$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/UQ7hpj9SMSmkdKewU3L2WUV5mTU.roa File: UQ7hpj9SMSmkdKewU3L2WUV5mTU.roa (raw, json) Hash identifier: yqrLzdhAyPFsqCL981qcaiHl3hsbs+6viVu3bhzJ808= Subject key identifier: 51:0E:E1:A6:3F:52:31:29:A4:74:A7:B0:53:72:F6:59:45:79:99:35 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 160F Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UQ7hpj9SMSmkdKewU3L2WUV5mTU.roa Signing time: Sat 12 Oct 2024 02:02:02 +0000 ROA not before: Sat 12 Oct 2024 02:02:02 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 45.252.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5647 (0x160f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Oct 12 02:02:02 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=510EE1A63F523129A474A7B05372F65945799935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b4:8b:04:83:ae:0a:4e:7f:71:19:17:28:8c: 21:26:c0:af:da:c8:1b:fe:21:a5:56:ae:30:c2:34: ae:70:e7:ba:87:b4:80:05:a4:03:4d:8b:42:81:6c: c7:61:e2:c9:ea:ab:91:58:f6:c2:ab:ec:23:d9:18: b6:8b:9b:6e:f9:4a:59:cb:58:f5:67:85:e8:fb:1d: a6:88:fa:dd:6d:17:ec:2f:c5:d0:d2:11:e3:77:ca: 3a:03:95:fc:f2:da:4e:5a:f3:7f:6d:64:08:65:16: a2:8d:04:06:4e:6d:1a:31:63:89:f1:7a:2b:09:c4: 7a:67:a1:b3:41:3e:dd:5d:7b:16:3a:0c:42:2c:e4: 7f:c9:8f:b6:30:77:8a:2e:cd:74:d3:05:15:6a:ac: a2:cd:12:66:0e:c7:1d:44:73:3c:72:1f:ef:47:6e: 62:0a:e6:40:5e:c9:57:74:b5:41:e0:1e:af:18:f5: 5b:c3:78:21:86:8c:b7:1a:6f:ff:3a:6f:9f:bf:88: bd:ea:29:aa:17:f0:02:67:01:56:80:05:3c:b6:a1: 6d:7d:d0:3a:26:33:18:44:6e:f5:07:14:c3:8b:b5: cf:51:33:69:ed:f5:94:74:a0:11:9d:a4:27:fa:5d: a3:93:50:f4:aa:34:45:e4:e0:01:ab:3f:b8:b0:7e: 4c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0E:E1:A6:3F:52:31:29:A4:74:A7:B0:53:72:F6:59:45:79:99:35 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UQ7hpj9SMSmkdKewU3L2WUV5mTU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.144.0/24 Signature Algorithm: sha256WithRSAEncryption b4:78:ff:3d:e0:9d:38:db:74:29:66:2a:c2:47:21:cd:cf:4a: a7:7b:02:8f:5c:91:f0:3a:d9:af:72:97:5d:4c:c7:0f:c9:2b: 40:c2:79:8a:24:79:78:ee:63:2f:9c:ec:a1:0c:8f:07:4a:21: 7e:ed:56:d7:c9:05:62:b6:8f:bd:79:2b:81:dc:54:b5:a5:aa: 65:12:70:72:21:75:75:27:92:06:90:6d:57:68:67:5f:33:59: e2:b2:61:5c:84:e8:5d:40:bf:b1:e6:81:39:c7:17:8f:01:de: 17:13:8b:b9:6c:72:51:5b:ad:33:9e:15:14:c1:cb:e7:3c:bb: da:3f:e6:f2:0f:03:a2:1e:47:70:09:7d:b9:52:23:76:3c:a5: ad:6a:09:c9:a3:1d:bf:78:f9:39:68:dc:2b:c2:07:68:ed:96: 79:02:f4:fd:a0:66:78:ba:f2:d3:cf:fa:4b:0b:f4:c6:3e:72: 94:e0:1d:3c:ac:1b:a3:7c:c4:88:a2:ab:8f:d0:b3:c5:bd:78: e3:9f:f3:2e:10:f2:28:f8:e0:3a:70:a1:49:73:54:6f:aa:0d: bf:14:f4:d3:f1:d1:85:62:68:cc:9f:63:39:82:14:85:21:93: 26:47:89:4c:22:25:06:07:8d:cf:3b:ae:9a:b9:3d:d3:d4:6e: 87:44:21:bd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDEwMTIw MjAyMDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDUxMEVFMUE2M0Y1MjMx MjlBNDc0QTdCMDUzNzJGNjU5NDU3OTk5MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCitIsEg64KTn9xGRcojCEmwK/ayBv+IaVWrjDCNK5w57qHtIAF pANNi0KBbMdh4snqq5FY9sKr7CPZGLaLm275SlnLWPVnhej7HaaI+t1tF+wvxdDS EeN3yjoDlfzy2k5a839tZAhlFqKNBAZObRoxY4nxeisJxHpnobNBPt1dexY6DEIs 5H/Jj7Ywd4ouzXTTBRVqrKLNEmYOxx1EczxyH+9HbmIK5kBeyVd0tUHgHq8Y9VvD eCGGjLcab/86b5+/iL3qKaoX8AJnAVaABTy2oW190DomMxhEbvUHFMOLtc9RM2nt 9ZR0oBGdpCf6XaOTUPSqNEXk4AGrP7iwfkwLAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUUQ7hpj9SMSmkdKewU3L2WUV5mTUwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1VRN2hwajlTTVNta2RL ZXdVM0wyV1VWNW1UVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/JAwDQYJKoZIhvcNAQELBQADggEBALR4/z3gnTjbdClmKsJHIc3PSqd7Ao9c kfA62a9yl11Mxw/JK0DCeYokeXjuYy+c7KEMjwdKIX7tVtfJBWK2j715K4HcVLWl qmUScHIhdXUnkgaQbVdoZ18zWeKyYVyE6F1Av7HmgTnHF48B3hcTi7lsclFbrTOe FRTBy+c8u9o/5vIPA6IeR3AJfblSI3Y8pa1qCcmjHb94+Tlo3CvCB2jtlnkC9P2g Zni68tPP+ksL9MY+cpTgHTysG6N8xIiiq4/Qs8W9eOOf8y4Q8ij44DpwoUlzVG+q Db8U9NPx0YViaMyfYzmCFIUhkyZHiUwiJQYHjc87rpq5PdPUbodEIb0= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:47 2024 by rpki-client on console-ams.rpki-client.org