$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ukAE_mftFMHE8jqRCImSLk00nvM.roa File: ukAE_mftFMHE8jqRCImSLk00nvM.roa (raw, json) Hash identifier: 6IpbdFrMWGt+4uLAE4CyFa5AyBdEo06l8fW9QSEDGBk= Subject key identifier: BA:40:04:FE:67:ED:14:C1:C4:F2:3A:91:08:89:92:2E:4D:34:9E:F3 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1499 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ukAE_mftFMHE8jqRCImSLk00nvM.roa Signing time: Wed 11 Sep 2024 02:23:32 +0000 ROA not before: Wed 11 Sep 2024 02:23:32 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59083 IP address blocks: 43.254.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5273 (0x1499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:32 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=BA4004FE67ED14C1C4F23A910889922E4D349EF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d5:f9:26:4c:10:c7:c9:a7:15:d2:0c:9f:b5: 87:2f:27:88:cb:ee:dd:83:51:64:14:75:3d:40:f2: f0:f7:ab:b8:b7:24:c5:8c:03:26:a5:68:37:59:d1: 2b:1e:d5:ef:60:d8:ef:35:20:ad:74:dd:3b:49:92: 4b:d2:90:e3:02:45:15:f2:7f:16:58:af:23:30:20: 5b:7a:0a:e4:58:fb:10:5b:5e:eb:f7:45:1c:df:50: a2:a4:f7:a3:a2:c8:8f:0e:ba:0a:30:25:5b:cc:a5: 7f:13:00:41:73:42:b9:b7:e5:76:16:01:e5:23:91: 56:4b:1c:11:15:22:4c:0a:4e:6c:7d:6f:07:00:f3: 34:aa:de:a1:91:6a:54:7f:4b:8d:3d:9a:db:71:c2: e9:6d:62:d8:e9:0b:f5:29:53:50:9c:da:2b:97:0b: f0:6e:fe:4b:87:aa:75:5e:df:58:d6:a1:64:6d:91: 52:e2:8a:7f:ed:a4:de:06:14:ad:81:82:a9:63:4b: 61:4f:6b:cc:45:ab:3a:bf:7c:e6:2f:bb:1d:ad:84: 6c:12:6c:83:fc:38:d7:48:91:4f:26:04:98:8c:21: 61:8b:34:a2:6b:6e:a8:a5:17:eb:ff:0c:73:70:6f: cd:43:52:ab:2b:04:7b:55:48:cf:63:d5:6f:42:61: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:40:04:FE:67:ED:14:C1:C4:F2:3A:91:08:89:92:2E:4D:34:9E:F3 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ukAE_mftFMHE8jqRCImSLk00nvM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.254.152.0/22 Signature Algorithm: sha256WithRSAEncryption 88:90:02:d4:26:46:bc:09:63:13:5f:08:5f:91:22:f5:e2:64: 08:a1:51:6e:7f:a2:b7:76:08:6f:b4:31:8c:45:85:5a:28:26: 05:74:ac:9a:98:97:05:85:b4:67:db:2a:e2:54:fb:51:df:7a: a8:fd:01:58:9d:68:6b:eb:6d:6f:06:5d:b6:dc:2c:d4:c7:0c: 4e:64:e3:46:ce:2e:88:b9:46:33:cf:86:70:d7:8b:3f:4a:4d: 34:e3:67:ed:24:39:d0:b3:83:e2:22:24:a6:7a:63:ed:77:df: 0c:11:fe:75:6b:04:0e:63:74:aa:1f:d2:70:d7:74:1e:c4:b5: 2e:6c:f6:b9:66:70:60:8b:10:0c:e4:bd:8f:d3:7f:03:3d:8c: 83:f4:f1:8b:03:62:4f:24:b4:b8:34:55:e1:c3:a0:5a:9c:e2: 9a:2b:07:cb:74:43:18:7d:be:53:32:85:59:a6:ee:b2:f6:44: e8:9c:bd:1b:81:93:95:1b:84:5e:83:5d:f1:0d:3a:99:4d:6f: c8:4b:81:bd:a2:cb:ee:91:c3:31:bf:01:17:14:dd:f3:d6:11: dc:ca:75:ce:7f:b4:96:49:fa:c1:be:47:df:3a:27:fe:5d:83: 35:75:75:8c:28:8c:67:96:77:ed:63:91:08:d3:28:53:40:51: f6:8f:b0:05 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMzJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJBNDAwNEZFNjdFRDE0 QzFDNEYyM0E5MTA4ODk5MjJFNEQzNDlFRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG1fkmTBDHyacV0gyftYcvJ4jL7t2DUWQUdT1A8vD3q7i3JMWM AyalaDdZ0Sse1e9g2O81IK103TtJkkvSkOMCRRXyfxZYryMwIFt6CuRY+xBbXuv3 RRzfUKKk96OiyI8OugowJVvMpX8TAEFzQrm35XYWAeUjkVZLHBEVIkwKTmx9bwcA 8zSq3qGRalR/S409mttxwultYtjpC/UpU1Cc2iuXC/Bu/kuHqnVe31jWoWRtkVLi in/tpN4GFK2BgqljS2FPa8xFqzq/fOYvux2thGwSbIP8ONdIkU8mBJiMIWGLNKJr bqilF+v/DHNwb81DUqsrBHtVSM9j1W9CYZsdAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUukAE/mftFMHE8jqRCImSLk00nvMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3VrQUVfbWZ0Rk1IRThq cVJDSW1TTGswMG52TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr/pgwDQYJKoZIhvcNAQELBQADggEBAIiQAtQmRrwJYxNfCF+RIvXiZAihUW5/ ord2CG+0MYxFhVooJgV0rJqYlwWFtGfbKuJU+1Hfeqj9AVidaGvrbW8GXbbcLNTH DE5k40bOLoi5RjPPhnDXiz9KTTTjZ+0kOdCzg+IiJKZ6Y+133wwR/nVrBA5jdKof 0nDXdB7EtS5s9rlmcGCLEAzkvY/TfwM9jIP08YsDYk8ktLg0VeHDoFqc4porB8t0 Qxh9vlMyhVmm7rL2ROicvRuBk5UbhF6DXfENOplNb8hLgb2iy+6RwzG/ARcU3fPW EdzKdc5/tJZJ+sG+R986J/5dgzV1dYwojGeWd+1jkQjTKFNAUfaPsAU= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org