$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/mQ1CbbSWDVPlD6RqESJcyYDmCcI.roa File: mQ1CbbSWDVPlD6RqESJcyYDmCcI.roa (raw, json) Hash identifier: B9uODwmmdgWYr4juUZR1yLYPshgkd5I65GAcGsp4+AQ= Subject key identifier: 99:0D:42:6D:B4:96:0D:53:E5:0F:A4:6A:11:22:5C:C9:80:E6:09:C2 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14B8 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/mQ1CbbSWDVPlD6RqESJcyYDmCcI.roa Signing time: Wed 11 Sep 2024 02:23:43 +0000 ROA not before: Wed 11 Sep 2024 02:23:43 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59083 IP address blocks: 202.136.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5304 (0x14b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:43 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=990D426DB4960D53E50FA46A11225CC980E609C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:1f:cc:85:24:c3:f6:03:9d:ba:40:06:08: b0:7f:5b:df:6e:4a:da:8d:fb:c4:7c:3d:4e:ef:04: c2:7d:14:d3:44:a3:c6:99:6a:5f:3d:dc:f5:72:a1: 76:a6:71:1f:d7:fa:78:63:de:57:dd:63:75:09:84: 9d:c6:6c:09:02:aa:84:85:37:f5:bc:1e:05:b6:07: 10:6f:88:8f:a2:16:b6:25:aa:e0:99:2a:d1:d0:8d: 34:62:1a:fe:13:67:bf:77:c3:29:22:17:82:d4:4a: 17:8e:06:5c:48:c7:ed:7e:57:91:8c:fe:d4:2f:c6: 18:8c:52:55:40:06:0b:2e:cb:83:33:c2:29:d0:a8: 03:3d:92:15:6c:e5:da:c3:9d:46:f9:88:a7:30:56: 41:1b:f9:a6:53:70:fe:af:ee:3f:d9:5e:ab:91:fb: aa:3d:b7:89:b3:be:55:c8:aa:e3:a6:72:cb:e1:da: ae:c7:0c:ad:33:b5:92:3a:82:1b:c6:57:6b:04:7f: 50:9e:45:07:bd:43:6c:79:25:9a:4b:0b:1d:80:62: 4a:cb:b1:ec:61:01:96:ea:33:ed:21:cd:75:ce:91: 3b:53:3e:df:0a:71:e6:d4:60:8f:ba:b9:6c:e5:c2: 49:04:e5:2e:7f:97:c9:5d:96:9b:8d:69:8c:f0:ef: 55:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0D:42:6D:B4:96:0D:53:E5:0F:A4:6A:11:22:5C:C9:80:E6:09:C2 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/mQ1CbbSWDVPlD6RqESJcyYDmCcI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.136.249.0/24 Signature Algorithm: sha256WithRSAEncryption c6:1f:3d:2d:a6:85:ca:66:36:71:7d:04:08:fe:da:a8:fa:39: cc:5b:ef:b0:f0:93:82:e2:fd:b3:90:f0:e8:b2:a1:3b:e0:47: 8f:95:74:3e:cd:5a:b6:3c:22:ab:95:d9:a7:15:cc:41:f0:a9: 71:61:eb:90:f6:2f:6d:f7:6d:5b:c3:8e:92:1b:a4:70:7c:03: 59:e2:56:33:50:b8:8e:db:11:a8:80:7c:c3:2a:6f:63:64:ea: 66:8a:c9:84:07:1e:e1:f5:bc:8d:82:b4:c4:99:07:35:a0:ce: 08:4e:5c:c7:fe:ee:bc:68:b3:38:0e:9b:e9:6a:07:a3:af:9c: 76:d1:05:68:81:21:0e:e3:3e:1f:50:e8:af:69:f5:db:43:09: 86:44:20:6f:a7:40:7a:0f:3c:c4:0d:8c:1d:36:7b:78:f2:5b: 60:e8:3f:d1:c5:03:e4:60:9e:86:15:e8:87:2b:3a:11:72:aa: 61:f1:19:36:c4:48:14:62:26:f3:63:c2:1f:2a:f9:e9:53:ae: d5:1b:00:9b:6b:9d:0c:11:9d:6b:c4:d0:9d:ad:81:14:fb:00: db:68:10:44:3a:6b:75:cd:40:03:f8:d4:cf:c0:90:a1:14:cc: 01:45:7a:20:21:07:45:e4:f8:95:7c:61:60:90:c1:15:25:05: 63:d4:39:c4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFLgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzNDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDk5MEQ0MjZEQjQ5NjBE NTNFNTBGQTQ2QTExMjI1Q0M5ODBFNjA5QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8wx/MhSTD9gOdukAGCLB/W99uStqN+8R8PU7vBMJ9FNNEo8aZ al893PVyoXamcR/X+nhj3lfdY3UJhJ3GbAkCqoSFN/W8HgW2BxBviI+iFrYlquCZ KtHQjTRiGv4TZ793wykiF4LUSheOBlxIx+1+V5GM/tQvxhiMUlVABgsuy4MzwinQ qAM9khVs5drDnUb5iKcwVkEb+aZTcP6v7j/ZXquR+6o9t4mzvlXIquOmcsvh2q7H DK0ztZI6ghvGV2sEf1CeRQe9Q2x5JZpLCx2AYkrLsexhAZbqM+0hzXXOkTtTPt8K cebUYI+6uWzlwkkE5S5/l8ldlpuNaYzw71XbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUmQ1CbbSWDVPlD6RqESJcyYDmCcIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L21RMUNiYlNXRFZQbEQ2 UnFFU0pjeVlEbUNjSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADKiPkwDQYJKoZIhvcNAQELBQADggEBAMYfPS2mhcpmNnF9BAj+2qj6Ocxb77Dw k4Li/bOQ8OiyoTvgR4+VdD7NWrY8IquV2acVzEHwqXFh65D2L233bVvDjpIbpHB8 A1niVjNQuI7bEaiAfMMqb2Nk6maKyYQHHuH1vI2CtMSZBzWgzghOXMf+7rxoszgO m+lqB6OvnHbRBWiBIQ7jPh9Q6K9p9dtDCYZEIG+nQHoPPMQNjB02e3jyW2DoP9HF A+RgnoYV6IcrOhFyqmHxGTbESBRiJvNjwh8q+elTrtUbAJtrnQwRnWvE0J2tgRT7 ANtoEEQ6a3XNQAP41M/AkKEUzAFFeiAhB0Xk+JV8YWCQwRUlBWPUOcQ= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org