$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/ooslcdJcc02Fgfv5MZuaextEodA.roa File: ooslcdJcc02Fgfv5MZuaextEodA.roa (raw, json) Hash identifier: WFI8JxC5nsjFeC4+csuoHuFQFgo9CDV2NMJZrqOcSeA= Subject key identifier: A2:8B:25:71:D2:5C:73:4D:85:81:FB:F9:31:9B:9A:7B:1B:44:A1:D0 Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD Certificate serial: 0CB5 Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/ooslcdJcc02Fgfv5MZuaextEodA.roa Signing time: Wed 13 Mar 2024 01:21:03 +0000 ROA not before: Wed 13 Mar 2024 01:21:03 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59022 IP address blocks: 45.115.244.0/22 maxlen: 22 103.56.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3253 (0xcb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD Validity Not Before: Mar 13 01:21:03 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=A28B2571D25C734D8581FBF9319B9A7B1B44A1D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:24:40:39:7a:91:e4:ae:73:05:86:64:cb:ed: e8:b7:11:5b:87:e1:97:50:98:c9:8f:1a:4f:22:a6: bf:31:41:24:c4:17:61:b9:d4:dc:cb:9e:53:ab:be: e5:55:02:9c:f5:be:b9:4f:bb:7f:ee:eb:c3:10:3b: 15:99:fc:ec:08:0a:4d:46:74:b7:19:32:e1:84:bb: 9c:07:46:18:c2:ac:26:e6:c8:7e:dd:b3:bf:bd:2d: b3:ba:b0:05:9a:9a:47:77:cc:8d:56:ac:58:e7:47: bc:eb:7e:a2:58:9f:10:6f:f8:0b:68:55:e2:48:66: c7:72:4f:2d:9b:94:e4:cb:2a:a2:51:63:8f:ae:3b: 3a:69:b1:83:a0:da:3f:4b:dd:83:6d:d0:69:77:45: ed:73:85:bb:79:69:cc:39:3e:2e:61:a2:46:54:ef: a3:a8:7f:0c:5d:d4:84:37:af:d7:8a:ca:04:05:ba: d0:8d:a3:ae:d9:d9:b7:97:02:a6:e0:d1:22:0d:18: 24:de:0c:8e:30:39:90:6e:4d:d5:3e:26:dc:91:dc: 3f:95:70:7d:8b:20:3b:a2:27:bd:8b:b2:37:77:44: d9:b6:3d:fb:18:92:f9:e8:fe:b2:8e:0f:6f:22:e3: 5f:67:69:93:26:b6:23:72:c8:05:e7:c9:07:fb:0c: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8B:25:71:D2:5C:73:4D:85:81:FB:F9:31:9B:9A:7B:1B:44:A1:D0 X509v3 Authority Key Identifier: keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/ooslcdJcc02Fgfv5MZuaextEodA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.115.244.0/22 103.56.20.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:75:86:84:2f:9f:f0:fa:63:25:fc:7b:f5:cf:a9:78:2e:8f: f3:ea:85:5a:12:8e:02:d6:dd:cd:f8:ca:18:f6:62:c6:cb:1d: 57:0f:5d:e8:77:9a:0b:b7:fd:e5:39:d4:b8:49:5e:f5:9f:bb: 8c:48:a0:e3:4a:ff:90:e0:c9:d3:0a:93:71:00:6e:8f:18:d5: 77:b7:83:5e:18:41:d2:24:79:60:28:24:2b:1d:50:fb:da:8c: c5:93:3a:3d:af:d3:b3:ad:f2:bd:4a:51:00:82:32:e7:9d:41: b2:7e:5a:ce:ed:0c:e9:41:f6:25:df:9b:40:eb:f6:66:22:14: bc:45:75:55:84:17:36:fa:f3:f9:c0:e9:d3:55:34:10:57:9b: 4b:30:56:9c:cc:a0:d5:cc:e1:d1:bd:3c:a7:8a:4c:30:e6:a5: 67:68:20:e5:76:44:93:3a:58:e7:0f:e7:66:97:de:2d:3f:32: 64:c4:0e:f2:42:77:8a:26:a5:d5:58:17:6f:f8:d0:60:71:20: 68:bd:2b:63:33:14:b6:4d:48:06:02:4d:d2:e3:bb:1b:1f:a1: 53:50:f1:be:39:bd:9c:f6:d2:2a:95:0c:d6:9e:31:c5:98:fc: 3d:71:fb:0a:ce:50:ab:c4:03:c6:44:71:8e:4a:04:50:b2:d0: b9:0e:d4:0f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE5 MUFBQ0RDRTU2MEE3NEQ4M0MwNURBOEVBOTMyN0FGOTQ0REJCRDAeFw0yNDAzMTMw MTIxMDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEEyOEIyNTcxRDI1Qzcz NEQ4NTgxRkJGOTMxOUI5QTdCMUI0NEExRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuJEA5epHkrnMFhmTL7ei3EVuH4ZdQmMmPGk8ipr8xQSTEF2G5 1NzLnlOrvuVVApz1vrlPu3/u68MQOxWZ/OwICk1GdLcZMuGEu5wHRhjCrCbmyH7d s7+9LbO6sAWamkd3zI1WrFjnR7zrfqJYnxBv+AtoVeJIZsdyTy2blOTLKqJRY4+u OzppsYOg2j9L3YNt0Gl3Re1zhbt5acw5Pi5hokZU76Oofwxd1IQ3r9eKygQFutCN o67Z2beXAqbg0SINGCTeDI4wOZBuTdU+JtyR3D+VcH2LIDuiJ72Lsjd3RNm2PfsY kvno/rKOD28i419naZMmtiNyyAXnyQf7DNoLAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUooslcdJcc02Fgfv5MZuaextEodAwHwYDVR0jBBgwFoAUYZGqzc5WCnTYPAXa jqkyevlE270wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIw MC9ZWkdxemM1V0NuVFlQQVhhanFreWV2bEUyNzAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1laR3F6YzVXQ25UWVBBWGFqcWt5ZXZsRTI3MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMDAvb29zbGNkSmNjMDJG Z2Z2NU1adWFleHRFb2RBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEw DAMEAi1z9AMEAmc4FDANBgkqhkiG9w0BAQsFAAOCAQEAbnWGhC+f8PpjJfx79c+p eC6P8+qFWhKOAtbdzfjKGPZixssdVw9d6HeaC7f95TnUuEle9Z+7jEig40r/kODJ 0wqTcQBujxjVd7eDXhhB0iR5YCgkKx1Q+9qMxZM6Pa/Ts63yvUpRAIIy551Bsn5a zu0M6UH2Jd+bQOv2ZiIUvEV1VYQXNvrz+cDp01U0EFebSzBWnMyg1czh0b08p4pM MOalZ2gg5XZEkzpY5w/nZpfeLT8yZMQO8kJ3iial1VgXb/jQYHEgaL0rYzMUtk1I BgJN0uO7Gx+hU1Dxvjm9nPbSKpUM1p4xxZj8PXH7Cs5Qq8QDxkRxjkoEULLQuQ7U Dw== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:42 2024 by rpki-client on console-ams.rpki-client.org