$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/Iq4-oAuIoTzbrOHevfHPAu87t3M.roa File: Iq4-oAuIoTzbrOHevfHPAu87t3M.roa (raw, json) Hash identifier: dl9W1zcVL4Q4lGUVccGN0g5LypHRBPvUrzwo4lqR0Do= Subject key identifier: 22:AE:3E:A0:0B:88:A1:3C:DB:AC:E1:DE:BD:F1:CF:02:EF:3B:B7:73 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 0635 Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/Iq4-oAuIoTzbrOHevfHPAu87t3M.roa Signing time: Fri 23 Aug 2024 14:39:16 +0000 ROA not before: Fri 23 Aug 2024 14:39:16 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 4766 IP address blocks: 58.66.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1589 (0x635) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Aug 23 14:39:16 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=22AE3EA00B88A13CDBACE1DEBDF1CF02EF3BB773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:05:af:c6:8a:ee:da:0d:ef:fd:67:de:84:5b: 18:bc:2f:3a:39:16:ed:f0:53:13:10:b8:c6:5e:43: 39:67:02:eb:ef:d2:1d:88:d7:a3:ab:8b:72:85:0d: bf:68:e9:5f:37:93:b4:86:67:46:76:21:8e:9c:21: c7:82:25:aa:1c:94:e1:5c:67:e0:21:27:8a:36:be: c1:f7:38:42:8e:07:4a:d4:95:e8:ac:69:b1:9b:7c: ab:fa:4a:33:88:0b:56:29:d2:9a:e0:79:fd:66:00: d7:e5:26:b2:4e:8d:21:07:3b:13:03:a5:52:af:5a: 61:0e:fe:d7:3d:3d:72:ad:6a:5e:03:65:52:f1:39: e8:b7:7f:f1:18:82:ea:b5:47:30:be:58:47:b6:3a: 2d:b5:73:16:f3:e8:77:46:09:5c:af:4d:aa:94:9c: a4:d0:1e:63:1b:c5:5f:d0:c5:ce:fc:75:c2:91:5c: ca:93:51:b2:37:ff:fa:0f:bb:69:58:49:1c:be:08: 45:04:5c:2a:23:e0:20:ad:db:fd:70:83:8e:21:84: 60:6b:95:15:de:c5:03:ae:1c:b4:ed:1f:cf:2d:6d: b0:17:36:ed:cb:49:ed:14:d3:37:ba:bf:21:b7:91: ef:cc:de:84:eb:92:6d:c0:29:c7:3d:0a:a0:a5:d9: b0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AE:3E:A0:0B:88:A1:3C:DB:AC:E1:DE:BD:F1:CF:02:EF:3B:B7:73 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/Iq4-oAuIoTzbrOHevfHPAu87t3M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 58.66.184.0/21 Signature Algorithm: sha256WithRSAEncryption a6:e0:4b:c2:09:9d:c7:00:fb:94:c5:ba:e7:b0:83:56:cf:d8: c6:25:3b:8f:bc:c3:05:cb:2f:41:70:aa:98:17:78:a3:6c:04: b2:a1:6d:0f:10:bd:8b:76:57:d6:db:1a:58:e9:e0:1c:ef:e4: 10:ad:ef:7c:80:c4:77:42:09:e7:4d:1a:80:4b:de:71:6a:cf: 9c:99:d4:8e:16:10:1d:7f:da:ff:63:e2:82:28:c8:91:b0:56: 14:3a:ea:57:65:ae:c3:9d:cb:47:99:a5:03:3a:08:cd:ef:a8: 54:6f:b5:59:4a:03:09:ff:9b:f3:45:f5:a6:ff:4a:bc:d6:67: ad:a6:75:42:2d:d8:bc:b6:18:05:e8:5c:81:67:fd:02:0b:98: ab:2c:36:5b:49:3d:c0:9e:c0:dc:0c:c8:54:2f:3c:c7:9a:e2: e4:e1:6f:7d:64:f1:73:27:28:1c:5a:1b:55:54:17:02:26:c8: 7e:28:bf:19:61:63:b9:54:af:50:fe:53:6e:0c:0b:e0:06:93: 36:b5:ac:0c:14:a2:7e:54:e6:0b:4a:b9:2d:a7:78:02:4f:2d: 66:45:ed:64:40:5b:bd:8b:b4:b4:f6:72:3f:a5:bb:c2:86:22: 8d:53:72:c9:0f:f1:9a:f5:05:17:12:68:dc:0c:29:a6:3d:30: 09:e3:0c:8e -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA4MjMx NDM5MTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDIyQUUzRUEwMEI4OEEx M0NEQkFDRTFERUJERjFDRjAyRUYzQkI3NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCTBa/Giu7aDe/9Z96EWxi8Lzo5Fu3wUxMQuMZeQzlnAuvv0h2I 16Ori3KFDb9o6V83k7SGZ0Z2IY6cIceCJaoclOFcZ+AhJ4o2vsH3OEKOB0rUleis abGbfKv6SjOIC1Yp0prgef1mANflJrJOjSEHOxMDpVKvWmEO/tc9PXKtal4DZVLx Oei3f/EYguq1RzC+WEe2Oi21cxbz6HdGCVyvTaqUnKTQHmMbxV/Qxc78dcKRXMqT UbI3//oPu2lYSRy+CEUEXCoj4CCt2/1wg44hhGBrlRXexQOuHLTtH88tbbAXNu3L Se0U0ze6vyG3ke/M3oTrkm3AKcc9CqCl2bAHAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUIq4+oAuIoTzbrOHevfHPAu87t3MwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvSXE0LW9BdUlvVHpick9IZXZm SFBBdTg3dDNNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzpC uDANBgkqhkiG9w0BAQsFAAOCAQEApuBLwgmdxwD7lMW657CDVs/YxiU7j7zDBcsv QXCqmBd4o2wEsqFtDxC9i3ZX1tsaWOngHO/kEK3vfIDEd0IJ500agEvecWrPnJnU jhYQHX/a/2PigijIkbBWFDrqV2Wuw53LR5mlAzoIze+oVG+1WUoDCf+b80X1pv9K vNZnraZ1Qi3YvLYYBehcgWf9AguYqyw2W0k9wJ7A3AzIVC88x5ri5OFvfWTxcyco HFobVVQXAibIfii/GWFjuVSvUP5TbgwL4AaTNrWsDBSiflTmC0q5Lad4Ak8tZkXt ZEBbvYu0tPZyP6W7woYijVNyyQ/xmvUFFxJo3Awppj0wCeMMjg== -----END CERTIFICATE-----Generated at Fri Nov 22 13:38:16 2024 by rpki-client on console-fra.rpki-client.org