$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/A5idwiPq-RFbKpfWxFxW82suGgg.roa File: A5idwiPq-RFbKpfWxFxW82suGgg.roa (raw, json) Hash identifier: XVuj9Mc91EExxckumR29NpCCzBOtfHl2XlUPXMBKf5s= Subject key identifier: 03:98:9D:C2:23:EA:F9:11:5B:2A:97:D6:C4:5C:56:F3:6B:2E:1A:08 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1610 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/A5idwiPq-RFbKpfWxFxW82suGgg.roa Signing time: Sat 12 Oct 2024 02:02:03 +0000 ROA not before: Sat 12 Oct 2024 02:02:03 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 45.252.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5648 (0x1610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Oct 12 02:02:03 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=03989DC223EAF9115B2A97D6C45C56F36B2E1A08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fb:2a:b7:2f:f1:8c:e3:03:61:b1:0e:d5:30: 80:b8:0b:d4:14:4b:e0:8d:2e:1e:9b:a5:95:21:09: 9d:2d:f8:ce:12:96:91:43:3a:79:88:91:78:48:db: a3:e8:10:88:2f:06:62:4d:f2:94:29:24:40:88:af: 26:63:fb:e1:14:80:2a:3f:5c:c0:51:74:6d:37:8d: f5:e3:e2:a8:2e:98:23:9b:a0:a6:46:16:dd:49:1a: 09:9e:5b:95:ff:57:2a:3d:04:27:e1:f5:d5:82:8b: 87:4e:d4:ca:ed:02:38:06:18:fd:20:08:c2:3c:7a: dc:ff:1d:83:fe:93:54:a6:d9:c1:f7:33:98:4c:fe: f3:17:96:20:60:39:f2:d6:b6:7c:b8:84:eb:d8:52: b3:c6:6b:48:55:bd:a5:82:b7:c5:1b:a9:43:ed:99: 0c:8c:37:96:46:fa:ed:6e:2b:20:c1:8c:51:1b:9b: 6b:b3:9a:95:5d:73:1b:fd:44:0b:3f:68:b7:af:28: 6b:ad:1c:75:ac:b0:e2:d5:3b:88:92:df:2c:66:dd: 85:c5:39:6d:13:69:bf:be:1e:1e:eb:b4:6f:62:0b: 28:a3:e0:1f:de:d9:20:4d:0f:28:71:de:b1:c1:75: 5b:10:75:d6:1f:17:8c:fa:e3:ed:4a:26:2a:b2:59: eb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:98:9D:C2:23:EA:F9:11:5B:2A:97:D6:C4:5C:56:F3:6B:2E:1A:08 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/A5idwiPq-RFbKpfWxFxW82suGgg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.144.0/24 Signature Algorithm: sha256WithRSAEncryption d4:2e:d3:f9:22:12:db:21:9b:4a:aa:a5:b9:d9:0d:2c:f9:67: 0f:e5:11:94:8d:57:16:a0:1f:c2:99:97:93:56:d9:b2:d2:57: 47:aa:ea:37:c9:0a:f7:16:f3:a0:f0:e3:79:be:a1:07:83:56: d8:12:e0:60:8c:59:af:f1:2e:a5:b4:ad:1a:26:c0:1c:7a:78: ea:1d:ae:4b:72:f7:02:9f:2b:e2:b0:20:7c:5d:54:77:b5:b4: 7f:1d:59:37:8c:37:4e:44:5f:09:a6:15:0f:78:4d:d8:95:b7: 4a:9f:34:ec:da:a7:29:f2:86:05:f3:0a:aa:6b:28:5e:00:b7: da:99:c4:f9:a9:9d:06:6f:fa:60:0a:fc:c4:b5:df:dc:3a:cb: d4:31:85:61:27:4e:94:b4:b2:28:8f:9a:75:a9:dd:24:5c:bd: 61:08:9b:57:5b:9f:73:50:1c:16:a9:54:d2:87:62:e0:fb:f4: e4:3c:ce:30:de:62:03:69:c8:9f:d6:aa:95:4d:ed:6d:3d:e0: b9:34:9e:0c:fc:8f:6e:22:4c:96:a3:cd:35:02:2e:10:94:4b: 79:7e:f6:38:95:5c:d7:26:96:6e:c1:c8:64:0b:5f:68:ed:18: fd:6f:ac:bc:29:91:d2:b7:c8:89:b7:3e:77:3c:9d:dd:6d:cc: 0d:77:7a:c3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFhAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDEwMTIw MjAyMDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAzOTg5REMyMjNFQUY5 MTE1QjJBOTdENkM0NUM1NkYzNkIyRTFBMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV+yq3L/GM4wNhsQ7VMIC4C9QUS+CNLh6bpZUhCZ0t+M4SlpFD OnmIkXhI26PoEIgvBmJN8pQpJECIryZj++EUgCo/XMBRdG03jfXj4qgumCOboKZG Ft1JGgmeW5X/Vyo9BCfh9dWCi4dO1MrtAjgGGP0gCMI8etz/HYP+k1Sm2cH3M5hM /vMXliBgOfLWtny4hOvYUrPGa0hVvaWCt8UbqUPtmQyMN5ZG+u1uKyDBjFEbm2uz mpVdcxv9RAs/aLevKGutHHWssOLVO4iS3yxm3YXFOW0Tab++Hh7rtG9iCyij4B/e 2SBNDyhx3rHBdVsQddYfF4z64+1KJiqyWetbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUA5idwiPq+RFbKpfWxFxW82suGggwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0E1aWR3aVBxLVJGYktw Zld4RnhXODJzdUdnZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/JAwDQYJKoZIhvcNAQELBQADggEBANQu0/kiEtshm0qqpbnZDSz5Zw/lEZSN VxagH8KZl5NW2bLSV0eq6jfJCvcW86Dw43m+oQeDVtgS4GCMWa/xLqW0rRomwBx6 eOodrkty9wKfK+KwIHxdVHe1tH8dWTeMN05EXwmmFQ94TdiVt0qfNOzapynyhgXz CqprKF4At9qZxPmpnQZv+mAK/MS139w6y9QxhWEnTpS0siiPmnWp3SRcvWEIm1db n3NQHBapVNKHYuD79OQ8zjDeYgNpyJ/WqpVN7W094Lk0ngz8j24iTJajzTUCLhCU S3l+9jiVXNcmlm7ByGQLX2jtGP1vrLwpkdK3yIm3Pnc8nd1tzA13esM= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:46 2024 by rpki-client on console-ams.rpki-client.org