$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/4rzlNzgtGTVtgaZZyfXYb9Z1QHs.roa File: 4rzlNzgtGTVtgaZZyfXYb9Z1QHs.roa (raw, json) Hash identifier: HYU7YTQ2XHwe0FvyYneiC/4utDTubDJ3uPmz6aKlOnM= Subject key identifier: E2:BC:E5:37:38:2D:19:35:6D:81:A6:59:C9:F5:D8:6F:D6:75:40:7B Certificate issuer: /CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F Certificate serial: 1955 Authority key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/4rzlNzgtGTVtgaZZyfXYb9Z1QHs.roa Signing time: Fri 06 Sep 2024 01:55:45 +0000 ROA not before: Fri 06 Sep 2024 01:55:45 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 38372 IP address blocks: 120.31.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6485 (0x1955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F Validity Not Before: Sep 6 01:55:45 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=E2BCE537382D19356D81A659C9F5D86FD675407B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a7:82:8d:d8:7b:cd:dc:95:3c:2c:95:cd:03: d1:a9:1f:64:c7:ce:77:97:66:61:04:5c:39:4b:ae: e1:82:30:e5:49:43:d4:37:3b:9c:78:f5:22:f3:df: e4:3f:5f:4f:da:c6:7c:06:b7:85:fc:ae:f4:44:b3: 89:a1:07:f6:b7:9e:39:42:d8:8f:cf:f4:a3:a1:10: a5:68:b1:df:b0:1e:44:dc:9d:27:0c:e4:83:71:1d: 74:d5:d2:95:35:fc:0e:09:07:9a:b8:d6:36:ca:fb: 60:7b:23:4a:8e:2d:eb:e1:cf:fb:25:a1:82:9c:ba: ec:0e:ba:15:0a:2b:7d:64:12:7c:c2:fb:7c:18:3d: cf:9a:0f:40:e9:75:10:38:f6:c2:31:b3:f6:1c:d9: 84:29:3a:08:e3:13:fc:db:7e:aa:d2:24:f4:07:03: 85:bd:09:c5:1a:70:8d:b5:7c:dd:22:84:03:f2:b4: de:e8:38:4d:03:d6:39:0d:9e:70:d2:4d:09:7e:f3: 28:4b:5e:fd:9f:1b:68:71:47:70:44:7b:93:1d:9a: 71:a0:22:94:57:56:33:62:91:89:68:94:6c:9e:f2: 1a:4f:b9:c1:04:7f:8d:29:85:77:7b:27:92:b3:ad: 17:b0:b4:14:e4:a9:37:f6:3d:8c:39:ec:24:10:88: 8f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BC:E5:37:38:2D:19:35:6D:81:A6:59:C9:F5:D8:6F:D6:75:40:7B X509v3 Authority Key Identifier: keyid:85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/4rzlNzgtGTVtgaZZyfXYb9Z1QHs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.31.164.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:a0:86:da:f3:a4:82:30:45:ff:73:91:5a:bb:6e:4a:43:0d: af:d3:c2:46:06:67:25:e3:95:18:82:8a:3e:7e:87:9e:26:4a: ba:9e:2b:d3:1e:98:7e:5c:47:d3:f3:2e:b7:52:0a:74:81:45: ad:0b:55:50:f9:05:b2:2f:be:5e:2f:ab:77:07:b1:ba:3e:73: 53:2d:80:05:1b:f4:6c:ed:29:24:36:b3:db:2c:86:92:d2:28: e5:11:64:a2:9e:02:42:8a:34:b4:98:bf:93:05:68:24:79:cf: e7:3d:0c:e8:f7:93:02:2f:55:6f:40:4f:10:a4:94:ff:d8:a4: e8:7b:ba:dc:df:c0:29:76:4e:eb:c4:60:54:e5:94:be:a0:3f: 77:31:9c:0a:ad:7d:75:2e:68:77:33:99:e9:c3:49:9b:02:21: 33:68:01:6c:36:70:c1:54:53:e0:b0:c5:6e:fa:59:d9:16:10: b9:c4:27:61:ca:25:85:0d:b2:86:87:96:58:d9:bf:71:c4:a0: b1:ae:b5:82:19:b1:62:ec:b7:71:37:4d:4e:b6:81:f1:6b:0c: 90:3a:6c:b1:c0:d2:8e:5d:c6:f5:ba:25:d1:ce:bd:a7:94:7c: 18:9b:a5:02:b4:7b:66:f8:35:47:fb:16:a3:9e:f3:31:ef:ef: 6b:0d:e7:24 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGVUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODVG M0JGRDFBMTQwOTBDNDgyOUE1QTMxM0E0RDMxRjlDQzhGMzEyRjAeFw0yNDA5MDYw MTU1NDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEUyQkNFNTM3MzgyRDE5 MzU2RDgxQTY1OUM5RjVEODZGRDY3NTQwN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKp4KN2HvN3JU8LJXNA9GpH2THzneXZmEEXDlLruGCMOVJQ9Q3 O5x49SLz3+Q/X0/axnwGt4X8rvREs4mhB/a3njlC2I/P9KOhEKVosd+wHkTcnScM 5INxHXTV0pU1/A4JB5q41jbK+2B7I0qOLevhz/sloYKcuuwOuhUKK31kEnzC+3wY Pc+aD0DpdRA49sIxs/Yc2YQpOgjjE/zbfqrSJPQHA4W9CcUacI21fN0ihAPytN7o OE0D1jkNnnDSTQl+8yhLXv2fG2hxR3BEe5MdmnGgIpRXVjNikYlolGye8hpPucEE f40phXd7J5KzrRewtBTkqTf2PYw57CQQiI/ZAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU4rzlNzgtGTVtgaZZyfXYb9Z1QHswHwYDVR0jBBgwFoAUhfO/0aFAkMSCmlox Ok0x+cyPMS8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEy L2hmT18wYUZBa01TQ21sb3hPazB4LWN5UE1TOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaGZPXzBhRkFrTVNDbWxveE9rMHgtY3lQTVM4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEyLzRyemxOemd0R1RWdGdh Wlp5ZlhZYjlaMVFIcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJ4H6QwDQYJKoZIhvcNAQELBQADggEBAByghtrzpIIwRf9zkVq7bkpDDa/TwkYG ZyXjlRiCij5+h54mSrqeK9MemH5cR9PzLrdSCnSBRa0LVVD5BbIvvl4vq3cHsbo+ c1MtgAUb9GztKSQ2s9sshpLSKOURZKKeAkKKNLSYv5MFaCR5z+c9DOj3kwIvVW9A TxCklP/YpOh7utzfwCl2TuvEYFTllL6gP3cxnAqtfXUuaHczmenDSZsCITNoAWw2 cMFUU+CwxW76WdkWELnEJ2HKJYUNsoaHlljZv3HEoLGutYIZsWLst3E3TU62gfFr DJA6bLHA0o5dxvW6JdHOvaeUfBibpQK0e2b4NUf7FqOe8zHv72sN5yQ= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:10 2024 by rpki-client on console-fra.rpki-client.org