$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/lMKkqTDRuXr1NnP8I60tKpRzJ-I.roa File: lMKkqTDRuXr1NnP8I60tKpRzJ-I.roa (raw, json) Hash identifier: sE1cNW7VYI4JKOnvDMBC/tLN8QHeWf246JASeU9QC0g= Subject key identifier: 94:C2:A4:A9:30:D1:B9:7A:F5:36:73:FC:23:AD:2D:2A:94:73:27:E2 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1482 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lMKkqTDRuXr1NnP8I60tKpRzJ-I.roa Signing time: Wed 11 Sep 2024 02:23:25 +0000 ROA not before: Wed 11 Sep 2024 02:23:24 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 45.252.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5250 (0x1482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:24 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=94C2A4A930D1B97AF53673FC23AD2D2A947327E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ae:74:21:d7:f3:8a:3b:50:98:c1:0f:e0:11: a3:51:e3:bb:63:88:a5:91:84:f6:23:3c:1b:93:18: 00:b6:34:d1:a7:f7:57:06:7d:01:d0:91:e7:a5:01: f1:68:4d:d7:99:76:3b:27:29:5a:61:a6:ce:ab:63: 08:a8:30:d7:8f:33:fb:f2:2b:51:13:0c:dc:1e:7b: 1e:5c:2a:73:bb:61:a5:6a:50:42:af:bb:78:fa:35: 97:4a:cc:88:c7:df:7d:ec:12:00:45:e5:f1:74:3a: 70:63:d0:d5:59:b9:f9:46:33:bc:44:e9:a3:41:8b: 8a:6c:9b:eb:65:70:29:a8:3b:79:48:dc:24:22:43: 68:92:0d:fe:fe:fb:61:de:17:87:fb:90:65:b8:bf: 06:f3:a2:42:3f:da:10:19:b9:f1:dc:b3:e1:92:9d: 3c:45:7e:3c:d9:d4:b1:29:14:2f:8a:95:19:82:53: 2f:eb:76:f7:5e:89:8a:eb:ef:40:7b:6b:ad:eb:cf: 3e:7f:d8:5d:54:56:97:47:d2:00:88:bb:a4:61:64: 5a:5b:26:9c:11:3f:ef:d4:68:6f:49:03:7d:84:0f: 91:4a:dc:6b:3a:51:af:28:cb:58:d5:b2:de:17:c4: ba:6f:81:03:83:b8:27:d5:83:63:d0:2d:63:4e:35: aa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C2:A4:A9:30:D1:B9:7A:F5:36:73:FC:23:AD:2D:2A:94:73:27:E2 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lMKkqTDRuXr1NnP8I60tKpRzJ-I.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.40.0/22 Signature Algorithm: sha256WithRSAEncryption c8:5c:e7:76:dd:ab:47:c4:e3:f1:c3:8f:7d:32:e8:a3:9a:13: 0f:33:89:c1:24:1f:c4:2f:ec:43:1d:cf:52:cf:1b:35:01:90: 8a:ac:e5:98:3e:ed:97:c1:8d:f9:d1:d7:4f:d5:53:ac:be:34: d7:3c:fd:bc:ab:64:cf:30:d7:51:80:77:07:c4:89:35:5d:a4: de:7e:1e:7f:1e:29:ae:9e:c5:71:41:e8:ef:e0:4b:01:a1:b4: 6e:3d:97:20:ff:bb:fd:ad:ba:57:46:20:3b:df:ff:b6:26:ae: 7b:58:4f:85:eb:ff:1e:23:8f:f3:94:97:ec:b7:b0:62:a7:fa: a3:6c:e5:3e:3d:bc:1c:3d:a2:04:0a:be:1f:d9:a9:7d:9a:af: 91:0a:a8:88:bc:1f:08:4e:fb:c5:e2:ca:65:aa:18:3e:61:e8: 4b:13:21:bc:cc:2b:d5:cb:90:e7:4f:b7:1a:c2:90:3f:36:c4: 87:c5:3a:cb:e9:47:56:aa:82:0c:13:e6:0f:27:45:de:0f:d9: 3b:50:21:91:78:c5:a8:db:42:b6:c0:59:59:41:8b:6c:1f:b2: 87:c3:a3:f9:27:c8:64:51:0d:44:dd:1b:e1:7e:a9:09:56:0f: f7:40:eb:1b:3b:9a:aa:93:0c:d3:1e:f2:e0:88:c8:2f:c3:2e: 0c:16:b8:a7 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMjRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDk0QzJBNEE5MzBEMUI5 N0FGNTM2NzNGQzIzQUQyRDJBOTQ3MzI3RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8rnQh1/OKO1CYwQ/gEaNR47tjiKWRhPYjPBuTGAC2NNGn91cG fQHQkeelAfFoTdeZdjsnKVphps6rYwioMNePM/vyK1ETDNweex5cKnO7YaVqUEKv u3j6NZdKzIjH333sEgBF5fF0OnBj0NVZuflGM7xE6aNBi4psm+tlcCmoO3lI3CQi Q2iSDf7++2HeF4f7kGW4vwbzokI/2hAZufHcs+GSnTxFfjzZ1LEpFC+KlRmCUy/r dvdeiYrr70B7a63rzz5/2F1UVpdH0gCIu6RhZFpbJpwRP+/UaG9JA32ED5FK3Gs6 Ua8oy1jVst4XxLpvgQODuCfVg2PQLWNONarbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUlMKkqTDRuXr1NnP8I60tKpRzJ+IwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2xNS2txVERSdVhyMU5u UDhJNjB0S3BSekotSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/CgwDQYJKoZIhvcNAQELBQADggEBAMhc53bdq0fE4/HDj30y6KOaEw8zicEk H8Qv7EMdz1LPGzUBkIqs5Zg+7ZfBjfnR10/VU6y+NNc8/byrZM8w11GAdwfEiTVd pN5+Hn8eKa6exXFB6O/gSwGhtG49lyD/u/2tuldGIDvf/7YmrntYT4Xr/x4jj/OU l+y3sGKn+qNs5T49vBw9ogQKvh/ZqX2ar5EKqIi8HwhO+8XiymWqGD5h6EsTIbzM K9XLkOdPtxrCkD82xIfFOsvpR1aqggwT5g8nRd4P2TtQIZF4xajbQrbAWVlBi2wf sofDo/knyGRRDUTdG+F+qQlWD/dA6xs7mqqTDNMe8uCIyC/DLgwWuKc= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org