$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/DfeaS5Zw3BJUWaWYO9CVfuGOrbs.roa File: DfeaS5Zw3BJUWaWYO9CVfuGOrbs.roa (raw, json) Hash identifier: ATcPoyYKGDw0YRA8ZysY9MQHS6rU4d02Y9d3YgZgHNM= Subject key identifier: 0D:F7:9A:4B:96:70:DC:12:54:59:A5:98:3B:D0:95:7E:E1:8E:AD:BB Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14E1 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DfeaS5Zw3BJUWaWYO9CVfuGOrbs.roa Signing time: Wed 11 Sep 2024 02:23:56 +0000 ROA not before: Wed 11 Sep 2024 02:23:56 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59083 IP address blocks: 202.89.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5345 (0x14e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:56 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=0DF79A4B9670DC125459A5983BD0957EE18EADBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:90:71:b0:cd:b2:b5:d1:47:e5:38:ec:1c:06: 20:7e:9f:d2:3b:d8:54:d8:8d:ff:7a:6c:0c:a5:7d: ae:02:e4:a8:31:ef:17:37:f3:a9:73:43:84:ca:d2: b5:4e:86:2d:9b:b8:b6:60:57:6c:6e:e4:b8:f2:b4: dd:62:25:99:10:5e:60:46:d3:f6:55:d4:70:1a:05: 24:2c:37:0e:a6:4f:f0:ab:ce:62:01:c1:4e:70:a4: eb:a9:4c:87:3b:36:83:01:0e:18:7e:49:cf:2f:7c: ed:21:8f:b5:13:dd:a9:cf:4a:ca:d3:ce:ba:28:9e: 78:91:21:b7:6f:c8:12:71:d6:57:59:4b:f8:4a:41: fd:79:b1:ca:94:f7:ee:0f:d8:aa:1f:7b:19:39:7d: 46:fd:f9:8d:c7:9f:53:95:f8:ff:2c:d1:ba:c6:13: 77:77:6f:7b:11:2f:a5:d7:2f:ec:2c:1a:a5:a2:bc: f5:40:e8:51:9a:5d:44:54:ee:20:67:77:7d:30:d0: e4:5b:28:58:7f:18:48:af:b7:58:50:5d:c4:0c:94: 27:df:3d:4f:0f:6b:6a:41:9a:57:20:01:ee:c8:03: 55:81:13:43:b1:8d:c7:06:54:8a:11:2d:a8:d2:0d: 2f:6e:73:a2:fc:75:06:cc:22:5d:83:42:bc:cf:af: 0d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F7:9A:4B:96:70:DC:12:54:59:A5:98:3B:D0:95:7E:E1:8E:AD:BB X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DfeaS5Zw3BJUWaWYO9CVfuGOrbs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.89.108.0/22 Signature Algorithm: sha256WithRSAEncryption c6:91:91:fb:04:88:7b:9f:1a:71:cf:25:81:e3:35:ac:bd:e6: 78:3b:c3:f3:02:b1:40:54:6b:8a:93:15:21:da:ed:3f:36:2b: 24:18:ae:62:77:a4:ce:c7:dd:c3:7e:c9:c3:f5:61:16:0b:38: c3:3e:1b:1f:fb:d0:34:09:fb:b3:09:f2:13:27:25:40:2c:00: 85:61:b8:c3:82:ec:2b:f1:04:ea:6d:ab:e9:42:b2:31:1e:43: e8:e2:b5:39:4f:f0:59:c8:ae:1b:27:4f:66:2a:79:2d:15:d1: c9:2c:16:ed:36:e2:e1:23:35:ac:0f:8f:fb:ae:fe:5a:f9:49: e0:e1:d0:0e:de:b5:f2:43:45:e4:a0:8c:9d:07:2d:ee:ce:38: 6a:7d:d7:aa:7a:69:7c:13:e1:d9:8a:f1:b2:94:3d:7e:67:90: bc:2b:67:c6:b6:08:f0:27:32:fb:f6:5f:59:b8:7c:fc:6f:3c: 91:a2:dd:a4:b9:1a:ec:96:67:22:4e:c7:6f:1c:83:2e:97:20: 91:15:f4:ef:e5:3f:cb:38:7c:2e:7a:09:f1:11:fb:bc:97:73: e8:d4:b5:9a:45:3e:fd:7c:ae:6c:79:34:51:d8:63:6c:67:79: 29:e5:74:41:7d:6b:df:90:04:ed:17:9a:44:7d:d0:9a:c0:8f: 76:4e:c0:06 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzNTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDBERjc5QTRCOTY3MERD MTI1NDU5QTU5ODNCRDA5NTdFRTE4RUFEQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFkHGwzbK10UflOOwcBiB+n9I72FTYjf96bAylfa4C5Kgx7xc3 86lzQ4TK0rVOhi2buLZgV2xu5LjytN1iJZkQXmBG0/ZV1HAaBSQsNw6mT/CrzmIB wU5wpOupTIc7NoMBDhh+Sc8vfO0hj7UT3anPSsrTzroonniRIbdvyBJx1ldZS/hK Qf15scqU9+4P2Kofexk5fUb9+Y3Hn1OV+P8s0brGE3d3b3sRL6XXL+wsGqWivPVA 6FGaXURU7iBnd30w0ORbKFh/GEivt1hQXcQMlCffPU8Pa2pBmlcgAe7IA1WBE0Ox jccGVIoRLajSDS9uc6L8dQbMIl2DQrzPrw23AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUDfeaS5Zw3BJUWaWYO9CVfuGOrbswHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0RmZWFTNVp3M0JKVVdh V1lPOUNWZnVHT3Jicy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BALKWWwwDQYJKoZIhvcNAQELBQADggEBAMaRkfsEiHufGnHPJYHjNay95ng7w/MC sUBUa4qTFSHa7T82KyQYrmJ3pM7H3cN+ycP1YRYLOMM+Gx/70DQJ+7MJ8hMnJUAs AIVhuMOC7CvxBOptq+lCsjEeQ+jitTlP8FnIrhsnT2YqeS0V0cksFu024uEjNawP j/uu/lr5SeDh0A7etfJDReSgjJ0HLe7OOGp916p6aXwT4dmK8bKUPX5nkLwrZ8a2 CPAnMvv2X1m4fPxvPJGi3aS5GuyWZyJOx28cgy6XIJEV9O/lP8s4fC56CfER+7yX c+jUtZpFPv18rmx5NFHYY2xneSnldEF9a9+QBO0XmkR90JrAj3ZOwAY= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:46 2024 by rpki-client on console-ams.rpki-client.org