$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/9mhKPDrLvmjNH1vwl9vGvI_HdhA.roa File: 9mhKPDrLvmjNH1vwl9vGvI_HdhA.roa (raw, json) Hash identifier: nsdPybDguln+O7RI8J/23neeqxnqz6e8XPmjVCrSgVU= Subject key identifier: F6:68:4A:3C:3A:CB:BE:68:CD:1F:5B:F0:97:DB:C6:BC:8F:C7:76:10 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 063B Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/9mhKPDrLvmjNH1vwl9vGvI_HdhA.roa Signing time: Fri 23 Aug 2024 14:39:17 +0000 ROA not before: Fri 23 Aug 2024 14:39:17 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 2914 IP address blocks: 58.66.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Aug 23 14:39:17 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=F6684A3C3ACBBE68CD1F5BF097DBC6BC8FC77610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:38:9a:42:fd:ce:e1:08:2f:9a:fd:3f:25:0d: 54:70:59:27:e8:a3:42:2b:a2:ff:d4:a6:ea:2d:38: 95:7c:09:00:3e:d8:2d:de:0c:ee:e5:b8:43:e3:02: b6:d9:94:46:04:b6:56:ac:22:ec:a5:e9:01:89:1b: 95:5c:2b:d7:d7:5d:ca:05:fb:03:03:56:8e:04:d6: 74:33:a6:ea:12:2f:13:fd:a7:f0:e9:20:1e:7a:b3: 16:45:f7:eb:8f:72:d9:aa:49:10:0a:de:12:65:dc: a6:68:e9:48:62:dd:e8:43:5a:d2:f6:ca:17:3a:74: d7:16:3e:17:46:ad:c4:e7:bc:17:0f:42:2c:04:6e: 45:aa:39:e0:84:90:e9:7b:f1:0e:79:3a:b8:35:8c: b6:67:d4:60:ed:20:22:f9:34:6b:d4:6b:1b:7e:f1: 2e:82:cc:a2:cb:e8:ec:54:ab:22:23:be:ef:8d:79: 4f:d9:c1:b9:a9:16:12:e0:f2:17:63:43:4f:c0:0e: c1:06:87:88:37:6d:2c:b4:f0:a4:ad:88:7c:df:9e: df:3c:99:9d:a9:b6:01:73:06:ca:b2:75:83:49:ca: b5:92:87:29:7e:ab:88:b4:9d:ab:97:a3:45:36:b1: 97:d5:a8:3a:e9:61:fb:f9:fb:99:3d:3b:a2:69:1a: 6a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:68:4A:3C:3A:CB:BE:68:CD:1F:5B:F0:97:DB:C6:BC:8F:C7:76:10 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/9mhKPDrLvmjNH1vwl9vGvI_HdhA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 58.66.144.0/21 Signature Algorithm: sha256WithRSAEncryption 43:91:10:f1:82:95:60:6d:92:90:01:b6:19:56:88:4a:a3:3a: 6e:ca:1c:d5:89:64:f1:71:7d:52:81:9b:c1:30:1a:89:f9:5a: e5:4e:1f:13:16:79:82:3e:b0:69:5b:69:44:05:8b:97:65:2f: 42:92:30:92:0a:c5:3c:9b:27:3d:ad:26:83:ac:15:30:6d:1b: 9c:18:f9:61:5c:37:f7:3a:48:f2:b2:fb:89:bd:44:59:ff:f7: 4b:85:4a:6b:af:3b:df:ba:ca:63:37:45:48:2d:57:38:97:00: 69:96:2f:6e:4c:31:b9:e6:6d:c1:89:ae:1f:2d:7c:f7:cc:fa: 48:da:93:94:73:00:80:15:4e:6f:82:dc:c1:ce:a8:93:88:08: 5c:ba:ec:0c:e9:b2:b0:2e:97:bd:41:30:2d:f6:73:90:27:af: 7b:37:85:4d:42:9e:42:bb:e7:7a:f8:d9:4f:22:86:79:f3:09: c8:d7:93:b0:66:d4:20:57:c6:93:d4:4e:2c:d5:56:a2:3b:15: 2a:06:05:d2:a6:c1:58:9f:b7:99:30:8d:6b:d9:47:bd:6d:e1: 82:0e:96:55:6b:47:ee:23:dc:8e:b7:6e:d9:df:77:55:7f:50: 9b:f3:c9:d6:f8:3d:39:34:48:d9:bb:75:16:7e:8a:a9:e6:80: 26:ae:3f:9b -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICBjswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA4MjMx NDM5MTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEY2Njg0QTNDM0FDQkJF NjhDRDFGNUJGMDk3REJDNkJDOEZDNzc2MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdOJpC/c7hCC+a/T8lDVRwWSfoo0Irov/UpuotOJV8CQA+2C3e DO7luEPjArbZlEYEtlasIuyl6QGJG5VcK9fXXcoF+wMDVo4E1nQzpuoSLxP9p/Dp IB56sxZF9+uPctmqSRAK3hJl3KZo6Uhi3ehDWtL2yhc6dNcWPhdGrcTnvBcPQiwE bkWqOeCEkOl78Q55Org1jLZn1GDtICL5NGvUaxt+8S6CzKLL6OxUqyIjvu+NeU/Z wbmpFhLg8hdjQ0/ADsEGh4g3bSy08KStiHzfnt88mZ2ptgFzBsqydYNJyrWShyl+ q4i0nauXo0U2sZfVqDrpYfv5+5k9O6JpGmoTAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU9mhKPDrLvmjNH1vwl9vGvI/HdhAwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvOW1oS1BEckx2bWpOSDF2d2w5 dkd2SV9IZGhBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzpC kDANBgkqhkiG9w0BAQsFAAOCAQEAQ5EQ8YKVYG2SkAG2GVaISqM6bsoc1Ylk8XF9 UoGbwTAaifla5U4fExZ5gj6waVtpRAWLl2UvQpIwkgrFPJsnPa0mg6wVMG0bnBj5 YVw39zpI8rL7ib1EWf/3S4VKa68737rKYzdFSC1XOJcAaZYvbkwxueZtwYmuHy18 98z6SNqTlHMAgBVOb4Lcwc6ok4gIXLrsDOmysC6XvUEwLfZzkCevezeFTUKeQrvn evjZTyKGefMJyNeTsGbUIFfGk9ROLNVWojsVKgYF0qbBWJ+3mTCNa9lHvW3hgg6W VWtH7iPcjrdu2d93VX9Qm/PJ1vg9OTRI2bt1Fn6KqeaAJq4/mw== -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:57 2024 by rpki-client on console-ams.rpki-client.org