$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2154/IjOalNpdPDs3gxhI0D5OaH51sQA.roa File: IjOalNpdPDs3gxhI0D5OaH51sQA.roa (raw, json) Hash identifier: vyd8V/94c2HTG/sEYhJnsIiS/a6VWjaXDmtaOkYIrcg= Subject key identifier: 22:33:9A:94:DA:5D:3C:3B:37:83:18:48:D0:3E:4E:68:7E:75:B1:00 Certificate issuer: /CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2 Certificate serial: 018F Authority key identifier: E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/IjOalNpdPDs3gxhI0D5OaH51sQA.roa Signing time: Tue 08 Oct 2024 10:02:33 +0000 ROA not before: Tue 08 Oct 2024 10:02:33 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63631 IP address blocks: 119.161.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2 Validity Not Before: Oct 8 10:02:33 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=22339A94DA5D3C3B37831848D03E4E687E75B100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:10:3b:da:64:68:e9:d7:3a:20:6d:12:ec: de:bd:59:98:49:7e:bf:6e:3a:9c:57:81:9a:50:ef: 22:c2:f1:c3:49:72:14:85:97:87:f4:7a:4d:7a:9a: e9:64:67:2e:b6:ce:3c:00:a8:10:a9:bf:e6:83:34: a7:37:b5:73:57:2b:7d:01:94:3a:b6:8e:db:85:b6: f2:5c:4c:a7:8a:5e:6d:74:5f:63:1b:38:47:54:fe: 9b:31:db:35:35:54:f7:8e:d3:92:59:34:61:74:a2: 3b:ff:26:4e:6e:90:c9:a1:f6:2c:80:44:26:19:ad: fc:28:fd:a8:34:4c:62:74:56:65:f8:65:33:7e:6e: f7:2a:45:7d:35:4f:2f:dc:8c:25:86:9d:66:50:39: 31:af:b8:a5:fd:3f:96:ce:e3:8c:dd:ca:20:4d:63: 7d:be:d3:4a:5c:21:83:34:d3:9d:59:80:56:ad:d9: 3d:8e:43:a9:67:ea:38:01:b4:28:b0:03:34:1d:1b: 13:ff:1f:1f:d1:e7:0d:09:bb:fd:f5:88:39:50:a3: d9:db:90:86:fe:68:6d:2d:51:2e:fb:89:b4:03:0c: 36:5e:af:5a:68:3d:58:62:a5:75:b6:48:62:74:e5: ea:84:9e:d2:ee:b7:78:2e:2b:10:56:3a:a9:84:70: c8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:33:9A:94:DA:5D:3C:3B:37:83:18:48:D0:3E:4E:68:7E:75:B1:00 X509v3 Authority Key Identifier: keyid:E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/IjOalNpdPDs3gxhI0D5OaH51sQA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.161.160.0/21 Signature Algorithm: sha256WithRSAEncryption 71:6d:b2:c9:ef:b7:65:e2:6d:8c:fe:84:30:d7:ba:bc:03:54: d8:b3:6c:53:da:00:32:b1:cc:78:c2:54:90:2a:92:c7:de:28: 98:fc:97:0e:89:9e:5a:59:8c:e1:d6:e7:b7:63:04:a6:82:7b: c3:54:53:e8:3e:c0:65:f8:d9:fb:49:bb:40:39:5a:c0:af:5e: b9:f2:72:ff:42:86:74:3a:88:14:51:91:6e:97:a5:4d:a4:01: d0:86:90:6b:1c:5e:2f:1f:4a:a9:8e:a0:d3:60:ca:a2:15:f8: 13:9b:f7:6b:e0:6a:ce:65:bf:8c:5d:59:6d:a8:8d:1a:be:e9: 43:19:e9:8a:a5:4a:7d:9e:b8:64:24:67:11:f9:6e:a9:b3:6f: a2:08:05:04:f8:d8:8b:a5:81:b0:b5:69:ff:d6:18:3c:de:28: d8:fb:fa:ca:08:bf:17:d6:22:4c:5b:3f:16:4b:73:2e:57:0b: 11:87:25:af:69:4c:86:d5:44:ca:f8:54:9b:c9:04:ce:bf:f5: c8:b9:ef:cb:d1:1b:02:cc:76:51:f7:0f:ea:1d:c3:04:56:ff: 11:04:24:8e:e0:f4:a3:7d:9f:88:5b:61:69:5a:40:9f:bc:ba: 15:1c:fa:89:ff:68:2f:c3:7e:69:0a:97:cd:27:4f:0a:2d:f2: 4c:8b:32:78 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTUw MkRFMkM2MDg2QTY2Mjg0QjgwQ0RCN0I1QUMwQzEyQ0MzRjNDMjAeFw0yNDEwMDgx MDAyMzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDIyMzM5QTk0REE1RDND M0IzNzgzMTg0OEQwM0U0RTY4N0U3NUIxMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnoBA72mRo6dc6IG0S7N69WZhJfr9uOpxXgZpQ7yLC8cNJchSF l4f0ek16mulkZy62zjwAqBCpv+aDNKc3tXNXK30BlDq2jtuFtvJcTKeKXm10X2Mb OEdU/psx2zU1VPeO05JZNGF0ojv/Jk5ukMmh9iyARCYZrfwo/ag0TGJ0VmX4ZTN+ bvcqRX01Ty/cjCWGnWZQOTGvuKX9P5bO44zdyiBNY32+00pcIYM0051ZgFat2T2O Q6ln6jgBtCiwAzQdGxP/Hx/R5w0Ju/31iDlQo9nbkIb+aG0tUS77ibQDDDZer1po PVhipXW2SGJ05eqEntLut3guKxBWOqmEcMiPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUIjOalNpdPDs3gxhI0D5OaH51sQAwHwYDVR0jBBgwFoAU5QLeLGCGpmKEuAzb e1rAwSzD88IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjE1 NC81UUxlTEdDR3BtS0V1QXpiZTFyQXdTekQ4OEkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzVRTGVMR0NHcG1LRXVBemJlMXJBd1N6RDg4SS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxNTQvSWpPYWxOcGRQRHMz Z3hoSTBENU9hSDUxc1FBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3ehoDANBgkqhkiG9w0BAQsFAAOCAQEAcW2yye+3ZeJtjP6EMNe6vANU2LNs U9oAMrHMeMJUkCqSx94omPyXDomeWlmM4dbnt2MEpoJ7w1RT6D7AZfjZ+0m7QDla wK9eufJy/0KGdDqIFFGRbpelTaQB0IaQaxxeLx9KqY6g02DKohX4E5v3a+BqzmW/ jF1ZbaiNGr7pQxnpiqVKfZ64ZCRnEfluqbNvoggFBPjYi6WBsLVp/9YYPN4o2Pv6 ygi/F9YiTFs/FktzLlcLEYclr2lMhtVEyvhUm8kEzr/1yLnvy9EbAsx2UfcP6h3D BFb/EQQkjuD0o32fiFthaVpAn7y6FRz6if9oL8N+aQqXzSdPCi3yTIsyeA== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:42 2024 by rpki-client on console-ams.rpki-client.org