$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/K2ikVvSng2sirFm8jOApLd6LRF8.roa File: K2ikVvSng2sirFm8jOApLd6LRF8.roa (raw, json) Hash identifier: rx7D/dDHu5PM49FT9uX120c5OjHXsXV8hvf6r0z4gsU= Subject key identifier: 2B:68:A4:56:F4:A7:83:6B:22:AC:59:BC:8C:E0:29:2D:DE:8B:44:5F Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 0E22 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/K2ikVvSng2sirFm8jOApLd6LRF8.roa Signing time: Wed 18 Sep 2024 07:51:21 +0000 ROA not before: Wed 18 Sep 2024 07:51:21 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 55990 IP address blocks: 110.41.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3618 (0xe22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 18 07:51:21 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=2B68A456F4A7836B22AC59BC8CE0292DDE8B445F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:57:7d:67:e6:cd:7c:4d:9f:63:65:05:e1: 10:0a:d8:3b:a3:c8:c5:6e:1a:8c:18:52:bb:ed:33: 33:a5:bb:bf:c2:56:9b:4d:e3:28:20:5c:34:bb:70: 8b:c9:af:94:cd:70:e5:64:4e:d4:df:01:12:83:44: 69:9b:5d:b1:f8:27:81:61:d5:17:5a:74:d5:9d:13: 19:95:03:4a:41:1c:41:f2:fb:24:5b:fe:3b:17:f8: d1:8a:51:a3:be:6d:fd:47:bf:df:23:4b:ab:23:23: 0d:38:02:ba:fc:53:f1:67:67:58:d9:57:61:80:71: db:59:31:cf:16:34:15:c4:6f:c9:08:d1:38:d9:10: 78:f6:1c:5e:17:0f:03:86:17:2b:a0:48:f1:1b:d8: 80:b8:ce:41:db:01:9b:fb:14:ab:4e:18:c4:16:19: e9:57:bd:73:0c:ac:6d:1c:86:a9:7f:e0:bc:ea:7b: 8b:9b:c7:0c:76:1e:d1:8d:aa:48:47:f7:ad:46:f1: c3:0c:a6:97:8d:65:33:86:0c:ff:30:d4:1f:6a:aa: fc:3e:38:50:8f:33:1a:a5:ef:a0:58:4d:62:b8:76: 5c:9f:c0:30:f2:8f:6f:6c:10:29:40:86:ba:22:9f: ca:4b:56:34:79:61:2b:e2:a9:0a:d7:00:50:fb:2d: 71:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:68:A4:56:F4:A7:83:6B:22:AC:59:BC:8C:E0:29:2D:DE:8B:44:5F X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/K2ikVvSng2sirFm8jOApLd6LRF8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.41.209.0/24 Signature Algorithm: sha256WithRSAEncryption 12:af:66:78:86:b3:55:92:a9:e1:fd:32:bf:bf:99:63:e3:d5: c5:d6:89:34:f0:f1:6b:8e:71:9e:7a:ef:51:70:34:e7:13:5a: b0:5c:87:e1:ad:d8:4e:fc:01:5d:10:63:4d:4e:57:44:b6:bf: ed:30:5d:26:6f:bc:34:df:bb:28:c5:c0:c4:39:e5:3b:2f:a1: 62:f9:24:80:82:08:54:af:4a:f5:14:e5:95:88:fe:05:0a:6b: cc:a6:cb:b6:0f:ab:96:36:a7:ea:47:84:b2:ee:9a:f7:23:11: 11:e9:02:5f:04:5c:b6:73:40:38:87:2a:69:8d:81:fc:c7:b2: bd:fd:de:1f:22:a0:79:0b:5b:c0:45:ce:f6:69:26:71:71:b4: 23:ff:e2:4b:0d:2f:00:2d:2b:ea:82:25:46:36:da:5b:e4:b2: 4e:71:80:29:33:89:70:04:84:ce:90:b5:eb:20:51:55:e7:c0: 3a:e8:f5:5d:64:b0:26:0c:df:3f:b0:0e:e0:26:01:5c:b4:61: 8a:95:d2:60:94:2e:35:b7:85:23:38:10:59:6d:20:b2:98:95: e3:75:9f:72:a9:73:1e:1f:98:c5:c2:46:f7:20:f6:40:99:cc: 55:00:d4:8c:a4:3a:18:71:22:50:7e:03:ab:cb:be:36:47:56: 4e:c5:39:41 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDA5MTgw NzUxMjFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDJCNjhBNDU2RjRBNzgz NkIyMkFDNTlCQzhDRTAyOTJEREU4QjQ0NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt6Fd9Z+bNfE2fY2UF4RAK2DujyMVuGowYUrvtMzOlu7/CVptN 4yggXDS7cIvJr5TNcOVkTtTfARKDRGmbXbH4J4Fh1RdadNWdExmVA0pBHEHy+yRb /jsX+NGKUaO+bf1Hv98jS6sjIw04Arr8U/FnZ1jZV2GAcdtZMc8WNBXEb8kI0TjZ EHj2HF4XDwOGFyugSPEb2IC4zkHbAZv7FKtOGMQWGelXvXMMrG0chql/4Lzqe4ub xwx2HtGNqkhH961G8cMMppeNZTOGDP8w1B9qqvw+OFCPMxql76BYTWK4dlyfwDDy j29sEClAhroin8pLVjR5YSviqQrXAFD7LXHvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUK2ikVvSng2sirFm8jOApLd6LRF8wHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvSzJpa1Z2U25nMnNp ckZtOGpPQXBMZDZMUkY4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG4p0TANBgkqhkiG9w0BAQsFAAOCAQEAEq9meIazVZKp4f0yv7+ZY+PVxdaJ NPDxa45xnnrvUXA05xNasFyH4a3YTvwBXRBjTU5XRLa/7TBdJm+8NN+7KMXAxDnl Oy+hYvkkgIIIVK9K9RTllYj+BQprzKbLtg+rljan6keEsu6a9yMREekCXwRctnNA OIcqaY2B/Meyvf3eHyKgeQtbwEXO9mkmcXG0I//iSw0vAC0r6oIlRjbaW+SyTnGA KTOJcASEzpC16yBRVefAOuj1XWSwJgzfP7AO4CYBXLRhipXSYJQuNbeFIzgQWW0g spiV43WfcqlzHh+YxcJG9yD2QJnMVQDUjKQ6GHEiUH4Dq8u+NkdWTsU5QQ== -----END CERTIFICATE-----Generated at Mon Nov 25 20:22:05 2024 by rpki-client on console-fra.rpki-client.org