$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/595/KLQ_w_1aUTnuxIvwp_nbGzySL6s.roa File: KLQ_w_1aUTnuxIvwp_nbGzySL6s.roa (raw, json) Hash identifier: ZcNwlnSzdFVoe63fgDPo90VtQU4EOW5SrUg9cX3y2Dc= Subject key identifier: 28:B4:3F:C3:FD:5A:51:39:EE:C4:8B:F0:A7:F9:DB:1B:3C:92:2F:AB Certificate issuer: /CN=2CA390E2780550E44EC03598082E1995474DF2FB Certificate serial: 1425 Authority key identifier: 2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/KLQ_w_1aUTnuxIvwp_nbGzySL6s.roa Signing time: Wed 13 Mar 2024 01:23:55 +0000 ROA not before: Wed 13 Mar 2024 01:23:55 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 58862 IP address blocks: 167.220.244.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 21:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5157 (0x1425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA390E2780550E44EC03598082E1995474DF2FB Validity Not Before: Mar 13 01:23:55 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=28B43FC3FD5A5139EEC48BF0A7F9DB1B3C922FAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:3f:1c:9c:9f:47:1f:d8:93:f1:fb:b2:4a: 52:97:5a:dc:3a:4e:97:00:55:da:7c:44:fa:8c:b4: 92:85:78:42:93:2d:86:c4:1c:25:50:5a:4b:cb:a7: de:dd:5b:06:29:bb:7d:82:1f:36:29:ff:30:31:c4: 1d:64:89:71:fc:77:86:92:78:b6:7e:26:83:fd:91: 54:95:02:69:6c:d2:2d:ff:fc:8b:b7:60:e2:b1:04: c9:6e:3c:70:5d:d5:fb:15:f9:a5:1a:8c:9b:e0:36: fb:2e:5c:3b:31:81:80:45:5d:33:b1:02:b4:ba:f0: 77:6e:0d:47:af:f1:a7:c4:94:b2:b5:2c:ab:66:7a: 5e:10:77:e9:31:96:d8:26:cc:26:16:43:ef:a5:da: d6:f2:ac:ab:4d:87:46:2e:51:a0:f6:52:13:b3:e6: 53:ce:15:b3:62:ef:2e:a3:27:04:ae:8a:97:c4:d7: 8a:ba:53:34:58:d1:c0:b3:e3:f4:c3:53:ca:68:05: 7c:de:fc:15:75:46:19:6c:af:5d:a2:c7:a2:de:12: f1:8d:55:00:c2:73:9d:73:1e:b2:df:f7:89:15:39: f7:42:3c:ea:a2:2f:39:a1:07:75:a0:b0:4e:1d:5a: 90:e3:90:aa:b3:8a:5c:df:d1:97:60:ed:20:2f:31: 85:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B4:3F:C3:FD:5A:51:39:EE:C4:8B:F0:A7:F9:DB:1B:3C:92:2F:AB X509v3 Authority Key Identifier: keyid:2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/KLQ_w_1aUTnuxIvwp_nbGzySL6s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 167.220.244.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:7e:42:7a:7d:6f:47:d8:0f:70:88:ab:d3:4e:68:28:f7:d6: a4:0f:37:54:1a:c1:e6:e4:df:bb:33:e3:fc:c8:a1:f4:f9:15: f7:24:87:4a:7d:b8:5b:e3:79:c6:53:97:29:ba:35:c6:5b:31: e3:95:06:70:1a:c0:81:08:c1:dd:61:b2:11:69:31:8a:a6:45: 3b:1e:75:ab:06:90:5f:e9:df:17:d0:ad:44:91:18:2e:0c:76: ff:4b:1c:a6:27:01:1c:ac:ef:4d:19:32:57:52:99:9e:af:ca: d7:5f:6e:da:63:c7:c8:52:fb:63:38:ee:3b:60:0a:4a:c9:19: a9:a2:75:9d:6d:b1:42:2e:11:9d:b8:fb:4d:73:9b:f9:c3:7a: 98:f2:6e:16:51:81:b4:fa:43:a9:e9:8e:67:04:ad:4b:12:be: e1:68:cf:b4:83:88:51:eb:23:ec:52:eb:73:5e:95:44:92:23: e4:0e:b1:07:e7:48:af:ba:b0:cc:6f:76:e8:65:8d:0f:7b:61: c6:95:cd:f8:70:02:c9:01:32:c2:fe:15:e4:98:b5:1d:22:ac: d7:5d:4a:df:67:8f:75:ff:ec:73:4d:d9:b2:65:00:53:8b:fe: 16:9d:99:12:90:54:81:92:57:bb:9f:5b:9a:f3:ea:c6:d2:ba: 0a:81:b8:07 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkNB MzkwRTI3ODA1NTBFNDRFQzAzNTk4MDgyRTE5OTU0NzRERjJGQjAeFw0yNDAzMTMw MTIzNTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDI4QjQzRkMzRkQ1QTUx MzlFRUM0OEJGMEE3RjlEQjFCM0M5MjJGQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdTj8cnJ9HH9iT8fuySlKXWtw6TpcAVdp8RPqMtJKFeEKTLYbE HCVQWkvLp97dWwYpu32CHzYp/zAxxB1kiXH8d4aSeLZ+JoP9kVSVAmls0i3//Iu3 YOKxBMluPHBd1fsV+aUajJvgNvsuXDsxgYBFXTOxArS68HduDUev8afElLK1LKtm el4Qd+kxltgmzCYWQ++l2tbyrKtNh0YuUaD2UhOz5lPOFbNi7y6jJwSuipfE14q6 UzRY0cCz4/TDU8poBXze/BV1Rhlsr12ix6LeEvGNVQDCc51zHrLf94kVOfdCPOqi LzmhB3WgsE4dWpDjkKqzilzf0Zdg7SAvMYVRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUKLQ/w/1aUTnuxIvwp/nbGzySL6swHwYDVR0jBBgwFoAULKOQ4ngFUOROwDWY CC4ZlUdN8vswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTk1 L0xLT1E0bmdGVU9ST3dEV1lDQzRabFVkTjh2cy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTEtPUTRuZ0ZVT1JPd0RXWUNDNFpsVWROOHZzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTk1L0tMUV93XzFhVVRudXhJ dndwX25iR3p5U0w2cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAKn3PQwDQYJKoZIhvcNAQELBQADggEBAEp+Qnp9b0fYD3CIq9NOaCj31qQPN1Qa webk37sz4/zIofT5Ffckh0p9uFvjecZTlym6NcZbMeOVBnAawIEIwd1hshFpMYqm RTsedasGkF/p3xfQrUSRGC4Mdv9LHKYnARys700ZMldSmZ6vytdfbtpjx8hS+2M4 7jtgCkrJGamidZ1tsUIuEZ24+01zm/nDepjybhZRgbT6Q6npjmcErUsSvuFoz7SD iFHrI+xS63NelUSSI+QOsQfnSK+6sMxvduhljQ97YcaVzfhwAskBMsL+FeSYtR0i rNddSt9nj3X/7HNN2bJlAFOL/hadmRKQVIGSV7ufW5rz6sbSugqBuAc= -----END CERTIFICATE-----Generated at Fri Nov 22 19:57:52 2024 by rpki-client on console-ams.rpki-client.org