$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Hz977SgXn2tx7XloJXNZDe7fa7w.roa File: Hz977SgXn2tx7XloJXNZDe7fa7w.roa (raw, json) Hash identifier: MvqhcEeLPMTwmouxr+d0XYUuq93md/hZZ+N45ra941E= Subject key identifier: 1F:3F:7B:ED:28:17:9F:6B:71:ED:79:68:25:73:59:0D:EE:DF:6B:BC Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 146C Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Hz977SgXn2tx7XloJXNZDe7fa7w.roa Signing time: Wed 11 Sep 2024 02:23:17 +0000 ROA not before: Wed 11 Sep 2024 02:23:17 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59083 IP address blocks: 202.89.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5228 (0x146c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:17 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=1F3F7BED28179F6B71ED79682573590DEEDF6BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:93:ec:e8:8e:51:84:73:2e:40:80:3d:8e:8f: 22:00:80:fd:79:e7:f0:cf:68:a4:a4:3d:6e:1b:f4: 89:af:ef:27:cd:95:df:6b:a0:e9:75:64:d1:4d:8c: 03:cc:f2:a5:f2:cd:9a:2a:4e:58:3f:9c:e7:fc:c5: 55:34:67:30:f7:28:84:4c:08:88:49:2a:72:01:da: 9e:6d:60:d5:d3:0a:0d:aa:b9:19:de:9a:5f:09:f8: c6:a2:2d:61:33:fa:9e:1a:be:51:ee:77:62:14:f6: 45:ec:1f:3b:c7:c1:ab:26:06:3c:c2:56:65:b7:8e: de:be:f4:03:5e:5e:b4:be:cd:9b:31:c1:af:3b:d6: 3f:85:60:7e:4a:80:16:a0:61:17:e9:fc:4c:8e:b0: 4c:df:0d:7f:a6:28:4f:22:b9:ef:6f:64:e0:83:a8: 12:7a:aa:a4:a0:e5:12:e3:73:c2:29:05:b8:ab:80: 38:e6:9f:c8:c2:fa:c1:c2:a6:47:53:86:c3:77:38: d5:35:12:49:05:d7:b2:63:b1:66:c0:9c:91:e1:7f: 6e:d1:b9:f2:78:4e:cf:5c:dd:59:a3:95:14:d0:a4: 3f:a8:7f:38:6a:1d:75:3f:06:44:6e:7a:b5:ec:53: 56:17:e6:ce:bf:7c:0b:83:79:8f:0d:e0:05:df:c3: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3F:7B:ED:28:17:9F:6B:71:ED:79:68:25:73:59:0D:EE:DF:6B:BC X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Hz977SgXn2tx7XloJXNZDe7fa7w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.89.108.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:b8:ac:57:6b:ef:e3:f8:74:fe:a4:a1:31:88:8d:4f:49:89: e0:8a:0d:13:e7:9f:3e:83:66:12:6b:2b:ae:4e:6d:91:1c:b8: 9b:2b:7e:27:5f:d5:32:9a:02:16:f8:b6:99:64:68:07:05:55: 8a:a6:43:89:d1:af:e4:2b:6a:2b:97:78:a3:2f:7d:21:d5:9a: ba:2f:c5:41:df:31:f7:c8:d0:34:40:01:2e:1d:a6:14:66:16: c6:6b:c5:72:cf:d5:52:d2:70:70:16:f9:3d:57:ec:74:dd:34: 6f:d5:8c:01:55:e5:58:6c:62:64:79:ff:14:87:19:f5:e1:b9: 5c:7e:65:3d:3f:5a:3b:e0:cb:06:a6:76:06:5f:77:6f:90:28: b5:68:a9:3c:ef:c2:78:d2:06:c7:67:57:88:f8:9b:e9:87:05: d6:2d:dd:33:6e:d4:17:fe:01:d7:b6:77:73:a9:e3:34:b5:ec: ff:f5:e4:86:22:f8:28:e1:02:0f:4f:08:cd:d0:e0:88:61:2c: 16:c9:08:37:ee:9b:a1:99:a6:f8:00:61:c3:fb:cb:cc:10:09: a1:74:77:75:8a:9b:20:7c:eb:50:5a:55:54:e6:ee:f8:4d:c4: 01:84:70:ff:7c:68:57:09:75:b4:81:ea:1b:cf:7e:36:e5:f7: 69:ef:2c:7d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDFGM0Y3QkVEMjgxNzlG NkI3MUVENzk2ODI1NzM1OTBERUVERjZCQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzk+zojlGEcy5AgD2OjyIAgP155/DPaKSkPW4b9Imv7yfNld9r oOl1ZNFNjAPM8qXyzZoqTlg/nOf8xVU0ZzD3KIRMCIhJKnIB2p5tYNXTCg2quRne ml8J+MaiLWEz+p4avlHud2IU9kXsHzvHwasmBjzCVmW3jt6+9ANeXrS+zZsxwa87 1j+FYH5KgBagYRfp/EyOsEzfDX+mKE8iue9vZOCDqBJ6qqSg5RLjc8IpBbirgDjm n8jC+sHCpkdThsN3ONU1EkkF17JjsWbAnJHhf27RufJ4Ts9c3VmjlRTQpD+ofzhq HXU/BkRuerXsU1YX5s6/fAuDeY8N4AXfw6f1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUHz977SgXn2tx7XloJXNZDe7fa7wwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0h6OTc3U2dYbjJ0eDdY bG9KWE5aRGU3ZmE3dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHKWWwwDQYJKoZIhvcNAQELBQADggEBAA+4rFdr7+P4dP6koTGIjU9JieCKDRPn nz6DZhJrK65ObZEcuJsrfidf1TKaAhb4tplkaAcFVYqmQ4nRr+QraiuXeKMvfSHV mrovxUHfMffI0DRAAS4dphRmFsZrxXLP1VLScHAW+T1X7HTdNG/VjAFV5VhsYmR5 /xSHGfXhuVx+ZT0/WjvgywamdgZfd2+QKLVoqTzvwnjSBsdnV4j4m+mHBdYt3TNu 1Bf+Ade2d3Op4zS17P/15IYi+CjhAg9PCM3Q4IhhLBbJCDfum6GZpvgAYcP7y8wQ CaF0d3WKmyB861BaVVTm7vhNxAGEcP98aFcJdbSB6hvPfjbl92nvLH0= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org