$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/zqE4nh395wJP1jJcGdnSIPveSF0.roa File: zqE4nh395wJP1jJcGdnSIPveSF0.roa (raw, json) Hash identifier: ISbjcl4NvC1YzKscdQxVG3b4Uep3UT+tN4+wjXgj3Dc= Subject key identifier: CE:A1:38:9E:1D:FD:E7:02:4F:D6:32:5C:19:D9:D2:20:FB:DE:48:5D Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1AAA Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/zqE4nh395wJP1jJcGdnSIPveSF0.roa Signing time: Tue 24 Sep 2024 00:21:47 +0000 ROA not before: Tue 24 Sep 2024 00:21:47 +0000 ROA not after: Sat 20 Sep 2025 07:41:26 +0000 asID: 4808 IP address blocks: 180.184.24.0/21 maxlen: 24 180.184.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6826 (0x1aaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 24 00:21:47 2024 GMT Not After : Sep 20 07:41:26 2025 GMT Subject: CN=CEA1389E1DFDE7024FD6325C19D9D220FBDE485D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:3e:32:26:2d:a5:b8:b3:c5:ec:2f:8e:26: b8:79:90:b6:3f:00:3a:29:9e:2d:21:7e:5a:ca:ac: 07:40:6a:18:63:f0:70:fa:da:07:3c:b3:25:fe:24: e3:f5:fc:35:85:c3:67:72:c8:05:f3:44:6f:aa:3a: d9:8a:47:b5:f2:71:04:27:d4:56:74:09:39:87:22: 35:ee:6b:64:a6:ae:c7:19:cd:04:11:0c:2f:49:c2: bf:17:28:23:ae:e5:8a:a3:3c:95:67:e0:a1:f5:e2: 3b:20:b2:75:16:8a:f7:ac:b7:1f:75:e8:a1:6b:42: 29:fa:6b:89:43:08:ab:27:9f:b1:f9:3f:c3:b0:da: 40:ab:0a:8d:c5:31:ed:8c:5f:f2:bf:14:8c:4d:b4: 5c:0b:ee:cb:30:cc:20:03:40:e7:b9:a1:83:c3:07: 0b:95:38:ba:c5:d5:04:f5:7f:d0:74:87:28:e8:d3: 06:d9:33:40:a9:77:3b:e7:16:50:da:70:5c:e3:61: 69:cf:f3:f3:8f:f9:a7:5e:41:86:ac:1d:c3:96:d8: 61:58:14:04:d3:38:26:b6:b0:e1:ed:06:cd:cd:1b: f4:fd:d4:8d:34:81:ab:d6:12:3d:e4:05:e8:9e:e7: f3:d1:cf:bf:06:75:16:a5:f6:54:bd:37:70:68:59: 4a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A1:38:9E:1D:FD:E7:02:4F:D6:32:5C:19:D9:D2:20:FB:DE:48:5D X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/zqE4nh395wJP1jJcGdnSIPveSF0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.24.0/21 180.184.56.0/21 Signature Algorithm: sha256WithRSAEncryption 89:75:8a:02:ec:6b:f8:db:8a:c0:fe:9e:2f:ef:0d:58:a1:36: 2f:6b:b7:c6:6c:0c:e5:43:a4:37:6a:82:51:08:eb:32:bc:eb: 92:4e:67:1a:26:9d:db:da:0e:84:da:2c:06:66:9f:78:7d:79: 5c:dc:95:f1:99:2d:88:46:d0:e1:c1:d3:e9:80:56:50:27:a9: b8:f0:5a:c1:1c:64:f4:35:57:fe:08:ef:13:12:0a:17:63:21: 6f:70:9f:77:ff:12:07:dd:78:aa:a7:21:19:e8:8e:c7:f6:26: d1:08:87:95:ed:a9:17:d5:d1:a3:25:7e:99:8a:34:84:7c:8d: 2a:5e:9b:c7:7d:80:81:d7:f5:0f:64:e0:28:fa:c1:f1:ef:7c: 75:5b:c7:ed:e3:e4:09:b9:cf:9d:e8:6a:b3:48:26:b2:8d:a8: 64:f1:ab:ce:24:bb:cf:00:c0:cd:fc:f7:62:d5:64:c6:3a:a7: 17:50:34:54:50:db:57:c0:6d:4a:42:25:87:b3:83:61:a8:85: c3:4d:3f:d8:83:37:7d:3c:4b:be:be:a3:57:b0:cb:50:00:ce: 11:bd:ac:cc:e4:d7:5f:06:cf:6c:ba:51:de:be:75:75:c0:6e: a5:28:fe:b1:de:bf:b4:1a:0b:14:7a:7a:cf:aa:26:a8:3a:13: f5:a2:06:c4 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICGqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNDA5MjQw MDIxNDdaFw0yNTA5MjAwNzQxMjZaMDMxMTAvBgNVBAMTKENFQTEzODlFMURGREU3 MDI0RkQ2MzI1QzE5RDlEMjIwRkJERTQ4NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeOD4yJi2luLPF7C+OJrh5kLY/ADopni0hflrKrAdAahhj8HD6 2gc8syX+JOP1/DWFw2dyyAXzRG+qOtmKR7XycQQn1FZ0CTmHIjXua2SmrscZzQQR DC9Jwr8XKCOu5YqjPJVn4KH14jsgsnUWivestx916KFrQin6a4lDCKsnn7H5P8Ow 2kCrCo3FMe2MX/K/FIxNtFwL7sswzCADQOe5oYPDBwuVOLrF1QT1f9B0hyjo0wbZ M0CpdzvnFlDacFzjYWnP8/OP+adeQYasHcOW2GFYFATTOCa2sOHtBs3NG/T91I00 gavWEj3kBeie5/PRz78GdRal9lS9N3BoWUodAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUzqE4nh395wJP1jJcGdnSIPveSF0wHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvenFFNG5oMzk1d0pQ MWpKY0dkblNJUHZlU0YwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEw DAMEA7S4GAMEA7S4ODANBgkqhkiG9w0BAQsFAAOCAQEAiXWKAuxr+NuKwP6eL+8N WKE2L2u3xmwM5UOkN2qCUQjrMrzrkk5nGiad29oOhNosBmafeH15XNyV8ZktiEbQ 4cHT6YBWUCepuPBawRxk9DVX/gjvExIKF2Mhb3Cfd/8SB914qqchGeiOx/Ym0QiH le2pF9XRoyV+mYo0hHyNKl6bx32Agdf1D2TgKPrB8e98dVvH7ePkCbnPnehqs0gm so2oZPGrziS7zwDAzfz3YtVkxjqnF1A0VFDbV8BtSkIlh7ODYaiFw00/2IM3fTxL vr6jV7DLUADOEb2szOTXXwbPbLpR3r51dcBupSj+sd6/tBoLFHp6z6omqDoT9aIG xA== -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:10 2024 by rpki-client on console-fra.rpki-client.org