ac:58:3a:0e:b8:04:9e: 04:2d:f1:d6:20:b9:6f:ba:f5:97:10:1e:f0:4d:22: b3:14:be:36:d2:de:a4:42:3f:ca:e6:5d:64:cc:26: ba:f5:a1:0c:0e:84:3b:12:5a:d2:83:4f:9f:29:f6: b9:f8:de:94:6f:b6:9b:73:84:2d:f7:55:86:1f:67: 2c:bb:e3:42:7a:05:08:ac:69:45:4b:3e:14:ea:b2: 95:5a:43:15:b8:ce:fc:bb:7a:1f:e7:f6:f2:c0:d2: ca:14:bf:7a:1d:09:23:db:b9:a3:31:e8:95:b3:99: 5c:6d:42:79:fb:3e:44:e3:f8:49:65:df:37:9f:97: d3:c7:d4:fa:1d:fd:a8:18:1f:54:7a:4d:8d:2a:1e: d6:4a:97:6f:b4:fd:24:c3:1d:95:60:1d:d1:8e:d2: 4c:0d:c4:ef:29:e0:9c:29:c3:88:1f:47:7d:f4:f3: 2b:b8:71:4c:4f:a9:5d:6e:78:10:65:5f:98:f2:b1: 7a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:35:A2:4D:3F:D5:43:66:E7:EB:C7:C6:6B:07:BA:A0:83:B6:FD:2D X509v3 Authority Key Identifier: keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/gjWiTT_VQ2bn68fGawe6oIO2_S0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.184.128.0/17 Signature Algorithm: sha256WithRSAEncryption ab:74:f2:b3:9d:5f:da:66:95:ba:84:fb:2a:36:7e:9e:74:29: 6d:90:45:c6:05:d5:5e:5e:db:6f:81:af:09:eb:1f:1e:7f:f1: 0e:74:91:42:37:59:16:cf:32:45:d0:04:9e:53:6d:64:f7:c6: 3b:c8:49:85:ad:bc:1c:ea:9e:6f:0d:e2:45:69:89:23:2d:7d: ca:3d:f6:b2:03:71:bd:9e:62:d8:b9:07:d5:98:24:68:d3:bb: 26:33:39:95:40:35:af:56:16:d4:9c:f6:f6:02:30:2f:80:13: 0d:77:fe:18:b7:14:79:58:d9:d8:c6:c8:6a:8b:60:e3:f4:0c: 39:63:e4:7c:4f:47:bf:6c:1c:07:a2:08:63:44:27:44:73:1a: e3:d5:5a:6e:9f:90:42:39:de:42:24:90:0b:a8:be:db:0c:09: 08:b5:c4:6b:20:d0:2e:0f:ec:66:29:f5:86:e2:c0:00:7e:b9: 82:ce:e6:a1:74:a1:60:af:1a:dd:fa:7a:ee:f2:f2:67:18:64: d9:7d:9e:8f:af:23:d9:9e:fc:06:cc:0e:39:66:b2:90:f4:65: 33:d9:8f:80:71:96:73:7a:36:56:ea:92:ae:13:a1:de:94:53: e8:7c:2d:0b:bb:08:a6:2f:72:2d:0b:6f:ad:4c:81:b6:a9:10: a1:fe:d0:88 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUMx MEM5MzQ1NTc1OUM2NTlEMkJCODE5RkIwN0ZGNzA2M0NFQ0MzMjAeFw0yNDAzMTMw MTIyMjhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDgyMzVBMjREM0ZENTQz NjZFN0VCQzdDNjZCMDdCQUEwODNCNkZEMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6F/PJFJd3K+2By9QCwuKTEtzBdhulhP6Ftig9ToNE0FVQxgme sJq2FYyq/lDR3NvBqrDS8kCmTO1tPcmGTzjj5374rFg6DrgEngQt8dYguW+69ZcQ HvBNIrMUvjbS3qRCP8rmXWTMJrr1oQwOhDsSWtKDT58p9rn43pRvtptzhC33VYYf Zyy740J6BQisaUVLPhTqspVaQxW4zvy7eh/n9vLA0soUv3odCSPbuaMx6JWzmVxt Qnn7PkTj+Ell3zefl9PH1Pod/agYH1R6TY0qHtZKl2+0/STDHZVgHdGO0kwNxO8p 4Jwpw4gfR3308yu4cUxPqV1ueBBlX5jysXpVAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUgjWiTT/VQ2bn68fGawe6oIO2/S0wHwYDVR0jBBgwFoAU7BDJNFV1nGWdK7gZ +wf/cGPOzDIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMy OS83QkRKTkZWMW5HV2RLN2daLXdmX2NHUE96REkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzdCREpORlYxbkdXZEs3Z1otd2ZfY0dQT3pESS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMjkvZ2pXaVRUX1ZRMmJu NjhmR2F3ZTZvSU8yX1MwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB3a4gDANBgkqhkiG9w0BAQsFAAOCAQEAq3Tys51f2maVuoT7KjZ+nnQpbZBF xgXVXl7bb4GvCesfHn/xDnSRQjdZFs8yRdAEnlNtZPfGO8hJha28HOqebw3iRWmJ Iy19yj32sgNxvZ5i2LkH1ZgkaNO7JjM5lUA1r1YW1Jz29gIwL4ATDXf+GLcUeVjZ 2MbIaotg4/QMOWPkfE9Hv2wcB6IIY0QnRHMa49Vabp+QQjneQiSQC6i+2wwJCLXE ayDQLg/sZin1huLAAH65gs7moXShYK8a3fp67vLyZxhk2X2ej68j2Z78BswOOWay kPRlM9mPgHGWc3o2VuqSrhOh3pRT6HwtC7sIpi9yLQtvrUyBtqkQof7QiA== -----END CERTIFICATE-----Generated at Fri Sep 27 19:09:27 2024 by rpki-client on console-ams.rpki-client.org