$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3261/55dL2KayKPjUe7gdN-CYKn5yjDA.roa File: 55dL2KayKPjUe7gdN-CYKn5yjDA.roa (raw, json) Hash identifier: 8oXfnfWIE/xOh28+/0D5MmWVTrVNwaRXqOdYZuU6yVM= Subject key identifier: E7:97:4B:D8:A6:B2:28:F8:D4:7B:B8:1D:37:E0:98:2A:7E:72:8C:30 Certificate issuer: /CN=DCC4D5F25F3EA2CA67C3D8BEB66BF30933E5916A Certificate serial: 01BE Authority key identifier: DC:C4:D5:F2:5F:3E:A2:CA:67:C3:D8:BE:B6:6B:F3:09:33:E5:91:6A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3MTV8l8-ospnw9i-tmvzCTPlkWo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/55dL2KayKPjUe7gdN-CYKn5yjDA.roa Signing time: Sun 28 Apr 2024 16:57:57 +0000 ROA not before: Sun 28 Apr 2024 16:57:57 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 146787 IP address blocks: 157.15.74.0/23 maxlen: 26 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/3MTV8l8-ospnw9i-tmvzCTPlkWo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/3MTV8l8-ospnw9i-tmvzCTPlkWo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3MTV8l8-ospnw9i-tmvzCTPlkWo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCC4D5F25F3EA2CA67C3D8BEB66BF30933E5916A Validity Not Before: Apr 28 16:57:57 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=E7974BD8A6B228F8D47BB81D37E0982A7E728C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:0d:94:46:48:8d:de:33:85:72:59:33:fe: c6:6e:df:bd:71:b5:b8:bb:eb:18:a2:ad:8e:d5:1b: a7:67:a9:af:4a:5d:ad:0a:66:f9:31:65:07:7d:03: ef:df:82:84:1b:be:b7:f3:84:36:04:c7:2f:47:cb: b6:f7:2c:b6:a9:95:30:f3:0f:7c:28:2d:e1:f4:a6: 55:4b:f3:bd:ba:42:c7:69:b1:5c:ac:db:68:f4:99: 96:03:85:0b:ea:62:56:c9:ce:a8:c9:c8:8d:db:60: 9a:e7:77:1f:22:7e:4a:b1:1f:3f:fc:40:b5:d2:b0: d8:e2:11:79:98:0a:31:39:f9:f1:8c:f9:5f:c9:f2: f8:0a:74:92:70:fc:3a:87:c4:88:51:92:11:b2:05: 34:a0:5d:9e:c6:92:37:be:94:57:5c:fd:36:93:e4: 30:fd:10:22:ee:e3:6a:24:ba:c8:99:aa:bf:72:e2: b5:f2:42:eb:f8:e7:bf:97:00:20:d7:ca:8b:c3:cd: de:61:5c:c6:60:29:34:9b:6e:34:b7:c8:42:41:1e: a2:ff:48:53:7f:22:fc:94:51:8c:ca:ce:45:ca:54: ab:b7:99:dd:2c:e7:6d:85:3f:85:31:17:19:8d:c9: a4:e0:b7:7b:f8:4f:ae:59:be:c1:d2:4c:5e:07:66: f6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:97:4B:D8:A6:B2:28:F8:D4:7B:B8:1D:37:E0:98:2A:7E:72:8C:30 X509v3 Authority Key Identifier: keyid:DC:C4:D5:F2:5F:3E:A2:CA:67:C3:D8:BE:B6:6B:F3:09:33:E5:91:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/3MTV8l8-ospnw9i-tmvzCTPlkWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3MTV8l8-ospnw9i-tmvzCTPlkWo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3261/55dL2KayKPjUe7gdN-CYKn5yjDA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.15.74.