$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3272/YPtiTpC3_2ladsp2RnmsGeRmYok.roa File: YPtiTpC3_2ladsp2RnmsGeRmYok.roa (raw, json) Hash identifier: BcNVoszKWuXYJShkJ3+9H/gyVtqB/H0DWX2zmfaWA5w= Subject key identifier: 60:FB:62:4E:90:B7:FF:69:5A:76:CA:76:46:79:AC:19:E4:66:62:89 Certificate issuer: /CN=B52F0F3FF7371FF1CE9D823E9549FC1158B16A2A Certificate serial: 0444 Authority key identifier: B5:2F:0F:3F:F7:37:1F:F1:CE:9D:82:3E:95:49:FC:11:58:B1:6A:2A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tS8PP_c3H_HOnYI-lUn8EVixaio.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/YPtiTpC3_2ladsp2RnmsGeRmYok.roa Signing time: Tue 05 Nov 2024 07:32:50 +0000 ROA not before: Tue 05 Nov 2024 07:32:50 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 211392 IP address blocks: 157.66.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tS8PP_c3H_HOnYI-lUn8EVixaio.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 08:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1092 (0x444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52F0F3FF7371FF1CE9D823E9549FC1158B16A2A Validity Not Before: Nov 5 07:32:50 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=60FB624E90B7FF695A76CA764679AC19E4666289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:b5:2e:ce:dd:02:93:61:26:67:0c:df:66: 20:40:68:d0:81:2e:e4:34:ce:a8:ca:84:9f:4a:eb: 45:4d:2c:35:30:db:02:5a:5b:5f:e6:1a:64:29:8d: f0:e5:c7:d4:15:93:43:67:17:7f:11:e3:c8:7c:6b: 75:65:fc:e0:8a:15:3c:88:29:0d:15:97:e6:a8:2a: 36:cb:21:8b:6f:00:39:10:ae:25:41:14:32:f7:78: ad:9b:85:69:c7:c5:4e:7b:7a:67:fa:ff:01:ba:ed: ed:de:d6:77:16:06:52:0f:e8:4c:59:89:95:57:07: 02:4f:9e:85:76:84:a2:62:6b:6e:02:1c:95:ab:6f: 60:9e:96:6d:ca:04:74:81:65:05:8e:33:43:21:9f: f9:0e:ce:69:c6:a3:6a:41:f9:7e:c2:57:ab:fd:b6: af:a1:86:31:37:72:8f:08:c8:8a:89:0d:93:9a:ce: d1:39:a8:6e:08:b6:e3:92:23:f2:28:fa:39:37:1d: 37:6c:e6:85:47:7a:50:8a:d8:e2:21:20:17:be:36: 91:68:66:c6:19:6e:2a:60:6b:6a:e8:71:38:2a:d4: 87:35:a2:76:4b:c5:b2:03:93:9e:37:9f:d4:5a:0f: 4d:2a:61:53:b0:12:41:ba:84:3e:14:6b:1c:7d:3e: e1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FB:62:4E:90:B7:FF:69:5A:76:CA:76:46:79:AC:19:E4:66:62:89 X509v3 Authority Key Identifier: keyid:B5:2F:0F:3F:F7:37:1F:F1:CE:9D:82:3E:95:49:FC:11:58:B1:6A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tS8PP_c3H_HOnYI-lUn8EVixaio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/YPtiTpC3_2ladsp2RnmsGeRmYok.