$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/oQS-tAbY6FQm-usEo4mrBHnOpL8.roa File: oQS-tAbY6FQm-usEo4mrBHnOpL8.roa (raw, json) Hash identifier: Z0M4Mbgv/yDhw5opEm6BeXEar3uMtVEiDDW/68Td83E= Subject key identifier: A1:04:BE:B4:06:D8:E8:54:26:FA:EB:04:A3:89:AB:04:79:CE:A4:BF Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 1243 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/oQS-tAbY6FQm-usEo4mrBHnOpL8.roa Signing time: Tue 20 Aug 2024 12:56:42 +0000 ROA not before: Tue 20 Aug 2024 12:56:42 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 398704 IP address blocks: 180.223.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 10:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4675 (0x1243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Aug 20 12:56:42 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=A104BEB406D8E85426FAEB04A389AB0479CEA4BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2f:0a:0d:16:0e:aa:9e:25:cf:96:24:c8:95: ab:c8:db:d5:48:3a:96:8c:cf:b4:83:fd:51:ad:6f: 9c:e5:60:16:2b:d6:62:c1:5d:09:9f:44:a0:f0:14: fd:a5:e4:a6:c4:64:34:2f:1d:aa:0f:37:9b:37:13: 7e:40:40:cc:6e:ad:22:1c:23:7a:91:73:5d:ce:bf: a0:bc:a4:31:21:2d:d1:56:2a:d9:98:96:69:1c:3d: 70:24:df:3b:92:4e:07:62:a3:fd:e8:9c:e8:fb:f2: 37:e3:4a:f7:12:36:35:fb:a4:ae:8e:b6:b9:54:f2: 07:8f:83:7a:cb:cf:5b:bb:9e:73:b4:aa:70:85:0d: 96:71:a7:a0:1c:bb:0d:37:71:5e:29:63:5e:f6:fe: 1d:18:cf:cf:9c:46:f2:54:9a:ba:00:09:aa:89:14: 37:8f:f5:84:25:71:b3:4a:42:6d:e3:49:4d:23:a9: 79:a4:df:19:18:c2:a1:44:79:dd:d3:ca:98:2d:f4: a9:10:bb:19:ee:c1:94:b8:ec:30:b4:de:f6:eb:f6: 81:23:20:72:45:c0:1a:8e:c5:69:b3:3d:30:50:73: 7f:70:10:33:0f:7e:a3:05:37:93:44:9a:40:b3:3e: bf:3f:4e:5a:c7:4d:c4:96:eb:8f:60:7c:47:e1:1e: f0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:04:BE:B4:06:D8:E8:54:26:FA:EB:04:A3:89:AB:04:79:CE:A4:BF X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/oQS-tAbY6FQm-usEo4mrBHnOpL8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.120.0/21 Signature Algorithm: sha256WithRSAEncryption 91:df:24:a7:fa:99:de:0f:cf:4f:c4:ab:17:1e:d1:d4:ad:a2: a8:76:a0:93:65:3b:76:9c:65:32:44:65:82:15:d3:9c:ff:0c: 92:13:60:b5:43:35:f9:7e:b9:3b:c0:ad:5a:0a:6c:2b:08:8f: 49:85:61:c2:3f:b2:5f:b2:16:f3:42:d3:9c:e5:59:c0:3f:82: f5:32:8f:9d:db:00:74:3b:19:52:d5:e9:55:96:bf:1b:e8:fa: 11:9f:83:06:2b:7c:62:89:3b:2d:be:67:4f:08:28:a8:0b:65: 57:0a:01:32:46:a1:32:91:2f:8e:fd:a0:73:34:29:da:79:03: 3f:5e:f7:d6:39:74:59:15:e0:1a:f7:5e:81:6f:a2:ba:9f:29: 1e:ea:fc:27:ff:99:cd:0c:d3:02:4b:49:50:3a:65:dc:51:bf: 80:b7:0c:0e:14:cf:d0:ab:7c:97:45:05:b6:c3:55:3e:38:ef: bb:1b:2e:9f:f8:f7:f3:94:70:2e:78:e2:0e:2a:57:5f:31:f7: 73:66:01:99:ef:9a:6f:3d:a1:87:9c:71:a4:14:3b:7f:a5:89: fa:e1:af:e1:5b:d1:36:64:ea:79:ea:4a:d8:18:56:e2:f9:2a: ef:f3:51:d9:aa:e8:7e:cf:62:6a:7c:85:37:c9:7c:28:a6:d5: c8:5b:ab:9b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEkMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDA4MjAx MjU2NDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEExMDRCRUI0MDZEOEU4 NTQyNkZBRUIwNEEzODlBQjA0NzlDRUE0QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6LwoNFg6qniXPliTIlavI29VIOpaMz7SD/VGtb5zlYBYr1mLB XQmfRKDwFP2l5KbEZDQvHaoPN5s3E35AQMxurSIcI3qRc13Ov6C8pDEhLdFWKtmY lmkcPXAk3zuSTgdio/3onOj78jfjSvcSNjX7pK6OtrlU8gePg3rLz1u7nnO0qnCF DZZxp6Acuw03cV4pY172/h0Yz8+cRvJUmroACaqJFDeP9YQlcbNKQm3jSU0jqXmk 3xkYwqFEed3Typgt9KkQuxnuwZS47DC03vbr9oEjIHJFwBqOxWmzPTBQc39wEDMP fqMFN5NEmkCzPr8/TlrHTcSW649gfEfhHvAfAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUoQS+tAbY6FQm+usEo4mrBHnOpL8wHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvb1FTLXRBYlk2RlFt LXVzRW80bXJCSG5PcEw4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfeDANBgkqhkiG9w0BAQsFAAOCAQEAkd8kp/qZ3g/PT8SrFx7R1K2iqHag k2U7dpxlMkRlghXTnP8MkhNgtUM1+X65O8CtWgpsKwiPSYVhwj+yX7IW80LTnOVZ wD+C9TKPndsAdDsZUtXpVZa/G+j6EZ+DBit8Yok7Lb5nTwgoqAtlVwoBMkahMpEv jv2gczQp2nkDP1731jl0WRXgGvdegW+iup8pHur8J/+ZzQzTAktJUDpl3FG/gLcM DhTP0Kt8l0UFtsNVPjjvuxsun/j385RwLnjiDipXXzH3c2YBme+abz2hh5xxpBQ7 f6WJ+uGv4VvRNmTqeepK2BhW4vkq7/NR2arofs9ianyFN8l8KKbVyFurmw== -----END CERTIFICATE-----Generated at Fri Nov 22 07:02:35 2024 by rpki-client on console-fra.rpki-client.org