$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/VSwi3vfJM-Pf7MaSDKqM61BcL3o.roa File: VSwi3vfJM-Pf7MaSDKqM61BcL3o.roa (raw, json) Hash identifier: 4SWRljfCKit3mt87yPAXZYrBVM0AdUfKne1fiB5/lWA= Subject key identifier: 55:2C:22:DE:F7:C9:33:E3:DF:EC:C6:92:0C:AA:8C:EB:50:5C:2F:7A Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 0C55 Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/VSwi3vfJM-Pf7MaSDKqM61BcL3o.roa Signing time: Wed 28 Aug 2024 08:53:58 +0000 ROA not before: Wed 28 Aug 2024 08:53:58 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 34549 IP address blocks: 123.98.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3157 (0xc55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Aug 28 08:53:58 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=552C22DEF7C933E3DFECC6920CAA8CEB505C2F7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:3e:d1:b9:73:99:71:3d:7d:c5:cf:16:9c: 8d:cc:0b:7c:c3:ad:0d:49:bc:75:3b:1d:3b:78:1a: b4:10:07:5e:a9:34:f5:53:1a:c8:bc:27:b2:70:2f: 8e:1d:18:0f:a2:e9:d4:05:d0:ef:5f:fd:03:de:aa: e6:6a:0f:49:60:4f:ac:2f:c5:c0:3c:13:39:82:ef: fa:22:ff:fb:4e:fd:c1:ea:48:57:13:9a:66:81:0d: ce:8c:48:d3:ee:b9:cc:47:5d:41:ef:41:2b:80:4d: 78:3a:63:62:3d:07:6f:50:72:2c:59:60:9d:3a:eb: 5d:07:eb:a6:25:a4:1c:af:3e:a6:32:6a:d2:2d:95: b6:20:8b:54:f5:26:a1:12:fd:f1:1f:fa:45:c7:4d: c0:86:0f:d5:7a:be:2b:8a:41:32:65:32:09:ef:bc: f8:a7:7d:3e:a4:1a:67:19:cc:12:b4:dd:41:1f:5c: 43:57:78:59:7c:49:df:f2:86:8d:b5:81:8e:1d:97: 75:b5:96:a3:bc:24:43:b5:b9:18:9d:1d:bd:33:87: 8f:cc:fe:61:ff:fd:e6:86:55:4e:ff:4d:18:f2:35: 60:b0:d2:03:43:c9:43:00:83:9f:fc:53:7d:cc:40: 74:3d:fd:27:78:d5:af:53:b5:9c:de:4b:86:20:52: b1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2C:22:DE:F7:C9:33:E3:DF:EC:C6:92:0C:AA:8C:EB:50:5C:2F:7A X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/VSwi3vfJM-Pf7MaSDKqM61BcL3o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.98.72.0/22 Signature Algorithm: sha256WithRSAEncryption a3:f4:a5:ba:9e:52:55:48:34:20:aa:6b:36:da:37:b6:cb:7d: 7e:1a:a6:d9:fc:aa:24:45:37:b9:1a:7b:ee:c7:5e:8c:a4:54: 89:7c:f6:3f:f5:4a:00:30:af:23:e2:83:51:3b:74:2a:63:b0: c5:78:0f:40:5e:3b:c3:02:f2:a4:24:de:31:e7:37:06:5b:81: ab:86:a3:3a:79:40:f0:e9:6e:97:59:41:8e:67:94:9e:3f:b8: 59:18:51:16:87:8f:fb:a4:da:c7:4c:88:b7:dd:68:8b:92:71: cb:e5:6a:7f:9a:67:34:9e:e2:67:09:84:78:91:3f:7c:7b:83: 6b:7c:5f:78:ad:09:4e:a8:24:be:28:34:3c:33:fd:0f:8c:b4: ed:65:ae:36:08:e7:7d:24:3c:33:b2:20:76:fb:28:1b:54:6e: 0e:f1:b4:0d:8f:14:52:70:be:fc:e1:0a:63:88:18:60:da:91: fc:c2:39:be:b2:85:1a:bd:04:05:48:88:67:80:c4:48:44:dc: b1:ca:c3:45:5f:12:95:d9:fa:ed:4c:0c:4a:87:82:72:26:45: 62:34:e6:c6:8d:b2:73:34:66:a6:02:cc:cf:e9:5b:0b:19:d5: 1b:a3:53:75:01:bf:61:85:65:e9:26:1c:19:0d:7d:33:6d:e0: fe:05:72:85 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICDFUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNDA4Mjgw ODUzNThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDU1MkMyMkRFRjdDOTMz RTNERkVDQzY5MjBDQUE4Q0VCNTA1QzJGN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVrT7RuXOZcT19xc8WnI3MC3zDrQ1JvHU7HTt4GrQQB16pNPVT Gsi8J7JwL44dGA+i6dQF0O9f/QPequZqD0lgT6wvxcA8EzmC7/oi//tO/cHqSFcT mmaBDc6MSNPuucxHXUHvQSuATXg6Y2I9B29QcixZYJ06610H66YlpByvPqYyatIt lbYgi1T1JqES/fEf+kXHTcCGD9V6viuKQTJlMgnvvPinfT6kGmcZzBK03UEfXENX eFl8Sd/yho21gY4dl3W1lqO8JEO1uRidHb0zh4/M/mH//eaGVU7/TRjyNWCw0gND yUMAg5/8U33MQHQ9/Sd41a9TtZzeS4YgUrEtAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUVSwi3vfJM+Pf7MaSDKqM61BcL3owHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL1ZTd2kzdmZKTS1QZjdN YVNES3FNNjFCY0wzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJ7YkgwDQYJKoZIhvcNAQELBQADggEBAKP0pbqeUlVINCCqazbaN7bLfX4aptn8 qiRFN7kae+7HXoykVIl89j/1SgAwryPig1E7dCpjsMV4D0BeO8MC8qQk3jHnNwZb gauGozp5QPDpbpdZQY5nlJ4/uFkYURaHj/uk2sdMiLfdaIuSccvlan+aZzSe4mcJ hHiRP3x7g2t8X3itCU6oJL4oNDwz/Q+MtO1lrjYI530kPDOyIHb7KBtUbg7xtA2P FFJwvvzhCmOIGGDakfzCOb6yhRq9BAVIiGeAxEhE3LHKw0VfEpXZ+u1MDEqHgnIm RWI05saNsnM0ZqYCzM/pWwsZ1RujU3UBv2GFZekmHBkNfTNt4P4FcoU= -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:24 2024 by rpki-client on console-ams.rpki-client.org