$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ezFUPqFKrhEEEmemQRjr1k0sQ-U.roa File: ezFUPqFKrhEEEmemQRjr1k0sQ-U.roa (raw, json) Hash identifier: vH4vEmgbiR1upMVM7kUB8irotgjeTKp9Zm9nulfkDKg= Subject key identifier: 7B:31:54:3E:A1:4A:AE:11:04:12:67:A6:41:18:EB:D6:4D:2C:43:E5 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 156F Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ezFUPqFKrhEEEmemQRjr1k0sQ-U.roa Signing time: Wed 11 Sep 2024 04:04:12 +0000 ROA not before: Wed 11 Sep 2024 04:04:12 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 45.252.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5487 (0x156f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 04:04:12 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=7B31543EA14AAE11041267A64118EBD64D2C43E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:fe:32:70:16:3d:98:ba:91:bb:97:b2:ff: 13:43:c1:16:bf:cf:a8:d3:f6:7e:25:94:1e:05:3e: b8:21:8c:97:95:c9:c5:76:25:ae:52:ad:0b:8d:f2: fb:26:e6:28:29:3c:61:2e:7d:8b:2a:b0:21:02:13: be:5f:d3:fd:96:67:6d:b4:40:19:26:84:06:fc:7a: bc:ed:01:a7:4a:92:1d:d8:9a:a4:75:ea:dc:91:ae: ab:cd:5c:d0:1a:76:b1:b7:5f:4a:31:12:64:cd:08: 81:97:6e:a7:64:de:4b:f1:91:2e:b5:9e:6d:e3:66: 82:2b:1b:24:ba:ad:be:43:bb:b1:41:82:4d:07:9e: 05:99:12:94:44:e5:c6:79:2d:c6:39:e8:60:cf:9a: 20:15:e7:fc:4e:d0:77:11:ac:b7:bf:2c:88:01:a4: cd:9c:98:9e:ce:f7:5c:6c:25:54:83:7e:a6:f0:5a: d1:1a:c9:52:a8:0f:02:7e:9a:3e:0e:11:48:59:d4: 71:e0:8e:01:9b:8a:d1:13:1e:46:90:0a:71:74:2c: 99:56:bb:68:5d:91:62:df:92:ed:6e:20:e9:bc:99: 19:77:61:eb:a1:33:2a:d9:09:1a:e2:86:15:12:77: 1b:3f:79:80:7c:8a:e4:e8:57:16:8e:2f:0d:66:09: 96:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:31:54:3E:A1:4A:AE:11:04:12:67:A6:41:18:EB:D6:4D:2C:43:E5 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ezFUPqFKrhEEEmemQRjr1k0sQ-U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.103.0/24 Signature Algorithm: sha256WithRSAEncryption 37:1e:ae:2b:68:7c:d7:bb:ed:7a:f8:82:68:67:79:ab:ce:67: 2d:47:6d:81:90:70:1b:4d:93:af:66:8b:89:a3:a4:7a:3d:26: c2:77:6c:47:c9:73:49:9e:2e:ae:b2:91:0e:c1:df:e9:40:64: 8d:d8:88:e1:26:fa:2e:75:77:18:f0:db:74:6d:ef:b5:ef:04: 0d:3d:01:92:33:ac:fc:7e:86:1e:28:8d:5a:d4:f6:e6:19:c6: ff:f9:dd:13:f1:fd:fa:8f:be:bd:9c:48:78:c5:c6:04:eb:d9: 1b:3c:d0:13:33:b4:72:2e:cc:9c:1e:a5:fb:2d:a2:82:36:64: 53:1c:a6:91:56:40:ce:bb:49:34:cd:a8:65:58:b3:e9:e7:1a: 1c:b2:fe:0d:08:57:5a:e3:9e:b5:e7:96:b6:db:24:58:b4:30: 87:df:0c:27:3e:b9:1e:41:15:ae:2d:b6:32:7f:56:15:a4:c8: e6:35:78:46:b8:89:dc:33:33:56:11:ef:e8:d7:5d:91:4a:5d: 1f:b5:74:32:37:19:f0:e7:40:72:c8:93:86:76:57:73:44:cc: ba:a8:21:ef:d8:43:79:30:38:4e:22:ee:d7:47:70:87:bf:3a: 80:9a:31:8f:e7:64:11:ff:aa:35:c0:62:72:f6:9c:09:7e:9b: 1d:df:49:c6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw NDA0MTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDdCMzE1NDNFQTE0QUFF MTEwNDEyNjdBNjQxMThFQkQ2NEQyQzQzRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKvf4ycBY9mLqRu5ey/xNDwRa/z6jT9n4llB4FPrghjJeVycV2 Ja5SrQuN8vsm5igpPGEufYsqsCECE75f0/2WZ220QBkmhAb8erztAadKkh3YmqR1 6tyRrqvNXNAadrG3X0oxEmTNCIGXbqdk3kvxkS61nm3jZoIrGyS6rb5Du7FBgk0H ngWZEpRE5cZ5LcY56GDPmiAV5/xO0HcRrLe/LIgBpM2cmJ7O91xsJVSDfqbwWtEa yVKoDwJ+mj4OEUhZ1HHgjgGbitETHkaQCnF0LJlWu2hdkWLfku1uIOm8mRl3Yeuh MyrZCRrihhUSdxs/eYB8iuToVxaOLw1mCZZJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUezFUPqFKrhEEEmemQRjr1k0sQ+UwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2V6RlVQcUZLcmhFRUVt ZW1RUmpyMWswc1EtVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/GcwDQYJKoZIhvcNAQELBQADggEBADceritofNe77Xr4gmhneavOZy1HbYGQ cBtNk69mi4mjpHo9JsJ3bEfJc0meLq6ykQ7B3+lAZI3YiOEm+i51dxjw23Rt77Xv BA09AZIzrPx+hh4ojVrU9uYZxv/53RPx/fqPvr2cSHjFxgTr2Rs80BMztHIuzJwe pfstooI2ZFMcppFWQM67STTNqGVYs+nnGhyy/g0IV1rjnrXnlrbbJFi0MIffDCc+ uR5BFa4ttjJ/VhWkyOY1eEa4idwzM1YR7+jXXZFKXR+1dDI3GfDnQHLIk4Z2V3NE zLqoIe/YQ3kwOE4i7tdHcIe/OoCaMY/nZBH/qjXAYnL2nAl+mx3fScY= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org