$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/tKI03Ks8Pd9VGIVdMj3GWh3i1Pw.roa File: tKI03Ks8Pd9VGIVdMj3GWh3i1Pw.roa (raw, json) Hash identifier: XBsiZ0ZLDy/3Ri4t8kUhCgK0XEMTcyLtnhPX1N9VJ2g= Subject key identifier: B4:A2:34:DC:AB:3C:3D:DF:55:18:85:5D:32:3D:C6:5A:1D:E2:D4:FC Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 039E Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/tKI03Ks8Pd9VGIVdMj3GWh3i1Pw.roa Signing time: Thu 25 Apr 2024 13:58:45 +0000 ROA not before: Thu 25 Apr 2024 13:58:45 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 7018 IP address blocks: 124.175.208.0/21 maxlen: 24 124.175.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 16:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Apr 25 13:58:45 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=B4A234DCAB3C3DDF5518855D323DC65A1DE2D4FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:4b:e0:fb:e1:e2:55:3b:10:3f:e5:6d:46: 58:91:38:eb:d0:78:ae:10:d9:de:f4:f8:8e:ef:a7: 5e:82:d9:e6:36:1b:37:dd:08:db:2d:9c:ef:a2:46: 3e:d3:04:96:4d:10:6d:e7:41:e3:29:35:a9:c4:42: 7b:ef:06:a0:4e:56:41:db:cf:c5:6d:99:67:60:a6: ab:f6:55:57:b3:8d:ea:0e:77:0b:52:04:3c:3c:50: 44:93:4f:e2:a6:78:2a:89:2b:9e:ab:1d:0a:9c:f4: 4f:c8:bb:37:b0:bc:ee:b4:67:21:9a:19:5b:2e:33: 35:46:e7:5d:aa:95:94:55:94:d2:cf:e2:7b:88:ab: ec:55:95:0a:c4:4a:f0:19:5e:bc:5e:b7:03:19:de: 91:ef:5c:8b:a8:28:7d:b6:59:10:07:51:d4:e5:db: cd:8c:df:df:6b:02:8f:ff:1a:29:b9:b8:fa:33:9f: 22:4c:c7:5f:4a:1f:60:d0:3a:1a:d7:f9:57:c5:ce: 9b:66:8b:87:ad:91:9a:73:68:52:5a:0a:30:2d:1c: 92:c3:8e:0f:3c:e4:ef:7e:6a:9c:2b:5c:c5:05:47: 1f:fa:e4:a1:61:e1:02:5b:5e:3e:01:38:11:09:e1: 55:d6:11:a1:48:18:57:57:f7:0d:bf:b6:8c:c1:c6: 52:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A2:34:DC:AB:3C:3D:DF:55:18:85:5D:32:3D:C6:5A:1D:E2:D4:FC X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/tKI03Ks8Pd9VGIVdMj3GWh3i1Pw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.175.208.0/20 Signature Algorithm: sha256WithRSAEncryption 3d:1d:d5:5f:82:b0:53:97:86:a1:7e:23:2d:5a:d6:ec:ff:2a: 6e:d5:37:47:cf:e6:c9:14:41:1b:65:2b:2e:97:8d:49:ba:d9: 9e:1b:89:e0:69:bb:9f:17:b0:40:9f:c5:e1:ce:ec:9e:6b:96: b3:79:32:a8:c1:c3:7d:ce:c7:0d:05:9a:af:a2:64:f1:39:67: ae:65:c5:66:fe:3c:4c:75:83:5a:2c:26:d0:34:f6:60:10:b1: 56:9a:8d:97:16:f7:ff:26:10:ce:e1:04:e0:88:38:8a:9f:bd: 24:ff:5b:d7:24:75:fb:08:e9:9e:7e:93:67:5b:86:81:9a:22: ea:3e:e7:95:99:6d:e5:e1:d1:58:73:3f:e5:ed:36:5a:78:c7: 4b:77:07:cf:0e:ba:56:7a:44:2b:71:14:85:8e:bd:08:7e:43: 11:1c:bc:40:c8:5a:77:a2:9a:c8:3b:1e:2f:cb:63:a7:91:50: 15:8a:0d:c5:6b:1b:a6:70:2b:81:10:55:35:42:fa:3b:ec:80: 43:54:64:73:b7:b6:ca:91:61:a1:4d:e9:f7:0f:ab:9f:6f:3a: 4e:ce:e9:15:3a:d7:6a:f9:71:e1:97:58:18:63:a0:58:40:e7: b0:57:fd:85:a9:e8:7d:35:6f:65:a8:49:9b:51:59:7b:17:db: 7d:10:20:e5 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICA54wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA0MjUx MzU4NDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEI0QTIzNERDQUIzQzNE REY1NTE4ODU1RDMyM0RDNjVBMURFMkQ0RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqmUvg++HiVTsQP+VtRliROOvQeK4Q2d70+I7vp16C2eY2Gzfd CNstnO+iRj7TBJZNEG3nQeMpNanEQnvvBqBOVkHbz8VtmWdgpqv2VVezjeoOdwtS BDw8UESTT+KmeCqJK56rHQqc9E/IuzewvO60ZyGaGVsuMzVG512qlZRVlNLP4nuI q+xVlQrESvAZXrxetwMZ3pHvXIuoKH22WRAHUdTl282M399rAo//Gim5uPoznyJM x19KH2DQOhrX+VfFzptmi4etkZpzaFJaCjAtHJLDjg885O9+apwrXMUFRx/65KFh 4QJbXj4BOBEJ4VXWEaFIGFdX9w2/tozBxlIdAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUtKI03Ks8Pd9VGIVdMj3GWh3i1PwwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvdEtJMDNLczhQZDlWR0lWZE1q M0dXaDNpMVB3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHyv 0DANBgkqhkiG9w0BAQsFAAOCAQEAPR3VX4KwU5eGoX4jLVrW7P8qbtU3R8/myRRB G2UrLpeNSbrZnhuJ4Gm7nxewQJ/F4c7snmuWs3kyqMHDfc7HDQWar6Jk8TlnrmXF Zv48THWDWiwm0DT2YBCxVpqNlxb3/yYQzuEE4Ig4ip+9JP9b1yR1+wjpnn6TZ1uG gZoi6j7nlZlt5eHRWHM/5e02WnjHS3cHzw66VnpEK3EUhY69CH5DERy8QMhad6Ka yDseL8tjp5FQFYoNxWsbpnArgRBVNUL6O+yAQ1Rkc7e2ypFhoU3p9w+rn286Ts7p FTrXavlx4ZdYGGOgWEDnsFf9hanofTVvZahJm1FZexfbfRAg5Q== -----END CERTIFICATE-----Generated at Sun Jun 2 12:47:04 2024 by rpki-client on console-ams.rpki-client.org