$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/J09ozKdmxWT48Tw7uTHcz09CotE.roa File: J09ozKdmxWT48Tw7uTHcz09CotE.roa (raw, json) Hash identifier: 5b3Sbmg4DeAODQr8tBFfNxK31a866aETzDAqah4rt1Y= Subject key identifier: 27:4F:68:CC:A7:66:C5:64:F8:F1:3C:3B:B9:31:DC:CF:4F:42:A2:D1 Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Certificate serial: 1817 Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/J09ozKdmxWT48Tw7uTHcz09CotE.roa Signing time: Tue 02 Jul 2024 02:33:39 +0000 ROA not before: Tue 02 Jul 2024 02:33:39 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 140293 IP address blocks: 118.184.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6167 (0x1817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Validity Not Before: Jul 2 02:33:39 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=274F68CCA766C564F8F13C3BB931DCCF4F42A2D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:a0:be:6e:e9:e0:fa:62:ba:74:b1:93:91: 19:21:35:06:ca:eb:9c:ab:19:41:b9:6c:1c:a6:b4: a8:9d:23:91:8d:da:88:a3:4a:3a:8a:74:2a:8a:c7: 38:52:68:0e:c0:1f:46:75:f8:2b:4a:b9:24:b7:ca: c1:c2:a9:6a:24:99:a3:b5:6c:01:55:1a:8b:11:70: 2c:90:c2:96:31:01:4d:0e:40:22:4c:8c:c9:16:77: c2:b0:77:da:b9:df:17:aa:ce:4f:56:9b:d5:b5:ca: f1:c7:0d:d8:ff:51:09:5b:66:f8:d2:0c:a6:57:35: 9b:43:78:7a:db:25:0d:6b:d8:81:98:6e:88:54:cd: 29:27:b5:7f:8f:69:dc:42:58:8a:7e:53:fc:2c:82: e2:ef:5f:bc:cd:ca:8d:2e:69:39:f0:66:ac:7c:89: eb:a9:b1:91:b9:3a:6d:9f:1d:ac:6d:a0:1e:f7:60: 88:3a:51:19:ac:5a:b2:a6:c7:ec:9d:31:18:97:78: f3:8d:06:ae:30:f8:30:f1:11:21:a9:c4:16:61:13: cd:c5:78:e0:4f:8b:6a:f2:4f:81:24:7f:75:3c:09: 6a:1e:5a:10:41:66:18:ec:e1:96:ed:be:d0:f1:4d: 90:0f:f9:0f:ad:78:97:d0:4f:a4:8c:7c:f3:cc:67: f3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4F:68:CC:A7:66:C5:64:F8:F1:3C:3B:B9:31:DC:CF:4F:42:A2:D1 X509v3 Authority Key Identifier: keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/J09ozKdmxWT48Tw7uTHcz09CotE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.184.128.0/17 Signature Algorithm: sha256WithRSAEncryption 2d:49:c0:ff:fe:99:61:49:1b:1e:ae:d5:ec:8b:49:3b:55:9d: 89:8f:cb:f0:f0:54:5b:49:96:e9:a7:7e:20:bd:3a:3e:1d:a4: 25:37:15:a0:45:42:ac:8e:c5:fe:8f:a1:21:21:13:f3:b5:c4: 97:4e:f9:3a:64:9b:48:c9:a1:15:5b:18:aa:b3:5f:92:e4:2a: 8b:43:d6:ab:0a:a1:28:7a:5a:90:54:a2:f4:6b:11:37:c3:c2: 16:56:d6:2f:0e:7b:c7:12:9a:bb:6d:40:e0:d3:30:5e:9d:81: 45:b0:c2:93:1a:6c:a2:11:d3:5f:b7:a4:19:09:ac:0e:ba:36: b3:38:2e:53:4a:0e:1a:d8:2a:15:1d:2e:de:49:c8:c6:a8:63: 98:92:04:b5:44:9b:ad:49:83:ac:8b:51:81:ac:a7:0e:f7:f6: 62:46:04:47:d5:77:a0:ee:46:49:35:94:9b:23:1b:49:72:e1: c6:6d:2c:d9:79:53:7b:94:ba:17:a7:7a:53:76:d6:fa:02:2b: ce:4d:80:f0:4c:f7:20:1a:8b:e3:ac:6f:27:c4:a9:79:02:6b: a0:78:9d:b5:a6:7f:26:7b:b9:59:26:43:2c:cb:27:a5:43:c2: 86:62:07:21:88:98:f2:6e:e8:48:2c:05:19:58:6b:e1:68:5a: d8:07:7c:d2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGBcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUMx MEM5MzQ1NTc1OUM2NTlEMkJCODE5RkIwN0ZGNzA2M0NFQ0MzMjAeFw0yNDA3MDIw MjMzMzlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDI3NEY2OENDQTc2NkM1 NjRGOEYxM0MzQkI5MzFEQ0NGNEY0MkEyRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxVaC+bung+mK6dLGTkRkhNQbK65yrGUG5bBymtKidI5GN2oij SjqKdCqKxzhSaA7AH0Z1+CtKuSS3ysHCqWokmaO1bAFVGosRcCyQwpYxAU0OQCJM jMkWd8Kwd9q53xeqzk9Wm9W1yvHHDdj/UQlbZvjSDKZXNZtDeHrbJQ1r2IGYbohU zSkntX+PadxCWIp+U/wsguLvX7zNyo0uaTnwZqx8ieupsZG5Om2fHaxtoB73YIg6 URmsWrKmx+ydMRiXePONBq4w+DDxESGpxBZhE83FeOBPi2ryT4Ekf3U8CWoeWhBB Zhjs4ZbtvtDxTZAP+Q+teJfQT6SMfPPMZ/PnAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUJ09ozKdmxWT48Tw7uTHcz09CotEwHwYDVR0jBBgwFoAU7BDJNFV1nGWdK7gZ +wf/cGPOzDIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMy OS83QkRKTkZWMW5HV2RLN2daLXdmX2NHUE96REkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzdCREpORlYxbkdXZEs3Z1otd2ZfY0dQT3pESS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMjkvSjA5b3pLZG14V1Q0 OFR3N3VUSGN6MDlDb3RFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB3a4gDANBgkqhkiG9w0BAQsFAAOCAQEALUnA//6ZYUkbHq7V7ItJO1WdiY/L 8PBUW0mW6ad+IL06Ph2kJTcVoEVCrI7F/o+hISET87XEl075OmSbSMmhFVsYqrNf kuQqi0PWqwqhKHpakFSi9GsRN8PCFlbWLw57xxKau21A4NMwXp2BRbDCkxpsohHT X7ekGQmsDro2szguU0oOGtgqFR0u3knIxqhjmJIEtUSbrUmDrItRgaynDvf2YkYE R9V3oO5GSTWUmyMbSXLhxm0s2XlTe5S6F6d6U3bW+gIrzk2A8Ez3IBqL46xvJ8Sp eQJroHidtaZ/Jnu5WSZDLMsnpUPChmIHIYiY8m7oSCwFGVhr4Wha2Ad80g== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:44 2024 by rpki-client on console-ams.rpki-client.org