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:d3:f4:89:41:5f:01:d4:25:5a:49:ae:e0:21:57:f5:45:d4: 9b:c5:39:a8:67:51:35:9d:32:d7:aa:65:d3:82:60:8e:59:7c: 0a:99:62:b2:79:95:67:4f:86:07:51:55:27:5a:5a:1f:79:49: 35:7c:c6:13:4e:ed:93:7c:e5:9a:b3:91:79:39:05:93:0d:c9: 14:dd:d7:16:83:55:c3:b1:f1:07:8b:50:c9:79:5f:11:e1:9e: 8c:37:e2:b2:15:b2:f1:69:cb:44:06:91:66:94:df:47:7d:e7: ba:cd:23:37:6f:9e:c3:11:ad:64:9a:55:9a:b4:09:82:e5:78: a3:11:33:70:75:14:29:89:98:90:6f:a9:c1:a8:d0:76:cd:12: 4a:74:4d:b2:e9:f7:42:28:f1:89:56:89:04:f4:0a:73:04:5f: cc:e0:7d:b4:e7:50:c7:05:1d:08:a1:6c:29:18:fb:68:ab:84: e7:4c:b8:73:c9:43:4b:4a:e6:ba:3d:6e:95:0b:f1:09:a6:3b: d4:6e:78:43:9d:e6:c4:42:67:e4:1e:07:a5:af:82:77:4c:22: 4e:0b:53:d0:9e:17:67:c1:88:63:2c:37:92:aa:bb:b0:9b:0b: 08:72:ef:39:d5:4b:9f:61:96:5c:1b:3a:9c:9b:7d:97:7a:f9: a9:cf:7f:92 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREND NEQ1RjI1RjNFQTJDQTY3QzNEOEJFQjY2QkYzMDkzM0U1OTE2QTAeFw0yNDA0Mjgx NjU3NTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU3OTc0QkQ4QTZCMjI4 RjhENDdCQjgxRDM3RTA5ODJBN0U3MjhDMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/kw2URkiN3jOFclkz/sZu371xtbi76xiirY7VG6dnqa9KXa0K ZvkxZQd9A+/fgoQbvrfzhDYExy9Hy7b3LLaplTDzD3woLeH0plVL8726QsdpsVys 22j0mZYDhQvqYlbJzqjJyI3bYJrndx8ifkqxHz/8QLXSsNjiEXmYCjE5+fGM+V/J 8vgKdJJw/DqHxIhRkhGyBTSgXZ7Gkje+lFdc/TaT5DD9ECLu42okusiZqr9y4rXy Quv457+XACDXyovDzd5hXMZgKTSbbjS3yEJBHqL/SFN/IvyUUYzKzkXKVKu3md0s 522FP4UxFxmNyaTgt3v4T65ZvsHSTF4HZvaXAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU55dL2KayKPjUe7gdN+CYKn5yjDAwHwYDVR0jBBgwFoAU3MTV8l8+ospnw9i+ tmvzCTPlkWowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 MS8zTVRWOGw4LW9zcG53OWktdG12ekNUUGxrV28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNNVFY4bDgtb3Nwbnc5aS10bXZ6Q1RQbGtXby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjEvNTVkTDJLYXlLUGpV ZTdnZE4tQ1lLbjV5akRBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAZ0PSjANBgkqhkiG9w0BAQsFAAOCAQEADtP0iUFfAdQlWkmu4CFX9UXUm8U5 qGdRNZ0y16pl04Jgjll8CplisnmVZ0+GB1FVJ1paH3lJNXzGE07tk3zlmrOReTkF kw3JFN3XFoNVw7HxB4tQyXlfEeGejDfishWy8WnLRAaRZpTfR33nus0jN2+ewxGt ZJpVmrQJguV4oxEzcHUUKYmYkG+pwajQds0SSnRNsun3QijxiVaJBPQKcwRfzOB9 tOdQxwUdCKFsKRj7aKuE50y4c8lDS0rmuj1ulQvxCaY71G54Q53mxEJn5B4Hpa+C d0wiTgtT0J4XZ8GIYyw3kqq7sJsLCHLvOdVLn2GWXBs6nJt9l3r5qc9/kg== -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:11 2024 by rpki-client on console-fra.rpki-client.org