$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/cqVbsUez_CbRz-a7aivw2CxTV8g.roa File: cqVbsUez_CbRz-a7aivw2CxTV8g.roa (raw, json) Hash identifier: tao3R3nl063KzLuF29X+jAIJjeWY2yYJjRLM4/kRD94= Subject key identifier: 72:A5:5B:B1:47:B3:FC:26:D1:CF:E6:BB:6A:2B:F0:D8:2C:53:57:C8 Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Certificate serial: 1BB4 Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/cqVbsUez_CbRz-a7aivw2CxTV8g.roa Signing time: Wed 13 Mar 2024 01:23:25 +0000 ROA not before: Wed 13 Mar 2024 01:23:25 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59067 IP address blocks: 202.89.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7092 (0x1bb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Validity Not Before: Mar 13 01:23:25 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=72A55BB147B3FC26D1CFE6BB6A2BF0D82C5357C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:67:d7:c5:54:22:44:f7:92:38:c6:2d:b8:d9: 99:26:c8:25:79:44:0b:f1:74:8b:fe:13:ff:f8:fc: fb:d9:1c:09:40:61:b9:63:cb:e0:17:3a:f5:c7:a2: 0a:28:95:7f:be:2c:4a:1b:0e:46:10:5e:82:c4:f8: e1:14:56:10:49:95:0f:01:53:b5:05:ac:e0:10:0d: d6:c3:1d:2b:02:0d:8b:04:3f:e9:0e:e0:70:b2:b0: c7:48:43:43:26:f5:2e:3a:b4:ee:c2:04:dc:ba:11: 5d:9f:08:35:6f:3c:59:1c:12:b2:9a:31:ff:45:9b: 2c:8c:e5:c7:37:d0:b7:61:13:4c:73:23:c7:d2:8c: 6f:f8:04:45:b1:13:8c:4d:02:7f:e5:de:04:8e:39: ae:dc:eb:ea:8a:46:5e:42:19:9a:d4:aa:1a:91:fa: e7:80:61:d8:69:33:27:d9:50:46:ab:18:bd:ea:3e: 29:8a:87:f9:30:e5:9b:a0:31:71:32:c8:da:6c:39: 68:fe:0e:36:48:d7:d6:d3:ef:15:a0:cc:5b:a4:68: a9:5c:56:18:18:11:02:0c:c5:e2:53:bb:d3:b7:ca: 53:26:ab:4f:a3:b6:24:cc:aa:c9:2f:df:0b:a5:31: 26:69:86:b8:9e:d6:d4:53:ab:95:ca:10:94:6b:f6: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A5:5B:B1:47:B3:FC:26:D1:CF:E6:BB:6A:2B:F0:D8:2C:53:57:C8 X509v3 Authority Key Identifier: keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/cqVbsUez_CbRz-a7aivw2CxTV8g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.89.232.0/21 Signature Algorithm: sha256WithRSAEncryption 32:f9:ba:2f:c3:66:2f:55:40:bb:82:20:c6:7e:c3:28:9a:59: 09:d4:65:50:d9:60:30:47:4d:b5:56:8c:09:5c:8a:d3:52:a0: e7:17:d3:ad:b6:94:56:39:57:1c:77:7c:54:cf:3c:26:d2:cb: 47:14:76:99:71:1e:f6:9d:7e:00:7a:9d:5e:ca:59:0e:a7:de: 15:23:f9:99:9b:e5:7e:9a:40:37:c4:1b:88:40:0a:5d:74:88: a8:f9:a3:0e:87:49:84:73:d3:14:a3:4f:85:45:81:86:4b:29: 5c:1f:4b:72:8d:66:09:69:ad:d2:9b:07:4b:b4:f1:2c:59:c6: 1f:5c:0b:92:60:a0:51:7b:e9:42:3c:75:12:64:5d:56:0a:a0: c7:10:a2:16:ec:9b:2c:7e:73:37:02:09:93:ea:da:25:ab:e1: 6c:69:10:2a:c4:5c:66:92:bb:b7:92:4a:2d:f9:eb:4b:fd:10: 91:f2:0d:ad:9d:cb:6e:14:a6:56:f8:34:90:9d:c9:fc:e0:6a: 53:40:c0:e4:62:e9:22:70:dc:6f:21:ea:4d:d8:b8:ed:17:12: d3:30:c7:14:eb:62:04:2d:79:cd:01:2a:ae:8c:37:43:36:c3: f1:e6:c8:c1:56:14:b6:88:db:1f:67:2a:8f:80:3e:e6:52:58: d7:a1:fd:7f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICG7QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENB NEYxODNDNjU5RUQ1N0ZCNDZENTlBRDU0ODNENkZFOUIzNEY0RTAeFw0yNDAzMTMw MTIzMjVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDcyQTU1QkIxNDdCM0ZD MjZEMUNGRTZCQjZBMkJGMEQ4MkM1MzU3QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtZ9fFVCJE95I4xi242ZkmyCV5RAvxdIv+E//4/PvZHAlAYblj y+AXOvXHogoolX++LEobDkYQXoLE+OEUVhBJlQ8BU7UFrOAQDdbDHSsCDYsEP+kO 4HCysMdIQ0Mm9S46tO7CBNy6EV2fCDVvPFkcErKaMf9FmyyM5cc30LdhE0xzI8fS jG/4BEWxE4xNAn/l3gSOOa7c6+qKRl5CGZrUqhqR+ueAYdhpMyfZUEarGL3qPimK h/kw5ZugMXEyyNpsOWj+DjZI19bT7xWgzFukaKlcVhgYEQIMxeJTu9O3ylMmq0+j tiTMqskv3wulMSZphrie1tRTq5XKEJRr9o4ZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUcqVbsUez/CbRz+a7aivw2CxTV8gwHwYDVR0jBBgwFoAUDKTxg8ZZ7Vf7RtWa 1Ug9b+mzT04wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz NC9ES1R4ZzhaWjdWZjdSdFdhMVVnOWItbXpUMDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RLVHhnOFpaN1ZmN1J0V2ExVWc5Yi1telQwNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQvY3FWYnNVZXpfQ2JS ei1hN2FpdncyQ3hUVjhnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8pZ6DANBgkqhkiG9w0BAQsFAAOCAQEAMvm6L8NmL1VAu4Igxn7DKJpZCdRl UNlgMEdNtVaMCVyK01Kg5xfTrbaUVjlXHHd8VM88JtLLRxR2mXEe9p1+AHqdXspZ DqfeFSP5mZvlfppAN8QbiEAKXXSIqPmjDodJhHPTFKNPhUWBhkspXB9Lco1mCWmt 0psHS7TxLFnGH1wLkmCgUXvpQjx1EmRdVgqgxxCiFuybLH5zNwIJk+raJavhbGkQ KsRcZpK7t5JKLfnrS/0QkfINrZ3LbhSmVvg0kJ3J/OBqU0DA5GLpInDcbyHqTdi4 7RcS0zDHFOtiBC15zQEqrow3QzbD8ebIwVYUtojbH2cqj4A+5lJY16H9fw== -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:09 2024 by rpki-client on console-fra.rpki-client.org