$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/656/Xj8kXfumODBcU_4H6H3A426J-NU.roa File: Xj8kXfumODBcU_4H6H3A426J-NU.roa (raw, json) Hash identifier: QbX3Qxn+kmjYO0Z0IH5wY6lBS9Byp4HsV2W21u6PmMM= Subject key identifier: 5E:3F:24:5D:FB:A6:38:30:5C:53:FE:07:E8:7D:C0:E3:6E:89:F8:D5 Certificate issuer: /CN=64DC20D9612C5B77499A6D223A652B2E38B11647 Certificate serial: 0D74 Authority key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/Xj8kXfumODBcU_4H6H3A426J-NU.roa Signing time: Mon 14 Aug 2023 04:35:21 +0000 ROA not before: Mon 14 Aug 2023 04:35:21 +0000 ROA not after: Sat 10 Aug 2024 07:41:13 +0000 asID: 45090 IP address blocks: 124.220.0.0/14 maxlen: 24 175.178.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Jun 2024 13:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3444 (0xd74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64DC20D9612C5B77499A6D223A652B2E38B11647 Validity Not Before: Aug 14 04:35:21 2023 GMT Not After : Aug 10 07:41:13 2024 GMT Subject: CN=5E3F245DFBA638305C53FE07E87DC0E36E89F8D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:76:2b:86:76:1a:2e:93:9f:bb:dd:08:de: de:03:18:76:44:99:57:00:51:87:22:82:a4:81:a4: 29:a4:76:0f:8c:7a:1c:84:24:d7:f9:e1:69:94:b6: eb:41:a4:80:32:a9:9d:1a:70:b2:21:4b:6d:0e:c1: 7a:c9:6d:47:08:de:f8:18:e4:cb:f7:49:e6:24:8d: 06:d5:6d:0f:c6:31:4c:3c:e9:e3:24:fb:5d:05:c1: 5c:db:fe:7f:b0:59:94:24:11:6a:e1:ad:31:2a:43: 9e:d4:f9:d2:20:35:3b:39:c0:ce:ba:78:d9:37:45: 90:1c:de:98:50:3e:b3:83:61:f4:a3:5c:50:d5:7b: e3:f6:ff:de:8c:f1:86:12:87:b5:38:61:64:3d:27: f1:41:8c:7c:29:cd:9a:a8:e8:9c:62:bf:0a:5f:29: 7d:3e:63:79:d2:e5:b7:56:c7:19:97:71:ed:ea:b1: 6b:1b:d3:28:21:98:e9:c1:e2:0d:6c:f2:54:b2:cf: 25:28:c8:45:ab:96:84:2a:f6:69:42:eb:d7:2f:cb: 3d:0d:45:e7:c8:8a:9d:56:e1:81:52:b6:a2:2b:df: 8e:f3:dc:ed:39:1f:85:7c:2b:d3:ce:3a:3f:32:67: 50:80:fd:3c:47:ef:8a:da:6a:e9:a7:74:c0:8c:0d: 88:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3F:24:5D:FB:A6:38:30:5C:53:FE:07:E8:7D:C0:E3:6E:89:F8:D5 X509v3 Authority Key Identifier: keyid:64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/Xj8kXfumODBcU_4H6H3A426J-NU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.220.0.0/14 175.178.0.0/16 Signature Algorithm: sha256WithRSAEncryption 96:be:01:ae:fd:69:6d:c0:5a:51:55:19:ef:63:fa:fd:5b:f3: 20:f3:88:65:09:95:92:ae:63:99:ab:3b:ff:f3:91:d6:48:d3: 