$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/FZT6WU8bM_Xq5QtGGcpT2CzW0Tc.roa File: FZT6WU8bM_Xq5QtGGcpT2CzW0Tc.roa (raw, json) Hash identifier: yky1Hn827ivbKNJs+k4BVM1Kca4nHvQ5DTbnZ0hHHbA= Subject key identifier: 15:94:FA:59:4F:1B:33:F5:EA:E5:0B:46:19:CA:53:D8:2C:D6:D1:37 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 0629 Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/FZT6WU8bM_Xq5QtGGcpT2CzW0Tc.roa Signing time: Thu 22 Aug 2024 03:44:35 +0000 ROA not before: Thu 22 Aug 2024 03:44:35 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 2914 IP address blocks: 58.66.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 Nov 2024 23:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Aug 22 03:44:35 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=1594FA594F1B33F5EAE50B4619CA53D82CD6D137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:30:f5:84:57:d5:c7:8b:4c:f6:68:e7:d9:41: 0b:a2:c1:fa:08:1a:bd:76:53:95:98:74:af:dd:60: 0c:e4:ee:82:c2:f1:15:db:9f:9c:b2:50:12:6b:87: c7:7d:bd:ef:54:23:56:0c:34:aa:14:76:b7:60:1e: ea:e9:3c:04:d0:75:b8:34:48:5f:7c:47:f6:19:03: d2:4b:12:88:d7:3d:c5:23:47:4b:bf:da:0f:25:df: 0a:ef:84:5f:44:f7:15:df:55:9f:92:07:a1:a0:e7: bd:76:77:aa:36:3d:77:af:d1:d5:79:db:36:e4:9b: 21:bf:03:79:86:2e:e2:b0:b2:21:c2:12:c3:fd:d1: a4:17:08:fb:29:a2:37:f0:8e:1e:ad:28:30:d9:ab: 80:b8:47:97:92:cb:21:83:2f:ac:b3:36:5c:bb:0b: fa:bf:18:b0:1e:c4:ff:59:5e:6d:54:f6:34:28:40: 92:a3:c5:02:f4:85:7b:84:81:51:c2:57:3d:4a:ac: a0:ef:77:14:54:f9:b6:83:11:a3:1e:0a:e7:4d:b9: 4f:2d:1a:1d:d9:15:39:70:23:e8:9b:a1:af:a3:26: 23:79:a7:91:f7:bb:59:2d:f4:9e:0b:f0:e8:fa:d1: c8:ef:fa:b9:9c:c9:31:dc:5e:c1:be:3a:d9:db:6b: 86:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:94:FA:59:4F:1B:33:F5:EA:E5:0B:46:19:CA:53:D8:2C:D6:D1:37 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/FZT6WU8bM_Xq5QtGGcpT2CzW0Tc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 58.66.128.0/18 Signature Algorithm: sha256WithRSAEncryption be:07:30:f2:8b:41:11:ff:99:15:91:c1:3b:21:1a:d2:ad:0a: 0f:b8:87:3a:36:b9:48:1b:f6:f0:48:bc:56:95:44:02:97:81: d7:63:e9:04:36:43:6b:dc:45:a3:f8:04:ae:c6:e3:03:d3:6b: 50:3f:c9:c4:db:21:1c:f1:17:78:7c:05:1e:75:38:b0:e7:9e: f2:77:f7:d3:62:ce:47:9a:f3:49:ea:e7:b9:e0:69:e7:ef:0c: 56:b4:48:e5:05:96:4a:2c:9b:ea:2c:9d:36:7f:a0:2d:ab:15: 29:42:2e:a7:84:d3:06:e7:f8:9c:79:42:da:1e:12:8b:5a:f6: 88:cc:d3:52:81:3f:8f:4e:42:3f:c4:2b:14:ea:af:59:f8:63: 73:4b:f7:f1:36:db:90:4a:1c:71:5e:34:e4:5c:da:08:fa:04: 3c:a9:04:ad:4c:d5:48:98:a2:fe:33:32:fb:63:b0:c4:60:b5: cd:e6:f7:ea:a3:d6:12:a6:42:a4:bb:2a:d3:2a:16:8b:03:ed: e6:b0:c4:79:51:54:be:09:ed:3e:2e:b9:f6:16:9f:e8:37:7a: 32:7c:22:b4:c0:9a:62:87:e4:f5:76:8c:be:5b:84:b8:b8:4b: 14:30:dd:6d:b9:de:d1:23:9d:c8:4d:e7:0b:16:7e:b8:a6:8b: 91:22:16:0c -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICBikwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA4MjIw MzQ0MzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE1OTRGQTU5NEYxQjMz RjVFQUU1MEI0NjE5Q0E1M0Q4MkNENkQxMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjMPWEV9XHi0z2aOfZQQuiwfoIGr12U5WYdK/dYAzk7oLC8RXb n5yyUBJrh8d9ve9UI1YMNKoUdrdgHurpPATQdbg0SF98R/YZA9JLEojXPcUjR0u/ 2g8l3wrvhF9E9xXfVZ+SB6Gg5712d6o2PXev0dV52zbkmyG/A3mGLuKwsiHCEsP9 0aQXCPspojfwjh6tKDDZq4C4R5eSyyGDL6yzNly7C/q/GLAexP9ZXm1U9jQoQJKj xQL0hXuEgVHCVz1KrKDvdxRU+baDEaMeCudNuU8tGh3ZFTlwI+iboa+jJiN5p5H3 u1kt9J4L8Oj60cjv+rmcyTHcXsG+Otnba4YdAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUFZT6WU8bM/Xq5QtGGcpT2CzW0TcwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvRlpUNldVOGJNX1hxNVF0R0dj cFQyQ3pXMFRjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjpC gDANBgkqhkiG9w0BAQsFAAOCAQEAvgcw8otBEf+ZFZHBOyEa0q0KD7iHOja5SBv2 8Ei8VpVEApeB12PpBDZDa9xFo/gErsbjA9NrUD/JxNshHPEXeHwFHnU4sOee8nf3 02LOR5rzSernueBp5+8MVrRI5QWWSiyb6iydNn+gLasVKUIup4TTBuf4nHlC2h4S i1r2iMzTUoE/j05CP8QrFOqvWfhjc0v38TbbkEoccV405FzaCPoEPKkErUzVSJii /jMy+2OwxGC1zeb36qPWEqZCpLsq0yoWiwPt5rDEeVFUvgntPi659haf6Dd6Mnwi tMCaYofk9XaMvluEuLhLFDDdbbne0SOdyE3nCxZ+uKaLkSIWDA== -----END CERTIFICATE-----Generated at Thu Nov 21 23:43:05 2024 by rpki-client on console-ams.rpki-client.org