$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/z5Y7RvI9RG5xMhMlXissI7E0fTA.roa File: z5Y7RvI9RG5xMhMlXissI7E0fTA.roa (raw, json) Hash identifier: ueqxmsD6Hqia/cQ2PDewZ3DH6V0QzwxCwOXWN5ptHAE= Subject key identifier: CF:96:3B:46:F2:3D:44:6E:71:32:13:25:5E:2B:2C:23:B1:34:7D:30 Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Certificate serial: 0CAF Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/z5Y7RvI9RG5xMhMlXissI7E0fTA.roa Signing time: Wed 13 Mar 2024 01:21:26 +0000 ROA not before: Wed 13 Mar 2024 01:21:26 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 58593 IP address blocks: 42.159.0.0/16 maxlen: 24 42.159.0.0/18 maxlen: 24 42.159.64.0/18 maxlen: 24 42.159.128.0/18 maxlen: 24 42.159.128.0/24 maxlen: 24 42.159.192.0/18 maxlen: 24 103.9.8.0/22 maxlen: 24 103.9.8.0/23 maxlen: 24 103.9.8.0/24 maxlen: 24 103.9.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3247 (0xcaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Validity Not Before: Mar 13 01:21:26 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=CF963B46F23D446E713213255E2B2C23B1347D30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:45:93:13:2a:3e:f8:86:e1:3d:43:61:96:a6: b5:fd:f0:40:f7:89:34:63:19:80:91:82:f4:6a:aa: 24:b4:7f:e2:62:2c:ab:1f:30:94:dc:a3:d1:f3:0d: 8c:a0:5b:9a:2e:8c:47:c7:b2:12:61:a9:70:1b:6c: fc:7f:db:b7:13:c6:17:db:4e:16:2f:a6:5e:28:20: c7:76:3a:76:2a:0f:4f:7f:34:6b:eb:cd:49:03:f1: 7e:73:46:28:3c:79:c8:b9:a2:fd:45:5d:77:5b:a9: c9:99:62:cd:24:12:54:19:e3:f3:f7:66:0e:14:84: 95:b0:45:ca:30:94:d1:95:3f:49:6c:72:a0:bf:e2: ef:70:aa:dd:8e:ec:4d:4e:25:f2:17:b0:10:48:f2: 96:6a:2c:48:72:87:8a:ec:93:a6:1e:4b:a7:75:79: 55:82:08:c4:ce:05:26:c9:de:d3:e4:53:c3:b0:f2: c0:09:ea:ef:80:37:4f:3a:31:d5:0b:f7:30:71:90: 43:06:95:73:ea:64:50:82:46:2b:0c:8c:13:d8:30: e9:8b:1b:99:1a:83:4a:07:93:6a:06:b6:4b:eb:25: 7b:fc:0e:34:87:ec:08:0e:63:ba:ba:fb:98:1b:11: 4b:d7:f1:c2:91:20:59:81:cf:e5:71:d3:41:fe:6b: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:96:3B:46:F2:3D:44:6E:71:32:13:25:5E:2B:2C:23:B1:34:7D:30 X509v3 Authority Key Identifier: keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/z5Y7RvI9RG5xMhMlXissI7E0fTA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.159.0.0/16 103.9.8.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:a9:93:ab:9b:ad:76:f2:36:ef:7d:cb:f5:f4:40:6e:8d:ae: d8:23:83:c3:f8:57:5f:00:c8:43:f0:fb:c7:bb:b9:ad:df:c0: 4b:e8:62:df:f4:5e:a9:4d:58:0e:96:52:37:e5:00:3b:4a:e4: 25:46:c2:3b:22:db:5b:84:7f:3e:bc:c7:d5:42:d6:81:0a:15: 73:cd:82:56:de:a0:03:c9:5a:0c:3e:86:37:d6:74:f0:5e:eb: af:f6:84:0c:78:f0:93:ed:dc:11:7d:09:df:54:47:d9:b2:98: 67:9b:62:a2:51:77:f2:87:d8:07:cf:d7:fa:c7:7b:10:bf:93: 9c:2a:06:cf:8d:7c:7d:71:9d:ed:e5:63:7f:39:dd:e3:d4:c5: b9:5b:50:cd:87:b9:dd:64:84:b2:f0:61:6f:38:e2:20:fb:37: d1:19:cf:bc:cd:9c:9a:9b:33:55:d1:e1:02:e1:03:ae:f7:a1: db:66:30:c6:46:c5:74:a5:27:01:a3:65:24:2b:6c:48:0a:69: 20:86:81:99:36:ad:c2:93:4f:17:b5:a7:60:98:56:b0:43:f0: 14:2f:c1:8b:20:cb:fc:e8:c5:35:27:ab:e3:ea:5a:1d:23:aa: 58:f2:61:06:b5:a7:f6:82:d9:f3:4a:4d:16:72:65:f8:bf:ba: f5:c3:29:0d -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RF RjcxMTFERTk4QkQ3NTZEOTJCMzREMzk0REEyRDM5RUZGOUI4RTAeFw0yNDAzMTMw MTIxMjZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENGOTYzQjQ2RjIzRDQ0 NkU3MTMyMTMyNTVFMkIyQzIzQjEzNDdEMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfRZMTKj74huE9Q2GWprX98ED3iTRjGYCRgvRqqiS0f+JiLKsf MJTco9HzDYygW5oujEfHshJhqXAbbPx/27cTxhfbThYvpl4oIMd2OnYqD09/NGvr zUkD8X5zRig8eci5ov1FXXdbqcmZYs0kElQZ4/P3Zg4UhJWwRcowlNGVP0lscqC/ 4u9wqt2O7E1OJfIXsBBI8pZqLEhyh4rsk6YeS6d1eVWCCMTOBSbJ3tPkU8Ow8sAJ 6u+AN086MdUL9zBxkEMGlXPqZFCCRisMjBPYMOmLG5kag0oHk2oGtkvrJXv8DjSH 7AgOY7q6+5gbEUvX8cKRIFmBz+Vx00H+ay4vAgMBAAGjggH4MIIB9DAdBgNVHQ4E FgQUz5Y7RvI9RG5xMhMlXissI7E0fTAwHwYDVR0jBBgwFoAUze9xEd6YvXVtkrNN OU2i057/m44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy MC96ZTl4RWQ2WXZYVnRrck5OT1UyaTA1N19tNDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3plOXhFZDZZdlhWdGtyTk5PVTJpMDU3X200NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvejVZN1J2STlSRzV4 TWhNbFhpc3NJN0UwZlRBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAEw CwMDACqfAwQCZwkIMA0GCSqGSIb3DQEBCwUAA4IBAQAuqZOrm6128jbvfcv19EBu ja7YI4PD+FdfAMhD8PvHu7mt38BL6GLf9F6pTVgOllI35QA7SuQlRsI7IttbhH8+ vMfVQtaBChVzzYJW3qADyVoMPoY31nTwXuuv9oQMePCT7dwRfQnfVEfZsphnm2Ki UXfyh9gHz9f6x3sQv5OcKgbPjXx9cZ3t5WN/Od3j1MW5W1DNh7ndZISy8GFvOOIg +zfRGc+8zZyamzNV0eEC4QOu96HbZjDGRsV0pScBo2UkK2xICmkghoGZNq3Ck08X tadgmFawQ/AUL8GLIMv86MU1J6vj6lodI6pY8mEGtaf2gtnzSk0WcmX4v7r1wykN -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:44 2024 by rpki-client on console-ams.rpki-client.org