$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/A5JTKb0vZnDvo8UpkVya-cognAk.roa File: A5JTKb0vZnDvo8UpkVya-cognAk.roa (raw, json) Hash identifier: CatxJSbWJ7+LP6IwzCOTxH/un/wX5sS84QqKLcPwfp0= Subject key identifier: 03:92:53:29:BD:2F:66:70:EF:A3:C5:29:91:5C:9A:F9:CA:20:9C:09 Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43 Certificate serial: 11ED Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/A5JTKb0vZnDvo8UpkVya-cognAk.roa Signing time: Thu 14 Nov 2024 08:20:02 +0000 ROA not before: Thu 14 Nov 2024 08:20:02 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 62387 IP address blocks: 103.235.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4589 (0x11ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43 Validity Not Before: Nov 14 08:20:02 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=03925329BD2F6670EFA3C529915C9AF9CA209C09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d6:ed:5d:72:78:92:d5:00:fc:bb:8a:95:71: 31:7d:66:da:3e:28:d6:60:cd:de:a7:67:32:2b:68: c5:30:54:3d:a4:28:79:7e:51:12:f4:38:4c:04:70: 83:05:35:15:82:31:8f:f7:62:60:f7:45:45:00:26: f4:9c:ec:4e:d9:df:61:4d:66:89:c2:9a:a0:34:67: 5b:5b:50:db:71:88:c8:d8:30:29:1e:5f:59:14:cb: 78:d1:d9:77:cc:87:61:ec:91:01:cd:e4:82:9b:9f: c1:52:56:8a:e2:05:d0:6d:b8:f6:56:8c:08:df:6e: f7:fe:9f:42:38:87:22:cb:82:4f:b4:67:5c:7d:e3: 86:1c:68:0b:34:59:7b:87:6a:9c:40:5a:ed:02:88: e8:68:9c:70:46:87:54:c1:6c:f8:f1:36:23:34:41: 75:e5:bd:52:09:2d:14:d0:4c:1a:ee:9f:be:32:b8: b8:0c:a3:7e:bd:7c:61:12:a6:fb:d0:e9:fd:45:bd: df:b5:4f:75:65:c6:ec:99:08:ed:90:2d:e7:0f:2e: d3:5f:b7:28:cc:72:dc:75:aa:d6:2d:7b:87:27:e6: c9:e6:40:3d:c4:ee:eb:a3:26:9f:53:b1:b7:1f:c4: 01:d1:50:b6:52:fe:8b:24:72:6b:96:72:87:8e:38: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:92:53:29:BD:2F:66:70:EF:A3:C5:29:91:5C:9A:F9:CA:20:9C:09 X509v3 Authority Key Identifier: keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/A5JTKb0vZnDvo8UpkVya-cognAk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.235.128.0/22 Signature Algorithm: sha256WithRSAEncryption 79:9d:ce:65:86:cc:34:81:07:b3:ad:48:ea:47:47:d5:7e:92: a6:29:2e:79:18:e5:56:bf:3b:5e:95:cf:d6:10:56:1e:13:ab: 28:36:76:54:62:70:03:fa:3e:3b:d5:3c:49:e2:de:bd:4d:f8: b1:55:32:f1:85:a7:db:41:57:ae:0e:33:58:b4:b5:61:c3:73: c4:23:7b:44:9c:53:2a:b6:c5:2f:0e:86:ab:e1:a2:f8:fe:b8: 51:35:65:8d:4b:01:a4:2f:1c:db:68:bb:46:bf:fc:58:b4:92: 77:8b:41:9f:44:fb:bc:49:54:30:9a:f7:4d:db:a7:69:b5:5d: a7:0c:75:c3:2a:d6:77:bf:f5:00:95:3c:90:17:2e:1b:e3:51: 5e:26:d6:83:80:25:d1:4a:41:49:7c:17:42:2a:bf:19:11:bb: b3:58:a4:f6:d3:29:17:d7:d3:98:11:9f:f4:c3:7b:93:94:86: c2:9c:0f:ef:94:fc:e9:89:54:47:c2:11:65:65:ad:6a:eb:83: 0e:75:c2:36:ce:65:11:c7:bf:94:57:63:4c:b1:50:eb:da:44: f8:8e:42:72:c7:11:25:6f:fb:a4:6f:8e:cc:e3:fb:7f:b9:28: 47:52:92:f8:3c:b5:85:2d:70:29:7e:5a:0a:71:fd:17:82:fb: e6:91:b8:a9 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDYw QzAwQkYxN0E1NUZEQjg1Q0FGNDU3OEJFODMzMDU2RTAyOEI0MzAeFw0yNDExMTQw ODIwMDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAzOTI1MzI5QkQyRjY2 NzBFRkEzQzUyOTkxNUM5QUY5Q0EyMDlDMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo1u1dcniS1QD8u4qVcTF9Zto+KNZgzd6nZzIraMUwVD2kKHl+ URL0OEwEcIMFNRWCMY/3YmD3RUUAJvSc7E7Z32FNZonCmqA0Z1tbUNtxiMjYMCke X1kUy3jR2XfMh2HskQHN5IKbn8FSVoriBdBtuPZWjAjfbvf+n0I4hyLLgk+0Z1x9 44YcaAs0WXuHapxAWu0CiOhonHBGh1TBbPjxNiM0QXXlvVIJLRTQTBrun74yuLgM o369fGESpvvQ6f1Fvd+1T3VlxuyZCO2QLecPLtNftyjMctx1qtYte4cn5snmQD3E 7uujJp9TsbcfxAHRULZS/oskcmuWcoeOOLZZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUA5JTKb0vZnDvo8UpkVya+cognAkwHwYDVR0jBBgwFoAUBgwAvxelX9uFyvRX i+gzBW4Ci0MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS9CZ3dBdnhlbFg5dUZ5dlJYaS1nekJXNENpME0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0Jnd0F2eGVsWDl1Rnl2UlhpLWd6Qlc0Q2kwTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvQTVKVEtiMHZabkR2 bzhVcGtWeWEtY29nbkFrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfrgDANBgkqhkiG9w0BAQsFAAOCAQEAeZ3OZYbMNIEHs61I6kdH1X6Spiku eRjlVr87XpXP1hBWHhOrKDZ2VGJwA/o+O9U8SeLevU34sVUy8YWn20FXrg4zWLS1 YcNzxCN7RJxTKrbFLw6Gq+Gi+P64UTVljUsBpC8c22i7Rr/8WLSSd4tBn0T7vElU MJr3TdunabVdpwx1wyrWd7/1AJU8kBcuG+NRXibWg4Al0UpBSXwXQiq/GRG7s1ik 9tMpF9fTmBGf9MN7k5SGwpwP75T86YlUR8IRZWWtauuDDnXCNs5lEce/lFdjTLFQ 69pE+I5CcscRJW/7pG+OzOP7f7koR1KS+Dy1hS1wKX5aCnH9F4L75pG4qQ== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:44 2024 by rpki-client on console-ams.rpki-client.org