$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/CEWlQB182Cj1CYIKJnoKpWOw0i8.roa File: CEWlQB182Cj1CYIKJnoKpWOw0i8.roa (raw, json) Hash identifier: dgjrXmilf3psodlcmPxIsSyaM6VRXPow4qNaPRDNto8= Subject key identifier: 08:45:A5:40:1D:7C:D8:28:F5:09:82:0A:26:7A:0A:A5:63:B0:D2:2F Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Certificate serial: 1241 Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/CEWlQB182Cj1CYIKJnoKpWOw0i8.roa Signing time: Thu 12 Sep 2024 15:07:00 +0000 ROA not before: Thu 12 Sep 2024 15:07:00 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 37963 IP address blocks: 112.126.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 21:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4673 (0x1241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Validity Not Before: Sep 12 15:07:00 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=0845A5401D7CD828F509820A267A0AA563B0D22F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:19:71:c1:bf:a0:68:de:68:67:2e:14:76:b1: e0:f2:0d:f4:2d:0f:71:00:f2:bb:ce:a0:e3:db:6b: 69:40:6e:33:7c:de:36:0e:a3:49:f2:35:c5:04:b1: 1c:8c:f7:60:28:57:55:04:ef:0f:07:27:37:5b:d2: 3e:88:3a:d2:8e:44:0d:3e:53:65:af:47:02:ab:be: 2d:c4:5f:47:07:c3:47:06:d8:07:b5:a3:a4:bb:cc: c5:ae:57:69:04:be:27:3f:14:0c:c1:bf:b8:2e:cb: 2d:95:22:19:d2:9f:0b:fb:e9:1d:f3:48:12:4a:c4: b4:61:71:b1:fe:50:a5:15:9f:a4:e1:54:8e:41:6d: 6b:c9:bd:1b:0d:ec:ee:c6:ab:09:f7:26:10:18:fa: 90:2d:f4:33:63:a0:0d:53:bb:90:9b:67:91:08:d7: e2:09:63:22:12:52:64:67:f2:b2:60:6f:52:2e:66: f5:ad:dc:96:bc:0f:53:45:f9:24:fb:cb:eb:c3:45: f1:f0:31:90:7b:72:3a:92:10:b8:10:bd:a3:cb:a6: e2:a7:f3:db:99:35:3e:92:34:61:94:f9:67:61:a5: 00:fa:b2:07:bf:3a:04:b3:bb:d4:a2:5a:b1:21:bb: 85:03:84:e8:9a:71:d4:43:d8:3d:66:50:35:3d:4e: 20:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:45:A5:40:1D:7C:D8:28:F5:09:82:0A:26:7A:0A:A5:63:B0:D2:2F X509v3 Authority Key Identifier: keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/CEWlQB182Cj1CYIKJnoKpWOw0i8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.126.0.0/16 Signature Algorithm: sha256WithRSAEncryption 75:d0:64:07:7c:b1:e7:23:74:c5:c2:bb:cc:8f:a1:14:5c:a4: 1b:18:5a:57:e2:a8:e4:27:7d:9f:0d:5e:be:4f:fc:e5:d1:0b: 85:80:17:45:b6:53:73:ff:16:fe:8f:a6:aa:23:79:88:11:73: 6c:33:70:cd:20:2c:5b:fa:e9:7c:c1:85:48:99:17:3e:07:53: f5:48:a4:35:5c:91:fe:f0:77:3b:8c:66:a7:7f:d8:91:a5:3c: c2:fc:89:3e:7f:8c:33:e8:0d:38:f6:c2:ae:9c:f8:9f:32:db: 8d:09:2d:4e:36:37:1d:62:21:93:17:9b:20:52:cd:cb:15:3d: 4d:69:c3:de:e2:62:0a:f1:4c:33:a6:8d:8b:ef:ed:50:ef:14: 20:39:4b:c4:33:01:1c:52:c8:27:77:02:9e:85:a5:88:84:e5: 9c:cd:39:38:c1:39:74:f1:e4:8f:ae:98:a3:85:0a:a0:a7:bf: cd:34:0b:7f:1f:de:e3:b7:5a:64:73:00:7b:df:b1:e3:7a:8f: a2:1e:8c:af:c6:9a:27:53:48:31:bd:3e:93:4b:ad:76:77:05: cc:23:a5:05:31:7c:6b:b0:fb:68:0a:6d:37:59:c4:df:66:89: ac:8e:83:61:4c:ee:fd:f2:0e:cd:06:4d:5a:92:45:e0:83:79: 0a:c2:b4:5c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEkEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNDA5MTIx NTA3MDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDA4NDVBNTQwMUQ3Q0Q4 MjhGNTA5ODIwQTI2N0EwQUE1NjNCMEQyMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGGXHBv6Bo3mhnLhR2seDyDfQtD3EA8rvOoOPba2lAbjN83jYO o0nyNcUEsRyM92AoV1UE7w8HJzdb0j6IOtKORA0+U2WvRwKrvi3EX0cHw0cG2Ae1 o6S7zMWuV2kEvic/FAzBv7guyy2VIhnSnwv76R3zSBJKxLRhcbH+UKUVn6ThVI5B bWvJvRsN7O7Gqwn3JhAY+pAt9DNjoA1Tu5CbZ5EI1+IJYyISUmRn8rJgb1IuZvWt 3Ja8D1NF+ST7y+vDRfHwMZB7cjqSELgQvaPLpuKn89uZNT6SNGGU+WdhpQD6sge/ OgSzu9SiWrEhu4UDhOiacdRD2D1mUDU9TiD9AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUCEWlQB182Cj1CYIKJnoKpWOw0i8wHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0 OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L0NFV2xRQjE4MkNqMUNZ SUtKbm9LcFdPdzBpOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwBwfjANBgkqhkiG9w0BAQsFAAOCAQEAddBkB3yx5yN0xcK7zI+hFFykGxhaV+Ko 5Cd9nw1evk/85dELhYAXRbZTc/8W/o+mqiN5iBFzbDNwzSAsW/rpfMGFSJkXPgdT 9UikNVyR/vB3O4xmp3/YkaU8wvyJPn+MM+gNOPbCrpz4nzLbjQktTjY3HWIhkxeb IFLNyxU9TWnD3uJiCvFMM6aNi+/tUO8UIDlLxDMBHFLIJ3cCnoWliITlnM05OME5 dPHkj66Yo4UKoKe/zTQLfx/e47daZHMAe9+x43qPoh6Mr8aaJ1NIMb0+k0utdncF zCOlBTF8a7D7aAptN1nE32aJrI6DYUzu/fIOzQZNWpJF4IN5CsK0XA== -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:26 2024 by rpki-client on console-fra.rpki-client.org