$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/QJqjYWeXl7xW0IcV-CQIUI7kuYw.roa File: QJqjYWeXl7xW0IcV-CQIUI7kuYw.roa (raw, json) Hash identifier: gcCQFGufJFdCxgVVyxhFltdlHoXBAufmLWG5tHR515w= Subject key identifier: 40:9A:A3:61:67:97:97:BC:56:D0:87:15:F8:24:08:50:8E:E4:B9:8C Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 0D61 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/QJqjYWeXl7xW0IcV-CQIUI7kuYw.roa Signing time: Tue 13 Aug 2024 03:22:55 +0000 ROA not before: Tue 13 Aug 2024 03:22:55 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 136907 IP address blocks: 110.41.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3425 (0xd61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Aug 13 03:22:55 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=409AA361679797BC56D08715F82408508EE4B98C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:ab:24:04:04:76:e1:f3:51:1f:ba:5e:c8: 12:1b:4c:64:4e:0a:2b:54:b0:be:6e:68:e1:1a:81: b3:97:90:29:fd:35:f1:f4:52:c9:a7:72:54:2b:fb: e0:3a:2e:b6:53:08:e8:0b:43:21:4d:68:9a:f6:42: 41:a6:ed:93:6b:8e:67:0f:7a:bd:17:7b:7b:c8:ae: ae:34:9b:eb:a6:3a:c0:52:7c:9d:e1:1c:aa:8b:16: d7:2a:d3:68:8f:a1:78:d0:7f:4f:cf:6d:c2:c7:03: 3e:05:f1:a6:27:47:6f:1d:c9:26:df:25:1a:5b:fb: 29:6e:1d:f5:8f:5d:2c:3c:d0:34:e8:b7:ec:bd:55: 6c:78:3f:1d:e1:e6:54:62:e0:3d:2f:f0:84:ab:64: e9:1f:e0:c3:aa:ec:40:9d:46:15:e5:b7:1e:db:89: 7d:dc:00:3d:42:ef:4f:ec:80:c0:c4:76:3e:84:1d: 50:1a:6d:12:44:d2:1c:9b:2e:30:a0:a0:dd:92:4d: 81:83:fd:d4:e8:f8:f9:89:8a:46:9b:b0:55:62:5f: 1e:1a:0d:e6:65:8c:25:06:c0:67:5d:06:49:48:7b: 9f:e4:1c:96:88:97:70:25:5e:be:cf:17:d2:5a:37: df:94:89:f0:5b:01:77:df:4e:db:f4:db:6c:9e:84: c7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9A:A3:61:67:97:97:BC:56:D0:87:15:F8:24:08:50:8E:E4:B9:8C X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/QJqjYWeXl7xW0IcV-CQIUI7kuYw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.41.209.0/24 Signature Algorithm: sha256WithRSAEncryption b8:1e:b9:ff:c2:af:8b:36:66:8f:0c:84:20:55:c8:bf:35:87: 07:05:2f:1d:87:19:f7:94:fd:e0:48:7d:ba:cc:50:b1:c8:79: 80:1d:98:fb:ce:cd:88:17:d2:02:ec:47:7c:f1:da:9e:82:44: c4:9c:94:81:e1:58:9a:fe:b2:88:4c:65:19:15:67:9b:fe:62: 07:e9:0a:6f:70:cb:c5:32:4f:be:ea:ef:c9:37:36:c9:e7:cc: 88:84:57:2d:e4:3b:ab:fe:31:f7:81:76:c2:ac:1d:0f:3f:3f: eb:63:b1:30:cd:0c:b9:ad:d5:ef:1d:9e:20:32:25:a5:20:e1: e9:2e:8f:be:6f:d5:4f:56:f7:50:a1:41:dc:52:5f:4d:ae:48: 6f:67:00:eb:51:8e:a1:be:9f:db:a2:c6:62:97:4d:92:30:6a: b9:7f:53:3d:2e:a7:b5:50:a5:ac:17:e6:6d:39:98:dc:c1:79: 5b:b5:be:bd:bc:e6:9a:fb:b8:36:40:a2:0e:8d:a6:af:fb:e0: d6:0a:3d:f2:dc:2d:97:6a:e7:6e:0b:9c:6b:55:ed:48:25:60: 8e:18:d3:9b:88:bd:40:98:65:c5:ad:90:5a:fb:c2:9a:3e:6d: cc:f1:44:4d:eb:6e:5e:04:ce:78:71:26:a0:e9:ef:93:69:99: 4f:78:5c:39 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDA4MTMw MzIyNTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQwOUFBMzYxNjc5Nzk3 QkM1NkQwODcxNUY4MjQwODUwOEVFNEI5OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2PqskBAR24fNRH7peyBIbTGROCitUsL5uaOEagbOXkCn9NfH0 UsmnclQr++A6LrZTCOgLQyFNaJr2QkGm7ZNrjmcPer0Xe3vIrq40m+umOsBSfJ3h HKqLFtcq02iPoXjQf0/PbcLHAz4F8aYnR28dySbfJRpb+yluHfWPXSw80DTot+y9 VWx4Px3h5lRi4D0v8ISrZOkf4MOq7ECdRhXltx7biX3cAD1C70/sgMDEdj6EHVAa bRJE0hybLjCgoN2STYGD/dTo+PmJikabsFViXx4aDeZljCUGwGddBklIe5/kHJaI l3AlXr7PF9JaN9+UifBbAXffTtv022yehMdlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUQJqjYWeXl7xW0IcV+CQIUI7kuYwwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvUUpxallXZVhsN3hX MEljVi1DUUlVSTdrdVl3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG4p0TANBgkqhkiG9w0BAQsFAAOCAQEAuB65/8KvizZmjwyEIFXIvzWHBwUv HYcZ95T94Eh9usxQsch5gB2Y+87NiBfSAuxHfPHanoJExJyUgeFYmv6yiExlGRVn m/5iB+kKb3DLxTJPvurvyTc2yefMiIRXLeQ7q/4x94F2wqwdDz8/62OxMM0Mua3V 7x2eIDIlpSDh6S6Pvm/VT1b3UKFB3FJfTa5Ib2cA61GOob6f26LGYpdNkjBquX9T PS6ntVClrBfmbTmY3MF5W7W+vbzmmvu4NkCiDo2mr/vg1go98twtl2rnbguca1Xt SCVgjhjTm4i9QJhlxa2QWvvCmj5tzPFETetuXgTOeHEmoOnvk2mZT3hcOQ== -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:46 2024 by rpki-client on console-ams.rpki-client.org