$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/656/JXmBakuXV8WTsRqM-BlDFdSJpxU.roa File: JXmBakuXV8WTsRqM-BlDFdSJpxU.roa (raw, json) Hash identifier: jryzYiHEliDXWyF2GocPVFbbHuAAVGuM8F5o6DvyAmY= Subject key identifier: 25:79:81:6A:4B:97:57:C5:93:B1:1A:8C:F8:19:43:15:D4:89:A7:15 Certificate issuer: /CN=64DC20D9612C5B77499A6D223A652B2E38B11647 Certificate serial: 142B Authority key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/JXmBakuXV8WTsRqM-BlDFdSJpxU.roa Signing time: Sat 27 Jul 2024 07:46:16 +0000 ROA not before: Sat 27 Jul 2024 07:46:16 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 45090 IP address blocks: 124.220.0.0/14 maxlen: 24 175.178.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5163 (0x142b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64DC20D9612C5B77499A6D223A652B2E38B11647 Validity Not Before: Jul 27 07:46:16 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=2579816A4B9757C593B11A8CF8194315D489A715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:df:14:b4:ec:61:90:8f:79:8f:3a:5b:65:9b: 89:42:8c:5d:9b:31:9e:6d:96:7a:19:58:e2:b4:6e: 58:96:6b:4c:a5:2d:2d:7b:be:f4:67:f4:8d:50:4f: 6e:2a:3b:41:a3:39:cc:9c:eb:11:d0:d6:38:74:9d: 0c:26:27:3a:04:0b:fe:29:8e:7e:9a:81:b3:36:03: 94:eb:a9:21:1c:a1:22:cf:37:48:c1:54:bb:fa:25: ed:60:99:54:7d:64:88:11:9a:ab:98:3c:ce:a5:3d: 11:ad:a5:1e:55:7d:d6:27:14:3d:d5:64:16:e4:b0: ae:17:cc:20:69:ff:11:7a:d6:09:28:f0:c9:f6:f2: 11:ae:79:39:d7:43:1f:6e:a8:d2:3d:c2:e0:33:dc: d9:59:c6:bf:5c:0d:93:2e:0a:db:3d:a2:c0:c8:08: fe:1e:21:c9:c7:f2:ed:f8:16:42:b4:7a:10:e8:e8: 60:72:c8:69:fa:b8:de:a9:3a:f3:3f:5f:bc:d7:20: 87:37:93:25:a8:96:22:08:70:5e:7c:db:21:6e:9a: b7:2a:9a:66:27:76:74:f7:ae:d2:c5:11:b4:d8:c9: 0d:ef:88:39:98:4a:f4:1f:f1:f0:68:d6:53:eb:e8: 8d:1b:44:96:37:c2:74:99:61:8b:be:7b:37:7b:f1: fe:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:79:81:6A:4B:97:57:C5:93:B1:1A:8C:F8:19:43:15:D4:89:A7:15 X509v3 Authority Key Identifier: keyid:64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/JXmBakuXV8WTsRqM-BlDFdSJpxU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.220.0.0/14 175.178.0.0/16 Signature Algorithm: sha256WithRSAEncryption 70:e5:0d:3f:e9:cb:ff:85:50:b5:cb:20:0e:59:f5:59:77:f5: 26:c8:52:e2:a2:58:9b:7b:dc:10:cb:06:33:54:7d:98:9c:84: aa:f4:a0:b2:7d:51:2d:27:28:0e:fd:a0:b3:5f:94:2f:8d:e9: 79:73:8a:f8:e4:ee:41:46:93:7f:c6:29:4b:77:dc:40:13:75: 32:a8:1a:5b:5e:77:d6:07:84:d7:b8:d2:cc:e5:20:ae:e5:40: 4f:85:20:41:03:37:3b:5c:22:95:04:1f:74:58:08:29:70:a5: bd:fd:88:bc:2c:80:f6:f6:ca:35:c3:9d:95:b9:3c:df:31:9b: 9f:f2:4d:54:d0:9d:93:38:5a:3b:b3:a9:6d:62:3c:7b:cf:ad: 76:01:85:5f:54:b5:80:c7:f9:7d:22:e8:f5:db:fb:43:4a:57: 12:31:c7:e3:15:b4:f3:f4:d7:ea:3f:78:0d:de:a7:3a:0a:3d: 81:ca:6d:3d:5e:e6:72:05:8f:be:cc:4e:e1:40:15:03:53:72: 92:09:07:2e:cb:cd:14:1c:9c:bf:0a:c9:cb:39:d6:18:97:54: 98:e4:e6:c8:35:87:c0:6f:4a:ce:49:9f:f9:95:8f:95:a9:a6: fc:60:0d:2d:a8:37:6c:bf:1f:9f:44:de:ed:66:af:d0:85:56: e7:e5:d7:16 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICFCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjRE QzIwRDk2MTJDNUI3NzQ5OUE2RDIyM0E2NTJCMkUzOEIxMTY0NzAeFw0yNDA3Mjcw NzQ2MTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDI1Nzk4MTZBNEI5NzU3 QzU5M0IxMUE4Q0Y4MTk0MzE1RDQ4OUE3MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY3xS07GGQj3mPOltlm4lCjF2bMZ5tlnoZWOK0bliWa0ylLS17 vvRn9I1QT24qO0GjOcyc6xHQ1jh0nQwmJzoEC/4pjn6agbM2A5TrqSEcoSLPN0jB VLv6Je1gmVR9ZIgRmquYPM6lPRGtpR5VfdYnFD3VZBbksK4XzCBp/xF61gko8Mn2 8hGueTnXQx9uqNI9wuAz3NlZxr9cDZMuCts9osDICP4eIcnH8u34FkK0ehDo6GBy yGn6uN6pOvM/X7zXIIc3kyWoliIIcF582yFumrcqmmYndnT3rtLFEbTYyQ3viDmY SvQf8fBo1lPr6I0bRJY3wnSZYYu+ezd78f41AgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUJXmBakuXV8WTsRqM+BlDFdSJpxUwHwYDVR0jBBgwFoAUZNwg2WEsW3dJmm0i OmUrLjixFkcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2 L1pOd2cyV0VzVzNkSm1tMGlPbVVyTGppeEZrYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWk53ZzJXRXNXM2RKbW0waU9tVXJMaml4RmtjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2L0pYbUJha3VYVjhXVHNS cU0tQmxERmRTSnB4VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIwYIKwYBBQUHAQcBAf8EFDASMBAEAgABMAoD AwJ83AMDAK+yMA0GCSqGSIb3DQEBCwUAA4IBAQBw5Q0/6cv/hVC1yyAOWfVZd/Um yFLiolibe9wQywYzVH2YnISq9KCyfVEtJygO/aCzX5Qvjel5c4r45O5BRpN/xilL d9xAE3UyqBpbXnfWB4TXuNLM5SCu5UBPhSBBAzc7XCKVBB90WAgpcKW9/Yi8LID2 9so1w52VuTzfMZuf8k1U0J2TOFo7s6ltYjx7z612AYVfVLWAx/l9Iuj12/tDSlcS McfjFbTz9NfqP3gN3qc6Cj2Bym09XuZyBY++zE7hQBUDU3KSCQcuy80UHJy/CsnL OdYYl1SY5ObINYfAb0rOSZ/5lY+Vqab8YA0tqDdsvx+fRN7tZq/QhVbn5dcW -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org