$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/wG1FxjoQkcIuBHHXQd1OQosYA2A.roa File: wG1FxjoQkcIuBHHXQd1OQosYA2A.roa (raw, json) Hash identifier: 4ppmtoXMaFGLkwzf9Nk7vf0gkZZCJMB34fdwJ2h927Y= Subject key identifier: C0:6D:45:C6:3A:10:91:C2:2E:04:71:D7:41:DD:4E:42:8B:18:03:60 Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43 Certificate serial: 11F0 Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/wG1FxjoQkcIuBHHXQd1OQosYA2A.roa Signing time: Thu 14 Nov 2024 08:20:03 +0000 ROA not before: Thu 14 Nov 2024 08:20:03 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 34549 IP address blocks: 114.66.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4592 (0x11f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43 Validity Not Before: Nov 14 08:20:03 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C06D45C63A1091C22E0471D741DD4E428B180360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:6f:89:22:3b:ae:51:25:5b:8e:0e:78:54: b6:ce:48:31:21:84:0c:bd:f0:55:29:46:f7:a6:af: b3:68:8e:fb:b8:41:00:a1:56:da:24:11:b6:79:b4: 17:7f:28:e2:1c:12:c1:26:c1:4c:d1:10:3a:5e:af: 38:46:4a:74:52:ce:de:65:13:9f:15:1d:78:6f:59: b3:d5:88:19:be:48:3f:92:9f:97:c2:34:4a:32:67: 92:ef:9f:01:79:66:8f:45:97:53:a1:ce:b8:79:59: ce:3c:5b:7a:90:9b:5d:0f:b0:05:57:bd:80:bc:98: 7f:f1:24:d3:43:b5:b0:9a:7e:93:87:53:24:ad:65: 28:e8:51:ac:33:db:41:01:c3:56:63:3b:2f:a6:60: 93:38:bb:17:2b:07:48:36:0b:a4:70:0d:13:5c:e5: 33:01:e9:54:f4:ee:78:a9:8f:ac:1a:4c:32:14:3c: bf:4f:7b:a1:53:f3:c7:3d:4c:30:a8:c8:68:7a:49: 9b:09:4d:b1:3a:35:38:b4:66:9a:3a:89:35:9c:ba: 0a:00:92:21:97:4b:ff:0c:62:4e:9e:72:44:ec:33: 4d:6c:a3:62:53:16:3f:93:e5:b9:8e:a8:1c:d0:ac: 62:2d:76:f8:1f:28:e7:d3:22:f2:f5:09:7f:d9:0e: 7d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6D:45:C6:3A:10:91:C2:2E:04:71:D7:41:DD:4E:42:8B:18:03:60 X509v3 Authority Key Identifier: keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/wG1FxjoQkcIuBHHXQd1OQosYA2A.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.66.212.0/24 Signature Algorithm: sha256WithRSAEncryption 33:78:2a:5a:a2:ab:8b:35:2c:64:6b:c9:53:e7:ea:f7:46:cc: 4b:53:a0:01:2c:04:82:6b:02:9a:6a:8d:49:12:a6:ae:d3:c8: 0a:9e:2e:02:8c:49:73:34:7e:fb:a3:2f:98:a5:c4:80:7e:2e: 60:b5:c9:be:f1:e3:7a:7d:84:64:75:c6:12:ef:98:27:f3:5a: 58:61:ce:fe:a4:6c:c3:05:0a:c3:a0:0e:c8:da:88:7d:7e:ef: 89:6d:d4:fe:8c:57:53:0a:86:41:de:d3:20:38:38:61:3b:1f: ac:32:78:de:2b:2a:e1:c7:4d:ab:08:eb:86:07:e6:2b:96:a2: 17:50:8e:84:ce:21:be:51:ae:25:72:2e:21:0d:52:b7:43:06: 1f:ff:40:c6:fb:e7:06:47:c2:84:23:e6:63:30:29:99:f7:0d: ac:15:24:da:62:19:bc:5b:27:b9:c0:68:5a:7d:49:12:77:1b: fa:b6:c3:d3:b4:26:b1:0a:79:54:11:3d:7c:40:8d:46:e1:1a: 0b:69:ee:13:75:61:af:8f:5c:61:0e:5d:75:1d:9b:27:37:75: 70:f9:8d:6a:ee:0d:cd:34:e7:20:70:1e:25:5f:d2:9c:a4:88: 5c:e2:a0:0c:46:d8:8a:64:e7:a5:a1:b8:4d:b9:a0:a3:f8:ba: c2:e6:21:d5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDYw QzAwQkYxN0E1NUZEQjg1Q0FGNDU3OEJFODMzMDU2RTAyOEI0MzAeFw0yNDExMTQw ODIwMDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEMwNkQ0NUM2M0ExMDkx QzIyRTA0NzFENzQxREQ0RTQyOEIxODAzNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL5W+JIjuuUSVbjg54VLbOSDEhhAy98FUpRvemr7Nojvu4QQCh VtokEbZ5tBd/KOIcEsEmwUzREDperzhGSnRSzt5lE58VHXhvWbPViBm+SD+Sn5fC NEoyZ5LvnwF5Zo9Fl1Ohzrh5Wc48W3qQm10PsAVXvYC8mH/xJNNDtbCafpOHUySt ZSjoUawz20EBw1ZjOy+mYJM4uxcrB0g2C6RwDRNc5TMB6VT07nipj6waTDIUPL9P e6FT88c9TDCoyGh6SZsJTbE6NTi0Zpo6iTWcugoAkiGXS/8MYk6eckTsM01so2JT Fj+T5bmOqBzQrGItdvgfKOfTIvL1CX/ZDn2LAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUwG1FxjoQkcIuBHHXQd1OQosYA2AwHwYDVR0jBBgwFoAUBgwAvxelX9uFyvRX i+gzBW4Ci0MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS9CZ3dBdnhlbFg5dUZ5dlJYaS1nekJXNENpME0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0Jnd0F2eGVsWDl1Rnl2UlhpLWd6Qlc0Q2kwTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvd0cxRnhqb1FrY0l1 QkhIWFFkMU9Rb3NZQTJBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHJC1DANBgkqhkiG9w0BAQsFAAOCAQEAM3gqWqKrizUsZGvJU+fq90bMS1Og ASwEgmsCmmqNSRKmrtPICp4uAoxJczR++6MvmKXEgH4uYLXJvvHjen2EZHXGEu+Y J/NaWGHO/qRswwUKw6AOyNqIfX7viW3U/oxXUwqGQd7TIDg4YTsfrDJ43isq4cdN qwjrhgfmK5aiF1COhM4hvlGuJXIuIQ1St0MGH/9AxvvnBkfChCPmYzApmfcNrBUk 2mIZvFsnucBoWn1JEncb+rbD07QmsQp5VBE9fECNRuEaC2nuE3Vhr49cYQ5ddR2b Jzd1cPmNau4NzTTnIHAeJV/SnKSIXOKgDEbYimTnpaG4Tbmgo/i6wuYh1Q== -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:20 2024 by rpki-client on console-ams.rpki-client.org