$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/621/N0y7O7iTG774vGCJOkCrG07dnWQ.roa File: N0y7O7iTG774vGCJOkCrG07dnWQ.roa (raw, json) Hash identifier: 7MMVR7ufVoDl78ie+i3EZijT5/akkNinA5jWDlnKHVk= Subject key identifier: 37:4C:BB:3B:B8:93:1B:BE:F8:BC:60:89:3A:40:AB:1B:4E:DD:9D:64 Certificate issuer: /CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D Certificate serial: 1C88 Authority key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/N0y7O7iTG774vGCJOkCrG07dnWQ.roa Signing time: Fri 30 Aug 2024 19:49:01 +0000 ROA not before: Fri 30 Aug 2024 19:49:01 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 138915 IP address blocks: 27.0.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7304 (0x1c88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D Validity Not Before: Aug 30 19:49:01 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=374CBB3BB8931BBEF8BC60893A40AB1B4EDD9D64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:42:ba:06:b0:82:6e:bb:00:18:95:56:5a: a8:06:b2:90:75:9f:04:07:7f:e3:d2:18:72:e7:69: af:89:54:20:7e:05:7d:de:60:e3:f4:30:53:90:72: 17:d5:7e:5e:44:0e:cf:44:2b:8e:9d:32:0a:83:40: 8e:a3:68:6e:ec:68:ed:fb:dd:3b:a7:fb:11:26:c9: 21:54:86:14:73:3a:94:a8:00:d6:c6:be:1b:8e:ef: 7b:98:01:ba:44:1a:cf:4b:54:f4:b5:68:9c:0e:2c: ae:41:f1:e2:6b:94:68:7d:bd:f9:2a:ca:b3:08:82: 95:cd:d6:1a:2d:d5:7b:75:5f:e6:93:c2:f9:ab:42: 5e:02:ce:66:25:33:5b:41:0e:1f:3d:02:90:af:db: 12:e6:70:7f:22:00:9f:a4:f2:07:75:e6:90:43:9f: 98:18:03:ae:04:34:7b:1c:21:5f:0b:46:96:a7:f6: 87:c2:71:c9:6b:cc:4d:8f:be:4d:84:ba:b4:6a:f0: cc:d3:2c:78:d3:85:b9:ce:5a:6e:f7:c5:db:64:c1: ef:32:00:c1:2d:e5:53:3a:86:a3:ab:e5:c8:dd:aa: 03:52:b9:04:7f:cd:66:c2:61:ae:99:da:4e:3b:30: 11:57:34:af:69:b8:28:54:9d:12:51:04:c8:de:94: 22:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4C:BB:3B:B8:93:1B:BE:F8:BC:60:89:3A:40:AB:1B:4E:DD:9D:64 X509v3 Authority Key Identifier: keyid:E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/N0y7O7iTG774vGCJOkCrG07dnWQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.0.133.0/24 Signature Algorithm: sha256WithRSAEncryption 88:9a:4f:c3:6f:0b:d7:c4:ce:af:31:8e:0b:6a:d7:bb:96:96: d1:7f:db:86:d1:96:f4:d6:93:9c:1e:23:b0:f8:9e:d6:a2:04: 7d:04:ad:f8:dd:52:a5:72:9a:71:80:19:74:fb:68:16:b7:14: ab:c5:97:70:5c:5a:22:e4:07:8f:c0:e0:6b:88:49:18:b0:d6: de:9b:96:94:e6:63:b1:66:ed:22:5d:61:6e:0b:31:cb:e5:b9: 01:63:a3:b0:67:f2:9a:e2:a9:aa:79:07:38:87:1f:dc:5d:f9: 5d:2d:6a:7b:bd:5a:b3:38:ec:c7:48:69:6a:df:65:cd:a8:61: 29:dc:2d:39:31:72:a7:c3:ee:eb:bd:a8:2e:7a:f9:53:de:fb: a8:34:77:20:d2:2e:0c:ac:81:9d:49:d4:80:9c:c5:85:45:8e: 22:f7:62:d5:89:7d:07:a4:4e:d4:bb:9a:aa:0e:67:e2:86:0a: 42:60:60:c1:4d:d7:5f:f4:32:4e:01:a4:47:42:17:02:fb:81: 81:82:a3:11:2d:41:f0:e9:cd:fc:0b:23:7f:35:80:82:52:3c: c6:ad:7b:bf:cf:05:a2:60:c1:f5:b8:b0:42:38:92:fb:ba:dc: 7f:9d:17:2c:6f:30:ae:ac:bd:0b:5c:7f:b8:97:79:57:e6:f3: 95:85:83:40 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTU2 REE0QzI3NUYzQ0NDOTJEMDg2MjAyQTFFREE3NzgzRjBDM0QwRDAeFw0yNDA4MzAx OTQ5MDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDM3NENCQjNCQjg5MzFC QkVGOEJDNjA4OTNBNDBBQjFCNEVERDlENjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZF0K6BrCCbrsAGJVWWqgGspB1nwQHf+PSGHLnaa+JVCB+BX3e YOP0MFOQchfVfl5EDs9EK46dMgqDQI6jaG7saO373Tun+xEmySFUhhRzOpSoANbG vhuO73uYAbpEGs9LVPS1aJwOLK5B8eJrlGh9vfkqyrMIgpXN1hot1Xt1X+aTwvmr Ql4CzmYlM1tBDh89ApCv2xLmcH8iAJ+k8gd15pBDn5gYA64ENHscIV8LRpan9ofC cclrzE2Pvk2EurRq8MzTLHjThbnOWm73xdtkwe8yAMEt5VM6hqOr5cjdqgNSuQR/ zWbCYa6Z2k47MBFXNK9puChUnRJRBMjelCLHAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUN0y7O7iTG774vGCJOkCrG07dnWQwHwYDVR0jBBgwFoAU5W2kwnXzzMktCGIC oe2neD8MPQ0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIx LzVXMmt3blh6ek1rdENHSUNvZTJuZUQ4TVBRMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNVcya3duWHp6TWt0Q0dJQ29lMm5lRDhNUFEwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIxL04weTdPN2lURzc3NHZH Q0pPa0NyRzA3ZG5XUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAbAIUwDQYJKoZIhvcNAQELBQADggEBAIiaT8NvC9fEzq8xjgtq17uWltF/24bR lvTWk5weI7D4ntaiBH0ErfjdUqVymnGAGXT7aBa3FKvFl3BcWiLkB4/A4GuISRiw 1t6blpTmY7Fm7SJdYW4LMcvluQFjo7Bn8priqap5BziHH9xd+V0tanu9WrM47MdI aWrfZc2oYSncLTkxcqfD7uu9qC56+VPe+6g0dyDSLgysgZ1J1ICcxYVFjiL3YtWJ fQekTtS7mqoOZ+KGCkJgYMFN11/0Mk4BpEdCFwL7gYGCoxEtQfDpzfwLI381gIJS PMate7/PBaJgwfW4sEI4kvu63H+dFyxvMK6svQtcf7iXeVfm85WFg0A= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:14 2024 by rpki-client on console-fra.rpki-client.org