$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/mQbR9Jr3eS9clstGSAISSAFU4IQ.roa File: mQbR9Jr3eS9clstGSAISSAFU4IQ.roa (raw, json) Hash identifier: I+FXdDKg8HDHcoCFO6oWjktmY8np2YK30KvPwzVnZLc= Subject key identifier: 99:06:D1:F4:9A:F7:79:2F:5C:96:CB:46:48:02:12:48:01:54:E0:84 Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1249 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/mQbR9Jr3eS9clstGSAISSAFU4IQ.roa Signing time: Tue 20 Aug 2024 12:56:44 +0000 ROA not before: Tue 20 Aug 2024 12:56:44 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 2914 IP address blocks: 180.223.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 01:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4681 (0x1249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Aug 20 12:56:44 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=9906D1F49AF7792F5C96CB46480212480154E084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:af:8d:e9:48:49:ef:9f:d3:cd:1f:4e:05:d4: 69:f7:32:21:b6:35:41:e5:4a:77:e5:8c:7f:76:6e: b9:1c:40:f8:b8:00:c7:bf:ff:30:c4:27:eb:24:b5: aa:f5:ea:4c:77:49:9c:79:f8:ea:fd:5a:cb:19:9d: 00:27:42:bc:14:fd:e4:41:87:29:1e:12:34:f3:b9: 06:42:d7:5c:71:e3:e6:2d:0e:f2:5e:e6:df:39:9e: e9:0f:60:ad:dc:bc:6b:6f:3e:26:e6:2d:b0:30:6e: f1:9a:6f:49:7b:b2:7d:8c:ec:49:91:fb:88:90:77: 16:d2:29:50:35:eb:18:0a:d5:9d:d4:28:d7:e2:ae: 01:fe:ec:d6:4e:ba:0b:9e:c0:b6:0a:5f:d5:6f:45: 74:14:4b:e3:0e:78:0d:28:a2:a3:00:d5:28:e6:81: b9:9e:b6:8a:03:f8:72:1f:f5:d0:8a:e2:93:00:ca: 6e:d9:8f:30:7f:fa:99:a9:16:7c:27:81:69:c7:b8: cd:23:88:e1:6e:f9:c9:5f:df:8c:e9:fb:eb:7e:79: 98:76:3a:66:8a:60:b2:7f:e3:29:89:b3:68:d2:2d: 69:f3:18:f8:89:58:d4:08:67:4f:cf:66:3a:a7:17: f6:5a:9b:a0:f9:94:b9:ca:1d:f7:d7:8a:71:5b:1d: 53:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:06:D1:F4:9A:F7:79:2F:5C:96:CB:46:48:02:12:48:01:54:E0:84 X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/mQbR9Jr3eS9clstGSAISSAFU4IQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.32.0/21 Signature Algorithm: sha256WithRSAEncryption 66:b8:44:ff:cc:2a:38:92:70:5d:dd:02:56:65:f1:e2:45:06: 82:0d:2d:4c:f8:85:e6:15:84:cc:23:66:ea:2d:5e:84:5c:5a: c4:28:bb:cd:ef:07:78:84:2d:db:7c:81:d2:65:57:7a:9b:81: 85:a1:d2:aa:d4:65:5a:b0:a8:04:cf:b6:4f:75:74:d7:e3:51: 1c:db:de:f1:73:93:ca:64:b2:56:3c:3f:66:05:1a:5f:40:8f: db:48:39:f1:da:cf:74:58:68:7d:ac:bf:cb:4f:fc:f2:d3:0b: 9e:f3:6d:00:27:da:7d:c8:8b:db:98:61:eb:3d:9f:df:16:58: 9f:03:15:e8:1e:f8:94:c3:b0:9a:2e:15:ca:5e:06:66:c3:0d: cb:e4:36:8f:f8:e5:e1:ad:a3:48:f9:ca:1e:26:00:b3:94:38: 06:16:ed:93:72:2b:3f:ec:db:20:56:3a:74:cf:41:ca:9a:7a: ed:4b:f4:b7:67:35:10:6c:94:6e:3f:95:3a:49:8d:99:7e:a6: bc:fb:d8:c9:bb:4c:e2:bc:e8:ef:05:60:d2:fe:c2:87:23:10: 69:f3:01:1f:1a:7b:fc:31:22:55:dc:4d:34:bb:2c:eb:d5:b5: a2:21:c3:cd:20:6c:7d:4d:74:16:01:e1:f8:b5:de:83:4d:4d: 5a:0c:79:61 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEkkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDA4MjAx MjU2NDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDk5MDZEMUY0OUFGNzc5 MkY1Qzk2Q0I0NjQ4MDIxMjQ4MDE1NEUwODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDyr43pSEnvn9PNH04F1Gn3MiG2NUHlSnfljH92brkcQPi4AMe/ /zDEJ+sktar16kx3SZx5+Or9WssZnQAnQrwU/eRBhykeEjTzuQZC11xx4+YtDvJe 5t85nukPYK3cvGtvPibmLbAwbvGab0l7sn2M7EmR+4iQdxbSKVA16xgK1Z3UKNfi rgH+7NZOuguewLYKX9VvRXQUS+MOeA0ooqMA1SjmgbmetooD+HIf9dCK4pMAym7Z jzB/+pmpFnwngWnHuM0jiOFu+clf34zp++t+eZh2OmaKYLJ/4ymJs2jSLWnzGPiJ WNQIZ0/PZjqnF/Zam6D5lLnKHffXinFbHVNHAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUmQbR9Jr3eS9clstGSAISSAFU4IQwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvbVFiUjlKcjNlUzlj bHN0R1NBSVNTQUZVNElRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfIDANBgkqhkiG9w0BAQsFAAOCAQEAZrhE/8wqOJJwXd0CVmXx4kUGgg0t TPiF5hWEzCNm6i1ehFxaxCi7ze8HeIQt23yB0mVXepuBhaHSqtRlWrCoBM+2T3V0 1+NRHNve8XOTymSyVjw/ZgUaX0CP20g58drPdFhofay/y0/88tMLnvNtACfafciL 25hh6z2f3xZYnwMV6B74lMOwmi4Vyl4GZsMNy+Q2j/jl4a2jSPnKHiYAs5Q4Bhbt k3IrP+zbIFY6dM9Bypp67Uv0t2c1EGyUbj+VOkmNmX6mvPvYybtM4rzo7wVg0v7C hyMQafMBHxp7/DEiVdxNNLss69W1oiHDzSBsfU10FgHh+LXeg01NWgx5YQ== -----END CERTIFICATE-----Generated at Thu Nov 21 23:43:03 2024 by rpki-client on console-ams.rpki-client.org