$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/8ouQPG6-48J4x3THcHS_f3LtWzg.roa File: 8ouQPG6-48J4x3THcHS_f3LtWzg.roa (raw, json) Hash identifier: UGPmIVbJg2GpZlTH2psGjUcrQR4lpua5q1SJAPIC0Yc= Subject key identifier: F2:8B:90:3C:6E:BE:E3:C2:78:C7:74:C7:70:74:BF:7F:72:ED:5B:38 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 151F Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8ouQPG6-48J4x3THcHS_f3LtWzg.roa Signing time: Wed 11 Sep 2024 02:30:10 +0000 ROA not before: Wed 11 Sep 2024 02:30:10 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 45.252.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5407 (0x151f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:30:10 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=F28B903C6EBEE3C278C774C77074BF7F72ED5B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d2:22:a6:3b:bb:c2:6e:6b:bb:4c:50:2a:2e: 07:88:77:be:b6:b8:34:77:de:04:48:7a:07:1d:c3: 7b:a5:0d:6c:45:16:4f:e8:fe:34:e1:96:0d:a9:55: 03:ff:18:2f:94:c5:a0:6d:53:dd:3a:87:88:db:e5: 19:b9:59:d8:d5:68:0e:1e:49:91:92:a7:c8:9f:10: 39:2e:e6:b3:73:e2:69:ab:7f:12:8a:e8:08:33:9c: cc:35:fe:b1:ae:1e:2b:75:0f:cf:81:8f:3c:ef:ae: b9:f6:5c:0c:8a:7d:c1:93:73:dc:c6:85:43:ad:bf: 8f:dd:f4:53:26:94:52:1e:13:21:56:cd:c7:72:08: f0:8d:88:52:9a:4b:a8:4b:61:40:86:27:0d:94:59: fd:97:71:4d:fc:3e:a3:9d:f3:e4:97:0e:d0:e0:27: 70:73:b7:e2:96:27:9e:f5:04:fe:09:09:fb:39:c7: 59:a9:d9:e8:42:36:aa:23:ae:58:a0:b5:a0:7a:00: 52:f0:37:69:c4:6e:5c:a2:8f:cd:4f:2f:e0:a3:f8: 71:00:d1:95:27:56:e9:6d:90:5a:19:48:8d:64:ae: 1b:e8:ab:b1:d0:57:33:46:18:ff:9b:e8:d7:e3:d3: eb:b8:03:ce:5c:59:0d:c2:26:67:a8:91:ec:dd:60: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8B:90:3C:6E:BE:E3:C2:78:C7:74:C7:70:74:BF:7F:72:ED:5B:38 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8ouQPG6-48J4x3THcHS_f3LtWzg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.102.0/24 Signature Algorithm: sha256WithRSAEncryption c8:b1:a5:03:8e:54:4b:6d:67:18:b4:44:0a:5a:d0:44:ae:ec: 01:5a:de:ef:97:6e:67:85:9b:d1:4e:4b:b7:9c:9b:87:69:3c: 23:4f:f5:12:9c:22:e1:31:5e:9e:22:2a:5c:09:ab:06:2f:68: 09:12:c5:d0:24:c8:66:d9:20:94:4e:bb:98:bb:fa:fa:1c:05: 5c:1c:3e:be:a9:b8:9b:69:28:41:55:27:02:d2:d5:98:b4:6a: 70:4d:d3:31:8a:47:aa:a7:c1:30:80:1e:07:13:7e:68:9e:96: c9:ae:08:a3:7a:8c:6b:a5:0b:f2:c8:e1:2d:8b:c3:eb:54:7b: 3c:e6:0f:63:d7:cf:de:5a:fd:52:28:ad:ec:8c:46:56:83:8f: c1:2a:a8:54:f1:ba:4e:76:0d:72:e9:7d:52:36:47:99:ee:65: a2:69:e5:88:8a:da:3d:12:9b:23:56:18:a7:b1:16:4f:58:d2: ad:bb:c6:2a:96:75:98:d9:99:1e:b7:19:0e:a0:14:c9:ed:b1: e6:d2:95:20:4f:e5:b8:56:a8:90:d5:8d:92:5a:b8:a0:15:9a: 6d:c7:7c:e6:e8:74:13:29:68:2b:3b:3a:dc:45:c2:07:7c:dc: 63:35:d4:b2:10:eb:7b:c3:d0:18:f6:0a:18:36:03:1d:e9:cf: 23:1d:78:b1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFR8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjMwMTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYyOEI5MDNDNkVCRUUz QzI3OEM3NzRDNzcwNzRCRjdGNzJFRDVCMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE0iKmO7vCbmu7TFAqLgeId762uDR33gRIegcdw3ulDWxFFk/o /jThlg2pVQP/GC+UxaBtU906h4jb5Rm5WdjVaA4eSZGSp8ifEDku5rNz4mmrfxKK 6AgznMw1/rGuHit1D8+Bjzzvrrn2XAyKfcGTc9zGhUOtv4/d9FMmlFIeEyFWzcdy CPCNiFKaS6hLYUCGJw2UWf2XcU38PqOd8+SXDtDgJ3Bzt+KWJ571BP4JCfs5x1mp 2ehCNqojrligtaB6AFLwN2nEblyij81PL+Cj+HEA0ZUnVultkFoZSI1krhvoq7HQ VzNGGP+b6Nfj0+u4A85cWQ3CJmeokezdYJfNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU8ouQPG6+48J4x3THcHS/f3LtWzgwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzhvdVFQRzYtNDhKNHgz VEhjSFNfZjNMdFd6Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/GYwDQYJKoZIhvcNAQELBQADggEBAMixpQOOVEttZxi0RApa0ESu7AFa3u+X bmeFm9FOS7ecm4dpPCNP9RKcIuExXp4iKlwJqwYvaAkSxdAkyGbZIJROu5i7+voc BVwcPr6puJtpKEFVJwLS1Zi0anBN0zGKR6qnwTCAHgcTfmielsmuCKN6jGulC/LI 4S2Lw+tUezzmD2PXz95a/VIoreyMRlaDj8EqqFTxuk52DXLpfVI2R5nuZaJp5YiK 2j0SmyNWGKexFk9Y0q27xiqWdZjZmR63GQ6gFMntsebSlSBP5bhWqJDVjZJauKAV mm3HfObodBMpaCs7OtxFwgd83GM11LIQ63vD0Bj2Chg2Ax3pzyMdeLE= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:40 2024 by rpki-client on console-fra.rpki-client.org