$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/OugnFsaaxQAFpgOrbyvfHEXX3iM.roa File: OugnFsaaxQAFpgOrbyvfHEXX3iM.roa (raw, json) Hash identifier: hLSx6AvZw4cpq6DtZRbLH8yn3CB84mUKh/279IzLwrg= Subject key identifier: 3A:E8:27:16:C6:9A:C5:00:05:A6:03:AB:6F:2B:DF:1C:45:D7:DE:23 Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Certificate serial: 3D Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/OugnFsaaxQAFpgOrbyvfHEXX3iM.roa Signing time: Wed 24 Apr 2024 01:50:28 +0000 ROA not before: Wed 24 Apr 2024 01:50:28 +0000 ROA not after: Tue 15 Apr 2025 09:24:38 +0000 asID: 58834 IP address blocks: 119.2.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Validity Not Before: Apr 24 01:50:28 2024 GMT Not After : Apr 15 09:24:38 2025 GMT Subject: CN=3AE82716C69AC50005A603AB6F2BDF1C45D7DE23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1a:43:48:82:90:65:80:ac:e4:0d:ab:67:ed: 75:13:ce:3b:48:8d:ba:a9:d1:0d:5e:5a:1d:28:be: 2f:3e:05:4a:a7:c9:dd:67:4d:e8:13:62:32:c6:03: 23:5b:4e:69:1c:9a:a5:bd:21:93:c2:4e:29:4c:c5: f9:58:87:40:fa:58:00:4f:11:6d:e7:f3:e0:dc:82: 2d:88:c7:87:9e:7b:b4:e1:c2:56:48:74:4e:41:21: 2b:b0:93:ea:2b:21:40:f6:b6:4a:ee:0c:30:78:3b: a7:f4:6f:8b:c3:86:13:e6:c7:55:e8:32:ce:b4:53: 1d:ef:7b:1d:ef:ed:ad:a5:c0:d8:c8:1c:36:d2:5d: 1b:9a:65:40:6d:8c:58:5d:27:34:7d:eb:0b:8f:5f: a0:ef:47:16:24:4f:a2:aa:68:df:20:aa:ff:f6:be: c7:ac:a4:63:08:2e:1c:6a:2a:2f:6b:9a:b4:c6:cc: 59:72:f5:03:30:5e:28:2c:cc:b9:8d:d3:c2:dd:ce: f4:ee:21:ea:b4:e5:c5:b3:97:12:5b:05:95:9d:cf: f4:c6:9b:e3:af:92:60:3e:95:96:c4:4c:21:c8:6f: bd:46:85:fc:2e:4a:f7:4c:24:ec:63:82:2f:1f:33: ec:26:6c:4f:29:cb:28:a9:88:0f:a6:30:73:de:15: 19:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E8:27:16:C6:9A:C5:00:05:A6:03:AB:6F:2B:DF:1C:45:D7:DE:23 X509v3 Authority Key Identifier: keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/OugnFsaaxQAFpgOrbyvfHEXX3iM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.2.255.0/24 Signature Algorithm: sha256WithRSAEncryption 38:a8:f3:23:20:6f:1f:db:8a:a0:bd:0e:26:f1:bc:18:21:ba: 3f:10:95:21:e2:21:1e:55:75:8a:2a:7e:01:dc:c4:b0:ee:d9: 3e:04:e8:fb:93:fc:fd:a8:04:2c:fa:e8:91:3e:6f:78:a2:2f: 50:0b:23:91:64:e9:2c:cd:cc:4a:ca:23:5c:45:da:fe:54:93: 19:92:e1:e8:a5:98:b8:95:46:88:8d:0a:e1:28:93:4c:e5:a0: d1:b6:de:4d:47:a0:ab:9d:c9:17:64:97:bb:16:68:75:1f:b2: 09:c4:0a:af:fe:6b:20:8f:66:c7:36:46:4a:f9:6e:02:9c:e3: 6c:47:e5:a0:8a:fd:05:0b:58:ca:ac:2c:f6:f7:0a:c2:b3:00: 30:59:b6:07:6c:2e:d8:8b:7f:09:0a:4f:0d:fc:77:2a:26:4e: 59:b4:da:22:34:9e:f2:a2:08:b1:0d:94:48:48:14:f1:ef:05: cd:9f:96:ac:34:ff:ac:66:68:37:b5:66:85:65:09:c7:96:b6: e1:cb:00:c4:1f:11:f0:c3:29:92:ee:6f:cb:59:bb:39:9c:a2: c5:72:3b:24:85:97:40:6d:0b:b5:cb:3c:fe:f9:e7:a5:75:69: 26:15:14:f4:ad:67:92:30:55:37:35:7e:38:3d:4f:11:ad:f0: 6c:54:a3:62 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERUJG QzkwMEVEQzM0RjgxREE0ODI3RjFGOUY2M0QwNEUwRTJGNzU2MB4XDTI0MDQyNDAx NTAyOFoXDTI1MDQxNTA5MjQzOFowMzExMC8GA1UEAxMoM0FFODI3MTZDNjlBQzUw MDA1QTYwM0FCNkYyQkRGMUM0NUQ3REUyMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALAaQ0iCkGWArOQNq2ftdRPOO0iNuqnRDV5aHSi+Lz4FSqfJ3WdN 6BNiMsYDI1tOaRyapb0hk8JOKUzF+ViHQPpYAE8Rbefz4NyCLYjHh557tOHCVkh0 TkEhK7CT6ishQPa2Su4MMHg7p/Rvi8OGE+bHVegyzrRTHe97He/traXA2MgcNtJd G5plQG2MWF0nNH3rC49foO9HFiRPoqpo3yCq//a+x6ykYwguHGoqL2uatMbMWXL1 AzBeKCzMuY3Twt3O9O4h6rTlxbOXElsFlZ3P9Mab46+SYD6VlsRMIchvvUaF/C5K 90wk7GOCLx8z7CZsTynLKKmID6Ywc94VGYkCAwEAAaOCAfEwggHtMB0GA1UdDgQW BBQ66CcWxprFAAWmA6tvK98cRdfeIzAfBgNVHSMEGDAWgBTev8kA7cNPgdpIJ/H5 9j0E4OL3VjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82MjMv M3JfSkFPM0RUNEhhU0NmeC1mWTlCT0RpOTFZLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8zcl9KQU8zRFQ0SGFTQ2Z4LWZZOUJPRGk5MVkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82MjMvT3VnbkZzYWF4UUFGcGdP cmJ5dmZIRVhYM2lNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj LmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AHcC/zANBgkqhkiG9w0BAQsFAAOCAQEAOKjzIyBvH9uKoL0OJvG8GCG6PxCVIeIh HlV1iip+AdzEsO7ZPgTo+5P8/agELProkT5veKIvUAsjkWTpLM3MSsojXEXa/lST GZLh6KWYuJVGiI0K4SiTTOWg0bbeTUegq53JF2SXuxZodR+yCcQKr/5rII9mxzZG SvluApzjbEfloIr9BQtYyqws9vcKwrMAMFm2B2wu2It/CQpPDfx3KiZOWbTaIjSe 8qIIsQ2USEgU8e8FzZ+WrDT/rGZoN7VmhWUJx5a24csAxB8R8MMpku5vy1m7OZyi xXI7JIWXQG0Ltcs8/vnnpXVpJhUU9K1nkjBVNzV+OD1PEa3wbFSjYg== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org