$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/6rAL7l6HrJGgC3YtrvDcIru56_E.roa File: 6rAL7l6HrJGgC3YtrvDcIru56_E.roa (raw, json) Hash identifier: F6OuuwYt5yqrXK6k8Lt6+oDz4ZlH+/4/oyU1zF8HJl4= Subject key identifier: EA:B0:0B:EE:5E:87:AC:91:A0:0B:76:2D:AE:F0:DC:22:BB:B9:EB:F1 Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94 Certificate serial: 1B88 Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/6rAL7l6HrJGgC3YtrvDcIru56_E.roa Signing time: Thu 21 Nov 2024 09:32:18 +0000 ROA not before: Thu 21 Nov 2024 09:32:18 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4766 IP address blocks: 115.31.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7048 (0x1b88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94 Validity Not Before: Nov 21 09:32:18 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=EAB00BEE5E87AC91A00B762DAEF0DC22BBB9EBF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:b2:eb:c1:36:3f:f1:41:fc:e8:39:1e:3b: 8b:00:04:fa:56:fe:8d:df:5f:0c:67:79:04:d2:37: ca:a9:c1:34:65:f7:e9:e4:7b:01:b7:74:e0:c2:af: 19:a5:a4:82:c7:4d:37:62:05:65:73:9d:b0:8e:ec: 8e:94:0b:f5:1d:b5:fa:de:86:a8:8e:cf:64:a0:96: d4:ef:37:3e:d5:72:98:f2:b6:97:c6:05:5b:24:70: 8c:a5:0b:6f:a1:1d:5b:fe:52:e4:2c:1d:80:85:89: 00:05:25:99:3b:4e:d5:e6:62:66:37:ff:ef:8d:44: 36:ce:96:f0:32:de:37:19:e1:06:af:2f:c3:c3:f5: a5:fc:04:66:ab:55:93:48:f0:e4:34:c9:30:4f:cb: 98:dd:28:47:bb:37:f4:e5:4a:a4:5b:72:29:80:6e: 82:32:22:f2:5c:ac:af:c5:a1:52:25:4c:96:c8:a7: 45:dd:40:26:b2:e2:49:0e:6d:90:93:f4:34:90:5d: bc:65:58:b3:33:a9:50:5d:42:35:0f:0c:29:f6:cd: 35:db:47:08:7c:f5:6f:9a:6d:10:23:45:27:28:6c: 1b:60:4d:46:d0:4e:74:8f:7c:39:f0:cf:f2:1f:07: a1:5a:59:69:14:81:7b:f7:e3:78:e8:80:13:bf:9a: 4e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B0:0B:EE:5E:87:AC:91:A0:0B:76:2D:AE:F0:DC:22:BB:B9:EB:F1 X509v3 Authority Key Identifier: keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/6rAL7l6HrJGgC3YtrvDcIru56_E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.31.68.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:27:d0:bd:86:b1:fc:c7:6f:b7:d9:b2:6f:02:5e:7f:99:30: f1:7e:a2:55:f2:c4:3d:d5:8b:54:d9:78:b0:7b:01:ba:f2:ed: ad:7f:c7:68:a2:59:45:4d:02:be:49:f4:4f:e0:3e:f1:cd:20: 76:32:cd:5e:0d:c8:3d:88:ae:44:6f:89:68:5b:32:fd:25:db: a2:dd:08:c7:56:84:42:0a:ef:34:25:7a:df:54:be:cb:15:7b: 49:77:63:cb:0e:d7:e7:c9:59:fb:b7:51:f1:35:08:ec:7e:09: 8a:54:b2:1c:f3:2f:6b:30:cf:11:22:9d:e1:39:98:15:57:eb: af:5e:03:cd:37:a3:79:71:d9:76:85:f5:f2:d6:fa:96:f1:e1: 2b:ee:ba:35:2e:6b:04:de:55:11:e7:48:15:69:6e:84:26:b1: 44:67:ca:16:b8:e8:c6:e6:f2:83:91:11:7c:cd:1a:98:03:75: ac:fe:c5:79:2c:6a:87:36:98:7c:bc:86:69:ce:3b:f4:ba:8b: f6:48:5e:58:9b:86:b5:b5:4e:94:82:bf:87:b5:d9:4e:c0:f9: 74:86:21:be:7a:6e:b0:7f:98:e9:56:98:74:cb:cf:bd:52:3f: 84:50:97:61:ca:86:21:75:4b:85:15:e7:2a:69:d2:8a:01:56: 89:16:9e:ce -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICG4gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkU4 M0VCMEUxQ0I3QjRBNzYxN0EwNEFEN0E4MjYyOUQ5OEI5NUI5NDAeFw0yNDExMjEw OTMyMThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVBQjAwQkVFNUU4N0FD OTFBMDBCNzYyREFFRjBEQzIyQkJCOUVCRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyX7LrwTY/8UH86DkeO4sABPpW/o3fXwxneQTSN8qpwTRl9+nk ewG3dODCrxmlpILHTTdiBWVznbCO7I6UC/UdtfrehqiOz2SgltTvNz7VcpjytpfG BVskcIylC2+hHVv+UuQsHYCFiQAFJZk7TtXmYmY3/++NRDbOlvAy3jcZ4QavL8PD 9aX8BGarVZNI8OQ0yTBPy5jdKEe7N/TlSqRbcimAboIyIvJcrK/FoVIlTJbIp0Xd QCay4kkObZCT9DSQXbxlWLMzqVBdQjUPDCn2zTXbRwh89W+abRAjRScobBtgTUbQ TnSPfDnwz/IfB6FaWWkUgXv343jogBO/mk5nAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU6rAL7l6HrJGgC3YtrvDcIru56/EwHwYDVR0jBBgwFoAULoPrDhy3tKdhegSt eoJinZi5W5QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEz L0xvUHJEaHkzdEtkaGVnU3Rlb0ppblppNVc1US5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTG9QckRoeTN0S2RoZWdTdGVvSmluWmk1VzVRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEzLzZyQUw3bDZIckpHZ0Mz WXRydkRjSXJ1NTZfRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJzH0QwDQYJKoZIhvcNAQELBQADggEBAG8n0L2GsfzHb7fZsm8CXn+ZMPF+olXy xD3Vi1TZeLB7Abry7a1/x2iiWUVNAr5J9E/gPvHNIHYyzV4NyD2IrkRviWhbMv0l 26LdCMdWhEIK7zQlet9UvssVe0l3Y8sO1+fJWfu3UfE1COx+CYpUshzzL2swzxEi neE5mBVX669eA803o3lx2XaF9fLW+pbx4SvuujUuawTeVRHnSBVpboQmsURnyha4 6Mbm8oOREXzNGpgDdaz+xXksaoc2mHy8hmnOO/S6i/ZIXlibhrW1TpSCv4e12U7A +XSGIb56brB/mOlWmHTLz71SP4RQl2HKhiF1S4UV5ypp0ooBVokWns4= -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:36 2024 by rpki-client on console-ams.rpki-client.org