$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/nvj_INJ54hJgH4E-An-J0VnBIMg.roa File: nvj_INJ54hJgH4E-An-J0VnBIMg.roa (raw, json) Hash identifier: ULVidiUskbXmIiAiQBX87usjTV4nQs4/nVsaKM8ga3o= Subject key identifier: 9E:F8:FF:20:D2:79:E2:12:60:1F:81:3E:02:7F:89:D1:59:C1:20:C8 Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Certificate serial: 127A Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/nvj_INJ54hJgH4E-An-J0VnBIMg.roa Signing time: Tue 24 Sep 2024 00:19:16 +0000 ROA not before: Tue 24 Sep 2024 00:19:16 +0000 ROA not after: Sat 20 Sep 2025 07:41:26 +0000 asID: 37963 IP address blocks: 112.124.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 21:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4730 (0x127a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Validity Not Before: Sep 24 00:19:16 2024 GMT Not After : Sep 20 07:41:26 2025 GMT Subject: CN=9EF8FF20D279E212601F813E027F89D159C120C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:c6:6a:c9:0d:d5:1b:1e:bf:af:51:11:d2: a5:29:90:1e:da:45:69:a7:41:4b:9f:48:1f:82:9b: 60:a2:7a:43:18:d5:7e:f1:08:fa:8a:c7:8f:8e:d6: fa:26:6c:9f:2f:40:df:15:46:11:c6:04:43:bb:f3: f1:44:28:46:e7:38:8c:ab:17:b9:7c:e4:a7:43:bc: dc:83:2b:de:86:cd:dc:80:79:23:0e:90:3b:04:d1: c9:73:4e:44:37:c1:07:4f:c3:d5:5e:07:e4:94:09: 44:ff:73:33:eb:93:80:1f:e7:d3:05:9e:1c:88:b7: 26:5d:dd:25:de:98:d4:a0:ec:10:8c:f3:de:9c:bd: ec:b3:85:ff:9a:a0:fb:67:59:fe:89:ae:f0:c5:25: 30:75:22:46:37:99:8f:09:6a:b5:8a:2b:d3:cd:c4: a9:46:65:b2:dc:dd:6b:ae:83:95:d5:64:0d:fa:22: 08:56:68:26:5e:70:21:e2:49:76:8f:d4:e6:bf:17: 0f:72:1e:f1:c4:7e:11:bd:17:58:19:1b:1f:a1:4c: cd:c1:0f:53:4e:07:37:9c:59:51:1d:93:26:88:04: d6:a7:b4:43:bc:8d:ea:5c:fd:d8:21:5f:f1:a0:ba: 0d:f1:3f:64:b7:6c:34:68:a7:12:2a:31:77:10:01: a4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F8:FF:20:D2:79:E2:12:60:1F:81:3E:02:7F:89:D1:59:C1:20:C8 X509v3 Authority Key Identifier: keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/nvj_INJ54hJgH4E-An-J0VnBIMg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.124.0.0/14 Signature Algorithm: sha256WithRSAEncryption 7d:f7:05:b6:2d:42:43:fb:2c:89:aa:0c:34:d2:2f:02:f5:79: ca:cf:a6:16:a2:e0:8f:11:81:9a:5d:ac:26:4d:0e:54:77:f4: 17:b2:82:a0:72:1e:84:fd:d2:35:7e:73:de:29:a6:c4:98:bf: 97:1b:b9:c3:f1:40:63:a4:da:ba:a6:ce:fe:52:b4:71:7e:9a: 5b:a9:6c:02:77:8d:5d:1d:f1:8e:4a:ba:bb:0e:a0:af:d0:56: 29:8a:e2:91:bf:63:e0:e9:c6:29:73:97:4a:b5:11:69:e7:72: 6c:1c:a3:62:29:c1:2c:f6:76:8f:44:44:7d:c8:7e:57:d9:2d: 3f:05:3c:0b:ad:12:2e:ec:c7:51:46:d9:f8:3c:cc:77:bb:fb: 71:e3:2d:6b:f5:17:e7:24:d3:0e:26:83:de:9b:cf:a5:97:7b: 98:59:c5:d3:7f:c0:e9:d5:50:27:6e:a9:77:6a:8f:a9:3f:56: 7e:e7:72:ab:29:8a:29:6c:a9:c3:35:0b:5e:1a:51:33:a4:66: 5e:4a:e0:ef:06:04:7f:26:27:f6:60:e7:87:41:fa:23:4d:88: ba:cd:07:6e:c3:7d:84:05:24:e0:11:41:fd:ec:c5:4a:5f:e3: ed:6b:77:07:a3:5c:72:76:9e:5f:0d:84:87:59:8f:95:38:63: fd:d3:d0:07 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEnowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNDA5MjQw MDE5MTZaFw0yNTA5MjAwNzQxMjZaMDMxMTAvBgNVBAMTKDlFRjhGRjIwRDI3OUUy MTI2MDFGODEzRTAyN0Y4OUQxNTlDMTIwQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzxcZqyQ3VGx6/r1ER0qUpkB7aRWmnQUufSB+Cm2CiekMY1X7x CPqKx4+O1vombJ8vQN8VRhHGBEO78/FEKEbnOIyrF7l85KdDvNyDK96GzdyAeSMO kDsE0clzTkQ3wQdPw9VeB+SUCUT/czPrk4Af59MFnhyItyZd3SXemNSg7BCM896c veyzhf+aoPtnWf6JrvDFJTB1IkY3mY8JarWKK9PNxKlGZbLc3Wuug5XVZA36IghW aCZecCHiSXaP1Oa/Fw9yHvHEfhG9F1gZGx+hTM3BD1NOBzecWVEdkyaIBNantEO8 jepc/dghX/Ggug3xP2S3bDRopxIqMXcQAaSPAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUnvj/INJ54hJgH4E+An+J0VnBIMgwHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0 OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L252al9JTko1NGhKZ0g0 RS1Bbi1KMFZuQklNZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwJwfDANBgkqhkiG9w0BAQsFAAOCAQEAffcFti1CQ/ssiaoMNNIvAvV5ys+mFqLg jxGBml2sJk0OVHf0F7KCoHIehP3SNX5z3immxJi/lxu5w/FAY6TauqbO/lK0cX6a W6lsAneNXR3xjkq6uw6gr9BWKYrikb9j4OnGKXOXSrURaedybByjYinBLPZ2j0RE fch+V9ktPwU8C60SLuzHUUbZ+DzMd7v7ceMta/UX5yTTDiaD3pvPpZd7mFnF03/A 6dVQJ26pd2qPqT9WfudyqymKKWypwzULXhpRM6RmXkrg7wYEfyYn9mDnh0H6I02I us0HbsN9hAUk4BFB/ezFSl/j7Wt3B6NccnaeXw2Eh1mPlThj/dPQBw== -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:26 2024 by rpki-client on console-fra.rpki-client.org