$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/e0Ljd1CYTzpHWr0Nd4WXmtLEGII.roa File: e0Ljd1CYTzpHWr0Nd4WXmtLEGII.roa (raw, json) Hash identifier: HAEcMFW/7d7HDP6wN/4l9I4xsSd28VkA0Affl4Z9qfM= Subject key identifier: 7B:42:E3:77:50:98:4F:3A:47:5A:BD:0D:77:85:97:9A:D2:C4:18:82 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 063E Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/e0Ljd1CYTzpHWr0Nd4WXmtLEGII.roa Signing time: Fri 23 Aug 2024 14:39:18 +0000 ROA not before: Fri 23 Aug 2024 14:39:18 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 2914 IP address blocks: 58.66.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 Nov 2024 23:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1598 (0x63e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Aug 23 14:39:18 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=7B42E37750984F3A475ABD0D7785979AD2C41882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1a:36:97:49:c2:70:92:3f:5f:86:f2:13:f1: 42:e2:d2:02:fe:3b:51:f9:41:91:0e:9b:fe:53:cd: 19:2b:fb:dc:ac:7d:5d:23:9c:b4:44:f9:1c:f1:72: ea:30:ea:f8:a6:c9:f0:a5:51:a7:b6:e2:49:38:fa: e9:61:9e:98:b4:cb:d1:fc:39:06:c9:3d:e8:6f:b0: 1a:f6:cc:d7:b4:5d:82:9d:f3:9a:0f:00:6c:5e:f3: 8a:52:6c:e8:22:2d:f0:49:22:ba:6c:9c:d2:4f:d4: c9:23:5b:63:2c:53:16:79:d1:d3:87:92:4f:c3:06: 4c:82:17:6a:5e:cc:16:15:6e:f5:a8:a5:2d:34:c9: 6e:4d:7f:b3:f6:7e:a4:1c:6c:49:72:4f:a8:12:be: 4d:b8:ca:e1:f7:53:cc:c8:b9:d4:54:c5:fc:87:93: 62:f1:02:7d:86:e4:e7:c3:58:13:61:53:81:61:98: c1:b9:6f:1e:fc:81:7c:aa:e4:88:29:22:13:a8:b5: 0b:22:9f:9a:c3:85:0a:45:97:a7:cd:df:fb:b3:fd: 01:dd:f8:e4:cc:4b:62:3c:be:8d:32:d4:b5:30:31: b7:24:98:7f:ed:aa:9e:bc:4e:52:5a:e6:e3:3d:9a: 54:66:36:bf:9a:b7:09:33:87:f5:ac:69:43:75:af: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:42:E3:77:50:98:4F:3A:47:5A:BD:0D:77:85:97:9A:D2:C4:18:82 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/e0Ljd1CYTzpHWr0Nd4WXmtLEGII.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 58.66.136.0/21 Signature Algorithm: sha256WithRSAEncryption b3:ad:9c:f5:4c:a0:58:45:67:a6:d3:0d:bc:f1:6c:cb:c4:bf: a7:b3:8c:90:d8:f5:f1:1b:41:0b:78:7f:3b:5d:d1:6e:c1:56: 0a:ca:fc:d5:ee:7f:13:65:35:ab:34:35:ab:67:50:25:55:22: 8a:31:7a:29:49:be:7c:97:0d:cb:7e:bb:52:40:65:3c:57:30: b1:04:63:b3:c2:35:ae:cb:a1:bc:6e:0b:a2:2b:5f:13:c7:9c: 42:4d:a8:8f:75:98:35:7f:88:67:06:48:be:7e:ef:26:fd:4c: 9d:d5:86:a2:dc:a5:85:c1:c3:79:1c:e9:05:ae:37:93:15:e5: d9:a6:89:eb:ac:67:10:fe:5e:24:c9:65:ea:bc:a3:6b:35:c5: f8:d2:49:b5:e9:dd:14:63:b9:91:7b:bd:15:1d:4d:54:89:e9: ff:54:7b:0a:d8:ec:ec:d1:fc:b4:95:94:ed:5e:31:f1:29:b0: ec:90:d6:67:59:72:ab:80:44:9f:24:bc:3a:5d:41:80:a9:9a: 07:3f:08:5e:01:ed:42:cc:a9:be:d1:1a:65:b6:4b:40:5c:34: 6c:b9:d2:81:34:54:1a:ac:a2:b6:7b:32:9f:4f:99:d3:79:b4: 98:b2:9f:6d:31:22:db:b6:9b:95:76:ec:c7:9c:46:88:e3:3b: 5f:89:89:26 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICBj4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA4MjMx NDM5MThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDdCNDJFMzc3NTA5ODRG M0E0NzVBQkQwRDc3ODU5NzlBRDJDNDE4ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcGjaXScJwkj9fhvIT8ULi0gL+O1H5QZEOm/5TzRkr+9ysfV0j nLRE+Rzxcuow6vimyfClUae24kk4+ulhnpi0y9H8OQbJPehvsBr2zNe0XYKd85oP AGxe84pSbOgiLfBJIrpsnNJP1MkjW2MsUxZ50dOHkk/DBkyCF2pezBYVbvWopS00 yW5Nf7P2fqQcbElyT6gSvk24yuH3U8zIudRUxfyHk2LxAn2G5OfDWBNhU4FhmMG5 bx78gXyq5IgpIhOotQsin5rDhQpFl6fN3/uz/QHd+OTMS2I8vo0y1LUwMbckmH/t qp68TlJa5uM9mlRmNr+atwkzh/WsaUN1rzdNAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUe0Ljd1CYTzpHWr0Nd4WXmtLEGIIwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvZTBMamQxQ1lUenBIV3IwTmQ0 V1htdExFR0lJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzpC iDANBgkqhkiG9w0BAQsFAAOCAQEAs62c9UygWEVnptMNvPFsy8S/p7OMkNj18RtB C3h/O13RbsFWCsr81e5/E2U1qzQ1q2dQJVUiijF6KUm+fJcNy367UkBlPFcwsQRj s8I1rsuhvG4LoitfE8ecQk2oj3WYNX+IZwZIvn7vJv1MndWGotylhcHDeRzpBa43 kxXl2aaJ66xnEP5eJMll6ryjazXF+NJJtendFGO5kXu9FR1NVInp/1R7Ctjs7NH8 tJWU7V4x8Smw7JDWZ1lyq4BEnyS8Ol1BgKmaBz8IXgHtQsypvtEaZbZLQFw0bLnS gTRUGqyitnsyn0+Z03m0mLKfbTEi27ablXbsx5xGiOM7X4mJJg== -----END CERTIFICATE-----Generated at Thu Nov 21 23:43:05 2024 by rpki-client on console-ams.rpki-client.org