$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/exZU2TVurk9T_pPxhtwOkOExEXI.roa File: exZU2TVurk9T_pPxhtwOkOExEXI.roa (raw, json) Hash identifier: 9oubEA6t4c+sZxOdC/JabFgQf3Llczb2wLlwFmdncGk= Subject key identifier: 7B:16:54:D9:35:6E:AE:4F:53:FE:93:F1:86:DC:0E:90:E1:31:11:72 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 146D Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/exZU2TVurk9T_pPxhtwOkOExEXI.roa Signing time: Wed 11 Sep 2024 02:23:17 +0000 ROA not before: Wed 11 Sep 2024 02:23:17 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 45.252.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5229 (0x146d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:17 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=7B1654D9356EAE4F53FE93F186DC0E90E1311172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:95:03:d3:8b:f7:44:34:94:e3:7c:9f:99:ad: d7:76:13:52:51:af:11:ba:0e:85:07:11:f6:2f:2e: 91:f7:4c:b4:53:bb:a9:3e:e4:c2:b8:bd:69:67:b0: bf:80:c4:85:32:0d:1f:15:49:09:cf:7d:94:a4:d1: cf:2c:b2:7c:2d:d4:3e:c7:11:29:39:89:2c:5b:d8: d5:37:2a:dc:0e:ef:81:b6:87:06:b5:32:ba:26:f0: 07:27:e8:f3:3b:50:ba:84:17:2f:b6:ba:15:32:de: a3:25:02:84:d8:62:94:34:e8:79:2b:5d:5f:43:a3: fd:a9:e2:d7:6b:d7:f7:4e:66:9f:04:89:ce:44:4e: 37:f0:a1:ce:f4:6a:94:cc:63:27:f7:10:2f:8f:fd: 4f:f9:1e:3d:f9:e1:55:30:40:37:47:40:75:4e:97: d3:82:fb:7d:bf:b1:50:fd:e3:66:2b:99:21:79:89: fc:8a:ba:b2:33:a8:ab:96:02:3a:9b:68:f6:3e:08: 09:09:ce:ff:98:07:58:9f:fa:5a:70:16:35:ad:11: 51:e7:7f:f3:bd:0c:3e:15:76:bb:7e:ee:fd:a7:9a: 58:a1:56:33:d8:d4:86:97:08:25:59:72:e8:a7:6f: c6:0b:0a:1d:e1:75:1a:dc:52:d3:50:c5:e3:d8:3b: 5e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:16:54:D9:35:6E:AE:4F:53:FE:93:F1:86:DC:0E:90:E1:31:11:72 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/exZU2TVurk9T_pPxhtwOkOExEXI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.28.0/22 Signature Algorithm: sha256WithRSAEncryption 23:5f:a7:92:06:f3:79:13:7a:56:d9:ef:8d:9d:53:2d:62:f4: 4a:97:e9:1a:7b:b3:82:ca:b8:5f:53:16:74:5a:61:ba:47:6e: 44:fb:66:68:86:9c:85:fd:bd:00:47:a2:c0:e0:b0:d1:7d:5e: 34:38:38:9c:fe:1c:3e:f9:c8:ab:cd:17:11:a9:85:0b:7b:e5: 5f:b9:08:31:08:75:b6:96:f4:12:83:17:ca:2a:ef:ec:48:32: 19:75:be:1d:ca:75:63:29:47:ae:2e:c4:18:a5:a1:8c:58:4d: e4:ed:54:7e:5f:f6:06:89:6c:43:8a:a2:2b:f1:41:62:7a:f3: 24:af:fa:1f:7f:85:2f:d6:e2:74:9f:61:9f:73:12:9c:dc:73: 81:c2:db:07:fe:8f:ec:3d:6e:6f:02:38:98:06:41:99:10:e1: 0e:b3:94:fb:e0:c6:b5:18:ff:c4:8b:7b:ec:bc:af:80:3d:12: 26:c6:ba:7a:1d:31:68:db:fd:89:41:6e:50:55:fb:58:07:e3: 93:dd:bc:12:c3:33:00:e0:a1:c0:23:8a:96:10:b4:09:d5:f0: 8c:49:82:41:99:35:a0:b8:85:d5:8a:d3:a5:77:c6:a4:e2:1e: af:38:ea:9b:4c:6c:a0:ef:59:1c:1c:4a:01:73:ae:6c:98:66: 98:70:4d:a3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDdCMTY1NEQ5MzU2RUFF NEY1M0ZFOTNGMTg2REMwRTkwRTEzMTExNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDllQPTi/dENJTjfJ+Zrdd2E1JRrxG6DoUHEfYvLpH3TLRTu6k+ 5MK4vWlnsL+AxIUyDR8VSQnPfZSk0c8ssnwt1D7HESk5iSxb2NU3KtwO74G2hwa1 Mrom8Acn6PM7ULqEFy+2uhUy3qMlAoTYYpQ06HkrXV9Do/2p4tdr1/dOZp8Eic5E Tjfwoc70apTMYyf3EC+P/U/5Hj354VUwQDdHQHVOl9OC+32/sVD942YrmSF5ifyK urIzqKuWAjqbaPY+CAkJzv+YB1if+lpwFjWtEVHnf/O9DD4Vdrt+7v2nmlihVjPY 1IaXCCVZcuinb8YLCh3hdRrcUtNQxePYO159AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUexZU2TVurk9T/pPxhtwOkOExEXIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2V4WlUyVFZ1cms5VF9w UHhodHdPa09FeEVYSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/BwwDQYJKoZIhvcNAQELBQADggEBACNfp5IG83kTelbZ742dUy1i9EqX6Rp7 s4LKuF9TFnRaYbpHbkT7ZmiGnIX9vQBHosDgsNF9XjQ4OJz+HD75yKvNFxGphQt7 5V+5CDEIdbaW9BKDF8oq7+xIMhl1vh3KdWMpR64uxBiloYxYTeTtVH5f9gaJbEOK oivxQWJ68ySv+h9/hS/W4nSfYZ9zEpzcc4HC2wf+j+w9bm8COJgGQZkQ4Q6zlPvg xrUY/8SLe+y8r4A9EibGunodMWjb/YlBblBV+1gH45PdvBLDMwDgocAjipYQtAnV 8IxJgkGZNaC4hdWK06V3xqTiHq846ptMbKDvWRwcSgFzrmyYZphwTaM= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org