$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/TuQpDFJK1_1qLRcTRc1_jogl7ys.roa File: TuQpDFJK1_1qLRcTRc1_jogl7ys.roa (raw, json) Hash identifier: jvBUuRfTjbK741PpO/I05hgxupPE1w40PFUdneMG4Fk= Subject key identifier: 4E:E4:29:0C:52:4A:D7:FD:6A:2D:17:13:45:CD:7F:8E:88:25:EF:2B Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 1817 Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/TuQpDFJK1_1qLRcTRc1_jogl7ys.roa Signing time: Tue 09 Jul 2024 12:57:14 +0000 ROA not before: Tue 09 Jul 2024 12:57:14 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139021 IP address blocks: 43.250.116.0/22 maxlen: 24 103.108.192.0/22 maxlen: 24 103.235.184.0/22 maxlen: 24 150.242.224.0/22 maxlen: 24 219.234.0.0/21 maxlen: 24 219.234.8.0/21 maxlen: 24 219.234.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6167 (0x1817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Jul 9 12:57:14 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=4EE4290C524AD7FD6A2D171345CD7F8E8825EF2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b3:61:0e:b1:1d:9c:41:d6:90:f5:c1:8b:fe: 75:56:16:ba:91:bf:7f:02:58:91:c4:64:c5:6f:a4: 9e:fb:6c:2a:05:55:b5:43:8d:3b:f2:34:cc:f3:1d: 20:14:e4:e0:fd:ce:65:39:87:6e:93:1b:42:25:69: 2c:02:73:88:d5:8d:62:a6:27:a2:86:ea:9e:8a:f4: ae:50:74:2d:71:9d:5a:7d:39:ed:e5:0d:1b:f9:a0: bb:f9:b1:74:60:5e:ee:76:5b:da:d8:98:a1:e6:bb: 10:3e:6e:f9:e5:38:4a:fb:26:d7:f3:21:78:8e:58: 9e:26:a7:49:6c:bb:f0:1e:3f:51:de:a2:24:f3:f9: 1c:5a:b2:bb:68:9b:bc:90:f1:d7:5e:7c:22:1e:ba: 0f:4e:8e:62:85:5e:c3:cb:af:b6:cf:aa:20:3b:f3: 81:33:e8:5e:6f:3f:dd:cf:bb:f4:3d:21:c7:6c:4c: bc:d2:f7:a4:f1:19:b6:06:e3:31:9d:7f:5d:25:44: 5c:f0:67:f3:38:c1:88:92:30:b1:6a:56:25:9d:13: a3:27:fc:7b:d1:29:48:56:07:4f:77:97:17:b4:12: de:4c:43:c8:f9:80:ff:17:d0:c2:0c:30:72:84:9c: c9:98:3c:c4:e6:67:c3:e3:75:aa:81:97:65:80:9b: 20:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E4:29:0C:52:4A:D7:FD:6A:2D:17:13:45:CD:7F:8E:88:25:EF:2B X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/TuQpDFJK1_1qLRcTRc1_jogl7ys.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.250.116.0/22 103.108.192.0/22 103.235.184.0/22 150.242.224.0/22 219.234.0.0/19 Signature Algorithm: sha256WithRSAEncryption c4:6c:72:42:73:d0:fa:b4:b4:86:77:a3:92:4b:45:73:e7:0b: d7:81:a8:37:61:33:76:1f:b9:95:3b:14:9c:5b:2e:17:89:1e: 33:c0:53:8c:46:e6:59:fc:44:4f:a4:8b:7d:21:68:7f:b1:b3: 09:e7:6f:d5:bd:cb:62:69:e8:a7:4c:09:e9:2a:35:0e:d8:62: 5e:9a:21:32:28:11:8f:a7:f7:a2:bd:5e:ce:7a:09:9f:be:35: a9:8e:40:39:bf:df:9d:c8:88:90:c8:7a:8e:31:25:f9:40:c0: 83:97:74:a3:f2:b3:a0:9d:87:b1:e0:6b:cd:54:0f:2e:a2:0c: 3c:76:df:33:2b:30:3d:5f:a8:8e:5a:76:59:46:f8:6e:75:d3: e5:1d:02:d7:a0:49:51:40:44:27:19:d5:ac:f0:6f:78:ed:2b: 72:bd:ae:84:b9:fb:65:b5:42:93:51:1e:bb:06:75:14:6a:e5: 60:80:0a:0a:16:b0:cc:16:92:05:b5:35:29:f4:52:6e:05:51: 33:c4:6b:70:e6:3a:64:7c:4e:15:21:9b:70:86:ba:6a:6b:8e: e2:ac:18:6f:f1:f1:51:d9:41:a2:e1:65:61:df:5c:9b:60:58: 5f:9b:86:3a:61:70:a2:3b:aa:76:6d:96:44:ac:9d:b5:22:c4: 1b:2b:f4:57 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICGBcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNDA3MDkx MjU3MTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDRFRTQyOTBDNTI0QUQ3 RkQ2QTJEMTcxMzQ1Q0Q3RjhFODgyNUVGMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDts2EOsR2cQdaQ9cGL/nVWFrqRv38CWJHEZMVvpJ77bCoFVbVD jTvyNMzzHSAU5OD9zmU5h26TG0IlaSwCc4jVjWKmJ6KG6p6K9K5QdC1xnVp9Oe3l DRv5oLv5sXRgXu52W9rYmKHmuxA+bvnlOEr7JtfzIXiOWJ4mp0lsu/AeP1HeoiTz +Rxasrtom7yQ8ddefCIeug9OjmKFXsPLr7bPqiA784Ez6F5vP93Pu/Q9IcdsTLzS 96TxGbYG4zGdf10lRFzwZ/M4wYiSMLFqViWdE6Mn/HvRKUhWB093lxe0Et5MQ8j5 gP8X0MIMMHKEnMmYPMTmZ8PjdaqBl2WAmyBpAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUTuQpDFJK1/1qLRcTRc1/jogl7yswHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvVHVRcERGSksxXzFx TFJjVFJjMV9qb2dsN3lzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEw HgMEAiv6dAMEAmdswAMEAmfruAMEApby4AMEBdvqADANBgkqhkiG9w0BAQsFAAOC AQEAxGxyQnPQ+rS0hnejkktFc+cL14GoN2Ezdh+5lTsUnFsuF4keM8BTjEbmWfxE T6SLfSFof7GzCedv1b3LYmnop0wJ6So1DthiXpohMigRj6f3or1eznoJn741qY5A Ob/fnciIkMh6jjEl+UDAg5d0o/KzoJ2HseBrzVQPLqIMPHbfMyswPV+ojlp2WUb4 bnXT5R0C16BJUUBEJxnVrPBveO0rcr2uhLn7ZbVCk1EeuwZ1FGrlYIAKChawzBaS BbU1KfRSbgVRM8RrcOY6ZHxOFSGbcIa6amuO4qwYb/HxUdlBouFlYd9cm2BYX5uG OmFwojuqdm2WRKydtSLEGyv0Vw== -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:45 2024 by rpki-client on console-ams.rpki-client.org