$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/CQ7QSvtk3CraCVD5VAeistiVxZY.roa File: CQ7QSvtk3CraCVD5VAeistiVxZY.roa (raw, json) Hash identifier: zCCdlHqK3+c/efQUuj+iqoM3D6voDU5W2RVBReN5gRE= Subject key identifier: 09:0E:D0:4A:FB:64:DC:2A:DA:09:50:F9:54:07:A2:B2:D8:95:C5:96 Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054 Certificate serial: 15CB Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/CQ7QSvtk3CraCVD5VAeistiVxZY.roa Signing time: Wed 13 Mar 2024 01:23:59 +0000 ROA not before: Wed 13 Mar 2024 01:23:59 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 23724 IP address blocks: 211.155.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5579 (0x15cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054 Validity Not Before: Mar 13 01:23:59 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=090ED04AFB64DC2ADA0950F95407A2B2D895C596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:5d:bc:05:a1:9f:89:33:5e:44:de:2a:f7: 6e:75:9d:f1:1f:6a:82:a4:6b:36:8b:7c:46:5c:79: 85:e9:fe:1b:34:13:5a:72:2c:40:a5:2c:43:36:8c: 22:18:61:47:c4:05:ed:89:b2:96:de:5c:66:10:df: 04:2e:64:17:1d:d8:bb:5b:34:0a:d4:2f:d3:5e:75: 2f:51:d5:27:e1:3c:fd:84:07:0d:46:36:c9:ea:6e: 68:6e:76:fa:3c:3a:8f:a6:6f:d0:0d:a8:29:53:fc: b6:ed:03:d5:75:2a:32:18:c5:82:b2:25:f1:b2:b7: 90:be:d6:e8:78:ec:69:ff:80:66:a3:cf:62:97:8a: 59:46:67:9e:7b:3c:60:34:b4:99:1e:8f:80:2f:8b: d4:2e:04:e5:60:7d:19:09:34:a4:e1:5a:cb:64:33: 37:10:0d:a3:44:f0:62:53:5f:1b:f3:b8:7b:e9:98: 55:ee:25:98:40:7c:dd:ac:cf:68:56:7e:72:07:28: c2:b5:c6:66:8d:38:9a:f6:2b:c9:e2:24:f8:de:86: 8c:5b:de:48:94:56:10:84:7d:62:ef:5c:74:34:6c: ef:2a:df:61:82:a1:3e:8a:61:9a:27:23:36:ef:c6: 2e:bd:ff:42:63:b8:1a:99:de:eb:9c:fa:ac:95:4c: 94:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0E:D0:4A:FB:64:DC:2A:DA:09:50:F9:54:07:A2:B2:D8:95:C5:96 X509v3 Authority Key Identifier: keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/CQ7QSvtk3CraCVD5VAeistiVxZY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.155.88.0/21 Signature Algorithm: sha256WithRSAEncryption 2c:22:b2:33:8e:38:db:ab:a7:91:7c:3e:bd:5f:7c:89:06:7f: c2:02:4d:4d:50:cb:6a:f4:70:f3:17:53:63:48:dd:1e:bd:95: f7:01:fc:93:67:52:49:b4:9d:b4:96:8a:03:76:f3:c5:50:81: d9:b3:11:f9:b7:74:05:58:b0:20:58:dc:ff:8b:09:f2:8b:25: a5:d6:87:2c:aa:74:b0:d6:42:61:39:6d:d4:99:ff:dc:7e:0e: 8c:48:b7:34:77:78:b3:18:e8:08:cd:a8:99:c7:83:01:7c:4b: fb:4b:69:72:3b:26:dd:58:22:67:f4:4d:8f:dc:17:96:df:54: ff:48:9b:e7:5d:c3:42:eb:bb:66:0d:26:f4:74:57:6d:30:d3: 4c:65:c7:1a:06:f6:46:bc:aa:6a:90:43:d2:20:22:9a:6b:a4: e9:59:7d:95:b7:c7:97:a6:04:9e:66:25:b7:61:38:3c:95:f3: d3:ae:8d:b1:4a:05:89:00:46:c6:c7:7f:42:28:12:6f:b1:f4: 58:20:5a:57:c1:ef:de:22:81:e2:e8:be:f0:43:42:c9:fd:66: 42:7c:78:f1:37:8f:37:bb:4f:35:00:42:43:c6:60:a1:f4:64: cf:50:ce:09:7e:d6:6c:e4:8d:1a:8f:a0:93:e5:e0:05:8d:7d: 2e:60:84:42 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFcswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODNF NzdGMzdCM0I5Mzg1MDgzNUJBQTMwRUU4RkMxMkQ1NUY4NzA1NDAeFw0yNDAzMTMw MTIzNTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDA5MEVEMDRBRkI2NERD MkFEQTA5NTBGOTU0MDdBMkIyRDg5NUM1OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/ll28BaGfiTNeRN4q9251nfEfaoKkazaLfEZceYXp/hs0E1py LEClLEM2jCIYYUfEBe2JspbeXGYQ3wQuZBcd2LtbNArUL9NedS9R1SfhPP2EBw1G Nsnqbmhudvo8Oo+mb9ANqClT/LbtA9V1KjIYxYKyJfGyt5C+1uh47Gn/gGajz2KX illGZ557PGA0tJkej4Avi9QuBOVgfRkJNKThWstkMzcQDaNE8GJTXxvzuHvpmFXu JZhAfN2sz2hWfnIHKMK1xmaNOJr2K8niJPjehoxb3kiUVhCEfWLvXHQ0bO8q32GC oT6KYZonIzbvxi69/0JjuBqZ3uuc+qyVTJSFAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUCQ7QSvtk3CraCVD5VAeistiVxZYwHwYDVR0jBBgwFoAUg+d/N7O5OFCDW6ow 7o/BLVX4cFQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYx L2ctZF9ON081T0ZDRFc2b3c3b19CTFZYNGNGUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZy1kX043TzVPRkNEVzZvdzdvX0JMVlg0Y0ZRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYxL0NRN1FTdnRrM0NyYUNW RDVWQWVpc3RpVnhaWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPTm1gwDQYJKoZIhvcNAQELBQADggEBACwisjOOONurp5F8Pr1ffIkGf8ICTU1Q y2r0cPMXU2NI3R69lfcB/JNnUkm0nbSWigN288VQgdmzEfm3dAVYsCBY3P+LCfKL JaXWhyyqdLDWQmE5bdSZ/9x+DoxItzR3eLMY6AjNqJnHgwF8S/tLaXI7Jt1YImf0 TY/cF5bfVP9Im+ddw0Lru2YNJvR0V20w00xlxxoG9ka8qmqQQ9IgIpprpOlZfZW3 x5emBJ5mJbdhODyV89OujbFKBYkARsbHf0IoEm+x9FggWlfB794igeLovvBDQsn9 ZkJ8ePE3jze7TzUAQkPGYKH0ZM9Qzgl+1mzkjRqPoJPl4AWNfS5ghEI= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:46 2024 by rpki-client on console-ams.rpki-client.org