$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/hU0Bff5By85I2UoSvaRXNSSgus0.roa File: hU0Bff5By85I2UoSvaRXNSSgus0.roa (raw, json) Hash identifier: OWrLViyyKCPdTKlBoEiZornb2jyZSkbPySEmclMsfUQ= Subject key identifier: 85:4D:01:7D:FE:41:CB:CE:48:D9:4A:12:BD:A4:57:35:24:A0:BA:CD Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 16D6 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/hU0Bff5By85I2UoSvaRXNSSgus0.roa Signing time: Wed 20 Nov 2024 02:11:28 +0000 ROA not before: Wed 20 Nov 2024 02:11:28 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 45.252.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5846 (0x16d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Nov 20 02:11:28 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=854D017DFE41CBCE48D94A12BDA4573524A0BACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:52:b8:d3:86:76:7a:69:13:42:ec:90:ce: 3a:21:40:94:9d:3e:ff:b6:49:f9:2b:77:4f:12:fa: 24:2a:ce:9e:9b:2c:fa:af:4a:0e:f9:5b:be:3b:73: b8:84:4d:81:a1:b5:72:c0:f4:98:a4:43:dc:d5:06: f8:8a:a0:18:2b:97:d8:b1:b7:4a:4a:72:6f:b9:f6: 44:dc:c4:3b:3d:a5:40:f1:c8:3e:98:d1:69:c4:d0: 6e:1a:c5:db:e5:a3:d1:cd:fd:e5:a0:d9:4c:4d:d9: c3:22:10:40:72:67:9c:4a:d1:af:7b:02:25:b8:e5: 15:fa:24:3b:d2:cd:5b:71:7a:c7:de:84:1c:6d:d0: bb:61:54:23:30:f4:eb:2f:e9:a2:87:84:5d:6e:70: f8:80:46:c0:a3:52:8c:34:36:d8:be:cf:b8:6c:42: 1b:c4:71:b4:e6:3d:88:3a:4e:b9:52:0b:14:e6:b9: 7d:c5:b4:1b:fb:ca:5a:4e:20:83:3a:ed:65:32:02: 95:15:30:17:2c:2f:7a:31:5b:e0:4d:fc:ff:c0:49: 5b:08:00:99:b6:04:2e:e6:22:c7:0a:12:52:8a:7d: 4d:12:70:38:7a:a4:ef:ef:7b:0d:12:9d:24:99:e0: ec:91:33:51:67:6f:4b:cf:3c:d7:c8:1c:20:eb:27: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4D:01:7D:FE:41:CB:CE:48:D9:4A:12:BD:A4:57:35:24:A0:BA:CD X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/hU0Bff5By85I2UoSvaRXNSSgus0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.84.0/24 Signature Algorithm: sha256WithRSAEncryption c7:f6:9e:81:8f:b2:99:65:09:51:92:d2:65:b2:6c:ea:bd:5e: bd:5c:90:76:3a:be:44:69:71:ff:14:de:b3:e4:7c:68:63:93: 8e:8c:13:1f:63:98:c9:07:35:b7:b9:ea:78:41:e6:d5:5a:f2: 7c:dd:50:20:de:26:ab:50:b7:25:d8:f1:1c:d0:7c:3a:22:af: 17:56:3a:0f:f6:01:89:cd:17:87:2f:25:33:57:56:7c:09:ee: 98:4c:a5:dc:a8:96:a2:0a:d7:ca:d6:35:0a:52:c1:a3:5f:0a: 63:ce:29:81:ce:ed:f8:a5:f4:2b:a8:c4:bb:4a:f7:ac:bb:eb: 60:9d:9f:13:60:85:05:47:78:61:21:b6:8e:4b:c0:a1:4e:c4: 81:09:20:be:b5:2e:da:0a:bb:13:8f:29:fd:7d:01:b7:3b:59: 93:7e:8a:26:45:b1:0c:da:e4:34:68:5e:f0:d9:66:67:30:d5: a7:c2:73:ac:e8:f8:9f:e5:10:fc:9e:59:11:11:f3:66:ce:e1: 52:35:8d:40:f6:4b:f5:b8:8d:a5:40:ca:dc:14:c3:68:86:d1: 2d:fb:15:42:46:83:f7:c9:0c:8a:ea:db:5a:5f:d0:88:bb:8b: 00:b1:d6:49:7c:4c:bb:2a:a6:b2:7c:bc:d1:95:9c:17:43:e9: db:37:b6:37 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDExMjAw MjExMjhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDg1NEQwMTdERkU0MUNC Q0U0OEQ5NEExMkJEQTQ1NzM1MjRBMEJBQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtc1K404Z2emkTQuyQzjohQJSdPv+2Sfkrd08S+iQqzp6bLPqv Sg75W747c7iETYGhtXLA9JikQ9zVBviKoBgrl9ixt0pKcm+59kTcxDs9pUDxyD6Y 0WnE0G4axdvlo9HN/eWg2UxN2cMiEEByZ5xK0a97AiW45RX6JDvSzVtxesfehBxt 0LthVCMw9Osv6aKHhF1ucPiARsCjUow0Nti+z7hsQhvEcbTmPYg6TrlSCxTmuX3F tBv7ylpOIIM67WUyApUVMBcsL3oxW+BN/P/ASVsIAJm2BC7mIscKElKKfU0ScDh6 pO/vew0SnSSZ4OyRM1Fnb0vPPNfIHCDrJ2xDAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUhU0Bff5By85I2UoSvaRXNSSgus0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2hVMEJmZjVCeTg1STJV b1N2YVJYTlNTZ3VzMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/FQwDQYJKoZIhvcNAQELBQADggEBAMf2noGPspllCVGS0mWybOq9Xr1ckHY6 vkRpcf8U3rPkfGhjk46MEx9jmMkHNbe56nhB5tVa8nzdUCDeJqtQtyXY8RzQfDoi rxdWOg/2AYnNF4cvJTNXVnwJ7phMpdyolqIK18rWNQpSwaNfCmPOKYHO7fil9Cuo xLtK96y762CdnxNghQVHeGEhto5LwKFOxIEJIL61LtoKuxOPKf19Abc7WZN+iiZF sQza5DRoXvDZZmcw1afCc6zo+J/lEPyeWRER82bO4VI1jUD2S/W4jaVAytwUw2iG 0S37FUJGg/fJDIrq21pf0Ii7iwCx1kl8TLsqprJ8vNGVnBdD6ds3tjc= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:41 2024 by rpki-client on console-fra.rpki-client.org