$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/eLFQtH7LboY_4l_PE69fvIns728.roa File: eLFQtH7LboY_4l_PE69fvIns728.roa (raw, json) Hash identifier: hidcESIdbbOWKg+m85CebwmiGWGf+gnrkA3O2+h5xm8= Subject key identifier: 78:B1:50:B4:7E:CB:6E:86:3F:E2:5F:CF:13:AF:5F:BC:89:EC:EF:6F Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1356 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/eLFQtH7LboY_4l_PE69fvIns728.roa Signing time: Wed 09 Oct 2024 00:44:09 +0000 ROA not before: Wed 09 Oct 2024 00:44:09 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 2914 IP address blocks: 180.223.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 01:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4950 (0x1356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Oct 9 00:44:09 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=78B150B47ECB6E863FE25FCF13AF5FBC89ECEF6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:17:34:3d:7c:0e:03:5f:83:a3:7b:4d:e0:5b: 6f:aa:b7:39:01:46:b2:bd:29:61:d8:b3:ce:16:9c: a5:15:64:74:d9:db:c2:7e:4c:30:2c:7b:0a:f5:db: 4b:7b:a9:a2:4e:05:22:23:b8:4c:13:22:09:81:4d: 96:11:85:ed:fb:f4:ba:c2:6d:ce:d6:52:b9:24:8d: f4:6c:9e:64:bb:56:94:5c:d7:a4:9c:61:e3:a9:6d: 4b:ac:68:3c:f6:9d:51:5d:be:a5:0d:44:c3:02:eb: 51:91:99:b7:d3:b4:4d:6f:c1:5e:15:8a:b9:8b:16: af:3f:ed:78:e6:59:57:8c:17:ee:c6:f1:21:90:2c: 2e:9a:78:fd:1f:8d:48:10:a5:7d:bd:b0:aa:b5:ba: da:50:f4:9e:34:5f:d7:33:ed:c0:dd:35:dc:bf:28: 61:de:d9:8e:a4:47:c9:96:c2:93:41:9c:4d:0b:7d: a9:87:a3:e3:69:8e:58:93:89:07:e3:4a:b8:fe:2c: 6d:f6:5e:3b:89:14:0d:58:d0:cc:0d:92:bd:92:62: d4:1e:1c:7c:5d:b7:a2:32:57:ec:5b:87:80:e5:0d: 24:ad:0e:41:65:8d:e1:c0:ba:12:9e:73:b2:db:24: be:e3:d8:31:a1:a2:4a:ea:ba:8a:25:05:56:c1:71: 57:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B1:50:B4:7E:CB:6E:86:3F:E2:5F:CF:13:AF:5F:BC:89:EC:EF:6F X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/eLFQtH7LboY_4l_PE69fvIns728.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.197.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:6b:2a:ec:94:e9:79:e8:53:f8:9f:cf:67:28:96:9b:13:fe: ba:a2:f4:a9:03:31:21:90:3e:71:c4:1d:bb:d8:e1:cf:db:8f: 88:10:b6:95:f4:4d:2b:0c:25:94:52:43:db:df:5b:0a:95:5a: 7b:4c:09:03:fa:37:c0:80:87:0e:b2:a3:47:b0:e1:82:c8:0b: 4f:4f:4b:7a:33:6e:d3:b8:f2:47:7b:b9:d0:1c:a3:00:5d:5c: b7:27:e2:dc:d0:7b:2d:11:c9:54:1b:97:e0:cc:fd:ef:1c:16: 8b:f6:e9:99:f1:98:29:cb:bf:7c:44:40:8a:12:30:d8:4b:d4: d0:69:d3:86:1a:55:f0:c2:37:0a:09:0f:db:6e:35:39:51:94: 64:2d:9d:61:0b:40:be:ff:aa:bc:68:7c:8d:dc:d2:15:04:f5: 98:e9:84:01:78:ac:65:ad:e8:71:74:12:93:e1:14:1c:3e:93: e1:ba:47:09:fb:82:9c:44:85:ea:8d:d0:9c:76:9c:75:5e:5a: 18:d8:2d:73:4c:b0:b8:5f:2f:ea:42:6c:f6:c8:ce:39:8e:a7: 73:c4:e5:2b:56:f3:b3:6b:cd:c9:53:07:2f:cd:ab:83:2c:8f: 66:5c:fb:d8:c6:dd:11:b2:13:8e:3a:c2:c4:da:97:29:ec:60: 67:dd:a9:a6 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE1YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDEwMDkw MDQ0MDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc4QjE1MEI0N0VDQjZF ODYzRkUyNUZDRjEzQUY1RkJDODlFQ0VGNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQFzQ9fA4DX4Oje03gW2+qtzkBRrK9KWHYs84WnKUVZHTZ28J+ TDAsewr120t7qaJOBSIjuEwTIgmBTZYRhe379LrCbc7WUrkkjfRsnmS7VpRc16Sc YeOpbUusaDz2nVFdvqUNRMMC61GRmbfTtE1vwV4VirmLFq8/7XjmWVeMF+7G8SGQ LC6aeP0fjUgQpX29sKq1utpQ9J40X9cz7cDdNdy/KGHe2Y6kR8mWwpNBnE0LfamH o+NpjliTiQfjSrj+LG32XjuJFA1Y0MwNkr2SYtQeHHxdt6IyV+xbh4DlDSStDkFl jeHAuhKec7LbJL7j2DGhokrquoolBVbBcVevAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUeLFQtH7LboY/4l/PE69fvIns728wHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvZUxGUXRIN0xib1lf NGxfUEU2OWZ2SW5zNzI4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALTfxTANBgkqhkiG9w0BAQsFAAOCAQEATmsq7JTpeehT+J/PZyiWmxP+uqL0 qQMxIZA+ccQdu9jhz9uPiBC2lfRNKwwllFJD299bCpVae0wJA/o3wICHDrKjR7Dh gsgLT09LejNu07jyR3u50ByjAF1ctyfi3NB7LRHJVBuX4Mz97xwWi/bpmfGYKcu/ fERAihIw2EvU0GnThhpV8MI3CgkP2241OVGUZC2dYQtAvv+qvGh8jdzSFQT1mOmE AXisZa3ocXQSk+EUHD6T4bpHCfuCnESF6o3QnHacdV5aGNgtc0ywuF8v6kJs9sjO OY6nc8TlK1bzs2vNyVMHL82rgyyPZlz72MbdEbITjjrCxNqXKexgZ92ppg== -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:26 2024 by rpki-client on console-fra.rpki-client.org