$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2187/rGX-jlWmT5UXNDCJbyr29sYL8j0.roa File: rGX-jlWmT5UXNDCJbyr29sYL8j0.roa (raw, json) Hash identifier: SC8327IqDeIkUpm5PLMYz5uE5ihFgGUKeXxDbb+NB5c= Subject key identifier: AC:65:FE:8E:55:A6:4F:95:17:34:30:89:6F:2A:F6:F6:C6:0B:F2:3D Certificate issuer: /CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7 Certificate serial: 8F Authority key identifier: 45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/rGX-jlWmT5UXNDCJbyr29sYL8j0.roa Signing time: Fri 16 Aug 2024 08:33:51 +0000 ROA not before: Fri 16 Aug 2024 08:33:51 +0000 ROA not after: Sat 19 Jul 2025 08:42:41 +0000 asID: 4812 IP address blocks: 124.14.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 13:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7 Validity Not Before: Aug 16 08:33:51 2024 GMT Not After : Jul 19 08:42:41 2025 GMT Subject: CN=AC65FE8E55A64F95173430896F2AF6F6C60BF23D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:66:25:65:ca:21:6a:c3:d9:6e:fd:48:a7: 8f:c1:fa:bb:a3:a1:9a:e0:75:01:0d:73:ba:f7:75: 23:95:61:8c:7a:54:ae:41:93:11:f6:25:dd:d4:17: b5:6f:be:fc:e8:b1:ab:cc:59:4f:eb:0c:d4:8b:13: 7d:fd:f0:49:2a:3b:ae:2c:50:8e:a4:b5:29:6b:8a: c8:e6:e3:fd:d5:12:61:d2:3f:57:b3:cc:f8:e7:ef: 13:8e:41:83:cd:84:30:e6:91:f4:1d:ce:7d:fe:63: 97:ff:37:2f:6a:42:f2:a1:4b:51:f3:a8:34:7f:79: ca:85:d5:f0:1d:bb:70:6e:0e:a0:51:9c:44:9d:1b: ba:06:6c:cf:9e:b6:10:9a:1f:85:e2:47:4e:1c:52: df:58:ed:a1:c3:f4:8b:5c:cc:10:4e:83:3b:bf:03: df:d7:df:1c:80:a8:4e:c9:47:a0:da:74:9a:3d:f0: 8a:f1:9c:d7:a2:61:11:cc:39:f5:42:d9:9d:f1:1a: 1d:48:21:89:60:65:21:9f:4d:35:f7:63:ef:36:cc: 49:c7:72:50:75:69:80:3b:a2:d6:37:4f:6f:a7:c3: a3:56:a6:c7:de:2a:e7:23:ba:12:00:a8:2c:a7:ea: 3e:6f:af:19:18:36:03:d4:9f:4d:56:26:a6:99:ae: 06:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:65:FE:8E:55:A6:4F:95:17:34:30:89:6F:2A:F6:F6:C6:0B:F2:3D X509v3 Authority Key Identifier: keyid:45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/rGX-jlWmT5UXNDCJbyr29sYL8j0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.14.1.0/24 Signature Algorithm: sha256WithRSAEncryption 52:53:7b:8d:bd:cc:86:ba:9c:19:b8:24:e3:3b:6e:80:29:c8: 2d:09:d2:38:86:d0:a8:5f:5a:96:9c:d0:f5:43:83:1a:20:c2: ec:ad:27:d0:4a:e4:5f:dc:94:6a:cc:d5:f3:b1:4e:42:92:a0: 4c:36:1d:74:f4:ce:08:9d:f1:3d:05:c5:04:5d:fe:67:d2:17: f3:6f:ed:09:ef:7d:06:ce:e1:f7:3b:d2:3e:e8:4c:67:69:2e: 21:91:e0:df:d9:d6:27:0d:29:3e:4b:c8:3c:dc:27:43:4c:b9: 79:8d:61:c7:d0:4f:ed:eb:7e:63:fd:59:f6:b2:33:65:d2:3a: 04:64:a1:35:e8:53:75:4d:37:3f:f5:98:e7:cd:41:3c:8a:45: 9b:18:50:47:02:31:0a:32:94:bf:2c:17:27:d3:c4:7b:3f:47: fa:89:96:56:ab:d7:b3:06:9a:9f:6b:b6:23:12:3f:4b:e9:73: f7:72:06:52:24:01:61:2a:49:16:e2:4f:c9:4c:c2:38:72:f7: be:d1:1f:52:8b:54:bf:f7:4a:40:46:44:c0:fa:8e:6b:ae:92: 06:9b:2c:79:12:5a:02:7d:d1:8a:6c:f6:67:9b:64:87:4a:0c: 28:5c:eb:a5:93:27:3b:04:60:da:8d:00:3f:37:fc:2a:03:4a: e0:0b:25:af -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDVD RjVCMjYyQTU2Rjg1MTM0QzhGRTk1RDY0REYwODlGMUI3NjJFNzAeFw0yNDA4MTYw ODMzNTFaFw0yNTA3MTkwODQyNDFaMDMxMTAvBgNVBAMTKEFDNjVGRThFNTVBNjRG OTUxNzM0MzA4OTZGMkFGNkY2QzYwQkYyM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9EWYlZcohasPZbv1Ip4/B+rujoZrgdQENc7r3dSOVYYx6VK5B kxH2Jd3UF7VvvvzosavMWU/rDNSLE3398EkqO64sUI6ktSlrisjm4/3VEmHSP1ez zPjn7xOOQYPNhDDmkfQdzn3+Y5f/Ny9qQvKhS1HzqDR/ecqF1fAdu3BuDqBRnESd G7oGbM+ethCaH4XiR04cUt9Y7aHD9ItczBBOgzu/A9/X3xyAqE7JR6DadJo98Irx nNeiYRHMOfVC2Z3xGh1IIYlgZSGfTTX3Y+82zEnHclB1aYA7otY3T2+nw6NWpsfe KucjuhIAqCyn6j5vrxkYNgPUn01WJqaZrgYNAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUrGX+jlWmT5UXNDCJbyr29sYL8j0wHwYDVR0jBBgwFoAURc9bJipW+FE0yP6V 1k3wifG3YucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjE4 Ny9SYzliSmlwVy1GRTB5UDZWMWszd2lmRzNZdWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1JjOWJKaXBXLUZFMHlQNlYxazN3aWZHM1l1Yy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxODcvckdYLWpsV21UNVVY TkRDSmJ5cjI5c1lMOGowLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHwOATANBgkqhkiG9w0BAQsFAAOCAQEAUlN7jb3MhrqcGbgk4ztugCnILQnS OIbQqF9alpzQ9UODGiDC7K0n0ErkX9yUaszV87FOQpKgTDYddPTOCJ3xPQXFBF3+ Z9IX82/tCe99Bs7h9zvSPuhMZ2kuIZHg39nWJw0pPkvIPNwnQ0y5eY1hx9BP7et+ Y/1Z9rIzZdI6BGShNehTdU03P/WY581BPIpFmxhQRwIxCjKUvywXJ9PEez9H+omW VqvXswaan2u2IxI/S+lz93IGUiQBYSpJFuJPyUzCOHL3vtEfUotUv/dKQEZEwPqO a66SBpsseRJaAn3Rimz2Z5tkh0oMKFzrpZMnOwRg2o0APzf8KgNK4Aslrw== -----END CERTIFICATE-----Generated at Tue Nov 26 11:14:29 2024 by rpki-client on console-fra.rpki-client.org