$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/GbXRKNo-gKbTwjVEZxPahKg2wJY.roa File: GbXRKNo-gKbTwjVEZxPahKg2wJY.roa (raw, json) Hash identifier: 7XFylIIBWd0ABB01fZ5nRBQ2c0FvOaVAFTL2ygLsGec= Subject key identifier: 19:B5:D1:28:DA:3E:80:A6:D3:C2:35:44:67:13:DA:84:A8:36:C0:96 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14BD Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GbXRKNo-gKbTwjVEZxPahKg2wJY.roa Signing time: Wed 11 Sep 2024 02:23:45 +0000 ROA not before: Wed 11 Sep 2024 02:23:45 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 138527 IP address blocks: 45.252.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5309 (0x14bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:45 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=19B5D128DA3E80A6D3C235446713DA84A836C096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:58:ed:7d:6a:78:12:8e:b5:a0:21:3e:39:dc: 3a:f2:73:36:3f:f8:f3:45:dc:49:49:6e:37:28:12: 67:83:fb:03:de:af:42:ab:66:c2:7c:31:79:35:42: ea:ff:54:12:2c:16:8d:3e:83:17:25:0f:77:ca:c5: c4:86:44:d8:fa:36:61:6e:bf:e2:61:34:f6:e6:0f: df:2d:d8:07:5e:95:48:62:4c:77:2b:61:38:9e:6a: 47:81:5f:6e:55:43:3f:e2:f2:ef:86:bf:05:44:5d: 7a:17:ca:51:9f:d2:dd:9e:d2:d1:d9:75:e2:19:cb: 7d:94:17:be:6b:02:bf:e6:b4:ca:f9:97:f5:cb:ef: a4:4e:6b:29:cf:c4:5c:c2:e4:4c:1e:43:bf:d7:ce: f0:45:4e:98:8f:92:93:c4:28:0e:c2:d1:d1:d0:30: e3:4f:cb:d0:b3:70:af:23:40:b6:d0:9e:78:2c:90: b3:34:f6:d7:a7:3e:8f:3d:99:d7:24:44:94:93:2c: 0d:76:88:fb:6c:0b:af:f8:40:bf:0b:a7:be:3b:b1: 9e:1a:00:75:13:d7:77:19:30:ea:66:60:36:e6:a5: 26:0a:71:fb:c4:a2:97:e8:7f:c8:19:28:c9:3c:d9: 90:24:0c:b3:2c:0b:f5:39:a8:39:76:0b:8b:4b:e2: ac:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B5:D1:28:DA:3E:80:A6:D3:C2:35:44:67:13:DA:84:A8:36:C0:96 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GbXRKNo-gKbTwjVEZxPahKg2wJY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.100.0/22 Signature Algorithm: sha256WithRSAEncryption 07:b6:df:3b:d5:40:19:4d:a7:59:21:dd:5b:ad:4d:c2:a1:e3: 9c:9b:67:28:62:91:64:e8:14:da:70:9a:c4:fe:0b:65:df:80: 9b:af:2c:61:83:bc:f5:94:91:38:46:f9:e8:56:20:f8:12:91: b7:4b:1d:da:4e:61:bc:7c:a6:4d:35:e6:16:c4:b6:46:2a:13: 14:4f:b1:59:48:3a:bb:ae:62:c2:a2:c9:3e:f0:20:b3:dc:b9: 0c:5b:50:b3:94:7d:9e:42:0e:e0:8f:74:84:40:2c:e2:00:d8: 80:2e:39:e7:b4:53:b4:9c:9a:d8:1d:ca:72:21:c6:35:c9:2b: 4a:90:e2:d6:bf:53:28:66:d7:cc:ef:68:1e:9f:ea:19:b1:7a: 7b:82:37:ad:cc:1d:d4:d7:11:8f:bf:fe:c4:49:37:e9:2a:e7: 98:11:e7:c0:0c:f8:9c:79:c6:ed:34:76:0c:18:a2:6d:18:e0: 18:29:6e:47:b9:40:06:52:e1:93:30:82:d8:25:f0:5e:08:5c: d7:49:06:31:d9:ea:e9:17:9f:d4:4d:fc:38:c0:1b:dd:f5:d5: 37:ca:e9:5a:56:63:16:ee:51:dc:9e:ad:04:19:34:df:dc:a5: d8:b9:27:d0:d2:c8:48:2c:9d:09:f9:24:29:cd:78:3d:c2:dd: 57:82:d4:ce -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzNDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE5QjVEMTI4REEzRTgw QTZEM0MyMzU0NDY3MTNEQTg0QTgzNkMwOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtWO19angSjrWgIT453DryczY/+PNF3ElJbjcoEmeD+wPer0Kr ZsJ8MXk1Qur/VBIsFo0+gxclD3fKxcSGRNj6NmFuv+JhNPbmD98t2AdelUhiTHcr YTieakeBX25VQz/i8u+GvwVEXXoXylGf0t2e0tHZdeIZy32UF75rAr/mtMr5l/XL 76ROaynPxFzC5EweQ7/XzvBFTpiPkpPEKA7C0dHQMONPy9CzcK8jQLbQnngskLM0 9tenPo89mdckRJSTLA12iPtsC6/4QL8Lp747sZ4aAHUT13cZMOpmYDbmpSYKcfvE opfof8gZKMk82ZAkDLMsC/U5qDl2C4tL4qz5AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUGbXRKNo+gKbTwjVEZxPahKg2wJYwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0diWFJLTm8tZ0tiVHdq VkVaeFBhaEtnMndKWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/GQwDQYJKoZIhvcNAQELBQADggEBAAe23zvVQBlNp1kh3VutTcKh45ybZyhi kWToFNpwmsT+C2XfgJuvLGGDvPWUkThG+ehWIPgSkbdLHdpOYbx8pk015hbEtkYq ExRPsVlIOruuYsKiyT7wILPcuQxbULOUfZ5CDuCPdIRALOIA2IAuOee0U7Scmtgd ynIhxjXJK0qQ4ta/Uyhm18zvaB6f6hmxenuCN63MHdTXEY+//sRJN+kq55gR58AM +Jx5xu00dgwYom0Y4Bgpbke5QAZS4ZMwgtgl8F4IXNdJBjHZ6ukXn9RN/DjAG931 1TfK6VpWYxbuUdyerQQZNN/cpdi5J9DSyEgsnQn5JCnNeD3C3VeC1M4= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org