$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/HdJLKpkoeZyxS_7duFCOOPm1Cek.roa File: HdJLKpkoeZyxS_7duFCOOPm1Cek.roa (raw, json) Hash identifier: 9InvhN8+FXug48UdtBBNIrncxJdfYy/D8MF6e6EgVhs= Subject key identifier: 1D:D2:4B:2A:99:28:79:9C:B1:4B:FE:DD:B8:50:8E:38:F9:B5:09:E9 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 1D85 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/HdJLKpkoeZyxS_7duFCOOPm1Cek.roa Signing time: Thu 12 Sep 2024 11:20:01 +0000 ROA not before: Thu 12 Sep 2024 11:20:01 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 60721 IP address blocks: 223.29.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 06:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7557 (0x1d85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Sep 12 11:20:01 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=1DD24B2A9928799CB14BFEDDB8508E38F9B509E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b3:15:29:05:50:e2:a3:c1:1a:a6:b9:37:93: 9c:80:5e:b4:c3:b9:f1:e5:1a:52:fb:cc:f7:86:b8: 5d:1b:8e:ec:16:16:78:c2:f8:6d:13:dd:c3:2d:2c: 30:2d:58:83:c8:5a:30:32:21:05:a3:94:63:1a:e9: 35:97:39:1a:1d:58:5d:41:d3:7d:79:17:25:f9:1c: a1:fa:f7:be:46:d2:91:f9:f4:07:8c:f4:e8:96:36: 03:89:02:ec:83:42:b5:a6:3e:ec:3b:3d:bf:8b:1d: e4:aa:89:d9:91:ae:e8:3c:87:c6:f2:b8:0b:6d:83: 97:69:a7:74:f1:6d:6a:74:b0:c9:7f:4e:73:b7:6b: 00:a2:66:b2:82:8b:75:72:13:0f:58:a9:2f:7f:93: 4c:14:a7:dd:97:9f:8b:6a:f0:a6:96:93:b7:92:33: cb:f1:47:cd:6a:49:8d:27:84:76:84:49:6c:73:6b: ee:05:63:03:2e:0f:d8:06:f7:67:55:27:4f:41:d5: a5:e8:94:a8:80:cc:90:cc:55:91:db:39:a4:7e:c8: 32:f2:72:b4:6c:84:4f:6e:cf:50:ca:79:11:e1:2e: c2:5e:64:38:87:19:d1:21:30:26:73:30:57:af:4b: 3c:41:4c:b2:82:91:9e:a3:3c:b0:a8:f7:d7:71:50: fc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D2:4B:2A:99:28:79:9C:B1:4B:FE:DD:B8:50:8E:38:F9:B5:09:E9 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/HdJLKpkoeZyxS_7duFCOOPm1Cek.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.29.254.0/24 Signature Algorithm: sha256WithRSAEncryption 25:c8:ce:06:b2:21:8e:c5:d9:ec:d6:ec:c3:f2:27:d0:bd:81: 26:c1:da:18:ef:f2:4d:6b:74:c6:8a:7b:01:77:3d:5d:63:ec: c7:32:40:fe:a7:50:2b:6e:31:34:34:a9:59:fb:47:16:7e:84: 47:25:9d:23:c2:c1:d3:4a:7f:29:1b:31:58:27:6e:6f:94:bb: df:ac:16:dd:f9:91:17:12:3f:84:df:f6:eb:9a:fb:46:b3:59: a2:87:2d:65:49:6f:06:a0:28:02:cd:b9:67:c9:6e:3d:fc:55: a6:7a:13:cd:15:4d:d6:62:ea:be:5f:3a:a0:45:29:f6:a5:86: d6:a1:87:c2:d8:5a:9a:c2:30:c6:78:61:e3:aa:97:55:7f:d7: b2:cc:a6:2e:72:64:a7:81:10:49:57:cd:de:9b:63:53:ab:0e: 54:a3:35:e7:b0:7b:ee:6f:15:d4:a9:d0:27:4a:80:7d:57:cd: ac:fa:1d:f5:c9:bc:f2:c9:54:a5:4f:33:37:38:56:02:3b:47: 1e:9c:f2:c3:f7:8a:d0:a5:2a:55:dd:80:cd:76:70:60:00:a2: 7c:08:5f:fd:d4:9b:77:4b:65:4e:3f:64:02:48:f7:1e:dc:6e: 95:4e:6c:d0:fd:a2:57:e6:49:f6:f1:5a:f9:26:43:0e:38:45: e9:7a:99:50 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNDA5MTIx MTIwMDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDFERDI0QjJBOTkyODc5 OUNCMTRCRkVEREI4NTA4RTM4RjlCNTA5RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCisxUpBVDio8Eaprk3k5yAXrTDufHlGlL7zPeGuF0bjuwWFnjC +G0T3cMtLDAtWIPIWjAyIQWjlGMa6TWXORodWF1B0315FyX5HKH6975G0pH59AeM 9OiWNgOJAuyDQrWmPuw7Pb+LHeSqidmRrug8h8byuAttg5dpp3TxbWp0sMl/TnO3 awCiZrKCi3VyEw9YqS9/k0wUp92Xn4tq8KaWk7eSM8vxR81qSY0nhHaESWxza+4F YwMuD9gG92dVJ09B1aXolKiAzJDMVZHbOaR+yDLycrRshE9uz1DKeRHhLsJeZDiH GdEhMCZzMFevSzxBTLKCkZ6jPLCo99dxUPyxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUHdJLKpkoeZyxS/7duFCOOPm1CekwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvSGRKTEtwa29lWnl4 U183ZHVGQ09PUG0xQ2VrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAN8d/jANBgkqhkiG9w0BAQsFAAOCAQEAJcjOBrIhjsXZ7Nbsw/In0L2BJsHa GO/yTWt0xop7AXc9XWPsxzJA/qdQK24xNDSpWftHFn6ERyWdI8LB00p/KRsxWCdu b5S736wW3fmRFxI/hN/265r7RrNZooctZUlvBqAoAs25Z8luPfxVpnoTzRVN1mLq vl86oEUp9qWG1qGHwthamsIwxnhh46qXVX/XssymLnJkp4EQSVfN3ptjU6sOVKM1 57B77m8V1KnQJ0qAfVfNrPod9cm88slUpU8zNzhWAjtHHpzyw/eK0KUqVd2AzXZw YACifAhf/dSbd0tlTj9kAkj3HtxulU5s0P2iV+ZJ9vFa+SZDDjhF6XqZUA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:49 2024 by rpki-client on console-fra.rpki-client.org