$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/eg_XHxjB62oIIV0-PEYPN8uPZ1M.roa File: eg_XHxjB62oIIV0-PEYPN8uPZ1M.roa (raw, json) Hash identifier: sYGNOhrYa43MD6OCtBp42Ye9dthHY0Zjr4+pCdEmCTo= Subject key identifier: 7A:0F:D7:1F:18:C1:EB:6A:08:21:5D:3E:3C:46:0F:37:CB:8F:67:53 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 0CE0 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/eg_XHxjB62oIIV0-PEYPN8uPZ1M.roa Signing time: Wed 13 Mar 2024 01:21:59 +0000 ROA not before: Wed 13 Mar 2024 01:21:59 +0000 ROA not after: Fri 07 Jun 2024 02:16:11 +0000 asID: 4812 IP address blocks: 43.254.152.0/24 maxlen: 24 103.5.192.0/22 maxlen: 24 103.24.116.0/24 maxlen: 24 103.24.118.0/23 maxlen: 24 150.242.238.0/23 maxlen: 24 202.89.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 11:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3296 (0xce0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Mar 13 01:21:59 2024 GMT Not After : Jun 7 02:16:11 2024 GMT Subject: CN=7A0FD71F18C1EB6A08215D3E3C460F37CB8F6753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:b9:d8:2b:27:69:fe:56:48:cf:3c:7e:5d: 4b:44:cd:f8:4a:39:ef:53:80:59:87:72:77:74:ea: 72:47:a5:79:e4:26:d3:60:8b:79:d9:60:a9:0c:54: 2b:28:f6:7e:8c:42:61:b8:9f:88:da:3c:2e:77:6c: 1b:59:3f:79:ce:3e:7d:8a:6b:10:92:eb:1e:15:34: 69:c3:9a:55:58:1e:83:70:eb:1b:ba:c3:9b:ca:6b: 5c:1e:ff:d0:5e:ff:e6:2b:17:60:e8:e5:df:3d:b4: b2:cb:8e:2a:0b:0f:2e:0b:2c:5b:e3:b3:5a:62:43: 80:29:6e:71:0c:c6:3d:71:d5:ce:b4:19:90:f5:cf: 74:b9:55:08:66:a1:72:a6:88:86:b8:98:e6:81:2f: a6:fa:9e:0e:f8:ad:e5:44:b1:16:1d:9f:fd:45:05: e9:53:48:cb:e7:7f:bf:cd:ea:f0:37:35:d8:05:7e: 4c:33:57:8f:96:98:c4:00:c2:c4:b9:15:70:70:1e: a6:02:c1:48:7c:70:0f:69:26:e3:dd:9f:30:49:39: 78:8b:60:d5:7e:29:41:c2:80:20:94:ca:b9:dd:7e: 6d:cf:49:c1:c1:71:54:88:39:e7:a2:64:66:e6:d6: 9e:15:46:4e:a8:72:c9:1f:e3:9a:c1:95:63:f8:69: 6d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0F:D7:1F:18:C1:EB:6A:08:21:5D:3E:3C:46:0F:37:CB:8F:67:53 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/eg_XHxjB62oIIV0-PEYPN8uPZ1M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.254.152.0/24 103.5.192.0/22 103.24.116.0/24 103.24.118.0/23 150.242.238.0/23 202.89.96.0/24 Signature Algorithm: sha256WithRSAEncryption ba:85:7e:46:05:2b:98:2d:53:85:c3:4d:e3:64:c5:9f:2e:5c: 93:aa:80:83:4a:e7:09:22:71:f9:51:94:0f:c5:fd:e7:94:af: 51:7c:7e:3f:80:f4:7f:5d:1a:44:0d:d9:04:7e:2a:73:be:fb: ab:ed:40:22:cd:73:22:00:d5:75:f4:52:79:28:3a:06:c9:ca: c6:4b:71:6e:22:9c:8a:c5:4c:66:60:06:57:27:d4:8b:31:3e: 05:39:9f:39:9c:fc:ae:8b:54:f5:4f:52:55:af:bf:c7:a3:37: 75:37:33:6c:9b:a2:72:40:f3:cb:2a:20:05:45:5d:3e:0b:57: 49:02:13:b5:6f:ad:4b:f7:9b:38:27:e8:b1:45:c6:8b:85:b2: 9a:02:48:0f:28:a6:83:e9:11:cc:32:4a:33:c8:e5:bc:c8:23: c5:82:ba:d2:17:5d:4a:6f:16:02:85:c8:5e:90:70:f5:e4:8f: e2:56:29:f1:42:22:29:d7:ab:f0:eb:87:ff:81:bb:7d:1e:3f: 98:ad:58:c4:fc:55:77:24:b8:95:d9:cc:67:d6:7d:2d:be:59: 63:00:87:e6:ff:3e:77:a5:86:39:f6:2d:4f:70:40:e9:f1:9b: 6a:96:3b:b3:76:59:77:c5:04:f1:01:8e:3e:16:07:9d:a1:83: d0:b7:da:39 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICDOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDAzMTMw MTIxNTlaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDdBMEZENzFGMThDMUVC NkEwODIxNUQzRTNDNDYwRjM3Q0I4RjY3NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm4bnYKydp/lZIzzx+XUtEzfhKOe9TgFmHcnd06nJHpXnkJtNg i3nZYKkMVCso9n6MQmG4n4jaPC53bBtZP3nOPn2KaxCS6x4VNGnDmlVYHoNw6xu6 w5vKa1we/9Be/+YrF2Do5d89tLLLjioLDy4LLFvjs1piQ4ApbnEMxj1x1c60GZD1 z3S5VQhmoXKmiIa4mOaBL6b6ng74reVEsRYdn/1FBelTSMvnf7/N6vA3NdgFfkwz V4+WmMQAwsS5FXBwHqYCwUh8cA9pJuPdnzBJOXiLYNV+KUHCgCCUyrndfm3PScHB cVSIOeeiZGbm1p4VRk6ocskf45rBlWP4aW1tAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUeg/XHxjB62oIIV0+PEYPN8uPZ1MwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2VnX1hIeGpCNjJvSUlW MC1QRVlQTjh1UFoxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQD BAAr/pgDBAJnBcADBABnGHQDBAFnGHYDBAGW8u4DBADKWWAwDQYJKoZIhvcNAQEL BQADggEBALqFfkYFK5gtU4XDTeNkxZ8uXJOqgINK5wkicflRlA/F/eeUr1F8fj+A 9H9dGkQN2QR+KnO++6vtQCLNcyIA1XX0UnkoOgbJysZLcW4inIrFTGZgBlcn1Isx PgU5nzmc/K6LVPVPUlWvv8ejN3U3M2ybonJA88sqIAVFXT4LV0kCE7VvrUv3mzgn 6LFFxouFspoCSA8opoPpEcwySjPI5bzII8WCutIXXUpvFgKFyF6QcPXkj+JWKfFC IinXq/Drh/+Bu30eP5itWMT8VXckuJXZzGfWfS2+WWMAh+b/Pnelhjn2LU9wQOnx m2qWO7N2WXfFBPEBjj4WB52hg9C32jk= -----END CERTIFICATE-----Generated at Sat Jun 1 06:30:39 2024 by rpki-client on console-fra.rpki-client.org