$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/83MGAnub2KkGtzeJOggPRjTVXqg.roa File: 83MGAnub2KkGtzeJOggPRjTVXqg.roa (raw, json) Hash identifier: dnAoXKjZ2EkXlx8N4pPG8t9LzAoqQ4ZH2ytZ6v8sHjk= Subject key identifier: F3:73:06:02:7B:9B:D8:A9:06:B7:37:89:3A:08:0F:46:34:D5:5E:A8 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1465 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/83MGAnub2KkGtzeJOggPRjTVXqg.roa Signing time: Wed 11 Sep 2024 02:23:15 +0000 ROA not before: Wed 11 Sep 2024 02:23:15 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24373 IP address blocks: 45.252.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5221 (0x1465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:15 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=F37306027B9BD8A906B737893A080F4634D55EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8e:2f:22:39:f1:94:c7:0a:54:c0:bd:5d:88: 52:46:5b:35:2f:fc:34:54:04:e2:18:9f:56:c7:99: b5:52:d8:fd:d0:3b:ed:a4:2f:74:e1:fa:3e:56:91: 2d:32:78:6b:54:e7:51:9c:6e:5c:1c:e6:28:05:22: 6c:51:38:0f:84:e3:d3:d9:84:4d:73:60:37:a7:a6: b7:d0:e1:95:3a:3c:b6:74:a7:83:cb:ae:95:fa:23: 04:25:6e:0f:74:29:79:bc:3e:41:3e:63:8a:6d:4e: 08:8e:1f:e6:21:c7:6a:71:1f:6a:1a:f0:6f:5a:29: 43:53:0f:4c:22:17:80:33:68:9f:99:0f:e1:ef:8e: e4:fb:f7:39:cd:c4:16:f9:8c:0d:5f:42:10:e3:cc: 7f:81:60:4f:7e:2a:61:f0:ca:0c:e0:83:36:51:da: f8:6a:63:6a:85:98:3f:50:64:17:d5:69:6c:6c:d6: 2b:a6:7a:1c:64:f6:1b:cf:8c:0b:91:34:94:94:93: 61:00:20:69:fa:eb:98:2c:e7:69:7a:4f:6e:95:00: 29:96:6b:a4:6a:8a:d7:67:0d:83:23:8d:02:61:79: ce:49:b8:f0:69:de:a3:92:3f:3b:d1:7b:9c:f5:e0: c1:7d:e9:c0:44:20:53:fb:c3:0d:d6:e3:4b:49:40: 11:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:73:06:02:7B:9B:D8:A9:06:B7:37:89:3A:08:0F:46:34:D5:5E:A8 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/83MGAnub2KkGtzeJOggPRjTVXqg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.8.0/22 Signature Algorithm: sha256WithRSAEncryption 07:46:46:2d:4e:0e:20:00:54:f8:58:6d:b8:79:62:15:e2:dc: cc:c4:90:ce:1e:ee:5d:e1:8a:bf:59:06:e6:04:7c:bc:f4:a0: 1a:44:9d:01:a8:fb:64:d0:08:5b:6b:65:a5:1b:25:4f:7a:ed: d2:4d:62:cb:45:e3:5d:2d:f0:11:75:70:23:b8:c5:a8:93:35: fe:c7:38:8f:67:a9:a0:29:24:d2:55:fc:ad:fb:02:f5:56:11: f2:70:66:ba:06:df:c2:a5:99:97:a9:5c:a7:6b:83:e9:69:e4: a7:c6:c0:a4:00:16:d9:d9:0b:d9:d2:e5:44:8a:93:a4:02:18: 44:af:56:18:81:12:ea:e1:63:42:30:16:15:cc:72:8f:67:ea: 89:36:7c:60:32:f0:e3:82:2f:e9:f4:ea:07:b6:5f:b3:5a:a6: f3:98:29:6a:9f:5a:e5:22:86:1a:79:58:cd:a8:5b:9d:b2:ab: 18:2d:49:0c:72:be:a4:71:4a:a7:70:44:62:09:05:68:a1:6e: 0f:82:fe:32:d6:0a:58:f5:a5:4c:d9:9e:cb:ab:ee:59:16:e9: e8:44:53:6a:0c:70:a5:9d:a7:f3:45:b1:3e:e1:e2:93:43:26: 11:9a:a6:e3:0d:18:9e:ef:f6:b4:55:81:25:0f:2c:9c:34:c5: 79:3e:af:cd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFGUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYzNzMwNjAyN0I5QkQ4 QTkwNkI3Mzc4OTNBMDgwRjQ2MzRENTVFQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNji8iOfGUxwpUwL1diFJGWzUv/DRUBOIYn1bHmbVS2P3QO+2k L3Th+j5WkS0yeGtU51Gcblwc5igFImxROA+E49PZhE1zYDenprfQ4ZU6PLZ0p4PL rpX6IwQlbg90KXm8PkE+Y4ptTgiOH+Yhx2pxH2oa8G9aKUNTD0wiF4AzaJ+ZD+Hv juT79znNxBb5jA1fQhDjzH+BYE9+KmHwygzggzZR2vhqY2qFmD9QZBfVaWxs1ium ehxk9hvPjAuRNJSUk2EAIGn665gs52l6T26VACmWa6RqitdnDYMjjQJhec5JuPBp 3qOSPzvRe5z14MF96cBEIFP7ww3W40tJQBFzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU83MGAnub2KkGtzeJOggPRjTVXqgwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzgzTUdBbnViMktrR3R6 ZUpPZ2dQUmpUVlhxZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/AgwDQYJKoZIhvcNAQELBQADggEBAAdGRi1ODiAAVPhYbbh5YhXi3MzEkM4e 7l3hir9ZBuYEfLz0oBpEnQGo+2TQCFtrZaUbJU967dJNYstF410t8BF1cCO4xaiT Nf7HOI9nqaApJNJV/K37AvVWEfJwZroG38KlmZepXKdrg+lp5KfGwKQAFtnZC9nS 5USKk6QCGESvVhiBEurhY0IwFhXMco9n6ok2fGAy8OOCL+n06ge2X7NapvOYKWqf WuUihhp5WM2oW52yqxgtSQxyvqRxSqdwRGIJBWihbg+C/jLWClj1pUzZnsur7lkW 6ehEU2oMcKWdp/NFsT7h4pNDJhGapuMNGJ7v9rRVgSUPLJw0xXk+r80= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:47 2024 by rpki-client on console-ams.rpki-client.org