$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/BxI2yCMaK3NjzZYHxh0NUTMSJZw.roa File: BxI2yCMaK3NjzZYHxh0NUTMSJZw.roa (raw, json) Hash identifier: VRCnmMi4IRTS0vcXxMn2bzi8EHUF39M3GwWSAH96gC8= Subject key identifier: 07:12:36:C8:23:1A:2B:73:63:CD:96:07:C6:1D:0D:51:33:12:25:9C Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43 Certificate serial: 11EA Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BxI2yCMaK3NjzZYHxh0NUTMSJZw.roa Signing time: Thu 14 Nov 2024 08:20:01 +0000 ROA not before: Thu 14 Nov 2024 08:20:01 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 34549 IP address blocks: 114.66.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4586 (0x11ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43 Validity Not Before: Nov 14 08:20:01 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=071236C8231A2B7363CD9607C61D0D513312259C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b7:11:bb:b9:88:44:20:d3:ed:f9:1b:4f:da: df:f6:f4:04:d8:19:3f:56:08:35:1b:3c:30:6f:eb: 9b:66:5d:10:0f:0d:c4:f9:17:f4:ac:17:b7:84:c0: e8:7d:2d:cc:50:27:aa:b4:65:4d:d7:ae:53:d2:8a: 0e:21:8c:fd:92:b7:e7:52:2f:1c:c0:a4:fb:ad:80: 1c:11:78:50:25:95:fa:6b:1d:43:6b:25:f5:46:e3: 33:7c:e1:83:c5:78:a5:5e:e4:1f:3e:21:be:25:27: e9:55:9d:cb:38:a5:bb:7d:cd:08:fc:6e:f2:c4:57: db:74:97:83:b8:3b:55:b3:2e:3d:e0:4a:a9:2c:93: 79:1b:4a:a4:2b:63:b4:e6:43:4f:3d:00:4a:92:67: a2:9e:ad:e0:8b:8d:22:fd:96:3f:25:b5:2f:b7:13: 4d:a6:8a:34:d7:59:71:fd:5a:8f:da:24:eb:4b:b7: 85:4a:ba:75:9a:81:05:d2:a7:ff:a1:5e:52:3b:5e: 69:2b:a6:3f:be:84:3d:bb:5f:2f:4f:f8:2a:b8:3a: 43:4d:96:a0:5c:09:89:6e:99:ce:e2:27:b5:12:f9: 09:30:6d:6d:e5:c9:3b:9f:ea:66:7b:d7:dd:23:ce: df:54:1a:b0:a6:69:96:5e:81:0d:db:55:ee:a3:d4: f5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:12:36:C8:23:1A:2B:73:63:CD:96:07:C6:1D:0D:51:33:12:25:9C X509v3 Authority Key Identifier: keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BxI2yCMaK3NjzZYHxh0NUTMSJZw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.66.214.0/24 Signature Algorithm: sha256WithRSAEncryption 55:57:3c:c9:8b:53:b7:c3:d1:80:f9:3b:fc:64:4c:01:3a:06: 57:76:1b:0b:5f:3b:67:ce:ce:6e:ce:10:01:83:ee:3e:b2:fc: a4:2d:0d:e1:69:4c:cf:c7:bb:bd:db:f9:2a:45:2f:6a:66:ae: 3d:2c:d3:cf:d1:bb:ca:20:22:75:34:3c:f2:24:98:ba:f9:b8: e0:eb:16:ca:d9:48:28:f7:c0:64:68:be:5f:49:c3:08:0e:48: 8b:ff:3a:5a:b4:6c:f2:ac:84:08:14:7f:f2:a3:06:13:ce:b8: e6:f5:da:86:9e:36:18:71:c1:b5:22:c7:b8:1a:fc:be:10:fb: d6:a8:cc:6f:01:24:ac:3e:7d:c1:dc:db:76:14:0b:d4:a6:f0: 01:94:12:2e:4d:67:ff:7c:3a:46:56:40:23:da:6d:10:dc:88: 46:a4:c6:bf:3e:95:88:8e:be:1b:d3:88:fc:2c:fd:b5:01:14: e5:55:1b:11:17:d9:b4:f5:bc:0a:d3:39:5c:d0:a3:d7:3e:f6: 9b:48:1a:34:de:2e:df:e7:c9:19:34:8f:fd:69:63:3a:85:c1: b6:5e:54:03:4f:65:1f:4f:64:80:2c:b0:af:29:34:70:aa:32: 51:62:f0:20:88:d2:a2:c8:f4:6c:21:ba:1a:60:16:65:73:d4: 3c:8d:ca:10 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEeowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDYw QzAwQkYxN0E1NUZEQjg1Q0FGNDU3OEJFODMzMDU2RTAyOEI0MzAeFw0yNDExMTQw ODIwMDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDA3MTIzNkM4MjMxQTJC NzM2M0NEOTYwN0M2MUQwRDUxMzMxMjI1OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWtxG7uYhEINPt+RtP2t/29ATYGT9WCDUbPDBv65tmXRAPDcT5 F/SsF7eEwOh9LcxQJ6q0ZU3XrlPSig4hjP2St+dSLxzApPutgBwReFAllfprHUNr JfVG4zN84YPFeKVe5B8+Ib4lJ+lVncs4pbt9zQj8bvLEV9t0l4O4O1WzLj3gSqks k3kbSqQrY7TmQ089AEqSZ6KereCLjSL9lj8ltS+3E02mijTXWXH9Wo/aJOtLt4VK unWagQXSp/+hXlI7Xmkrpj++hD27Xy9P+Cq4OkNNlqBcCYlumc7iJ7US+QkwbW3l yTuf6mZ7190jzt9UGrCmaZZegQ3bVe6j1PW5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUBxI2yCMaK3NjzZYHxh0NUTMSJZwwHwYDVR0jBBgwFoAUBgwAvxelX9uFyvRX i+gzBW4Ci0MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS9CZ3dBdnhlbFg5dUZ5dlJYaS1nekJXNENpME0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0Jnd0F2eGVsWDl1Rnl2UlhpLWd6Qlc0Q2kwTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvQnhJMnlDTWFLM05q elpZSHhoME5VVE1TSlp3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHJC1jANBgkqhkiG9w0BAQsFAAOCAQEAVVc8yYtTt8PRgPk7/GRMAToGV3Yb C187Z87Obs4QAYPuPrL8pC0N4WlMz8e7vdv5KkUvamauPSzTz9G7yiAidTQ88iSY uvm44OsWytlIKPfAZGi+X0nDCA5Ii/86WrRs8qyECBR/8qMGE8645vXahp42GHHB tSLHuBr8vhD71qjMbwEkrD59wdzbdhQL1KbwAZQSLk1n/3w6RlZAI9ptENyIRqTG vz6ViI6+G9OI/Cz9tQEU5VUbERfZtPW8CtM5XNCj1z72m0gaNN4u3+fJGTSP/Wlj OoXBtl5UA09lH09kgCywryk0cKoyUWLwIIjSosj0bCG6GmAWZXPUPI3KEA== -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:20 2024 by rpki-client on console-ams.rpki-client.org