$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/ZExyqvbskyrBkbK5gVpCAp-UDPI.roa File: ZExyqvbskyrBkbK5gVpCAp-UDPI.roa (raw, json) Hash identifier: V3VlFf0A5mvx2NZngMjevlra6sc0YkOpu732/qN6onA= Subject key identifier: 64:4C:72:AA:F6:EC:93:2A:C1:91:B2:B9:81:5A:42:02:9F:94:0C:F2 Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 0D9F Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ZExyqvbskyrBkbK5gVpCAp-UDPI.roa Signing time: Thu 10 Oct 2024 04:31:10 +0000 ROA not before: Thu 10 Oct 2024 04:31:10 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 62387 IP address blocks: 101.232.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3487 (0xd9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Oct 10 04:31:10 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=644C72AAF6EC932AC191B2B9815A42029F940CF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:be:fe:3c:2d:18:6b:77:e1:e5:ac:ed:c5: 81:7e:18:c3:50:a2:00:10:44:64:2a:58:81:60:ac: 13:9b:de:2a:b5:db:8b:22:b6:62:14:1e:c5:b3:f8: 2c:d6:b2:83:13:bd:f9:26:d8:51:6f:5b:71:e3:98: d1:b9:05:2e:e6:0e:f0:0d:af:b7:07:18:0d:75:c6: 23:82:02:67:27:8c:d3:dc:7b:cb:46:45:81:89:37: ce:c3:b3:d9:dd:9a:78:27:79:4d:fc:49:0d:bf:85: b9:f3:a4:aa:5b:17:0c:11:a9:65:95:4b:1f:16:e7: 5e:55:b9:90:8d:28:0b:a7:8d:45:9b:a6:27:ce:1d: a2:36:f3:ba:73:c2:84:d8:95:5e:26:7f:c2:6d:e3: b7:d8:6e:ae:19:b2:c9:30:00:bb:5b:59:29:24:a5: 14:c0:82:02:2b:8f:0d:7f:a4:f8:10:86:52:88:51: df:54:b3:2d:c9:b3:93:3c:90:44:22:2e:97:0e:a0: 49:42:1a:8a:f9:5f:91:d7:2f:60:e7:41:66:31:48: 96:8f:34:02:30:0f:d3:96:de:6c:2c:2c:ce:ea:b6: f9:72:3e:4f:17:eb:73:e7:74:16:c1:0d:84:b5:3f: f7:82:c1:22:bd:28:39:2e:2f:d6:76:22:f0:95:35: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4C:72:AA:F6:EC:93:2A:C1:91:B2:B9:81:5A:42:02:9F:94:0C:F2 X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ZExyqvbskyrBkbK5gVpCAp-UDPI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.232.0.0/19 Signature Algorithm: sha256WithRSAEncryption 26:a4:e3:9e:04:33:90:05:c0:6b:40:7f:08:bc:8d:17:fb:cc: 27:8a:2b:4b:f9:34:c0:71:b6:20:6a:23:7f:1c:21:9c:8b:55: 8a:44:24:16:2e:35:d8:3d:a3:89:81:92:e8:bd:25:db:cd:b3: 7b:78:a1:47:8e:cc:f9:3c:40:da:15:4c:e1:b7:51:8d:07:56: 28:c3:be:34:dc:76:a2:51:1f:91:08:02:9b:9a:34:64:0e:7e: 69:37:78:e4:7e:62:fa:9f:0e:06:d1:ec:86:31:06:80:63:6e: ad:f3:b7:38:b9:a3:ab:34:9b:2d:50:33:f5:3c:cd:13:ea:fa: 58:fc:95:fa:3c:28:76:ca:33:ff:24:48:9c:86:6c:9e:f8:80: af:6c:06:08:23:b9:e6:b3:71:bc:ce:6b:bf:b8:d4:00:58:7f: 8f:65:df:49:2e:ed:9d:2f:86:67:b3:c0:27:5a:20:b7:1f:c3: e2:0b:6f:b7:16:05:c9:d5:03:aa:a9:1a:ea:13:71:d5:31:f7: 00:56:ce:d1:a2:d7:05:43:da:13:2a:9e:ba:2b:69:45:26:98: bb:1f:9c:ec:6b:6f:fb:00:80:8f:c8:08:c6:a7:14:fa:69:43: f0:bd:c6:ea:4d:4b:b8:e5:ca:f2:c9:ad:9b:0c:e0:ac:c7:3d: 0c:87:cc:b4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICDZ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNDEwMTAw NDMxMTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDY0NEM3MkFBRjZFQzkz MkFDMTkxQjJCOTgxNUE0MjAyOUY5NDBDRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjK77+PC0Ya3fh5aztxYF+GMNQogAQRGQqWIFgrBOb3iq124si tmIUHsWz+CzWsoMTvfkm2FFvW3HjmNG5BS7mDvANr7cHGA11xiOCAmcnjNPce8tG RYGJN87Ds9ndmngneU38SQ2/hbnzpKpbFwwRqWWVSx8W515VuZCNKAunjUWbpifO HaI287pzwoTYlV4mf8Jt47fYbq4ZsskwALtbWSkkpRTAggIrjw1/pPgQhlKIUd9U sy3Js5M8kEQiLpcOoElCGor5X5HXL2DnQWYxSJaPNAIwD9OW3mwsLM7qtvlyPk8X 63PndBbBDYS1P/eCwSK9KDkuL9Z2IvCVNVBbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUZExyqvbskyrBkbK5gVpCAp+UDPIwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL1pFeHlxdmJza3lyQmti SzVnVnBDQXAtVURQSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAVl6AAwDQYJKoZIhvcNAQELBQADggEBACak454EM5AFwGtAfwi8jRf7zCeKK0v5 NMBxtiBqI38cIZyLVYpEJBYuNdg9o4mBkui9JdvNs3t4oUeOzPk8QNoVTOG3UY0H VijDvjTcdqJRH5EIApuaNGQOfmk3eOR+YvqfDgbR7IYxBoBjbq3ztzi5o6s0my1Q M/U8zRPq+lj8lfo8KHbKM/8kSJyGbJ74gK9sBggjueazcbzOa7+41ABYf49l30ku 7Z0vhmezwCdaILcfw+ILb7cWBcnVA6qpGuoTcdUx9wBWztGi1wVD2hMqnroraUUm mLsfnOxrb/sAgI/ICManFPppQ/C9xupNS7jlyvLJrZsM4KzHPQyHzLQ= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:12 2024 by rpki-client on console-fra.rpki-client.org