$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/uvpN6PaNyzfU0Negv55wnSUQ_lo.roa File: uvpN6PaNyzfU0Negv55wnSUQ_lo.roa (raw, json) Hash identifier: 53y//wIxceKjd0jfd+WkKFNEOEeSu/b8zSN6H8Je36s= Subject key identifier: BA:FA:4D:E8:F6:8D:CB:37:D4:D0:D7:A0:BF:9E:70:9D:25:10:FE:5A Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 0DEC Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/uvpN6PaNyzfU0Negv55wnSUQ_lo.roa Signing time: Mon 09 Sep 2024 02:58:35 +0000 ROA not before: Mon 09 Sep 2024 02:58:35 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 136907 IP address blocks: 124.71.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 04:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3564 (0xdec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 9 02:58:35 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=BAFA4DE8F68DCB37D4D0D7A0BF9E709D2510FE5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:c2:73:af:d0:ff:e1:b1:8f:ce:42:4d:8e: 48:f0:2e:11:06:da:ec:7b:74:4d:b0:d8:1a:c3:5c: b2:01:ae:f4:c1:9c:15:f4:96:d3:87:74:7b:b2:43: 5d:1e:30:da:42:6a:72:3d:b6:86:4e:9d:0f:f0:29: 62:b8:11:9c:21:58:8e:e3:92:3d:ad:a2:70:c6:8f: f1:34:c8:75:0a:44:38:0c:ce:88:ea:00:24:23:60: f8:2b:39:a3:62:0b:e1:a8:ff:e8:73:c2:a9:3d:12: fd:39:11:fd:f7:d5:31:fc:a5:a1:56:bd:53:b3:d0: 60:85:27:be:fc:01:9d:7b:98:65:35:bd:81:75:ed: 9f:f4:f1:18:4f:e1:b2:50:96:45:22:3f:bf:bf:5b: 50:6c:58:51:3d:a2:e7:9f:4a:15:2f:b3:d9:56:ec: b6:ba:66:bd:b3:33:76:f4:23:4f:64:f2:f6:a5:b4: c8:c5:53:31:2c:1a:65:df:f4:b8:2b:b1:26:6e:8a: 8c:07:b4:c6:5a:6a:13:48:83:3e:a9:5f:3f:d8:a9: 33:d7:c5:f7:10:84:39:1a:c9:40:5b:89:53:79:07: 6e:62:b5:fc:15:47:ba:3f:5b:d0:0f:04:78:d8:52: 77:0b:b5:87:62:7f:c7:c1:51:48:82:14:04:56:a1: ec:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FA:4D:E8:F6:8D:CB:37:D4:D0:D7:A0:BF:9E:70:9D:25:10:FE:5A X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/uvpN6PaNyzfU0Negv55wnSUQ_lo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.71.250.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:06:8c:fb:73:d7:a1:3a:1f:d6:05:2f:f0:b5:42:fe:c5:1f: 47:38:80:23:24:2d:b4:61:3f:01:66:86:a3:88:27:cb:04:74: ad:76:fe:06:48:13:68:06:7c:b5:3c:90:a4:5c:14:da:e5:17: b2:54:bd:29:2e:46:9d:fc:7e:59:0d:7f:4c:a7:a6:17:52:35: 28:5f:7e:1f:35:e3:91:a2:36:c8:b2:5c:f4:62:97:9e:27:29: ac:ea:5f:2a:ee:42:d6:15:dc:b2:3f:b0:71:fb:42:ec:cc:c8: 2d:36:c8:cc:39:59:82:d4:ea:ce:f1:11:f5:6b:22:9a:c6:f8: 09:b1:47:aa:23:b1:39:6b:bf:69:ae:a9:3b:11:29:23:97:c9: 89:4e:55:ed:6d:6d:ab:05:3e:fa:f7:f6:61:3d:99:7d:d9:0c: 3a:1a:04:9f:8a:71:33:3f:bd:f2:70:9e:52:bf:ee:3e:74:3f: b2:95:1b:39:49:88:7d:45:24:ba:e1:91:9d:00:48:b7:e9:0b: bb:85:9d:8e:91:2e:ac:3e:8b:b9:5a:88:9d:d2:28:da:bd:6b: 26:43:3e:ee:46:cd:17:af:2b:21:bb:ef:91:ae:a0:f7:e8:28: 9b:6c:0c:c2:17:19:90:db:49:02:2a:0d:87:2d:13:bd:23:33: 23:4c:5a:87 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDA5MDkw MjU4MzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJBRkE0REU4RjY4RENC MzdENEQwRDdBMEJGOUU3MDlEMjUxMEZFNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5qsJzr9D/4bGPzkJNjkjwLhEG2ux7dE2w2BrDXLIBrvTBnBX0 ltOHdHuyQ10eMNpCanI9toZOnQ/wKWK4EZwhWI7jkj2tonDGj/E0yHUKRDgMzojq ACQjYPgrOaNiC+Go/+hzwqk9Ev05Ef331TH8paFWvVOz0GCFJ778AZ17mGU1vYF1 7Z/08RhP4bJQlkUiP7+/W1BsWFE9ouefShUvs9lW7La6Zr2zM3b0I09k8valtMjF UzEsGmXf9LgrsSZuiowHtMZaahNIgz6pXz/YqTPXxfcQhDkayUBbiVN5B25itfwV R7o/W9APBHjYUncLtYdif8fBUUiCFARWoezJAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUuvpN6PaNyzfU0Negv55wnSUQ/lowHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvdXZwTjZQYU55emZV ME5lZ3Y1NXduU1VRX2xvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHxH+jANBgkqhkiG9w0BAQsFAAOCAQEAWwaM+3PXoTof1gUv8LVC/sUfRziA IyQttGE/AWaGo4gnywR0rXb+BkgTaAZ8tTyQpFwU2uUXslS9KS5Gnfx+WQ1/TKem F1I1KF9+HzXjkaI2yLJc9GKXnicprOpfKu5C1hXcsj+wcftC7MzILTbIzDlZgtTq zvER9Wsimsb4CbFHqiOxOWu/aa6pOxEpI5fJiU5V7W1tqwU++vf2YT2ZfdkMOhoE n4pxMz+98nCeUr/uPnQ/spUbOUmIfUUkuuGRnQBIt+kLu4WdjpEurD6LuVqIndIo 2r1rJkM+7kbNF68rIbvvka6g9+gom2wMwhcZkNtJAioNhy0TvSMzI0xahw== -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:50 2024 by rpki-client on console-fra.rpki-client.org