$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/LAJD34G6VGWR3B7xAZ4-SDtgyf4.roa File: LAJD34G6VGWR3B7xAZ4-SDtgyf4.roa (raw, json) Hash identifier: YbsAgx8m8W74RwSosVpHHkhJg72rWWuLXvHIj/y7gbk= Subject key identifier: 2C:02:43:DF:81:BA:54:65:91:DC:1E:F1:01:9E:3E:48:3B:60:C9:FE Certificate issuer: /CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2 Certificate serial: 0D3B Authority key identifier: C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/LAJD34G6VGWR3B7xAZ4-SDtgyf4.roa Signing time: Tue 13 Aug 2024 03:22:20 +0000 ROA not before: Tue 13 Aug 2024 03:22:20 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 136907 IP address blocks: 139.9.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 04:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3387 (0xd3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2 Validity Not Before: Aug 13 03:22:20 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=2C0243DF81BA546591DC1EF1019E3E483B60C9FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:21:01:6a:13:49:72:b5:fe:bf:4b:fa:37:c6: c6:ef:cf:7e:7a:fa:b8:ba:64:38:97:0d:ea:65:4a: 68:ab:fd:d6:03:e0:8b:be:6a:f7:bb:c9:1e:c6:14: 1c:ba:11:21:82:b7:d2:e4:1c:37:65:51:ba:2c:d6: 2e:4a:0b:af:25:a0:5c:e3:a5:be:e6:f8:59:99:86: d2:e7:83:22:0a:d1:29:df:e5:02:c9:ca:21:e9:81: a7:99:67:ea:a1:3b:88:a5:22:cf:ec:fc:96:43:c2: 20:1b:30:db:da:04:b6:e4:1a:7a:da:ff:80:d8:83: 10:20:f1:d1:f7:1a:43:c8:58:f6:17:36:e2:60:0e: 97:e6:a2:47:00:10:5a:c3:0e:fb:7b:51:0d:a8:94: 6d:61:1b:56:c3:a6:df:f1:3c:18:a3:0d:06:06:f7: 5e:36:87:58:ac:0e:67:cb:c0:d1:74:23:3a:d0:4c: 39:36:44:9d:c0:f8:2e:3d:4e:49:4c:c7:04:e2:1e: e9:7b:d6:93:a6:b7:0d:37:fd:41:73:b7:8f:d0:55: fa:98:ac:3e:0e:69:36:7f:75:4a:ec:c0:a5:87:1c: 01:ee:08:96:6c:17:9e:6f:77:fb:cd:28:3d:40:14: e9:c3:7a:fb:40:e5:65:03:55:9d:e8:84:b2:97:3a: 73:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:02:43:DF:81:BA:54:65:91:DC:1E:F1:01:9E:3E:48:3B:60:C9:FE X509v3 Authority Key Identifier: keyid:C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/LAJD34G6VGWR3B7xAZ4-SDtgyf4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.9.99.0/24 Signature Algorithm: sha256WithRSAEncryption d1:d8:af:a7:fb:7b:57:94:9c:95:37:1e:0e:f9:77:d7:ed:c0: e9:b0:36:d7:a9:71:5a:16:a1:5e:58:9b:f4:65:32:25:38:1f: d6:27:31:38:7e:f7:a9:ea:87:9d:5d:9b:6c:a0:33:5e:62:c9: a8:3d:07:31:75:65:b7:ff:f0:fd:7f:6d:c3:e0:ed:8a:92:6c: c9:36:1d:ff:5f:cc:2b:17:83:f8:e5:5f:a2:61:da:2b:8a:5f: d3:7c:56:1e:6d:bc:68:aa:ec:ef:1f:c2:74:fa:92:09:8d:8d: f2:ae:96:d9:69:ef:4c:52:71:68:b0:f1:bb:ec:26:07:23:bf: 6f:79:60:eb:8a:d6:60:b8:a7:8c:c4:2c:ef:ba:b2:55:bb:19: e4:6f:e4:26:70:26:e2:d0:59:64:d5:5d:43:1d:44:31:73:ae: eb:49:77:5a:fa:a9:ac:1f:3f:e6:8c:d3:0f:6f:b2:b2:0f:27: 1a:ba:7b:84:8a:1d:21:a0:d1:a3:32:98:19:7c:6b:44:cd:57: 27:65:a6:13:91:34:24:22:78:e8:a3:e1:e3:a3:fb:d3:a2:e3: ba:aa:17:6a:44:88:6f:78:a8:7b:ad:0e:e4:63:97:1f:0a:da: 90:e6:4d:13:95:b7:b5:3f:22:3b:6e:8b:b7:ef:dd:2d:c8:cb: 61:02:91:02 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDTswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzFE MzEyOTE2MzhGNEE0MDQwQ0QzRDUyREVDM0ZGMkI5NzA5QzVGMjAeFw0yNDA4MTMw MzIyMjBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDJDMDI0M0RGODFCQTU0 NjU5MURDMUVGMTAxOUUzRTQ4M0I2MEM5RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdIQFqE0lytf6/S/o3xsbvz356+ri6ZDiXDeplSmir/dYD4Iu+ ave7yR7GFBy6ESGCt9LkHDdlUbos1i5KC68loFzjpb7m+FmZhtLngyIK0Snf5QLJ yiHpgaeZZ+qhO4ilIs/s/JZDwiAbMNvaBLbkGnra/4DYgxAg8dH3GkPIWPYXNuJg DpfmokcAEFrDDvt7UQ2olG1hG1bDpt/xPBijDQYG9142h1isDmfLwNF0IzrQTDk2 RJ3A+C49TklMxwTiHul71pOmtw03/UFzt4/QVfqYrD4OaTZ/dUrswKWHHAHuCJZs F55vd/vNKD1AFOnDevtA5WUDVZ3ohLKXOnN9AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQULAJD34G6VGWR3B7xAZ4+SDtgyf4wHwYDVR0jBBgwFoAUwdMSkWOPSkBAzT1S 3sP/K5cJxfIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC93ZE1Ta1dPUFNrQkF6VDFTM3NQX0s1Y0p4ZkkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dkTVNrV09QU2tCQXpUMVMzc1BfSzVjSnhmSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvTEFKRDM0RzZWR1dS M0I3eEFaNC1TRHRneWY0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAIsJYzANBgkqhkiG9w0BAQsFAAOCAQEA0divp/t7V5SclTceDvl31+3A6bA2 16lxWhahXlib9GUyJTgf1icxOH73qeqHnV2bbKAzXmLJqD0HMXVlt//w/X9tw+Dt ipJsyTYd/1/MKxeD+OVfomHaK4pf03xWHm28aKrs7x/CdPqSCY2N8q6W2WnvTFJx aLDxu+wmByO/b3lg64rWYLinjMQs77qyVbsZ5G/kJnAm4tBZZNVdQx1EMXOu60l3 WvqprB8/5ozTD2+ysg8nGrp7hIodIaDRozKYGXxrRM1XJ2WmE5E0JCJ46KPh46P7 06LjuqoXakSIb3ioe60O5GOXHwrakOZNE5W3tT8iO26Lt+/dLcjLYQKRAg== -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:50 2024 by rpki-client on console-fra.rpki-client.org