$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/709/d9CuzpFu2i2T3ANTeGiRq4uBh6k.roa File: d9CuzpFu2i2T3ANTeGiRq4uBh6k.roa (raw, json) Hash identifier: rFNPQ8eKGZ1y0JRisbrWbJIOfunRy8qrFLO7O/aSzaM= Subject key identifier: 77:D0:AE:CE:91:6E:DA:2D:93:DC:03:53:78:68:91:AB:8B:81:87:A9 Certificate issuer: /CN=E6982953DF0777AEDB88EE3FF20A152640571785 Certificate serial: 18C9 Authority key identifier: E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/d9CuzpFu2i2T3ANTeGiRq4uBh6k.roa Signing time: Thu 08 Aug 2024 07:13:27 +0000 ROA not before: Thu 08 Aug 2024 07:13:27 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 45079 IP address blocks: 101.52.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6345 (0x18c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6982953DF0777AEDB88EE3FF20A152640571785 Validity Not Before: Aug 8 07:13:27 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=77D0AECE916EDA2D93DC0353786891AB8B8187A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:8d:e0:9e:d9:3c:f2:7b:e6:7c:c3:5d:64: c5:a4:dd:fb:66:88:4a:bf:a5:e8:bc:c6:97:f3:93: 12:a7:5f:99:6e:5e:57:79:d9:0a:bd:e9:5e:32:f6: 4c:8f:00:24:2c:3d:01:78:cb:74:c8:cc:63:af:02: 49:4a:76:84:ac:f2:fa:c1:20:21:ba:89:fe:87:79: b2:fa:c4:0c:22:98:fc:47:dc:a0:06:ed:1a:cb:e0: b4:7e:3f:3b:91:7d:a1:18:4b:b1:31:0c:3e:2b:ab: 0b:6b:dd:3f:12:4a:b6:52:1e:61:b3:15:54:0e:ab: ee:33:70:c2:eb:ea:a5:14:da:1c:51:55:e2:62:6e: a0:22:9a:d9:47:c0:7a:12:cb:04:ca:d1:07:1f:c6: d9:d0:23:c3:05:96:f6:12:12:7f:fd:fe:b5:37:c2: b3:5e:51:a4:11:aa:69:07:85:b0:81:59:0b:24:b2: 1b:3d:1c:75:55:ae:f9:96:99:9a:bd:28:0d:7d:ee: 33:94:be:5e:c7:04:fe:8b:53:87:27:0a:37:5d:67: 34:a4:c1:e2:3b:ba:2d:26:97:bb:2a:44:39:f9:69: b4:da:6e:57:9d:fd:c1:ed:4c:53:a6:f8:9d:4a:85: 11:f5:59:6b:bb:c9:57:85:f9:3c:b8:20:94:fe:2e: a4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D0:AE:CE:91:6E:DA:2D:93:DC:03:53:78:68:91:AB:8B:81:87:A9 X509v3 Authority Key Identifier: keyid:E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/d9CuzpFu2i2T3ANTeGiRq4uBh6k.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.52.52.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:f2:eb:de:9f:07:5d:03:78:03:d5:34:23:c2:bd:c6:e9:af: e8:bc:45:71:aa:8b:7a:5e:fd:49:64:7b:dc:9f:bb:c0:b9:1c: 97:42:43:34:d9:ee:85:40:26:e8:24:17:49:3f:f6:89:f2:74: f4:52:f6:c2:f2:a3:b9:d2:eb:de:d6:16:0d:37:c5:e6:8c:13: e9:55:5a:55:80:65:32:75:17:51:eb:68:cc:14:c1:32:3c:c5: 40:41:8a:78:ed:b2:03:71:45:cf:8f:4e:f6:3a:58:5f:b4:08: b4:c3:8c:36:9e:91:30:d5:d9:3f:b2:4d:35:59:fc:72:2e:e0: 6d:0a:c4:71:02:75:77:fe:e2:e9:43:11:53:40:f7:05:7b:5b: dd:08:99:c6:f2:9b:0f:3d:81:ac:ae:ef:7e:6b:3d:22:03:25: 7a:d4:9f:69:b6:f7:67:c1:62:79:33:31:85:3b:44:a8:e4:6f: e9:88:7b:1a:cd:b0:1d:12:b7:f8:f4:69:34:7a:13:d5:08:4c: 19:8f:88:85:cd:7c:9c:cd:e9:c1:95:cb:94:c9:cb:fb:56:6d: e8:73:df:47:ed:0b:a7:c8:d8:58:4e:64:29:7b:96:a7:77:27: 9c:bf:9e:10:3d:c0:14:a5:1a:8e:ca:75:12:5e:08:38:b7:d3: 81:ca:dc:10 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGMkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTY5 ODI5NTNERjA3NzdBRURCODhFRTNGRjIwQTE1MjY0MDU3MTc4NTAeFw0yNDA4MDgw NzEzMjdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDc3RDBBRUNFOTE2RURB MkQ5M0RDMDM1Mzc4Njg5MUFCOEI4MTg3QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpo43gntk88nvmfMNdZMWk3ftmiEq/pei8xpfzkxKnX5luXld5 2Qq96V4y9kyPACQsPQF4y3TIzGOvAklKdoSs8vrBICG6if6HebL6xAwimPxH3KAG 7RrL4LR+PzuRfaEYS7ExDD4rqwtr3T8SSrZSHmGzFVQOq+4zcMLr6qUU2hxRVeJi bqAimtlHwHoSywTK0QcfxtnQI8MFlvYSEn/9/rU3wrNeUaQRqmkHhbCBWQskshs9 HHVVrvmWmZq9KA197jOUvl7HBP6LU4cnCjddZzSkweI7ui0ml7sqRDn5abTabled /cHtTFOm+J1KhRH1WWu7yVeF+Ty4IJT+LqSRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUd9CuzpFu2i2T3ANTeGiRq4uBh6kwHwYDVR0jBBgwFoAU5pgpU98Hd67biO4/ 8goVJkBXF4UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzA5 LzVwZ3BVOThIZDY3YmlPNF84Z29WSmtCWEY0VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNXBncFU5OEhkNjdiaU80Xzhnb1ZKa0JYRjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzA5L2Q5Q3V6cEZ1MmkyVDNB TlRlR2lScTR1Qmg2ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABlNDQwDQYJKoZIhvcNAQELBQADggEBAJry696fB10DeAPVNCPCvcbpr+i8RXGq i3pe/Ulke9yfu8C5HJdCQzTZ7oVAJugkF0k/9onydPRS9sLyo7nS697WFg03xeaM E+lVWlWAZTJ1F1HraMwUwTI8xUBBinjtsgNxRc+PTvY6WF+0CLTDjDaekTDV2T+y TTVZ/HIu4G0KxHECdXf+4ulDEVNA9wV7W90Imcbymw89gayu735rPSIDJXrUn2m2 92fBYnkzMYU7RKjkb+mIexrNsB0St/j0aTR6E9UITBmPiIXNfJzN6cGVy5TJy/tW behz30ftC6fI2FhOZCl7lqd3J5y/nhA9wBSlGo7KdRJeCDi304HK3BA= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org