$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/a7qnVSYb6lCC_qIEi5ZJGHV8zLE.roa File: a7qnVSYb6lCC_qIEi5ZJGHV8zLE.roa (raw, json) Hash identifier: HKiM+T0zFXFM/BcP8Y1JusPpXVL7oieTkux6+XqiS3Q= Subject key identifier: 6B:BA:A7:55:26:1B:EA:50:82:FE:A2:04:8B:96:49:18:75:7C:CC:B1 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 146E Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/a7qnVSYb6lCC_qIEi5ZJGHV8zLE.roa Signing time: Wed 11 Sep 2024 02:23:18 +0000 ROA not before: Wed 11 Sep 2024 02:23:18 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 45.252.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5230 (0x146e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:18 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=6BBAA755261BEA5082FEA2048B964918757CCCB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:78:b9:54:e7:57:38:2c:95:5f:7c:c3:ad:10: b5:b3:db:82:56:fe:0a:8c:4e:75:6c:67:33:48:69: 8f:ef:16:10:0c:c0:80:2c:c9:7f:cb:b9:11:3c:94: d8:ba:1a:87:93:8c:b3:28:15:33:af:f3:72:ad:93: 3a:f9:2f:da:41:25:8d:81:fd:2a:c8:19:67:ba:34: a5:47:71:e2:b2:55:99:b8:79:bd:0b:50:a5:f4:04: 1c:ff:d1:01:eb:20:0e:0a:11:28:85:4b:b7:f1:91: 36:66:68:41:e3:94:08:a3:ba:7e:49:37:ca:34:20: dd:f6:ea:b8:1c:c6:57:8e:7b:87:73:0e:8a:27:79: 46:14:4f:7e:c2:bf:f0:40:48:09:ee:60:5e:f7:63: 56:71:88:1b:c0:c8:5b:4f:e9:dd:72:b5:3d:07:96: e7:7b:c4:5e:c0:6a:e5:d1:00:c4:af:09:3b:b7:0a: 5a:cf:f4:4e:e1:6a:6b:21:ad:96:75:28:c0:f7:34: b9:2b:81:d9:a7:d5:ab:ff:a7:97:b5:b4:cc:a6:67: 24:34:ac:6c:69:6d:e9:de:ff:f1:f7:80:5d:44:a9: 12:0f:4e:c9:18:9b:ad:b7:79:40:da:e6:2e:8e:74: a8:74:20:4d:a3:6c:e6:4a:d2:da:2e:5e:11:e5:8f: 4d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BA:A7:55:26:1B:EA:50:82:FE:A2:04:8B:96:49:18:75:7C:CC:B1 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/a7qnVSYb6lCC_qIEi5ZJGHV8zLE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.144.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:57:bc:97:c4:8f:e3:a1:41:03:f2:cf:4a:c9:f1:81:e1:be: 06:08:68:35:a6:b4:35:9b:77:0c:b7:a0:fa:c8:5b:84:34:e0: 23:30:e2:d7:45:d0:b6:98:1b:ab:21:0c:24:ec:3d:fe:7d:d7: 3e:63:75:d2:98:c6:eb:92:8f:26:3d:b8:82:86:8a:e8:0d:37: 06:7c:ed:c1:a7:78:1b:dd:e0:e8:a6:3b:38:49:0c:1d:69:c9: 18:a1:ca:c9:a0:b7:40:9c:a7:c6:cc:b6:15:9e:db:c7:29:b3: 63:8c:b6:8d:78:28:27:11:4f:24:39:d4:ce:f4:b6:03:68:42: 23:97:d4:78:30:4c:6f:8c:3a:54:22:8d:89:ea:c1:0e:6e:52: c6:38:8d:1b:71:2e:08:c5:05:8b:e3:3f:3f:cf:73:f3:aa:ea: 23:be:83:3b:9a:69:05:5f:44:91:03:fd:55:f4:1c:23:f0:70: f0:44:79:cc:e3:32:e5:83:91:57:cc:78:c2:92:18:1e:08:d1: 71:0e:31:80:fe:6a:d0:e7:e1:c5:d9:ff:db:14:4d:d6:8d:09: df:2e:83:54:9f:4c:10:25:a0:6d:23:01:42:a3:1e:9e:6f:d6: 40:8f:bb:70:fb:31:ae:71:06:da:91:5f:72:9e:95:11:9d:7f: ee:6d:29:fe -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZCQkFBNzU1MjYxQkVB NTA4MkZFQTIwNDhCOTY0OTE4NzU3Q0NDQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOeLlU51c4LJVffMOtELWz24JW/gqMTnVsZzNIaY/vFhAMwIAs yX/LuRE8lNi6GoeTjLMoFTOv83Ktkzr5L9pBJY2B/SrIGWe6NKVHceKyVZm4eb0L UKX0BBz/0QHrIA4KESiFS7fxkTZmaEHjlAijun5JN8o0IN326rgcxleOe4dzDoon eUYUT37Cv/BASAnuYF73Y1ZxiBvAyFtP6d1ytT0Hlud7xF7AauXRAMSvCTu3ClrP 9E7hamshrZZ1KMD3NLkrgdmn1av/p5e1tMymZyQ0rGxpbene//H3gF1EqRIPTskY m623eUDa5i6OdKh0IE2jbOZK0touXhHlj03NAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUa7qnVSYb6lCC/qIEi5ZJGHV8zLEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2E3cW5WU1liNmxDQ19x SUVpNVpKR0hWOHpMRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/JAwDQYJKoZIhvcNAQELBQADggEBAB9XvJfEj+OhQQPyz0rJ8YHhvgYIaDWm tDWbdwy3oPrIW4Q04CMw4tdF0LaYG6shDCTsPf591z5jddKYxuuSjyY9uIKGiugN NwZ87cGneBvd4OimOzhJDB1pyRihysmgt0Ccp8bMthWe28cps2OMto14KCcRTyQ5 1M70tgNoQiOX1HgwTG+MOlQijYnqwQ5uUsY4jRtxLgjFBYvjPz/Pc/Oq6iO+gzua aQVfRJED/VX0HCPwcPBEeczjMuWDkVfMeMKSGB4I0XEOMYD+atDn4cXZ/9sUTdaN Cd8ug1SfTBAloG0jAUKjHp5v1kCPu3D7Ma5xBtqRX3KelRGdf+5tKf4= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org