$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/kCMCkKNO1EXpIe96wyaZt_Kh1po.roa File: kCMCkKNO1EXpIe96wyaZt_Kh1po.roa (raw, json) Hash identifier: XX2+SY90ylEGUS6hoqSBPbkkafQ6aPd+2wVzYlvdjfs= Subject key identifier: 90:23:02:90:A3:4E:D4:45:E9:21:EF:7A:C3:26:99:B7:F2:A1:D6:9A Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 147E Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/kCMCkKNO1EXpIe96wyaZt_Kh1po.roa Signing time: Wed 11 Sep 2024 02:23:22 +0000 ROA not before: Wed 11 Sep 2024 02:23:22 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 17621 IP address blocks: 43.254.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5246 (0x147e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:22 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=90230290A34ED445E921EF7AC32699B7F2A1D69A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cf:9a:0a:db:d3:d8:ce:1f:9c:63:2a:fa:18: 5a:88:c1:36:30:8d:fa:f9:fb:64:74:0b:c1:03:8a: f9:f8:60:70:d0:26:03:00:10:14:b9:cf:d1:78:de: a2:f8:0d:04:80:21:01:ac:f5:73:b8:9f:64:e3:05: 9f:bc:b8:bb:46:b9:7e:cc:0f:f5:3e:60:43:35:fe: f4:cf:2a:4e:64:98:ce:78:28:9c:b9:95:28:97:c3: 25:0f:b6:13:63:c3:4f:9d:e6:34:e3:8c:bd:7c:42: 57:31:db:1e:61:53:bc:2d:2e:27:70:a9:60:21:ac: c0:82:9b:71:d3:e8:df:a1:47:7c:6a:dd:dc:00:fa: fb:cc:9f:93:20:37:c2:15:d3:68:a1:b7:e2:2c:ec: 80:cf:ea:10:73:e6:f7:66:6d:51:a4:40:5b:a5:97: c5:26:4c:7b:84:da:3a:98:a5:d3:5f:ac:3b:09:a1: 6d:77:26:0d:5e:ce:2a:59:79:fb:f8:77:07:24:0d: 8b:70:a1:68:a1:41:9c:79:d1:ca:1f:31:d6:11:48: db:3d:6d:59:1b:43:8b:66:df:ba:33:bc:6b:4e:41: dd:5e:ad:ec:6f:7e:d7:b2:4e:d4:b7:36:33:de:04: ba:65:ea:63:45:05:81:cc:af:c4:4e:5b:d0:5e:a1: 01:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:23:02:90:A3:4E:D4:45:E9:21:EF:7A:C3:26:99:B7:F2:A1:D6:9A X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/kCMCkKNO1EXpIe96wyaZt_Kh1po.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.254.152.0/24 Signature Algorithm: sha256WithRSAEncryption 34:e5:01:0b:55:ef:65:9a:91:e1:56:56:2c:56:dc:56:03:6b: 53:2c:7b:b2:7d:97:b2:64:6f:e1:1f:27:85:b6:db:a8:ab:97: 11:3e:4f:df:3c:b5:7f:19:fe:7a:20:0a:54:ca:4c:a4:12:71: 7e:2a:fa:2b:5c:e8:65:a5:1a:66:07:92:42:7e:09:5a:87:b3: 21:f6:84:bb:34:69:64:08:0e:09:ba:aa:bb:51:23:8b:15:24: 20:2c:03:46:34:8e:fd:dd:d6:d0:50:df:87:02:cd:87:21:74: 4e:85:65:3c:a7:21:80:9c:4a:b0:24:f3:dc:3e:10:e1:62:46: f3:d2:fc:ca:95:8e:57:7e:41:3e:f3:4d:15:fe:1d:a5:4a:61: 5b:09:89:5d:42:a3:22:32:eb:0a:74:73:67:3b:b3:fa:14:de: ab:4a:96:78:80:78:d9:d1:2f:fb:1a:d1:7b:b9:29:f2:be:9e: 6a:1c:14:59:6e:29:ed:4b:71:27:9c:3b:58:0d:42:03:0c:a4: 67:ad:c3:a2:31:0f:33:22:da:e7:1b:c9:1c:b4:63:3a:d7:9e: 90:4d:5d:8a:cf:c1:37:97:5d:2f:48:b2:08:0d:3a:48:20:c8: b6:91:15:10:6c:e0:2b:c8:49:20:cd:f3:3c:1b:d4:a1:35:f0: e9:93:9a:8e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMjJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDkwMjMwMjkwQTM0RUQ0 NDVFOTIxRUY3QUMzMjY5OUI3RjJBMUQ2OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpz5oK29PYzh+cYyr6GFqIwTYwjfr5+2R0C8EDivn4YHDQJgMA EBS5z9F43qL4DQSAIQGs9XO4n2TjBZ+8uLtGuX7MD/U+YEM1/vTPKk5kmM54KJy5 lSiXwyUPthNjw0+d5jTjjL18Qlcx2x5hU7wtLidwqWAhrMCCm3HT6N+hR3xq3dwA +vvMn5MgN8IV02iht+Is7IDP6hBz5vdmbVGkQFull8UmTHuE2jqYpdNfrDsJoW13 Jg1ezipZefv4dwckDYtwoWihQZx50cofMdYRSNs9bVkbQ4tm37ozvGtOQd1erexv fteyTtS3NjPeBLpl6mNFBYHMr8ROW9BeoQG1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUkCMCkKNO1EXpIe96wyaZt/Kh1powHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2tDTUNrS05PMUVYcEll OTZ3eWFadF9LaDFwby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr/pgwDQYJKoZIhvcNAQELBQADggEBADTlAQtV72WakeFWVixW3FYDa1Mse7J9 l7Jkb+EfJ4W226irlxE+T988tX8Z/nogClTKTKQScX4q+itc6GWlGmYHkkJ+CVqH syH2hLs0aWQIDgm6qrtRI4sVJCAsA0Y0jv3d1tBQ34cCzYchdE6FZTynIYCcSrAk 89w+EOFiRvPS/MqVjld+QT7zTRX+HaVKYVsJiV1CoyIy6wp0c2c7s/oU3qtKlniA eNnRL/sa0Xu5KfK+nmocFFluKe1LcSecO1gNQgMMpGetw6IxDzMi2ucbyRy0YzrX npBNXYrPwTeXXS9IsggNOkggyLaRFRBs4CvISSDN8zwb1KE18OmTmo4= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org