$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1212/WgrIRnAmsxWBO3TfjMU3y8eDt78.roa File: WgrIRnAmsxWBO3TfjMU3y8eDt78.roa (raw, json) Hash identifier: tiz5vTjFJ5BFKOBFmxtwDOUTL38Wd7N2mFJNr9UBYpk= Subject key identifier: 5A:0A:C8:46:70:26:B3:15:81:3B:74:DF:8C:C5:37:CB:C7:83:B7:BF Certificate issuer: /CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86 Certificate serial: 0F6F Authority key identifier: 28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/WgrIRnAmsxWBO3TfjMU3y8eDt78.roa Signing time: Tue 24 Sep 2024 00:22:13 +0000 ROA not before: Tue 24 Sep 2024 00:22:13 +0000 ROA not after: Sat 20 Sep 2025 07:41:26 +0000 asID: 149628 IP address blocks: 45.116.96.0/22 maxlen: 22 103.23.164.0/22 maxlen: 22 103.56.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3951 (0xf6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86 Validity Not Before: Sep 24 00:22:13 2024 GMT Not After : Sep 20 07:41:26 2025 GMT Subject: CN=5A0AC8467026B315813B74DF8CC537CBC783B7BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:ab:a4:be:05:40:c8:dd:ec:a0:c2:b7:25: ea:f2:e5:c4:ad:95:f8:4c:00:b1:9b:c1:0a:66:6d: 6e:a0:ab:7f:7d:bc:98:13:55:63:59:cc:82:4b:94: 93:78:5e:e5:49:5c:43:ab:2f:14:b9:bc:24:93:aa: 6e:bf:1e:f5:0c:92:af:72:3e:cc:45:a3:c3:1f:68: 43:85:1d:06:f0:65:eb:d5:eb:8f:07:62:c2:ac:7e: e8:ea:58:28:90:06:c3:1f:8f:00:38:2a:0c:fd:e5: a0:8e:6a:af:2c:8d:c4:4a:a4:6b:d7:13:48:ad:65: e0:34:fc:7d:c0:16:0a:57:70:f5:cf:92:3e:f9:db: 6f:b6:48:e3:89:92:2b:d6:95:24:9f:76:bc:0b:43: f5:8d:23:9a:50:25:a3:4f:d5:7d:77:88:6a:14:74: 2d:69:7c:7c:e2:63:88:06:58:85:07:65:75:89:e2: 42:85:11:5a:ed:78:5c:11:8e:77:2f:e7:eb:55:13: a9:8c:43:5b:fb:72:00:26:9a:b6:d4:cf:b1:9a:e9: db:15:0a:38:13:15:60:61:4d:05:bd:4b:d8:f2:8a: 64:34:7d:e9:f8:7f:70:77:aa:e1:38:54:c8:f9:cc: e3:0c:f0:77:cd:f7:52:a9:ae:5b:cd:6a:70:93:3b: d3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0A:C8:46:70:26:B3:15:81:3B:74:DF:8C:C5:37:CB:C7:83:B7:BF X509v3 Authority Key Identifier: keyid:28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/WgrIRnAmsxWBO3TfjMU3y8eDt78.