$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/t7VjP2L5iWQauYtqk-ogt2nDRLs.roa File: t7VjP2L5iWQauYtqk-ogt2nDRLs.roa (raw, json) Hash identifier: dc/uXsgc0vptRH55uQb419n+2fbO1OAf2Is5+qBgPcs= Subject key identifier: B7:B5:63:3F:62:F9:89:64:1A:B9:8B:6A:93:EA:20:B7:69:C3:44:BB Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Certificate serial: 0113 Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/t7VjP2L5iWQauYtqk-ogt2nDRLs.roa Signing time: Thu 11 Jul 2024 11:47:59 +0000 ROA not before: Thu 11 Jul 2024 11:47:59 +0000 ROA not after: Wed 21 May 2025 03:30:10 +0000 asID: 4766 IP address blocks: 113.31.40.0/21 maxlen: 24 113.31.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Sep 2024 01:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Validity Not Before: Jul 11 11:47:59 2024 GMT Not After : May 21 03:30:10 2025 GMT Subject: CN=B7B5633F62F989641AB98B6A93EA20B769C344BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:24:91:2e:3e:eb:4f:99:30:65:59:14:bc: 0a:65:9c:42:b6:97:a4:c0:d7:be:4a:79:c3:4d:e4: ba:d2:a6:99:0c:0d:0a:6d:b7:57:44:8d:98:51:eb: 9f:b7:2f:74:ad:74:60:12:91:42:07:71:13:bb:87: 79:6d:41:2f:53:a3:de:15:19:ae:77:37:7a:f6:46: 6d:14:71:ae:7a:19:05:1a:67:0a:9a:65:6d:1b:17: 64:51:d8:b2:fa:54:29:6f:f3:60:1c:cd:d4:a0:a1: 37:6f:b8:30:a2:9e:da:0c:ba:d0:fa:48:71:ce:78: d4:d2:20:9d:c2:5e:eb:fe:e0:86:20:f6:9c:de:a6: 10:05:2f:9d:60:6a:b6:3c:8e:a6:e7:79:ed:4a:f5: 10:44:79:4e:0e:fb:74:e6:d5:33:9a:78:6d:69:93: 90:dc:d6:34:34:2a:18:68:fa:3b:97:ae:10:3a:d7: 0c:7c:c7:d0:e3:e7:91:c6:bf:a2:35:8c:f7:b0:58: a3:b9:e9:52:43:70:8d:8f:3c:dc:31:5c:9c:7b:4f: 49:48:db:cf:51:ba:f0:7f:41:f8:62:5a:8d:4b:f7: 14:41:a8:96:b7:78:1c:0c:23:a2:67:1c:63:33:a9: 3f:47:cd:6a:0d:32:c8:24:95:46:cf:eb:c9:54:e2: 9a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B5:63:3F:62:F9:89:64:1A:B9:8B:6A:93:EA:20:B7:69:C3:44:BB X509v3 Authority Key Identifier: keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/t7VjP2L5iWQauYtqk-ogt2nDRLs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.31.40.0-113.31.55.255 Signature Algorithm: sha256WithRSAEncryption 64:e0:e1:19:84:a3:c7:cf:6a:e9:cf:ce:c8:b2:01:59:62:07: de:22:d6:10:24:81:2b:49:47:2f:61:5c:e0:99:2b:e6:4c:5b: dc:6f:c2:87:5f:cb:bd:78:e3:37:78:0c:eb:89:7c:59:81:35: d9:71:2e:ab:55:24:09:e5:0b:b2:09:ea:f7:07:51:10:91:67: c4:fc:b5:00:c8:88:8a:1d:4c:0a:a1:26:c9:24:29:0f:a4:32: 78:d8:a3:51:04:9d:d8:8f:1e:74:8f:2e:82:c0:ca:8c:1a:32: 58:45:fe:3d:77:98:57:1b:b4:9e:b9:bf:8d:e3:73:3f:07:0a: c9:43:3b:46:21:65:5b:cc:c3:9e:e2:b3:30:31:5d:15:7d:e2: cf:0e:1b:9c:da:78:86:19:bd:c4:bd:4c:39:db:24:ec:ae:1a: 6f:31:9e:36:1e:20:64:c1:39:f3:de:e5:9b:1e:d7:ab:0b:aa: f5:2b:cc:d0:a3:bd:5e:81:46:91:ae:95:80:56:03:4f:41:37: 88:8f:17:ef:d5:a6:42:00:d2:9f:57:6c:78:89:15:50:6b:37: 33:84:52:40:71:c8:0c:38:77:29:d0:3c:39:c4:bf:9e:c9:b6: 18:b2:2d:c9:78:94:63:4f:bf:87:ce:c2:57:a7:4e:60:14:a6: 5f:53:45:e7 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICARMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3 MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNDA3MTEx MTQ3NTlaFw0yNTA1MjEwMzMwMTBaMDMxMTAvBgNVBAMTKEI3QjU2MzNGNjJGOTg5 NjQxQUI5OEI2QTkzRUEyMEI3NjlDMzQ0QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI1iSRLj7rT5kwZVkUvAplnEK2l6TA175KecNN5LrSppkMDQpt t1dEjZhR65+3L3StdGASkUIHcRO7h3ltQS9To94VGa53N3r2Rm0Uca56GQUaZwqa ZW0bF2RR2LL6VClv82AczdSgoTdvuDCintoMutD6SHHOeNTSIJ3CXuv+4IYg9pze phAFL51garY8jqbnee1K9RBEeU4O+3Tm1TOaeG1pk5Dc1jQ0Khho+juXrhA61wx8 x9Dj55HGv6I1jPewWKO56VJDcI2PPNwxXJx7T0lI289RuvB/QfhiWo1L9xRBqJa3 eBwMI6JnHGMzqT9HzWoNMsgklUbP68lU4pq1AgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUt7VjP2L5iWQauYtqk+ogt2nDRLswHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3Q3VmpQMkw1aVdRYXVZ dHFrLW9ndDJuRFJMcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4w DAMEA3EfKAMEA3EfMDANBgkqhkiG9w0BAQsFAAOCAQEAZODhGYSjx89q6c/OyLIB WWIH3iLWECSBK0lHL2Fc4Jkr5kxb3G/Ch1/LvXjjN3gM64l8WYE12XEuq1UkCeUL sgnq9wdREJFnxPy1AMiIih1MCqEmySQpD6QyeNijUQSd2I8edI8ugsDKjBoyWEX+ PXeYVxu0nrm/jeNzPwcKyUM7RiFlW8zDnuKzMDFdFX3izw4bnNp4hhm9xL1MOdsk 7K4abzGeNh4gZME5897lmx7Xqwuq9SvM0KO9XoFGka6VgFYDT0E3iI8X79WmQgDS n1dseIkVUGs3M4RSQHHIDDh3KdA8OcS/nsm2GLItyXiUY0+/h87CV6dOYBSmX1NF 5w== -----END CERTIFICATE-----Generated at Wed Sep 18 21:14:25 2024 by rpki-client on console-ams.rpki-client.org