$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/Q54pfvHPGWJGTum-n_-Hlj86ytE.roa File: Q54pfvHPGWJGTum-n_-Hlj86ytE.roa (raw, json) Hash identifier: Vki/FeyqKTBXXZ7rjofJE0i7oTbZg7MS6U5KQXHbj54= Subject key identifier: 43:9E:29:7E:F1:CF:19:62:46:4E:E9:BE:9F:FF:87:96:3F:3A:CA:D1 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 1EF8 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/Q54pfvHPGWJGTum-n_-Hlj86ytE.roa Signing time: Wed 20 Nov 2024 13:06:26 +0000 ROA not before: Wed 20 Nov 2024 13:06:26 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4766 IP address blocks: 49.128.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7928 (0x1ef8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Nov 20 13:06:26 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=439E297EF1CF1962464EE9BE9FFF87963F3ACAD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:a3:5b:23:55:ac:b1:c6:60:ab:66:8d:39: 99:ec:04:2d:fe:60:30:ca:29:5c:d9:33:46:f3:e2: 47:3f:b6:bf:68:9b:c8:01:8b:14:6f:3a:68:e2:2a: 4c:44:59:05:32:63:32:5e:e5:10:49:76:94:2d:d1: 69:88:5c:29:35:9d:fa:8d:4c:70:20:be:a8:97:fe: 12:98:38:63:c6:24:ae:10:92:e1:e4:f8:b0:86:37: fd:ca:bf:70:99:5e:35:ee:a1:f7:bf:b8:5a:7a:43: e3:6b:eb:69:ce:f0:8c:5f:6b:de:76:6e:64:2c:80: 0d:3e:f2:8c:e2:f9:9b:49:65:df:2b:2d:08:e1:b0: 03:a2:76:0c:bb:d9:09:ba:6e:32:42:c9:53:19:33: 60:58:20:3c:e9:7d:cb:8b:07:81:a8:30:42:81:33: 4c:a9:91:56:13:78:ca:a6:bc:3f:67:e3:82:b8:f0: fc:cc:8e:8c:8a:a2:30:06:d6:49:fd:56:94:98:bb: 33:81:83:68:04:46:f2:b2:80:a3:dd:b6:d5:40:9c: 9b:0b:ae:0a:03:2c:7f:55:09:02:54:18:f5:a0:5e: 3c:7b:52:a6:97:81:97:e6:99:00:9e:82:da:1a:06: 48:87:ec:96:29:fc:54:bf:02:02:4c:c5:6d:e3:96: 29:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9E:29:7E:F1:CF:19:62:46:4E:E9:BE:9F:FF:87:96:3F:3A:CA:D1 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/Q54pfvHPGWJGTum-n_-Hlj86ytE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.128.4.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:2a:9a:25:75:92:f3:7b:6e:65:45:e2:82:e8:a1:e3:7d:e9: 6b:be:b4:69:f4:23:62:ca:fc:19:9a:2c:18:12:b8:8d:77:84: f9:69:4b:a0:95:8e:d2:1b:23:39:7a:fb:00:a4:b7:5e:a7:5c: a4:07:72:fe:92:b7:18:5d:c7:00:97:e9:4d:70:71:90:a3:ce: e3:79:c7:84:86:fd:8c:a5:0b:0c:69:de:73:03:b3:52:37:9b: fc:af:a1:27:5f:a9:41:b4:ef:96:68:05:cc:b5:66:c3:15:a9: 95:1f:fa:81:4c:c0:10:7f:fe:9e:08:a6:7a:12:74:be:6f:e8: f6:78:03:ec:da:fc:9c:24:49:d2:be:c8:6f:e6:2e:ec:28:21: 5c:f9:72:99:03:af:fe:f8:22:ee:38:e4:d5:96:d3:d6:9e:11: 45:47:e1:21:a3:af:b3:d0:64:b1:91:24:23:a9:a1:82:78:10: 58:39:b4:7a:29:1d:8f:94:c6:f3:39:9a:9c:51:ba:9b:04:36: 31:df:c0:56:bb:f7:56:3f:ef:00:ce:2e:10:16:df:54:65:68: 4e:8d:cf:b2:64:a6:88:76:fd:7c:5d:b1:72:9a:3c:9a:ec:b5: ae:af:f5:1f:26:ad:16:a4:3d:c9:ea:e5:5f:9b:98:c8:89:4f: cb:3f:bf:7c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHvgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNDExMjAx MzA2MjZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQzOUUyOTdFRjFDRjE5 NjI0NjRFRTlCRTlGRkY4Nzk2M0YzQUNBRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxE6NbI1WsscZgq2aNOZnsBC3+YDDKKVzZM0bz4kc/tr9om8gB ixRvOmjiKkxEWQUyYzJe5RBJdpQt0WmIXCk1nfqNTHAgvqiX/hKYOGPGJK4QkuHk +LCGN/3Kv3CZXjXuofe/uFp6Q+Nr62nO8Ixfa952bmQsgA0+8ozi+ZtJZd8rLQjh sAOidgy72Qm6bjJCyVMZM2BYIDzpfcuLB4GoMEKBM0ypkVYTeMqmvD9n44K48PzM joyKojAG1kn9VpSYuzOBg2gERvKygKPdttVAnJsLrgoDLH9VCQJUGPWgXjx7UqaX gZfmmQCegtoaBkiH7JYp/FS/AgJMxW3jlimlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUQ54pfvHPGWJGTum+n/+Hlj86ytEwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvUTU0cGZ2SFBHV0pH VHVtLW5fLUhsajg2eXRFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAjGABDANBgkqhkiG9w0BAQsFAAOCAQEALCqaJXWS83tuZUXiguih433pa760 afQjYsr8GZosGBK4jXeE+WlLoJWO0hsjOXr7AKS3XqdcpAdy/pK3GF3HAJfpTXBx kKPO43nHhIb9jKULDGnecwOzUjeb/K+hJ1+pQbTvlmgFzLVmwxWplR/6gUzAEH/+ ngimehJ0vm/o9ngD7Nr8nCRJ0r7Ib+Yu7CghXPlymQOv/vgi7jjk1ZbT1p4RRUfh IaOvs9BksZEkI6mhgngQWDm0eikdj5TG8zmanFG6mwQ2Md/AVrv3Vj/vAM4uEBbf VGVoTo3PsmSmiHb9fF2xcpo8muy1rq/1HyatFqQ9yerlX5uYyIlPyz+/fA== -----END CERTIFICATE-----Generated at Fri Nov 22 14:30:51 2024 by rpki-client on console-ams.rpki-client.org