$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/YQ8z-1HgtWEFoyRJpJ46GD_J4lM.roa File: YQ8z-1HgtWEFoyRJpJ46GD_J4lM.roa (raw, json) Hash identifier: jRgUAjoE4Y4j5J2Ph4tHI0aHDcIk2EeYRLpJ7hnID9k= Subject key identifier: 61:0F:33:FB:51:E0:B5:61:05:A3:24:49:A4:9E:3A:18:3F:C9:E2:53 Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Certificate serial: 123F Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/YQ8z-1HgtWEFoyRJpJ46GD_J4lM.roa Signing time: Thu 12 Sep 2024 15:06:59 +0000 ROA not before: Thu 12 Sep 2024 15:06:59 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 37963 IP address blocks: 112.124.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 08:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4671 (0x123f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Validity Not Before: Sep 12 15:06:59 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=610F33FB51E0B56105A32449A49E3A183FC9E253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cb:45:dd:20:5d:8f:95:6c:ce:6b:d7:9b:a6: a3:73:9b:06:a7:eb:2d:0a:4f:c2:f4:ea:62:2a:7e: 02:47:91:f9:7d:61:ba:90:f6:2a:80:cd:b9:6f:4e: 9c:bf:27:ab:fc:be:79:e5:cf:f6:ae:0c:b6:9c:9b: ce:f5:79:19:0b:c3:31:19:27:2f:7e:00:da:09:a2: 86:8a:74:99:c0:9f:85:57:ba:84:1c:8d:bd:66:e2: aa:64:35:83:69:0c:4d:84:e5:18:42:3c:98:26:4b: 8b:99:65:06:bb:3e:f2:aa:cd:53:fd:04:de:78:0e: 5b:e7:49:5f:8d:c2:46:c2:d9:26:9a:ab:9d:99:8e: 2c:4a:a8:be:6e:99:93:80:3c:1c:45:f3:65:3d:c4: 1d:6c:ef:42:ea:a3:82:22:db:01:cd:b5:7b:a0:0b: 0a:5d:7c:5a:51:64:83:c5:7f:1d:ea:c0:3b:7e:50: d8:db:30:8c:20:07:f0:7a:09:7d:64:08:ba:c8:ab: a4:13:83:e6:1b:44:fe:7c:bc:b4:ac:d2:e2:2b:b3: 8c:e4:61:59:42:ea:ed:b1:b4:ff:d0:00:23:0c:a6: ca:48:18:02:71:96:35:8b:d8:3f:37:a8:ad:42:c9: 3c:90:7c:81:6d:33:60:4e:99:28:b5:5d:10:07:d0: 8d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0F:33:FB:51:E0:B5:61:05:A3:24:49:A4:9E:3A:18:3F:C9:E2:53 X509v3 Authority Key Identifier: keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/YQ8z-1HgtWEFoyRJpJ46GD_J4lM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.124.0.0/15 Signature Algorithm: sha256WithRSAEncryption 63:3e:e3:4d:7d:1f:5f:3f:64:52:be:97:9b:83:70:b1:ee:6f: 84:94:cc:b6:21:54:c1:9d:6b:c3:25:8c:ce:0c:94:0c:46:6a: 17:c8:d6:d7:5d:d3:ef:51:1f:66:ac:1a:0d:e5:8f:32:d1:ab: ca:56:67:ed:d1:60:c4:03:aa:cb:ba:a2:46:b8:df:fe:84:ec: 00:d0:d2:17:b6:5c:42:5b:8a:9b:7c:c7:8a:84:5e:91:2f:50: 43:c7:7a:28:7f:94:ed:8b:11:1e:55:8e:f7:16:1a:f0:f0:d8: aa:21:72:70:61:16:e7:e3:eb:21:5e:c1:d2:59:3b:c4:af:33: 3a:30:70:df:75:bd:59:b7:73:8a:68:f3:19:02:2e:dc:1c:7f: 2b:74:0d:ae:2d:8d:c2:df:c2:42:2a:12:90:44:9a:6b:3c:c6: a4:de:e1:54:51:fd:14:58:1d:22:51:73:12:3a:9a:c3:71:0a: ab:bb:f2:74:11:b4:62:1d:b8:d6:74:c1:c1:4c:3d:da:ef:c9: 25:9b:df:86:67:92:02:d4:cc:da:67:fd:24:f1:0c:5f:d0:be: ea:2f:1c:22:fc:45:27:b2:b4:e9:31:00:bc:9c:73:07:cc:eb: 4c:e9:4b:82:5a:3f:69:21:b2:2e:87:d5:c9:1c:a8:58:2d:65: 64:23:2f:06 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEj8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNDA5MTIx NTA2NTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDYxMEYzM0ZCNTFFMEI1 NjEwNUEzMjQ0OUE0OUUzQTE4M0ZDOUUyNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDly0XdIF2PlWzOa9ebpqNzmwan6y0KT8L06mIqfgJHkfl9YbqQ 9iqAzblvTpy/J6v8vnnlz/auDLacm871eRkLwzEZJy9+ANoJooaKdJnAn4VXuoQc jb1m4qpkNYNpDE2E5RhCPJgmS4uZZQa7PvKqzVP9BN54DlvnSV+NwkbC2Saaq52Z jixKqL5umZOAPBxF82U9xB1s70Lqo4Ii2wHNtXugCwpdfFpRZIPFfx3qwDt+UNjb MIwgB/B6CX1kCLrIq6QTg+YbRP58vLSs0uIrs4zkYVlC6u2xtP/QACMMpspIGAJx ljWL2D83qK1CyTyQfIFtM2BOmSi1XRAH0I2hAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUYQ8z+1HgtWEFoyRJpJ46GD/J4lMwHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0 OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L1lROHotMUhndFdFRm95 UkpwSjQ2R0RfSjRsTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwFwfDANBgkqhkiG9w0BAQsFAAOCAQEAYz7jTX0fXz9kUr6Xm4Nwse5vhJTMtiFU wZ1rwyWMzgyUDEZqF8jW113T71EfZqwaDeWPMtGrylZn7dFgxAOqy7qiRrjf/oTs ANDSF7ZcQluKm3zHioRekS9QQ8d6KH+U7YsRHlWO9xYa8PDYqiFycGEW5+PrIV7B 0lk7xK8zOjBw33W9WbdzimjzGQIu3Bx/K3QNri2Nwt/CQioSkESaazzGpN7hVFH9 FFgdIlFzEjqaw3EKq7vydBG0Yh241nTBwUw92u/JJZvfhmeSAtTM2mf9JPEMX9C+ 6i8cIvxFJ7K06TEAvJxzB8zrTOlLglo/aSGyLofVyRyoWC1lZCMvBg== -----END CERTIFICATE-----Generated at Tue Nov 26 05:15:30 2024 by rpki-client on console-fra.rpki-client.org