$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/9HxbDkuwh6vttvCVPqZqyZYlGgk.roa File: 9HxbDkuwh6vttvCVPqZqyZYlGgk.roa (raw, json) Hash identifier: gQLFG41lZqtGSr3yCWySj5iiG/dFKoy5kbzEiWrDXfI= Subject key identifier: F4:7C:5B:0E:4B:B0:87:AB:ED:B6:F0:95:3E:A6:6A:C9:96:25:1A:09 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 0641 Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/9HxbDkuwh6vttvCVPqZqyZYlGgk.roa Signing time: Fri 23 Aug 2024 14:39:19 +0000 ROA not before: Fri 23 Aug 2024 14:39:19 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 2914 IP address blocks: 58.66.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Aug 23 14:39:19 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=F47C5B0E4BB087ABEDB6F0953EA66AC996251A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:da:72:15:5d:b4:3f:38:ba:2b:16:d4:f9: ca:66:45:3b:59:b8:7c:b5:88:eb:5d:55:46:57:c2: ff:0a:2e:bd:42:df:44:74:93:05:15:06:50:9f:d1: 31:26:4b:7d:ce:d5:cc:5b:11:84:b7:f1:34:3c:de: 3a:ec:95:4a:61:1d:1b:1d:ae:75:ce:1b:a4:3f:51: 63:29:f1:e7:e1:1f:49:a0:d2:66:d4:5e:d2:86:5e: a0:48:9b:05:1f:db:6a:a4:ae:03:83:89:c9:78:e6: d1:41:dd:11:56:c0:a8:dd:b1:f4:73:b7:13:0c:89: 26:75:f7:55:7d:d7:20:fb:30:5d:25:1d:2b:63:7e: f3:35:e0:8a:6c:6f:9c:c0:69:8a:f4:12:fd:a2:e1: c6:ea:04:65:c2:f9:f5:6c:90:e5:a8:61:b0:94:5a: 7e:6a:00:00:14:dd:e4:7e:ca:50:2d:1e:18:5c:76: 18:a3:cc:6d:2b:36:cd:a7:5f:82:d6:f9:59:a7:0e: ce:ff:35:62:98:ac:6d:75:0b:31:8b:5f:ad:2e:36: 77:31:bd:58:70:cf:cc:fa:29:74:af:7a:c9:f7:e7: 58:11:5c:cf:25:97:27:42:03:9d:b4:47:71:b9:d3: 00:9c:9f:8d:c7:7e:52:e5:28:73:d7:47:1b:72:d2: 83:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7C:5B:0E:4B:B0:87:AB:ED:B6:F0:95:3E:A6:6A:C9:96:25:1A:09 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/9HxbDkuwh6vttvCVPqZqyZYlGgk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 58.66.128.0/21 Signature Algorithm: sha256WithRSAEncryption 98:0b:09:27:62:89:6d:a0:de:aa:d5:f4:ff:8b:9e:5a:3e:7f: 56:b6:9f:84:ff:d9:2e:ec:2e:c4:fc:75:b6:49:88:f4:b7:6d: 78:8e:cf:5f:ab:21:06:3e:3d:6a:d2:4b:4e:2a:58:18:f5:63: c2:e9:a3:7c:78:8e:ce:86:cb:d7:b6:39:cd:f5:c5:c1:18:3f: fa:37:36:20:e3:2a:8e:06:b5:37:fd:57:68:f9:f0:d8:80:c3: 25:2f:9e:fb:8c:9e:42:f1:b6:bf:45:f5:b0:f3:75:e9:6e:a4: 0b:ce:2e:bb:9a:37:04:c7:b4:5a:56:d3:0f:ac:42:d7:d9:33: 0d:0e:1a:cf:16:d4:03:f5:a7:5e:c9:f2:1f:cb:fa:cc:f6:7c: b7:97:ba:2a:41:f1:7e:cf:2a:29:66:40:a7:72:0b:06:4c:31: 1d:a2:9e:c7:f1:81:d1:11:f1:b6:79:8f:30:02:de:a7:c2:2c: 8f:1e:e6:1f:7b:83:00:7c:da:93:2b:a2:67:74:e9:8a:e5:3a: ee:59:31:5a:c6:1c:27:52:47:5b:f1:dc:e3:cd:2d:82:ac:45: 6e:db:c9:2b:d6:69:08:49:46:9c:89:c8:da:70:42:2e:55:45: 2d:aa:96:9f:d3:4f:2c:38:7f:b0:3e:fd:1c:ba:52:eb:43:78: dc:ea:80:c5 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA4MjMx NDM5MTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEY0N0M1QjBFNEJCMDg3 QUJFREI2RjA5NTNFQTY2QUM5OTYyNTFBMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCk39pyFV20Pzi6KxbU+cpmRTtZuHy1iOtdVUZXwv8KLr1C30R0 kwUVBlCf0TEmS33O1cxbEYS38TQ83jrslUphHRsdrnXOG6Q/UWMp8efhH0mg0mbU XtKGXqBImwUf22qkrgODicl45tFB3RFWwKjdsfRztxMMiSZ191V91yD7MF0lHStj fvM14Ipsb5zAaYr0Ev2i4cbqBGXC+fVskOWoYbCUWn5qAAAU3eR+ylAtHhhcdhij zG0rNs2nX4LW+VmnDs7/NWKYrG11CzGLX60uNncxvVhwz8z6KXSvesn351gRXM8l lydCA520R3G50wCcn43HflLlKHPXRxty0oOJAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU9HxbDkuwh6vttvCVPqZqyZYlGgkwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvOUh4YkRrdXdoNnZ0dHZDVlBx WnF5WllsR2drLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzpC gDANBgkqhkiG9w0BAQsFAAOCAQEAmAsJJ2KJbaDeqtX0/4ueWj5/VrafhP/ZLuwu xPx1tkmI9LdteI7PX6shBj49atJLTipYGPVjwumjfHiOzobL17Y5zfXFwRg/+jc2 IOMqjga1N/1XaPnw2IDDJS+e+4yeQvG2v0X1sPN16W6kC84uu5o3BMe0WlbTD6xC 19kzDQ4azxbUA/WnXsnyH8v6zPZ8t5e6KkHxfs8qKWZAp3ILBkwxHaKex/GB0RHx tnmPMALep8Isjx7mH3uDAHzakyuiZ3TpiuU67lkxWsYcJ1JHW/Hc480tgqxFbtvJ K9ZpCElGnInI2nBCLlVFLaqWn9NPLDh/sD79HLpS60N43OqAxQ== -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:29 2024 by rpki-client on console-fra.rpki-client.org