$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/FA4OPm-4AdYK8dCJSi0KBP0Qt88.roa File: FA4OPm-4AdYK8dCJSi0KBP0Qt88.roa (raw, json) Hash identifier: G28GGBTwAxXqYeXJe4wR4sdvZ9Mux7RfdAVSXqpd+xk= Subject key identifier: 14:0E:0E:3E:6F:B8:01:D6:0A:F1:D0:89:4A:2D:0A:04:FD:10:B7:CF Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94 Certificate serial: 1B85 Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/FA4OPm-4AdYK8dCJSi0KBP0Qt88.roa Signing time: Thu 21 Nov 2024 09:32:17 +0000 ROA not before: Thu 21 Nov 2024 09:32:17 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 398704 IP address blocks: 115.31.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 10:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7045 (0x1b85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94 Validity Not Before: Nov 21 09:32:17 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=140E0E3E6FB801D60AF1D0894A2D0A04FD10B7CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7b:f2:f5:85:dd:b7:a6:21:ad:6c:2e:40:d8: 9f:e8:0e:50:18:19:26:48:42:13:42:2d:d5:e2:69: 88:8f:fe:b8:f4:07:2e:f1:34:80:91:82:6a:bc:7a: ba:d6:ab:0a:e7:60:6b:1a:e2:be:72:d2:52:63:2b: ed:4f:26:a1:01:9d:88:4f:4b:e1:67:21:e2:33:41: 36:7f:e3:56:1f:68:1b:1e:63:d7:94:65:2d:01:39: 66:b8:ca:82:ab:0a:57:c6:7c:b4:d9:7e:da:f0:c8: 9b:40:fa:02:9c:6a:98:34:9a:36:f4:45:96:0f:ec: ea:fe:53:2d:de:2f:84:98:4a:b3:9d:8d:52:72:9f: 32:97:f0:3b:c9:8f:ce:e7:08:d9:b6:b7:11:d4:9a: 47:97:d3:98:26:92:b7:83:f6:53:70:5b:23:3e:99: fd:60:06:37:01:36:7c:3c:1f:04:37:d7:d1:dd:f1: b2:b3:e4:bd:05:49:75:f6:8e:39:ad:91:eb:b3:09: f8:8a:71:01:48:db:15:35:0d:dd:5a:43:4f:8f:2b: e1:e6:ef:dc:2f:8c:18:77:1b:72:8c:cb:c0:2a:03: 69:09:4a:dd:89:f7:ac:3b:d8:4e:19:5a:4c:43:b8: 0d:41:5d:4c:96:16:5b:e4:47:f0:b5:25:d6:59:c4: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0E:0E:3E:6F:B8:01:D6:0A:F1:D0:89:4A:2D:0A:04:FD:10:B7:CF X509v3 Authority Key Identifier: keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/FA4OPm-4AdYK8dCJSi0KBP0Qt88.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.31.68.0/22 Signature Algorithm: sha256WithRSAEncryption e6:55:82:60:c1:c1:7c:ae:7b:51:c6:50:5c:ef:cd:66:cf:20: ea:b1:87:99:28:c6:dd:e4:9a:37:72:84:9d:b7:df:6f:9b:93: a5:01:ee:1b:05:2b:33:e4:f2:cf:bf:ac:97:52:41:df:52:7c: 57:48:72:16:a6:e9:47:1f:41:a4:c6:51:d9:26:7e:26:c5:ef: 17:1c:b3:32:11:23:11:38:a7:6e:91:df:17:f6:9b:52:6f:c3: 3a:47:a8:07:ed:cf:4b:bd:ff:29:b4:d6:39:7b:09:b4:cf:92: 89:2a:32:83:f1:d2:9c:84:be:ef:3a:8a:00:f2:28:50:9c:0f: 03:e4:c3:9a:44:b3:6a:d0:f9:6e:65:1a:e2:5f:1c:8d:1e:2b: 36:ad:6c:2f:86:bd:45:1b:6d:33:34:33:80:c6:ca:1a:b0:f0: c7:3b:c8:23:2e:0a:24:18:d0:b4:3d:b4:5c:92:87:47:00:42: 4c:80:4d:d7:26:ae:c8:1a:09:f1:6d:25:04:7c:7c:48:1b:ce: 69:ac:b6:97:c4:8d:9a:99:d6:bd:58:7a:61:d1:21:22:4e:b5: d4:3c:45:fc:79:5f:8a:26:fb:a6:bf:63:79:6a:07:64:a7:29: 8c:e8:65:f3:da:7d:33:f3:4a:eb:fc:9f:22:8f:1a:46:b9:a1: c3:69:22:d2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICG4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkU4 M0VCMEUxQ0I3QjRBNzYxN0EwNEFEN0E4MjYyOUQ5OEI5NUI5NDAeFw0yNDExMjEw OTMyMTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE0MEUwRTNFNkZCODAx RDYwQUYxRDA4OTRBMkQwQTA0RkQxMEI3Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWe/L1hd23piGtbC5A2J/oDlAYGSZIQhNCLdXiaYiP/rj0By7x NICRgmq8errWqwrnYGsa4r5y0lJjK+1PJqEBnYhPS+FnIeIzQTZ/41YfaBseY9eU ZS0BOWa4yoKrClfGfLTZftrwyJtA+gKcapg0mjb0RZYP7Or+Uy3eL4SYSrOdjVJy nzKX8DvJj87nCNm2txHUmkeX05gmkreD9lNwWyM+mf1gBjcBNnw8HwQ319Hd8bKz 5L0FSXX2jjmtkeuzCfiKcQFI2xU1Dd1aQ0+PK+Hm79wvjBh3G3KMy8AqA2kJSt2J 96w72E4ZWkxDuA1BXUyWFlvkR/C1JdZZxKlzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUFA4OPm+4AdYK8dCJSi0KBP0Qt88wHwYDVR0jBBgwFoAULoPrDhy3tKdhegSt eoJinZi5W5QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEz L0xvUHJEaHkzdEtkaGVnU3Rlb0ppblppNVc1US5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTG9QckRoeTN0S2RoZWdTdGVvSmluWmk1VzVRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEzL0ZBNE9QbS00QWRZSzhk Q0pTaTBLQlAwUXQ4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJzH0QwDQYJKoZIhvcNAQELBQADggEBAOZVgmDBwXyue1HGUFzvzWbPIOqxh5ko xt3kmjdyhJ2332+bk6UB7hsFKzPk8s+/rJdSQd9SfFdIcham6UcfQaTGUdkmfibF 7xccszIRIxE4p26R3xf2m1JvwzpHqAftz0u9/ym01jl7CbTPkokqMoPx0pyEvu86 igDyKFCcDwPkw5pEs2rQ+W5lGuJfHI0eKzatbC+GvUUbbTM0M4DGyhqw8Mc7yCMu CiQY0LQ9tFySh0cAQkyATdcmrsgaCfFtJQR8fEgbzmmstpfEjZqZ1r1YemHRISJO tdQ8Rfx5X4om+6a/Y3lqB2SnKYzoZfPafTPzSuv8nyKPGka5ocNpItI= -----END CERTIFICATE-----Generated at Fri Nov 22 07:02:36 2024 by rpki-client on console-fra.rpki-client.org