$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/xdyFQe59XCS64KU7d13ZJ11ZhV4.roa File: xdyFQe59XCS64KU7d13ZJ11ZhV4.roa (raw, json) Hash identifier: PW58DZ5hrD+CUBMYOxYUV59605Ax5kBGmNjJMFy1zdc= Subject key identifier: C5:DC:85:41:EE:7D:5C:24:BA:E0:A5:3B:77:5D:D9:27:5D:59:85:5E Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 1088 Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/xdyFQe59XCS64KU7d13ZJ11ZhV4.roa Signing time: Thu 15 Jun 2023 08:48:17 +0000 ROA not before: Thu 15 Jun 2023 08:48:17 +0000 ROA not after: Fri 07 Jun 2024 02:16:11 +0000 asID: 137443 IP address blocks: 219.234.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 05:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4232 (0x1088) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Jun 15 08:48:17 2023 GMT Not After : Jun 7 02:16:11 2024 GMT Subject: CN=C5DC8541EE7D5C24BAE0A53B775DD9275D59855E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:62:e2:a5:cb:0f:4b:1c:5c:33:da:10:ef:ea: f5:99:b0:3d:b3:e7:a7:85:b3:6b:1a:2a:51:79:32: a3:19:fc:34:87:65:a4:a1:77:58:54:f1:70:7f:b7: 7f:2b:8d:0b:a9:64:a2:35:52:74:e9:5b:1c:f0:a8: 2b:7d:21:f8:c3:2e:b8:f9:80:5f:81:90:6f:fe:06: 31:01:81:62:98:e7:a1:63:5f:aa:e2:bc:94:8e:42: f3:7d:49:78:e8:54:52:49:70:66:4e:3d:c9:91:b5: 88:6d:2a:e2:e5:ce:66:a8:b0:27:cb:fb:7b:3a:51: 97:76:72:5f:60:56:6c:6a:85:6b:ed:e5:73:1f:4b: fa:41:6e:db:80:67:81:26:29:5f:1a:ed:02:c8:f1: 97:0d:f4:35:92:e5:80:07:ad:00:1b:4c:f3:d1:e0: fc:01:8a:06:5a:a4:5e:a3:19:bc:15:88:ec:25:23: be:7b:31:65:8d:15:66:57:17:78:f0:db:ff:0c:b9: 95:45:64:c2:12:9e:3d:80:66:72:36:02:a3:10:45: ac:79:8d:54:9b:05:b8:cd:a1:69:9c:50:6f:62:2f: d4:7d:95:cf:08:b4:a8:d2:6b:a9:92:38:f4:00:56: d4:24:6d:78:2d:98:7e:62:9b:28:e7:7d:8f:3f:7a: 89:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DC:85:41:EE:7D:5C:24:BA:E0:A5:3B:77:5D:D9:27:5D:59:85:5E X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/xdyFQe59XCS64KU7d13ZJ11ZhV4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.234.8.0/21 Signature Algorithm: sha256WithRSAEncryption 9f:cc:d4:d9:9a:77:98:e6:ce:72:a2:d0:c0:58:d5:45:1d:8b: b4:74:c5:41:8b:57:9a:ba:66:13:2f:e6:0b:71:db:46:4b:f6: c1:bd:57:2b:4d:2b:b2:9a:92:3d:f7:7c:e6:db:86:1b:e4:95: df:5b:1b:eb:83:e7:cb:99:3b:94:cd:c1:e2:ec:fa:27:db:06: 76:e6:86:92:92:eb:cd:97:a8:aa:73:95:19:94:5d:de:f9:f4: 16:5f:ad:6a:b5:8c:15:ae:c4:d4:dd:b0:0a:a2:a3:0a:28:8d: a6:57:93:2e:4b:35:f4:1e:56:78:4f:46:e5:a1:48:55:0e:6d: b6:82:4b:15:48:6d:16:5f:2d:71:d1:f1:f8:fe:20:49:09:d9: 77:6f:18:70:9b:ca:bf:a2:88:9e:25:ec:ba:9b:7c:6e:62:64: 49:f0:b4:57:b8:47:2e:4d:58:56:93:c0:5e:4f:4f:a4:9c:fb: 88:8e:9a:7b:dc:5c:5a:be:48:f4:51:2c:47:c0:9c:a9:20:a9: 4a:40:24:a2:51:d1:bc:db:33:12:f5:2a:be:7f:02:b8:e6:d7: 65:69:ab:1c:f2:d7:57:c8:c8:4d:c7:c7:5f:43:61:4a:91:00: 70:44:2f:1e:08:ec:16:bc:be:81:f5:7a:41:5f:db:f5:c2:aa: f7:42:fc:6a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yMzA2MTUw ODQ4MTdaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEM1REM4NTQxRUU3RDVD MjRCQUUwQTUzQjc3NUREOTI3NUQ1OTg1NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSYuKlyw9LHFwz2hDv6vWZsD2z56eFs2saKlF5MqMZ/DSHZaSh d1hU8XB/t38rjQupZKI1UnTpWxzwqCt9IfjDLrj5gF+BkG/+BjEBgWKY56FjX6ri vJSOQvN9SXjoVFJJcGZOPcmRtYhtKuLlzmaosCfL+3s6UZd2cl9gVmxqhWvt5XMf S/pBbtuAZ4EmKV8a7QLI8ZcN9DWS5YAHrQAbTPPR4PwBigZapF6jGbwViOwlI757 MWWNFWZXF3jw2/8MuZVFZMISnj2AZnI2AqMQRax5jVSbBbjNoWmcUG9iL9R9lc8I tKjSa6mSOPQAVtQkbXgtmH5imyjnfY8/eokZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUxdyFQe59XCS64KU7d13ZJ11ZhV4wHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkveGR5RlFlNTlYQ1M2 NEtVN2QxM1pKMTFaaFY0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAn8zU2Zp3mObOcqLQwFjVRR2LtHTF QYtXmrpmEy/mC3HbRkv2wb1XK00rspqSPfd85tuGG+SV31sb64Pny5k7lM3B4uz6 J9sGduaGkpLrzZeoqnOVGZRd3vn0Fl+tarWMFa7E1N2wCqKjCiiNpleTLks19B5W eE9G5aFIVQ5ttoJLFUhtFl8tcdHx+P4gSQnZd28YcJvKv6KIniXsupt8bmJkSfC0 V7hHLk1YVpPAXk9PpJz7iI6ae9xcWr5I9FEsR8CcqSCpSkAkolHRvNszEvUqvn8C uObXZWmrHPLXV8jITcfHX0NhSpEAcEQvHgjsFry+gfV6QV/b9cKq90L8ag== -----END CERTIFICATE-----Generated at Fri May 3 01:56:04 2024 by rpki-client on console-fra.rpki-client.org