$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/JcFB4mBgyIyEeVVk0nfPw0Q6UCw.roa File: JcFB4mBgyIyEeVVk0nfPw0Q6UCw.roa (raw, json) Hash identifier: T9WMmCyCQ+NGSYL57Jc2AV2dO2kTfHsLBYcB1OkhgUI= Subject key identifier: 25:C1:41:E2:60:60:C8:8C:84:79:55:64:D2:77:CF:C3:44:3A:50:2C Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1497 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/JcFB4mBgyIyEeVVk0nfPw0Q6UCw.roa Signing time: Wed 11 Sep 2024 02:23:32 +0000 ROA not before: Wed 11 Sep 2024 02:23:32 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59083 IP address blocks: 202.174.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5271 (0x1497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:32 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=25C141E26060C88C84795564D277CFC3443A502C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:70:96:53:08:93:8e:7b:7f:8d:c4:d0:e3:05: 2b:c1:12:39:04:3a:41:12:8a:68:f5:ed:19:70:56: bb:5c:a8:4f:c2:5e:d0:f8:37:a4:d8:8d:38:72:fd: a5:20:75:06:c0:6c:a4:cc:81:36:e4:f5:c0:d9:36: 09:6c:53:ae:10:b1:32:e0:8f:46:e0:88:98:bd:27: b8:d7:ca:b0:63:49:84:c0:ce:46:ef:83:70:dc:7b: 7f:8a:77:d3:f0:4e:56:6f:54:d1:73:e1:2e:e7:31: fe:f3:a7:2c:c7:cb:ce:b4:96:cb:0a:48:95:45:23: dc:32:df:01:97:1a:da:20:07:cd:ae:ea:71:ef:79: 6a:60:14:0e:bb:17:0d:5e:17:6b:4e:cf:53:70:e6: 78:4b:b0:53:4f:57:cd:d6:9e:9a:3e:b6:7a:d4:56: 63:c2:56:61:40:6c:84:d6:0b:c3:b1:53:04:59:8e: f1:f0:b6:52:98:dd:a5:e5:2b:41:83:f1:31:a1:98: d1:a7:76:97:b1:6f:27:3a:cb:3c:f1:eb:42:5a:64: 25:72:77:e8:37:8e:63:9a:aa:39:5f:f4:f2:b0:c7: d3:3f:2a:7b:b6:a7:c9:31:ff:c0:ee:32:93:a7:58: 28:96:fc:99:25:eb:6b:e0:92:b6:ae:5f:f6:29:5c: 71:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C1:41:E2:60:60:C8:8C:84:79:55:64:D2:77:CF:C3:44:3A:50:2C X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/JcFB4mBgyIyEeVVk0nfPw0Q6UCw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.174.124.0/22 Signature Algorithm: sha256WithRSAEncryption d0:6c:41:11:50:1c:f4:6c:ec:fe:c6:1f:1a:96:de:8a:f7:b6: a8:15:9d:34:ca:59:62:d8:d6:ec:33:20:e4:ba:95:b3:56:56: 65:29:d0:52:65:05:8e:8b:62:cc:ac:22:22:2f:9d:da:43:d5: 3d:e6:fb:f7:74:a1:09:26:85:3d:ad:b5:75:33:95:fc:db:d3: 82:64:6c:10:30:6e:a1:d4:21:30:ec:22:a6:b5:e3:28:03:11: ef:c0:d4:a7:92:24:e6:00:e7:71:5a:fa:c2:a3:6d:ce:ed:bb: 48:9a:19:29:10:a5:4a:e8:72:9e:00:ae:b7:ca:1a:fe:a2:ed: 3c:a8:05:fa:d5:9d:89:94:c6:c1:72:1e:ac:2d:61:9c:24:81: 1a:8b:ce:f6:7c:f8:a9:70:4f:22:57:4b:ad:76:4b:55:c6:eb: ee:f4:4a:77:81:04:6b:6b:47:24:d7:99:48:0b:26:7a:67:71: e9:e3:81:e9:69:f9:41:22:af:e8:1c:bb:bd:39:52:3d:55:2b: 03:7a:51:5b:f0:3e:da:6e:04:38:09:2c:ef:f2:f5:17:bd:ba: f5:ca:07:3f:65:b9:4b:ea:75:26:d1:ba:df:63:b7:7e:1b:c4: 38:b6:d5:18:14:06:85:80:78:0f:95:c0:af:f3:f4:70:6b:98: 46:94:6f:5a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMzJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDI1QzE0MUUyNjA2MEM4 OEM4NDc5NTU2NEQyNzdDRkMzNDQzQTUwMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDycJZTCJOOe3+NxNDjBSvBEjkEOkESimj17RlwVrtcqE/CXtD4 N6TYjThy/aUgdQbAbKTMgTbk9cDZNglsU64QsTLgj0bgiJi9J7jXyrBjSYTAzkbv g3Dce3+Kd9PwTlZvVNFz4S7nMf7zpyzHy860lssKSJVFI9wy3wGXGtogB82u6nHv eWpgFA67Fw1eF2tOz1Nw5nhLsFNPV83Wnpo+tnrUVmPCVmFAbITWC8OxUwRZjvHw tlKY3aXlK0GD8TGhmNGndpexbyc6yzzx60JaZCVyd+g3jmOaqjlf9PKwx9M/Knu2 p8kx/8DuMpOnWCiW/Jkl62vgkrauX/YpXHHPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUJcFB4mBgyIyEeVVk0nfPw0Q6UCwwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0pjRkI0bUJneUl5RWVW VmswbmZQdzBRNlVDdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BALKrnwwDQYJKoZIhvcNAQELBQADggEBANBsQRFQHPRs7P7GHxqW3or3tqgVnTTK WWLY1uwzIOS6lbNWVmUp0FJlBY6LYsysIiIvndpD1T3m+/d0oQkmhT2ttXUzlfzb 04JkbBAwbqHUITDsIqa14ygDEe/A1KeSJOYA53Fa+sKjbc7tu0iaGSkQpUrocp4A rrfKGv6i7TyoBfrVnYmUxsFyHqwtYZwkgRqLzvZ8+KlwTyJXS612S1XG6+70SneB BGtrRyTXmUgLJnpncenjgelp+UEir+gcu705Uj1VKwN6UVvwPtpuBDgJLO/y9Re9 uvXKBz9luUvqdSbRut9jt34bxDi21RgUBoWAeA+VwK/z9HBrmEaUb1o= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:46 2024 by rpki-client on console-ams.rpki-client.org