$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/aLlM8tpB4RzVuoFj5ec2jPsCQmM.roa File: aLlM8tpB4RzVuoFj5ec2jPsCQmM.roa (raw, json) Hash identifier: Z/4Ro/7zneLCrflK+SZVoskGKRM3KCo5i5EQIHPCDCw= Subject key identifier: 68:B9:4C:F2:DA:41:E1:1C:D5:BA:81:63:E5:E7:36:8C:FB:02:42:63 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 080E Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/aLlM8tpB4RzVuoFj5ec2jPsCQmM.roa Signing time: Tue 19 Nov 2024 12:40:40 +0000 ROA not before: Tue 19 Nov 2024 12:40:40 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 984 IP address blocks: 58.66.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2062 (0x80e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Nov 19 12:40:40 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=68B94CF2DA41E11CD5BA8163E5E7368CFB024263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:16:42:bd:a8:b6:2b:86:50:96:2c:e3:81:bd: 7a:d4:fa:47:69:a1:4c:44:67:48:1a:9f:c6:0c:82: 11:16:2e:ce:2e:ac:37:d2:66:e8:4a:4d:d2:23:84: 12:0c:4d:36:d6:3b:15:4f:8f:87:d2:d7:1b:df:24: e7:d2:61:d5:4f:2b:fd:7f:89:9b:44:79:e7:e7:d0: c3:bb:1b:0f:ce:60:64:f3:6c:9f:f2:d7:a9:b4:08: cd:8f:f4:19:39:bb:7e:b2:28:43:9c:0f:5f:32:6b: 57:4b:12:ec:41:03:42:6a:e9:a1:3d:ab:05:b9:7d: 22:7b:72:17:13:47:d6:70:da:52:97:06:fa:80:96: 6c:7a:a0:0c:71:8e:2c:f2:66:a6:94:12:a9:6f:f8: 6c:a3:4f:0d:fe:bf:a1:82:78:bf:c0:05:54:d6:ac: f8:8c:0a:aa:5c:40:ef:d0:94:7d:ea:4f:ad:c8:2a: 02:f6:1e:e9:23:6a:22:b4:49:de:48:78:20:f4:4c: bb:ee:1b:b9:2b:cc:41:7d:1f:2f:68:f2:45:0d:7b: d0:f7:2c:a0:b0:c6:60:43:96:55:0c:ea:5f:2e:a4: aa:9e:0f:cd:4c:73:b7:b2:bf:41:ab:16:09:d3:68: 62:6a:ba:6a:be:42:6e:cd:b6:79:ba:8c:e0:fc:33: 3e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B9:4C:F2:DA:41:E1:1C:D5:BA:81:63:E5:E7:36:8C:FB:02:42:63 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/aLlM8tpB4RzVuoFj5ec2jPsCQmM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 58.66.181.0/24 Signature Algorithm: sha256WithRSAEncryption 56:f9:81:39:10:f2:a4:16:6d:3d:b1:18:61:e7:ea:da:63:42: 06:db:6d:ab:26:36:ca:22:f8:cc:e7:3f:03:5e:f5:94:cd:ad: 11:66:4c:cb:97:22:fa:bb:2a:5e:13:8f:7c:b3:78:d6:fc:ff: a2:8f:8a:da:40:54:b3:5e:e6:f4:7a:39:0d:86:fe:57:8c:6d: 53:1f:2c:be:4d:b4:b5:87:5d:65:19:06:41:0e:33:f6:7f:2f: a3:20:5d:22:0f:84:29:50:e8:37:25:e3:ea:cc:0b:1b:7f:51: 89:61:3d:ed:b6:35:51:77:b4:86:db:5a:0a:7b:ab:78:7f:a4: 0d:a1:0b:1f:ca:b0:b8:59:7d:8b:f4:51:a1:b5:6c:8d:d4:7f: ba:65:5c:08:f3:3c:92:d5:22:1e:24:a8:b6:ba:70:a8:57:bb: 20:60:46:2e:c1:82:39:7f:ee:e4:54:56:d3:6d:2e:da:5b:ac: d6:97:86:8d:b9:e0:1a:95:8c:fa:12:f8:f8:c1:54:4b:ac:82: a4:7c:8b:36:5e:6d:28:ad:9f:e6:53:cc:bc:9d:93:34:f0:c3: 5f:d8:65:b2:02:08:13:cd:57:45:24:0f:06:6c:d7:15:2a:dd: 70:0b:8d:b8:d1:38:de:66:4c:ef:df:f6:c1:d6:b7:54:96:0d: cf:ae:d5:8d -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICCA4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDExMTkx MjQwNDBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDY4Qjk0Q0YyREE0MUUx MUNENUJBODE2M0U1RTczNjhDRkIwMjQyNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRFkK9qLYrhlCWLOOBvXrU+kdpoUxEZ0gan8YMghEWLs4urDfS ZuhKTdIjhBIMTTbWOxVPj4fS1xvfJOfSYdVPK/1/iZtEeefn0MO7Gw/OYGTzbJ/y 16m0CM2P9Bk5u36yKEOcD18ya1dLEuxBA0Jq6aE9qwW5fSJ7chcTR9Zw2lKXBvqA lmx6oAxxjizyZqaUEqlv+GyjTw3+v6GCeL/ABVTWrPiMCqpcQO/QlH3qT63IKgL2 HukjaiK0Sd5IeCD0TLvuG7krzEF9Hy9o8kUNe9D3LKCwxmBDllUM6l8upKqeD81M c7eyv0GrFgnTaGJqumq+Qm7Ntnm6jOD8Mz51AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUaLlM8tpB4RzVuoFj5ec2jPsCQmMwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvYUxsTTh0cEI0UnpWdW9GajVl YzJqUHNDUW1NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADpC tTANBgkqhkiG9w0BAQsFAAOCAQEAVvmBORDypBZtPbEYYefq2mNCBtttqyY2yiL4 zOc/A171lM2tEWZMy5ci+rsqXhOPfLN41vz/oo+K2kBUs17m9Ho5DYb+V4xtUx8s vk20tYddZRkGQQ4z9n8voyBdIg+EKVDoNyXj6swLG39RiWE97bY1UXe0httaCnur eH+kDaELH8qwuFl9i/RRobVsjdR/umVcCPM8ktUiHiSotrpwqFe7IGBGLsGCOX/u 5FRW020u2lus1peGjbngGpWM+hL4+MFUS6yCpHyLNl5tKK2f5lPMvJ2TNPDDX9hl sgIIE81XRSQPBmzXFSrdcAuNuNE43mZM79/2wda3VJYNz67VjQ== -----END CERTIFICATE-----Generated at Mon Nov 25 06:06:56 2024 by rpki-client on console-ams.rpki-client.org