$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/xFw3i9momcwZpm_b16PSY0vwDfo.roa File: xFw3i9momcwZpm_b16PSY0vwDfo.roa (raw, json) Hash identifier: wlrKbug2zdwoQwPUH/HT+NE8kf1Usqx/rR9kzGCD3QQ= Subject key identifier: C4:5C:37:8B:D9:A8:99:CC:19:A6:6F:DB:D7:A3:D2:63:4B:F0:0D:FA Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14BA Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xFw3i9momcwZpm_b16PSY0vwDfo.roa Signing time: Wed 11 Sep 2024 02:23:44 +0000 ROA not before: Wed 11 Sep 2024 02:23:44 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24373 IP address blocks: 45.252.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5306 (0x14ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:44 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=C45C378BD9A899CC19A66FDBD7A3D2634BF00DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f7:c8:47:e5:d1:54:97:0e:82:45:84:3c:56: a5:fc:15:d2:3f:71:ae:55:2b:45:50:e8:41:d9:b8: 75:aa:34:b7:90:2f:21:ec:9c:29:b3:c1:9f:05:6b: 9e:f8:b7:6a:e4:ef:60:f8:0e:00:11:f5:53:56:99: c0:d4:b9:1f:21:b5:40:63:7d:21:9a:f1:41:43:b0: de:61:05:3d:34:46:f9:b5:fa:37:aa:a7:31:7c:1d: 95:83:1e:ee:72:61:94:76:9e:7f:72:bd:19:9f:8d: 61:2a:dd:59:26:4e:ca:07:72:a8:b5:98:6b:48:9d: 8c:d1:b8:1f:6c:9b:c2:3a:4c:1b:0b:33:74:65:8e: 75:8b:21:64:83:cc:11:8c:a8:25:8d:b3:bf:fd:36: 0d:72:61:59:ed:ed:b3:95:28:f4:a4:c9:b9:d9:8d: 30:99:5d:e4:37:16:13:d2:3a:04:86:fe:5e:42:f6: 66:db:9e:c7:54:37:c4:74:5e:82:f2:15:0a:58:93: 70:d5:6e:95:31:f5:ef:34:5c:08:0c:08:1f:9a:c6: b9:18:9b:8f:aa:1d:48:59:8c:3c:c3:4d:f1:ad:41: 87:ca:e4:be:8b:3e:b2:a6:0d:32:c0:72:99:9d:5a: 70:61:1a:05:98:0d:ba:dd:e7:7a:c3:97:a1:d4:c9: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5C:37:8B:D9:A8:99:CC:19:A6:6F:DB:D7:A3:D2:63:4B:F0:0D:FA X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xFw3i9momcwZpm_b16PSY0vwDfo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.12.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:ee:ed:b8:31:8b:d3:4c:35:cb:50:27:f6:cd:8d:62:72:ea: 9c:76:28:50:7d:36:cd:69:8f:55:15:a5:6d:3e:6a:c4:5f:17: 65:7c:4e:0c:fc:d7:f9:ad:60:2d:99:60:af:26:38:4e:95:44: b8:51:57:a8:71:71:2e:e5:91:a7:93:19:45:58:bf:76:86:66: b4:73:9f:98:15:e5:73:51:ae:99:f8:3f:3e:9d:41:66:ed:6c: 99:b2:64:b2:7f:4c:a9:8b:fe:97:36:f4:b2:ab:28:9a:d7:56: 27:b4:a5:7c:aa:d4:46:ae:ea:29:05:84:ce:28:9c:57:40:ff: 2f:53:53:69:b5:aa:bc:21:97:67:ef:2c:94:2d:46:cf:1b:31: be:87:be:0e:60:6b:c1:28:1c:f5:50:eb:67:9c:c3:1d:c1:a8: 11:ed:bf:da:c8:0f:a2:09:8c:1a:7c:6f:39:a4:d4:f7:3a:62: 6d:09:75:dd:da:d3:d5:26:2c:34:9c:77:a2:9e:be:f8:c9:2a: 8b:d8:3f:7a:cb:3c:ac:fb:ef:52:38:40:55:f2:30:d7:c1:97: 4d:5f:71:ff:83:3e:38:1e:0f:29:bd:33:ad:de:42:94:6b:fe: 5c:7c:d2:dd:38:ef:69:3c:ce:9a:2a:a6:71:9f:5b:0b:d8:1d: 3b:e5:a5:b5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzNDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEM0NUMzNzhCRDlBODk5 Q0MxOUE2NkZEQkQ3QTNEMjYzNEJGMDBERkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT98hH5dFUlw6CRYQ8VqX8FdI/ca5VK0VQ6EHZuHWqNLeQLyHs nCmzwZ8Fa574t2rk72D4DgAR9VNWmcDUuR8htUBjfSGa8UFDsN5hBT00Rvm1+jeq pzF8HZWDHu5yYZR2nn9yvRmfjWEq3VkmTsoHcqi1mGtInYzRuB9sm8I6TBsLM3Rl jnWLIWSDzBGMqCWNs7/9Ng1yYVnt7bOVKPSkybnZjTCZXeQ3FhPSOgSG/l5C9mbb nsdUN8R0XoLyFQpYk3DVbpUx9e80XAgMCB+axrkYm4+qHUhZjDzDTfGtQYfK5L6L PrKmDTLAcpmdWnBhGgWYDbrd53rDl6HUyYWNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUxFw3i9momcwZpm/b16PSY0vwDfowHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3hGdzNpOW1vbWN3WnBt X2IxNlBTWTB2d0Rmby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/AwwDQYJKoZIhvcNAQELBQADggEBAGzu7bgxi9NMNctQJ/bNjWJy6px2KFB9 Ns1pj1UVpW0+asRfF2V8Tgz81/mtYC2ZYK8mOE6VRLhRV6hxcS7lkaeTGUVYv3aG ZrRzn5gV5XNRrpn4Pz6dQWbtbJmyZLJ/TKmL/pc29LKrKJrXVie0pXyq1Eau6ikF hM4onFdA/y9TU2m1qrwhl2fvLJQtRs8bMb6Hvg5ga8EoHPVQ62ecwx3BqBHtv9rI D6IJjBp8bzmk1Pc6Ym0Jdd3a09UmLDScd6KevvjJKovYP3rLPKz771I4QFXyMNfB l01fcf+DPjgeDym9M63eQpRr/lx80t0472k8zpoqpnGfWwvYHTvlpbU= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:48 2024 by rpki-client on console-ams.rpki-client.org