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.42.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:ca:c6:23:f4:e4:55:f7:18:60:97:71:a0:10:27:34:ad:f9: ee:54:20:ed:bd:31:71:7f:7c:4f:6a:7b:ba:53:31:c8:58:f1: 5a:02:e9:30:4a:c9:8c:1a:93:b9:03:a8:52:dc:a6:83:e7:b5: a9:cb:d9:f9:ca:36:b6:ac:df:cf:94:e1:c5:f7:d7:f5:90:54: cb:60:7f:7c:25:3f:7c:92:e5:37:39:14:12:3e:ed:df:7a:97: f7:22:15:0c:ad:d1:1a:3c:de:8b:c1:21:90:ef:e2:27:89:76: f2:f1:d6:bc:2e:6a:5f:4d:39:45:8d:7b:f6:f4:bb:c1:6d:03: b4:50:b0:ab:e1:b6:95:85:ba:42:8d:0d:7c:08:b7:3b:3c:fa: 2b:17:7d:25:4b:5a:ee:44:68:9f:0f:ef:86:61:f3:eb:4e:7a: 9f:52:a0:12:99:22:80:83:d6:4d:37:ff:4e:0f:b6:77:9a:6c: ee:cc:45:36:24:86:2a:bb:51:ee:21:a4:68:00:08:fe:c4:c5: 8c:b7:8f:e9:d6:8f:64:12:15:e9:93:98:e4:a1:38:f1:4e:00: 22:dc:02:f6:4d:89:72:a9:d1:72:20:20:32:01:ab:a7:ff:a7: 5a:47:bf:a5:29:32:88:e7:26:80:7e:53:2b:5e:ae:aa:6e:ed: 42:09:5d:61 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjUy RjBGM0ZGNzM3MUZGMUNFOUQ4MjNFOTU0OUZDMTE1OEIxNkEyQTAeFw0yNDExMDUw NzMyNTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYwRkI2MjRFOTBCN0ZG Njk1QTc2Q0E3NjQ2NzlBQzE5RTQ2NjYyODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBBbUuzt0Ck2EmZwzfZiBAaNCBLuQ0zqjKhJ9K60VNLDUw2wJa W1/mGmQpjfDlx9QVk0NnF38R48h8a3Vl/OCKFTyIKQ0Vl+aoKjbLIYtvADkQriVB FDL3eK2bhWnHxU57emf6/wG67e3e1ncWBlIP6ExZiZVXBwJPnoV2hKJia24CHJWr b2Celm3KBHSBZQWOM0Mhn/kOzmnGo2pB+X7CV6v9tq+hhjE3co8IyIqJDZOaztE5 qG4ItuOSI/Io+jk3HTds5oVHelCK2OIhIBe+NpFoZsYZbipga2rocTgq1Ic1onZL xbIDk543n9RaD00qYVOwEkG6hD4Uaxx9PuGPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUYPtiTpC3/2ladsp2RnmsGeRmYokwHwYDVR0jBBgwFoAUtS8PP/c3H/HOnYI+ lUn8EVixaiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Mi90UzhQUF9jM0hfSE9uWUktbFVuOEVWaXhhaW8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3RTOFBQX2MzSF9IT25ZSS1sVW44RVZpeGFpby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzIvWVB0aVRwQzNfMmxh ZHNwMlJubXNHZVJtWW9rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAZ1CKjANBgkqhkiG9w0BAQsFAAOCAQEADsrGI/TkVfcYYJdxoBAnNK357lQg 7b0xcX98T2p7ulMxyFjxWgLpMErJjBqTuQOoUtymg+e1qcvZ+co2tqzfz5ThxffX 9ZBUy2B/fCU/fJLlNzkUEj7t33qX9yIVDK3RGjzei8EhkO/iJ4l28vHWvC5qX005 RY179vS7wW0DtFCwq+G2lYW6Qo0NfAi3Ozz6Kxd9JUta7kRonw/vhmHz6056n1Kg EpkigIPWTTf/Tg+2d5ps7sxFNiSGKrtR7iGkaAAI/sTFjLeP6daPZBIV6ZOY5KE4 8U4AItwC9k2JcqnRciAgMgGrp/+nWke/pSkyiOcmgH5TK16uqm7tQgldYQ== -----END CERTIFICATE-----Generated at Fri Nov 22 07:02:35 2024 by rpki-client on console-fra.rpki-client.org