$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/zE5P_HNAmpaxQdytsI9CtxeGQIQ.roa File: zE5P_HNAmpaxQdytsI9CtxeGQIQ.roa (raw, json) Hash identifier: u3jhGmvHSJ6O8mQSNnF8wUBl5Bheur4J+vLo6EJtbqk= Subject key identifier: CC:4E:4F:FC:73:40:9A:96:B1:41:DC:AD:B0:8F:42:B7:17:86:40:84 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 063A Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/zE5P_HNAmpaxQdytsI9CtxeGQIQ.roa Signing time: Fri 23 Aug 2024 14:39:17 +0000 ROA not before: Fri 23 Aug 2024 14:39:17 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 2914 IP address blocks: 58.66.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Aug 23 14:39:17 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=CC4E4FFC73409A96B141DCADB08F42B717864084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:42:ad:86:53:32:1c:60:26:95:bb:0a:13: ae:f9:15:50:00:f4:02:2e:2a:46:d0:71:75:d3:6f: 95:bf:12:fb:6f:76:d0:86:11:19:e3:37:af:6a:ba: d3:13:0d:6b:c8:61:41:ff:f4:3d:4e:3a:b6:e6:7d: ce:19:6c:48:87:cc:d7:6c:b9:09:af:63:0e:2e:cb: 1a:f8:c6:92:ae:bc:d9:96:ab:9c:55:96:9d:ca:01: 3b:42:e0:db:81:8a:3f:31:00:c4:74:c7:66:4d:09: 41:44:4c:ae:c8:09:b0:61:d2:9e:11:fa:61:4d:a8: 4a:a1:cf:f0:f8:58:67:07:82:14:dc:e5:7d:10:65: d4:b8:1f:65:39:c8:b5:d3:e9:8f:c7:78:3a:3a:97: d2:a7:ec:43:c4:07:2a:2d:06:5e:eb:89:0f:f7:12: df:6a:88:c9:e9:12:77:90:e7:1e:9d:8a:23:49:7c: 7e:f8:3e:a7:34:53:f7:d7:f0:06:c2:5a:e6:81:15: 5f:ad:c8:56:29:aa:8b:6e:6d:8e:cd:39:94:90:52: 78:a6:f9:d6:63:bb:1c:89:1b:7f:7d:5a:30:35:91: 1d:a0:b6:6f:f2:00:a6:7a:a8:5c:23:40:29:d6:c5: aa:47:a0:bd:fc:8f:3e:cf:9e:e3:90:67:7f:cc:42: 98:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4E:4F:FC:73:40:9A:96:B1:41:DC:AD:B0:8F:42:B7:17:86:40:84 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/zE5P_HNAmpaxQdytsI9CtxeGQIQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 58.66.112.0/21 Signature Algorithm: sha256WithRSAEncryption a3:5b:9d:6c:98:c1:f7:3b:f2:01:e4:2b:aa:17:3a:c3:bb:3c: 4e:b1:21:a9:fd:65:1c:bb:41:c8:c0:25:00:88:75:9f:54:5a: 7a:fa:cf:23:f6:a7:4b:fe:45:47:4b:7a:73:6e:38:e2:14:a5: ea:e5:0f:56:3b:67:a9:ee:4f:d8:17:c4:a5:6c:88:f1:71:17: b0:c1:99:dc:6c:70:50:d2:70:d1:c6:d9:0b:1a:6d:fa:08:70: ba:3f:8f:82:e5:db:fb:26:e5:fb:95:fd:eb:3a:45:11:6a:eb: a0:60:d1:a8:db:90:8a:6e:f3:65:9c:fe:0b:50:ce:ba:02:d0: c6:c7:b1:49:4e:3b:7a:ef:d9:9a:b6:95:8d:5c:41:15:57:59: c7:2a:2c:bc:eb:a6:d7:35:75:78:99:77:e1:9c:39:e5:33:2e: f6:a6:9e:33:f6:f0:38:ac:4b:7b:98:0f:9c:f5:dd:56:59:47: 53:e3:cc:81:ed:6c:ec:9b:62:8d:31:a0:b8:d7:df:a6:a7:c1: c4:a3:97:9e:dd:f8:4e:ca:f9:43:e1:73:df:39:23:90:4e:15: 0a:04:75:14:3d:82:03:9f:86:ab:2e:f8:fe:2a:2c:19:83:bc: 93:6e:c5:b1:fd:58:a3:f6:8d:4b:fb:92:e1:f3:4d:4d:2f:22: 9f:ec:40:c1 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICBjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA4MjMx NDM5MTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENDNEU0RkZDNzM0MDlB OTZCMTQxRENBREIwOEY0MkI3MTc4NjQwODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLR0KthlMyHGAmlbsKE675FVAA9AIuKkbQcXXTb5W/EvtvdtCG ERnjN69qutMTDWvIYUH/9D1OOrbmfc4ZbEiHzNdsuQmvYw4uyxr4xpKuvNmWq5xV lp3KATtC4NuBij8xAMR0x2ZNCUFETK7ICbBh0p4R+mFNqEqhz/D4WGcHghTc5X0Q ZdS4H2U5yLXT6Y/HeDo6l9Kn7EPEByotBl7riQ/3Et9qiMnpEneQ5x6diiNJfH74 Pqc0U/fX8AbCWuaBFV+tyFYpqotubY7NOZSQUnim+dZjuxyJG399WjA1kR2gtm/y AKZ6qFwjQCnWxapHoL38jz7PnuOQZ3/MQphZAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUzE5P/HNAmpaxQdytsI9CtxeGQIQwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvekU1UF9ITkFtcGF4UWR5dHNJ OUN0eGVHUUlRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzpC cDANBgkqhkiG9w0BAQsFAAOCAQEAo1udbJjB9zvyAeQrqhc6w7s8TrEhqf1lHLtB yMAlAIh1n1RaevrPI/anS/5FR0t6c2444hSl6uUPVjtnqe5P2BfEpWyI8XEXsMGZ 3GxwUNJw0cbZCxpt+ghwuj+PguXb+ybl+5X96zpFEWrroGDRqNuQim7zZZz+C1DO ugLQxsexSU47eu/ZmraVjVxBFVdZxyosvOum1zV1eJl34Zw55TMu9qaeM/bwOKxL e5gPnPXdVllHU+PMge1s7JtijTGguNffpqfBxKOXnt34Tsr5Q+Fz3zkjkE4VCgR1 FD2CA5+Gqy74/iosGYO8k27Fsf1Yo/aNS/uS4fNNTS8in+xAwQ== -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:29 2024 by rpki-client on console-fra.rpki-client.org