$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/M4HKC9eyC2r-buzvDXudXKc3OaI.roa File: M4HKC9eyC2r-buzvDXudXKc3OaI.roa (raw, json) Hash identifier: mVeVPFG49QI6/LRZ0T8F6MWzrmVLMBg3P/vpDDJUFI0= Subject key identifier: 33:81:CA:0B:D7:B2:0B:6A:FE:6E:EC:EF:0D:7B:9D:5C:A7:37:39:A2 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 038F Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/M4HKC9eyC2r-buzvDXudXKc3OaI.roa Signing time: Tue 23 Apr 2024 14:05:24 +0000 ROA not before: Tue 23 Apr 2024 14:05:24 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 136897 IP address blocks: 124.175.128.0/21 maxlen: 24 124.175.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 10:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 911 (0x38f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Apr 23 14:05:24 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=3381CA0BD7B20B6AFE6EECEF0D7B9D5CA73739A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:0a:62:53:5f:ee:83:c0:a4:11:03:07:5d: 48:4d:e0:d2:01:6a:b1:e4:4e:3a:12:5a:d6:dd:5e: 33:39:6a:a9:33:e6:41:11:63:8f:44:71:d6:63:a0: 67:be:39:47:85:59:29:bb:9e:88:1b:2c:d7:5d:61: 3a:ad:fb:15:52:65:db:fa:a2:dc:a8:d0:4e:8e:68: 3d:b8:f8:0b:a8:57:f2:09:3c:c2:1b:54:89:37:f3: d4:38:ef:98:ed:f2:c1:db:31:cf:e0:d2:61:c3:f7: ec:dc:1b:61:a1:87:83:0d:14:b2:63:ad:bc:bd:0b: 41:1c:4c:11:88:a1:31:c9:ae:30:53:0f:10:23:73: a5:39:8a:69:53:61:48:2b:9b:d1:45:6a:e9:2e:5c: b3:87:df:c6:6a:1a:df:05:f9:5e:e6:90:a7:23:ca: b6:41:cf:8e:e9:e1:0f:cb:bd:ba:d7:02:4e:6e:3e: d4:ac:a7:5e:6c:d3:99:5d:cb:51:82:bf:10:cf:7a: 2c:2b:de:13:2b:6c:0d:60:34:29:93:69:f0:88:a2: 6a:95:48:87:4e:91:ad:9a:96:f5:d2:b5:61:d0:44: 88:3a:11:0f:04:9b:dc:34:cc:e5:fb:99:dc:21:93: 37:55:20:5a:a3:cc:3b:9b:89:64:c2:a7:49:ae:e9: 0d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:81:CA:0B:D7:B2:0B:6A:FE:6E:EC:EF:0D:7B:9D:5C:A7:37:39:A2 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/M4HKC9eyC2r-buzvDXudXKc3OaI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.175.128.0/20 Signature Algorithm: sha256WithRSAEncryption 24:47:da:be:eb:4d:4d:ef:4d:cd:86:25:67:6a:f5:91:39:46: 3b:4e:b6:c8:cb:f9:92:23:e3:79:43:09:05:cf:9d:b8:e6:d6: b8:80:a5:d1:13:9b:bd:73:cc:0a:43:63:bb:f0:a4:dc:ac:77: 9b:55:c4:03:26:ae:af:14:6d:dc:a7:81:86:61:35:c5:2e:66: 74:d5:58:6c:bf:74:00:6f:b7:88:18:0a:c7:d5:37:50:69:2e: cd:7a:f9:54:48:1c:83:b5:52:04:ba:d7:b1:b8:4e:ce:e0:f3: a7:0c:ae:cc:23:46:6b:43:a1:5d:75:11:6a:e8:6e:88:e2:17: 97:03:40:63:24:f8:82:21:9a:7c:24:c0:66:91:52:d1:5e:f7: 18:a2:2e:59:72:09:ea:4a:09:19:30:20:3a:ae:0a:85:e4:cb: d9:b6:2d:39:e9:a7:de:ef:ba:64:15:21:da:14:b0:35:e0:e1: c4:6c:47:25:2c:48:f8:f8:fc:ce:89:31:45:c0:5c:1c:6b:f0: 52:b3:a1:fd:c5:09:65:19:a9:29:2a:3f:2c:ee:ac:e6:1b:6a: 0a:b3:4d:27:ff:c2:8a:c3:2d:23:c9:a0:f8:2b:2f:f3:7d:85: 97:9f:4c:25:a0:b9:43:d6:ee:c9:42:b8:0d:0c:cd:3e:1b:36: a2:97:93:eb -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICA48wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA0MjMx NDA1MjRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDMzODFDQTBCRDdCMjBC NkFGRTZFRUNFRjBEN0I5RDVDQTczNzM5QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvWwpiU1/ug8CkEQMHXUhN4NIBarHkTjoSWtbdXjM5aqkz5kER Y49EcdZjoGe+OUeFWSm7nogbLNddYTqt+xVSZdv6otyo0E6OaD24+AuoV/IJPMIb VIk389Q475jt8sHbMc/g0mHD9+zcG2Ghh4MNFLJjrby9C0EcTBGIoTHJrjBTDxAj c6U5imlTYUgrm9FFaukuXLOH38ZqGt8F+V7mkKcjyrZBz47p4Q/LvbrXAk5uPtSs p15s05ldy1GCvxDPeiwr3hMrbA1gNCmTafCIomqVSIdOka2alvXStWHQRIg6EQ8E m9w0zOX7mdwhkzdVIFqjzDubiWTCp0mu6Q0tAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUM4HKC9eyC2r+buzvDXudXKc3OaIwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvTTRIS0M5ZXlDMnItYnV6dkRY dWRYS2MzT2FJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHyv gDANBgkqhkiG9w0BAQsFAAOCAQEAJEfavutNTe9NzYYlZ2r1kTlGO062yMv5kiPj eUMJBc+duObWuICl0RObvXPMCkNju/Ck3Kx3m1XEAyaurxRt3KeBhmE1xS5mdNVY bL90AG+3iBgKx9U3UGkuzXr5VEgcg7VSBLrXsbhOzuDzpwyuzCNGa0OhXXURauhu iOIXlwNAYyT4giGafCTAZpFS0V73GKIuWXIJ6koJGTAgOq4KheTL2bYtOemn3u+6 ZBUh2hSwNeDhxGxHJSxI+Pj8zokxRcBcHGvwUrOh/cUJZRmpKSo/LO6s5htqCrNN J//CisMtI8mg+Csv832Fl59MJaC5Q9buyUK4DQzNPhs2opeT6w== -----END CERTIFICATE-----Generated at Tue May 21 08:40:37 2024 by rpki-client on console-fra.rpki-client.org