$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/N9betOYlP4dNSg1zfLZLz93Cf3k.roa File: N9betOYlP4dNSg1zfLZLz93Cf3k.roa (raw, json) Hash identifier: Rd6KBqpzSRX6UnLF4hTCvmBudUM77ktYpRmBV4KnlB0= Subject key identifier: 37:D6:DE:B4:E6:25:3F:87:4D:4A:0D:73:7C:B6:4B:CF:DD:C2:7F:79 Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Certificate serial: 0D58 Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/N9betOYlP4dNSg1zfLZLz93Cf3k.roa Signing time: Tue 02 Jan 2024 06:19:07 +0000 ROA not before: Tue 02 Jan 2024 06:19:07 +0000 ROA not after: Tue 08 Oct 2024 00:16:33 +0000 asID: 37963 IP address blocks: 112.124.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 17:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3416 (0xd58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Validity Not Before: Jan 2 06:19:07 2024 GMT Not After : Oct 8 00:16:33 2024 GMT Subject: CN=37D6DEB4E6253F874D4A0D737CB64BCFDDC27F79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:df:76:a4:ef:d5:a6:e4:42:5e:40:a1:84: c0:a9:79:f3:06:d1:c3:96:92:d5:82:68:24:72:82: 12:7e:0f:eb:4f:b7:ff:01:2a:a6:f0:e7:bc:78:22: 7f:e4:40:6c:e0:08:d7:f4:5a:7e:b4:38:d9:d5:46: 85:e7:ea:c1:80:18:93:13:81:7b:d6:45:fc:a1:ed: ae:9b:bf:31:57:a1:88:3e:84:af:fe:d8:6a:d9:22: 0e:91:a1:6e:7c:bf:5b:b5:64:73:28:76:16:e6:85: a2:8e:52:7d:b4:62:1a:69:7b:9c:0b:67:e0:4c:82: d7:45:93:b9:1b:fd:04:8d:b4:86:db:99:a3:0b:e1: ba:bf:2b:87:77:db:52:3a:6c:48:a3:d8:03:53:89: 0d:63:43:67:7d:9c:b7:d3:67:92:70:44:25:18:e3: 6a:b4:6e:6b:3b:15:60:14:0d:49:83:96:ae:6b:08: 94:6f:28:98:05:e0:75:f7:f6:cf:5b:e9:6d:fe:a2: 75:bd:e6:cb:83:38:fd:99:1a:92:b6:f4:2c:4a:29: 81:ed:89:f9:03:17:4b:b0:37:2a:49:f8:b4:4e:0c: b7:80:7f:7d:61:77:fa:19:2d:11:0d:a6:37:fc:1d: 61:18:57:65:a4:31:ee:4f:86:c9:c5:44:17:64:8c: 43:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D6:DE:B4:E6:25:3F:87:4D:4A:0D:73:7C:B6:4B:CF:DD:C2:7F:79 X509v3 Authority Key Identifier: keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/N9betOYlP4dNSg1zfLZLz93Cf3k.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.124.0.0/14 Signature Algorithm: sha256WithRSAEncryption 26:a4:58:12:82:48:13:c2:6b:78:06:9b:fa:99:1e:81:69:65: d3:56:de:87:27:2b:7c:39:3e:60:1c:c1:f8:9e:4e:46:02:82: 27:87:0e:62:36:dc:a3:71:c6:8b:ba:a4:ad:31:3a:bd:0a:a2: 6b:5c:69:bc:b1:24:32:58:ba:80:a0:50:32:a2:a2:c9:cd:bb: fa:a4:84:03:d5:c4:c4:58:0c:fe:fd:d4:6c:7a:aa:d6:e9:e8: c5:4b:b8:a4:6c:2a:be:ee:ee:e2:7b:f0:d6:b9:49:e4:8c:41: 2c:c1:ce:ef:dd:0c:f4:61:82:ea:f8:5d:5c:d5:08:61:ca:cb: 66:0b:5a:6d:be:e3:ef:ac:c7:e2:d5:64:b4:f3:7e:c8:13:f1: 28:74:62:a4:29:59:ce:14:f5:5a:9a:30:f3:20:5e:cd:38:f1: 86:2a:9b:76:13:41:d0:92:b8:93:43:81:db:c5:3b:78:a7:e9: 9f:99:85:42:c5:2a:25:c6:33:bc:71:d9:f9:d5:2b:6d:7b:19: 19:5b:61:5d:6b:4b:4a:ed:cf:5c:5c:cb:d5:03:7f:23:9c:ad: 56:7b:47:ef:49:b9:64:e9:12:aa:4a:69:f6:45:dc:6e:8e:04: cb:48:30:75:7f:e6:ee:d0:08:b4:ba:30:e4:18:b1:4f:1a:25: ec:24:e5:91 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNDAxMDIw NjE5MDdaFw0yNDEwMDgwMDE2MzNaMDMxMTAvBgNVBAMTKDM3RDZERUI0RTYyNTNG ODc0RDRBMEQ3MzdDQjY0QkNGRERDMjdGNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR+t92pO/VpuRCXkChhMCpefMG0cOWktWCaCRyghJ+D+tPt/8B Kqbw57x4In/kQGzgCNf0Wn60ONnVRoXn6sGAGJMTgXvWRfyh7a6bvzFXoYg+hK/+ 2GrZIg6RoW58v1u1ZHModhbmhaKOUn20Yhppe5wLZ+BMgtdFk7kb/QSNtIbbmaML 4bq/K4d321I6bEij2ANTiQ1jQ2d9nLfTZ5JwRCUY42q0bms7FWAUDUmDlq5rCJRv KJgF4HX39s9b6W3+onW95suDOP2ZGpK29CxKKYHtifkDF0uwNypJ+LRODLeAf31h d/oZLRENpjf8HWEYV2WkMe5PhsnFRBdkjENfAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUN9betOYlP4dNSg1zfLZLz93Cf3kwHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0 OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L045YmV0T1lsUDRkTlNn MXpmTFpMejkzQ2Yzay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwJwfDANBgkqhkiG9w0BAQsFAAOCAQEAJqRYEoJIE8JreAab+pkegWll01behycr fDk+YBzB+J5ORgKCJ4cOYjbco3HGi7qkrTE6vQqia1xpvLEkMli6gKBQMqKiyc27 +qSEA9XExFgM/v3UbHqq1unoxUu4pGwqvu7u4nvw1rlJ5IxBLMHO790M9GGC6vhd XNUIYcrLZgtabb7j76zH4tVktPN+yBPxKHRipClZzhT1Wpow8yBezTjxhiqbdhNB 0JK4k0OB28U7eKfpn5mFQsUqJcYzvHHZ+dUrbXsZGVthXWtLSu3PXFzL1QN/I5yt VntH70m5ZOkSqkpp9kXcbo4Ey0gwdX/m7tAItLow5BixTxol7CTlkQ== -----END CERTIFICATE-----Generated at Wed Jun 26 13:22:00 2024 by rpki-client on console-fra.rpki-client.org