$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/I25fyOpbL_ONWZumFz7AA8wt4gQ.roa File: I25fyOpbL_ONWZumFz7AA8wt4gQ.roa (raw, json) Hash identifier: bufFh1uI/4xrO3+Z0kwYNSODHEXpj3iPA4+tiulUsfY= Subject key identifier: 23:6E:5F:C8:EA:5B:2F:F3:8D:59:9B:A6:17:3E:C0:03:CC:2D:E2:04 Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Certificate serial: 0112 Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/I25fyOpbL_ONWZumFz7AA8wt4gQ.roa Signing time: Thu 11 Jul 2024 11:47:59 +0000 ROA not before: Thu 11 Jul 2024 11:47:59 +0000 ROA not after: Wed 21 May 2025 03:30:10 +0000 asID: 9286 IP address blocks: 113.31.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Sep 2024 01:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Validity Not Before: Jul 11 11:47:59 2024 GMT Not After : May 21 03:30:10 2025 GMT Subject: CN=236E5FC8EA5B2FF38D599BA6173EC003CC2DE204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:52:1f:31:b1:59:86:91:f3:74:c1:37:c2: b9:11:bd:7f:fb:3a:28:ad:5b:c7:87:47:06:54:12: 88:18:7d:c8:7e:d6:5a:b0:60:95:81:f5:4d:04:fb: a5:ee:7f:60:2b:8c:0b:ae:91:a9:72:dc:ed:f0:3d: ee:81:42:87:fd:7e:2d:2b:7a:12:31:6f:e5:9a:aa: a5:ee:68:e4:68:3d:b3:14:74:7f:ee:a6:1c:11:2d: ac:f9:e5:ed:e2:7d:31:2a:10:a9:28:89:55:07:68: 6b:ff:a8:52:87:94:4a:ee:e9:e2:5c:7a:eb:26:db: 8e:41:31:db:0c:f9:9c:22:71:c5:8c:d7:e6:f1:f4: f0:52:5a:04:fb:5a:30:ec:12:bc:ac:03:4d:8b:b0: f8:77:d1:e3:c7:35:34:72:e4:8c:91:6c:6c:73:ea: 7b:f7:06:57:7b:cb:35:70:d3:7b:db:51:4a:a3:0d: e1:aa:4e:b8:44:e7:12:5e:fd:a4:da:03:00:bb:df: 1a:45:b5:35:a5:5b:59:1f:88:f4:56:df:6f:75:61: 88:b5:9e:dc:b4:ef:af:65:4d:e3:89:08:6f:34:cb: a9:84:0a:ec:84:76:85:c8:25:fe:8a:b3:53:4e:c7: c3:20:13:8e:af:bf:2b:c9:bc:7b:1d:ec:45:ed:4a: 5b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6E:5F:C8:EA:5B:2F:F3:8D:59:9B:A6:17:3E:C0:03:CC:2D:E2:04 X509v3 Authority Key Identifier: keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/I25fyOpbL_ONWZumFz7AA8wt4gQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.31.56.0/21 Signature Algorithm: sha256WithRSAEncryption 17:f1:ea:a5:3d:b0:a3:64:3b:ff:f1:2b:a1:b6:66:e0:e3:3d: 76:c7:e3:54:d6:27:e7:ab:25:69:a5:6f:f4:10:26:4d:01:20: e6:df:e7:d6:a6:84:2f:cc:a4:87:f0:e5:8c:80:05:96:bc:7a: c4:a7:c4:10:8c:38:16:ba:b4:8e:50:74:ba:b7:8d:82:30:1b: 2c:83:62:2e:e5:bc:24:e2:86:0f:55:d6:0a:ea:7d:f2:75:a3: 7d:07:b4:d8:84:bc:21:81:f8:3a:4d:d4:8f:9b:2f:64:fd:8d: 08:5f:c6:3a:c0:bf:d6:cd:b0:79:f2:02:8d:7f:da:ea:b1:de: 89:bd:84:f4:b6:2c:53:96:2c:0c:d7:4a:e6:39:91:04:cd:02: bb:44:3f:ec:8c:5c:f1:e2:df:b8:b1:8d:1a:2f:11:a9:19:f0: 91:8f:a4:30:98:66:41:ee:60:12:44:56:bb:e6:38:37:3c:15: 85:71:6d:81:b8:2a:d5:fa:66:fa:5b:b6:30:15:57:94:a3:82: e8:4f:31:3a:bc:23:80:f6:71:41:42:83:73:08:72:ca:79:a8: 33:44:d1:a9:6e:5c:b8:11:37:90:14:f4:17:6b:84:85:d9:d9: aa:60:09:4a:ba:87:b4:2f:5b:a4:45:68:77:44:0d:dd:92:ad: f2:e6:8c:44 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICARIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3 MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNDA3MTEx MTQ3NTlaFw0yNTA1MjEwMzMwMTBaMDMxMTAvBgNVBAMTKDIzNkU1RkM4RUE1QjJG RjM4RDU5OUJBNjE3M0VDMDAzQ0MyREUyMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHGlIfMbFZhpHzdME3wrkRvX/7OiitW8eHRwZUEogYfch+1lqw YJWB9U0E+6Xuf2ArjAuukaly3O3wPe6BQof9fi0rehIxb+WaqqXuaORoPbMUdH/u phwRLaz55e3ifTEqEKkoiVUHaGv/qFKHlEru6eJceusm245BMdsM+ZwiccWM1+bx 9PBSWgT7WjDsErysA02LsPh30ePHNTRy5IyRbGxz6nv3Bld7yzVw03vbUUqjDeGq TrhE5xJe/aTaAwC73xpFtTWlW1kfiPRW3291YYi1nty0769lTeOJCG80y6mECuyE doXIJf6Ks1NOx8MgE46vvyvJvHsd7EXtSluhAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUI25fyOpbL/ONWZumFz7AA8wt4gQwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0kyNWZ5T3BiTF9PTlda dW1GejdBQTh3dDRnUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BANxHzgwDQYJKoZIhvcNAQELBQADggEBABfx6qU9sKNkO//xK6G2ZuDjPXbH41TW J+erJWmlb/QQJk0BIObf59amhC/MpIfw5YyABZa8esSnxBCMOBa6tI5QdLq3jYIw GyyDYi7lvCTihg9V1grqffJ1o30HtNiEvCGB+DpN1I+bL2T9jQhfxjrAv9bNsHny Ao1/2uqx3om9hPS2LFOWLAzXSuY5kQTNArtEP+yMXPHi37ixjRovEakZ8JGPpDCY ZkHuYBJEVrvmODc8FYVxbYG4KtX6ZvpbtjAVV5SjguhPMTq8I4D2cUFCg3MIcsp5 qDNE0aluXLgRN5AU9BdrhIXZ2apgCUq6h7QvW6RFaHdEDd2SrfLmjEQ= -----END CERTIFICATE-----Generated at Wed Sep 18 23:35:20 2024 by rpki-client on console-fra.rpki-client.org