$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/EOnupcvtCMAK5OxIY4h4mWkyjzw.roa File: EOnupcvtCMAK5OxIY4h4mWkyjzw.roa (raw, json) Hash identifier: fiIIAwLLrgOkYfmjaRRf+etedHxjFxYKrT1AXkBeG4U= Subject key identifier: 10:E9:EE:A5:CB:ED:08:C0:0A:E4:EC:48:63:88:78:99:69:32:8F:3C Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE Certificate serial: 15C8 Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/EOnupcvtCMAK5OxIY4h4mWkyjzw.roa Signing time: Wed 13 Mar 2024 01:23:39 +0000 ROA not before: Wed 13 Mar 2024 01:23:39 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 9808 IP address blocks: 202.141.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Sep 2024 23:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5576 (0x15c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE Validity Not Before: Mar 13 01:23:39 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=10E9EEA5CBED08C00AE4EC486388789969328F3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:b9:8e:d4:1e:40:65:c0:f5:b2:38:63:34: 40:82:0e:be:24:98:28:29:bc:34:9d:74:cc:e0:ef: 30:79:da:c6:40:5e:b1:d8:15:f5:2e:9d:20:72:38: 5c:23:8c:04:f5:fd:44:0f:eb:05:fb:50:d8:3e:77: 42:bc:ec:ad:8c:3a:59:f1:5c:74:5c:ab:c3:d3:29: aa:ce:69:a6:d6:37:c8:36:e2:c2:d8:05:fe:57:3f: a5:bc:2a:55:0e:69:28:09:d5:d7:c9:4a:10:dc:f9: 6f:fb:b4:40:05:f2:18:e1:5b:1e:f3:0b:1a:76:bb: 5e:8c:29:b4:cf:e5:05:91:6a:8c:57:f4:0c:34:40: 26:f4:61:1d:3e:d9:d2:66:e8:07:06:9f:2c:37:42: b6:b9:73:0d:db:b3:84:b8:26:64:cf:42:34:3d:fe: b3:e6:d2:ca:26:c4:23:8b:39:65:1e:63:37:37:35: a4:e3:e8:fe:ab:a5:c5:2a:4d:23:12:87:de:51:04: 2b:ad:d7:ac:ac:16:5e:9d:88:ee:10:09:04:11:97: 1b:f2:b6:6c:19:7c:6e:97:46:60:27:2d:9e:e3:5f: 1b:e4:f8:7f:f2:1d:75:ca:52:56:3f:d3:76:d2:21: 92:b3:43:c2:34:a1:8f:55:0f:df:96:07:9d:1a:f9: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E9:EE:A5:CB:ED:08:C0:0A:E4:EC:48:63:88:78:99:69:32:8F:3C X509v3 Authority Key Identifier: keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/EOnupcvtCMAK5OxIY4h4mWkyjzw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.141.176.0/20 Signature Algorithm: sha256WithRSAEncryption 59:f4:d2:29:98:d4:0e:72:03:70:41:e9:4d:8c:5d:73:9d:c2: e9:a5:13:ab:8b:3f:af:b8:32:73:f1:d0:05:4d:7f:74:9f:95: bd:6d:9d:fb:fc:5a:72:b5:8a:6f:1f:f6:ac:e1:45:db:ed:dd: 9b:d7:e6:65:8f:f1:e9:6b:36:f1:84:60:c1:56:02:14:c4:62: cc:d3:d9:e4:6f:96:17:ac:89:71:37:ac:14:a8:2b:0e:79:12: 88:c8:0a:03:32:55:cd:db:35:d5:e1:1d:66:08:7f:27:70:a1: 67:8c:0e:36:8c:d2:a9:b7:17:97:dc:af:cc:4b:86:a6:99:53: ad:6b:30:91:9b:a4:5b:f6:10:22:85:31:1b:c6:dd:09:f1:39: 5d:8d:10:df:68:9d:d8:7d:7e:d1:46:68:65:40:af:33:17:94: 9c:75:07:70:cf:4d:a6:d8:28:cf:c6:55:b6:34:eb:df:cc:40: b3:4b:5f:8b:82:6b:61:45:54:1b:e5:ca:93:ca:ea:1a:e8:12: 2c:0f:20:e1:ae:f4:65:f6:81:d5:13:eb:47:d5:3a:df:0c:68: ea:e1:f0:9a:27:68:be:8d:70:25:f4:fb:6a:7e:54:96:b3:c7: 74:d9:69:c6:61:6e:17:c6:42:60:09:c5:d5:9b:ae:18:94:4f: 6c:a1:c0:03 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFcgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjZE NUFGMjE5NTlCN0Y5QzFCMjMwRDcyNTg5OEYxMTFBQUEzRjlBRTAeFw0yNDAzMTMw MTIzMzlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDEwRTlFRUE1Q0JFRDA4 QzAwQUU0RUM0ODYzODg3ODk5NjkzMjhGM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnWLmO1B5AZcD1sjhjNECCDr4kmCgpvDSddMzg7zB52sZAXrHY FfUunSByOFwjjAT1/UQP6wX7UNg+d0K87K2MOlnxXHRcq8PTKarOaabWN8g24sLY Bf5XP6W8KlUOaSgJ1dfJShDc+W/7tEAF8hjhWx7zCxp2u16MKbTP5QWRaoxX9Aw0 QCb0YR0+2dJm6AcGnyw3Qra5cw3bs4S4JmTPQjQ9/rPm0somxCOLOWUeYzc3NaTj 6P6rpcUqTSMSh95RBCut16ysFl6diO4QCQQRlxvytmwZfG6XRmAnLZ7jXxvk+H/y HXXKUlY/03bSIZKzQ8I0oY9VD9+WB50a+ci5AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUEOnupcvtCMAK5OxIY4h4mWkyjzwwHwYDVR0jBBgwFoAU9tWvIZWbf5wbIw1y WJjxEaqj+a4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTky Lzl0V3ZJWldiZjV3Ykl3MXlXSmp4RWFxai1hNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXRXdklaV2JmNXdiSXcxeVdKanhFYXFqLWE0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTkyL0VPbnVwY3Z0Q01BSzVP eElZNGg0bVdreWp6dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATKjbAwDQYJKoZIhvcNAQELBQADggEBAFn00imY1A5yA3BB6U2MXXOdwumlE6uL P6+4MnPx0AVNf3Sflb1tnfv8WnK1im8f9qzhRdvt3ZvX5mWP8elrNvGEYMFWAhTE YszT2eRvlhesiXE3rBSoKw55EojICgMyVc3bNdXhHWYIfydwoWeMDjaM0qm3F5fc r8xLhqaZU61rMJGbpFv2ECKFMRvG3QnxOV2NEN9ondh9ftFGaGVArzMXlJx1B3DP TabYKM/GVbY069/MQLNLX4uCa2FFVBvlypPK6hroEiwPIOGu9GX2gdUT60fVOt8M aOrh8JonaL6NcCX0+2p+VJazx3TZacZhbhfGQmAJxdWbrhiUT2yhwAM= -----END CERTIFICATE-----Generated at Fri Sep 27 19:09:27 2024 by rpki-client on console-ams.rpki-client.org