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.116.96.0/22 103.23.164.0/22 103.56.140.0/22 Signature Algorithm: sha256WithRSAEncryption 19:6d:c9:da:4f:e7:7d:d9:65:de:b6:40:f9:06:05:1e:86:50: b9:42:bd:4a:8f:90:fd:54:9c:64:1b:e1:84:f1:2a:d0:81:45: c3:f1:9f:99:26:48:46:50:77:98:b7:6f:34:04:bb:b5:b3:61: 8e:41:95:10:e6:5a:f0:23:27:87:08:18:d5:75:bf:bb:26:be: aa:f5:04:47:b7:5b:25:0e:c3:92:08:91:e2:51:e3:7d:27:54: 50:74:36:d8:cf:a3:43:65:86:99:3f:82:b2:cb:c4:b2:72:23: 7c:e6:d5:ba:62:f0:8f:e0:fc:3f:11:c9:e6:f5:19:8f:32:8c: c1:09:41:3d:64:f0:28:9f:cd:12:b8:f2:9d:94:43:f9:2e:5c: 3a:c3:b5:e0:6b:42:a7:0e:94:6e:16:5f:b3:f3:f9:bf:b8:b7: 62:fb:f9:f7:bf:4a:af:cc:7a:7c:d3:3e:30:2d:2c:44:97:3d: a9:f4:0b:46:5d:5a:ce:97:22:ab:c0:68:03:ab:7b:e2:c1:b8: 78:e5:3a:15:58:32:4e:0f:49:29:29:cd:d7:dd:f0:dd:f5:32: 5b:eb:9f:38:1c:1b:4f:f0:49:d2:42:fe:57:72:19:a1:78:e4: ce:59:51:fb:a5:bc:38:a8:52:b1:0e:1e:46:9d:c6:63:c9:1c: eb:ac:2c:49 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgICD28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjgy MDI1OEFCNjVGRjYxRkQ1RDY2RDk1OTY0RjQ4RUZBMzVEQ0M4NjAeFw0yNDA5MjQw MDIyMTNaFw0yNTA5MjAwNzQxMjZaMDMxMTAvBgNVBAMTKDVBMEFDODQ2NzAyNkIz MTU4MTNCNzRERjhDQzUzN0NCQzc4M0I3QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC436ukvgVAyN3soMK3Jery5cStlfhMALGbwQpmbW6gq399vJgT VWNZzIJLlJN4XuVJXEOrLxS5vCSTqm6/HvUMkq9yPsxFo8MfaEOFHQbwZevV648H YsKsfujqWCiQBsMfjwA4Kgz95aCOaq8sjcRKpGvXE0itZeA0/H3AFgpXcPXPkj75 22+2SOOJkivWlSSfdrwLQ/WNI5pQJaNP1X13iGoUdC1pfHziY4gGWIUHZXWJ4kKF EVrteFwRjncv5+tVE6mMQ1v7cgAmmrbUz7Ga6dsVCjgTFWBhTQW9S9jyimQ0fen4 f3B3quE4VMj5zOMM8HfN91KprlvNanCTO9NJAgMBAAGjggH/MIIB+zAdBgNVHQ4E FgQUWgrIRnAmsxWBO3TfjMU3y8eDt78wHwYDVR0jBBgwFoAUKCAlirZf9h/V1m2V lk9I76NdzIYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx Mi9LQ0FsaXJaZjloX1YxbTJWbGs5STc2TmR6SVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0tDQWxpclpmOWhfVjFtMlZsazlJNzZOZHpJWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMTIvV2dySVJuQW1zeFdC TzNUZmpNVTN5OGVEdDc4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEw EgMEAi10YAMEAmcXpAMEAmc4jDANBgkqhkiG9w0BAQsFAAOCAQEAGW3J2k/nfdll 3rZA+QYFHoZQuUK9So+Q/VScZBvhhPEq0IFFw/GfmSZIRlB3mLdvNAS7tbNhjkGV EOZa8CMnhwgY1XW/uya+qvUER7dbJQ7DkgiR4lHjfSdUUHQ22M+jQ2WGmT+CssvE snIjfObVumLwj+D8PxHJ5vUZjzKMwQlBPWTwKJ/NErjynZRD+S5cOsO14GtCpw6U bhZfs/P5v7i3Yvv5979Kr8x6fNM+MC0sRJc9qfQLRl1azpciq8BoA6t74sG4eOU6 FVgyTg9JKSnN193w3fUyW+ufOBwbT/BJ0kL+V3IZoXjkzllR+6W8OKhSsQ4eRp3G Y8kc66wsSQ== -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:08 2024 by rpki-client on console-fra.rpki-client.org