12:1a:22:29:4f:22:2f:21:9b:b9:4c:94:4f:a9:b1:2f:26:1c: a7:ba:0e:41:32:9f:c6:54:51:d7:8a:0a:77:1d:dd:e6:a3:29: 13:9a:5b:41:4b:aa:e6:59:00:cb:05:69:bd:04:40:5d:92:c7: 21:80:c4:e9:1c:e8:62:57:89:5b:f6:a7:0c:ff:58:23:95:b8: 94:34:6b:66:90:10:80:81:cb:29:02:b9:1d:d4:04:18:83:a6: 2b:5d:f1:49:5a:e3:6d:66:0a:ee:cf:47:64:0d:20:16:c2:51: 2e:ac:d5:a1:17:d8:63:27:29:07:30:0c:7a:8c:9d:c4:1f:42: 93:f3:b3:5b:41:12:0e:7c:b0:7c:ed:02:a1:a2:5f:6c:8c:20: 10:12:75:69:31:fb:48:bb:5b:1a:7f:ee:cb:d5:6d:a8:50:b9: 12:92:12:47:da:e4:54:b7:ed:cc:9a:ea:a9:93:f6:59:05:35: 3e:c5:5c:94:c4:10:aa:25:5c:37:01:3e:14:90:da:07:5d:16: a4:98:2c:0e:b7:6c:0d:26:54:66:33:6e:a6:ce:ef:7f:f7:4c: d3:29:0c:f2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICDXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjRE QzIwRDk2MTJDNUI3NzQ5OUE2RDIyM0E2NTJCMkUzOEIxMTY0NzAeFw0yMzA4MTQw NDM1MjFaFw0yNDA4MTAwNzQxMTNaMDMxMTAvBgNVBAMTKDVFM0YyNDVERkJBNjM4 MzA1QzUzRkUwN0U4N0RDMEUzNkU4OUY4RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8u3YrhnYaLpOfu90I3t4DGHZEmVcAUYcigqSBpCmkdg+MehyE JNf54WmUtutBpIAyqZ0acLIhS20OwXrJbUcI3vgY5Mv3SeYkjQbVbQ/GMUw86eMk +10FwVzb/n+wWZQkEWrhrTEqQ57U+dIgNTs5wM66eNk3RZAc3phQPrODYfSjXFDV e+P2/96M8YYSh7U4YWQ9J/FBjHwpzZqo6JxivwpfKX0+Y3nS5bdWxxmXce3qsWsb 0yghmOnB4g1s8lSyzyUoyEWrloQq9mlC69cvyz0NRefIip1W4YFStqIr347z3O05 H4V8K9POOj8yZ1CA/TxH74raaumndMCMDYh1AgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUXj8kXfumODBcU/4H6H3A426J+NUwHwYDVR0jBBgwFoAUZNwg2WEsW3dJmm0i OmUrLjixFkcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2 L1pOd2cyV0VzVzNkSm1tMGlPbVVyTGppeEZrYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWk53ZzJXRXNXM2RKbW0waU9tVXJMaml4RmtjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2L1hqOGtYZnVtT0RCY1Vf NEg2SDNBNDI2Si1OVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIwYIKwYBBQUHAQcBAf8EFDASMBAEAgABMAoD AwJ83AMDAK+yMA0GCSqGSIb3DQEBCwUAA4IBAQCWvgGu/WltwFpRVRnvY/r9W/Mg 84hlCZWSrmOZqzv/85HWSNMSGiIpTyIvIZu5TJRPqbEvJhynug5BMp/GVFHXigp3 Hd3moykTmltBS6rmWQDLBWm9BEBdkschgMTpHOhiV4lb9qcM/1gjlbiUNGtmkBCA gcspArkd1AQYg6YrXfFJWuNtZgruz0dkDSAWwlEurNWhF9hjJykHMAx6jJ3EH0KT 87NbQRIOfLB87QKhol9sjCAQEnVpMftIu1saf+7L1W2oULkSkhJH2uRUt+3Mmuqp k/ZZBTU+xVyUxBCqJVw3AT4UkNoHXRakmCwOt2wNJlRmM26mzu9/90zTKQzy -----END CERTIFICATE-----Generated at Tue Jun 18 09:36:55 2024 by rpki-client on console-fra.rpki-client.org