$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/Dq8TB9Iw3wpCYOom-TFTIIU8DxE.roa File: Dq8TB9Iw3wpCYOom-TFTIIU8DxE.roa (raw, json) Hash identifier: SbtrU6v4DFJqI+K7YSbJe05UeDGIMiyFW8Ot9p2YPgc= Subject key identifier: 0E:AF:13:07:D2:30:DF:0A:42:60:EA:26:F9:31:53:20:85:3C:0F:11 Certificate issuer: /CN=7B099066BD2AF234293C87917B33B1AB861970EF Certificate serial: 195C Authority key identifier: 7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/Dq8TB9Iw3wpCYOom-TFTIIU8DxE.roa Signing time: Tue 24 Sep 2024 00:18:54 +0000 ROA not before: Tue 24 Sep 2024 00:18:54 +0000 ROA not after: Sat 20 Sep 2025 07:41:26 +0000 asID: 63199 IP address blocks: 139.159.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 08:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6492 (0x195c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B099066BD2AF234293C87917B33B1AB861970EF Validity Not Before: Sep 24 00:18:54 2024 GMT Not After : Sep 20 07:41:26 2025 GMT Subject: CN=0EAF1307D230DF0A4260EA26F9315320853C0F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e7:e3:d2:28:a6:17:82:5f:0f:1f:dd:4c:60: 19:31:22:10:b9:a4:78:3a:5d:e0:35:94:b9:b2:9a: 21:38:ba:a9:36:b1:9f:6a:19:80:5f:24:46:9e:60: 3f:07:97:46:1b:f1:b4:9b:de:da:a1:ab:32:29:3c: f6:d9:a2:c8:79:0e:91:2b:44:ad:ec:31:e3:61:18: 94:56:35:6c:3b:dd:b7:75:8f:95:dd:1b:f1:78:51: 34:1d:97:50:a1:4f:f1:3f:6f:7c:06:1f:5e:ef:f8: 13:01:79:6f:e4:6a:b4:88:3f:18:50:ea:c6:53:6d: a4:94:f8:e0:0c:c3:e0:06:61:10:4d:e2:83:a9:ad: 1d:e8:00:f1:01:44:d1:01:29:49:f8:9b:a8:85:17: 5f:05:5e:f4:35:a3:08:90:6e:f4:5c:87:e7:ad:bd: 83:a6:1b:00:18:57:bb:d1:c7:da:1f:80:02:fc:18: fa:9b:e9:e4:0a:9c:52:52:56:b7:3a:91:28:e8:b5: c0:06:fe:1c:d0:ba:94:ef:9e:2e:74:dc:d8:f2:2e: 80:d5:44:5f:1e:cf:fb:32:e2:f3:2a:88:ff:2b:37: bf:23:d0:38:6b:6e:b5:07:67:a6:a8:0d:a2:2b:36: c6:6d:d8:d4:36:ae:df:87:c6:a7:0c:54:4f:17:9b: 62:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AF:13:07:D2:30:DF:0A:42:60:EA:26:F9:31:53:20:85:3C:0F:11 X509v3 Authority Key Identifier: keyid:7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/Dq8TB9Iw3wpCYOom-TFTIIU8DxE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.159.104.0/22 Signature Algorithm: sha256WithRSAEncryption 00:c5:52:57:a2:e0:85:34:02:45:12:23:2b:3c:b5:42:5e:ad: cb:1d:20:e2:d4:74:79:cb:89:6f:d8:0a:c9:45:af:e8:af:67: 5d:1f:e0:2e:62:7a:37:2d:70:6c:07:f2:b4:55:bc:f0:c9:79: 89:53:63:98:a9:db:f9:d6:ed:87:0d:06:2d:0d:6a:e7:99:76: b6:db:3d:cf:07:d7:3c:f2:e2:32:73:7e:3a:e3:fe:68:f4:88: 2b:79:73:34:3e:8f:26:a0:63:bc:2a:0d:c2:d9:8c:e5:ef:43: 60:3d:e3:9c:27:93:1b:23:5e:6f:9c:f0:4d:44:de:b3:0a:4c: 62:0f:1e:93:06:29:d5:52:0f:6e:97:73:b9:1a:46:6b:33:b4: 09:45:1b:ac:32:5b:0b:54:86:a6:1e:e2:a5:b5:db:47:56:0d: e2:ed:36:15:b0:cc:ed:a5:18:24:b1:78:2b:db:82:dd:0e:6e: 25:17:6d:1d:81:e5:8e:19:7f:a5:10:ad:3d:ca:ae:dc:48:f9: 90:f2:12:5d:1d:76:cd:9d:c4:65:50:52:38:6a:cf:35:a1:cf: 79:95:77:db:f9:33:2d:55:23:bc:a5:c9:40:aa:8a:07:a4:83: 31:31:0d:1d:46:10:c5:15:0f:0e:30:37:15:c4:bd:67:b8:9f: b2:38:0f:e7 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGVwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Iw OTkwNjZCRDJBRjIzNDI5M0M4NzkxN0IzM0IxQUI4NjE5NzBFRjAeFw0yNDA5MjQw MDE4NTRaFw0yNTA5MjAwNzQxMjZaMDMxMTAvBgNVBAMTKDBFQUYxMzA3RDIzMERG MEE0MjYwRUEyNkY5MzE1MzIwODUzQzBGMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb5+PSKKYXgl8PH91MYBkxIhC5pHg6XeA1lLmymiE4uqk2sZ9q GYBfJEaeYD8Hl0Yb8bSb3tqhqzIpPPbZosh5DpErRK3sMeNhGJRWNWw73bd1j5Xd G/F4UTQdl1ChT/E/b3wGH17v+BMBeW/karSIPxhQ6sZTbaSU+OAMw+AGYRBN4oOp rR3oAPEBRNEBKUn4m6iFF18FXvQ1owiQbvRch+etvYOmGwAYV7vRx9ofgAL8GPqb 6eQKnFJSVrc6kSjotcAG/hzQupTvni503NjyLoDVRF8ez/sy4vMqiP8rN78j0Dhr brUHZ6aoDaIrNsZt2NQ2rt+HxqcMVE8Xm2LfAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUDq8TB9Iw3wpCYOom+TFTIIU8DxEwHwYDVR0jBBgwFoAUewmQZr0q8jQpPIeR ezOxq4YZcO8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIx L2V3bVFacjBxOGpRcFBJZVJlek94cTRZWmNPOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZXdtUVpyMHE4alFwUEllUmV6T3hxNFlaY084LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIxL0RxOFRCOUl3M3dwQ1lP b20tVEZUSUlVOER4RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAKLn2gwDQYJKoZIhvcNAQELBQADggEBAADFUlei4IU0AkUSIys8tUJercsdIOLU dHnLiW/YCslFr+ivZ10f4C5iejctcGwH8rRVvPDJeYlTY5ip2/nW7YcNBi0NaueZ drbbPc8H1zzy4jJzfjrj/mj0iCt5czQ+jyagY7wqDcLZjOXvQ2A945wnkxsjXm+c 8E1E3rMKTGIPHpMGKdVSD26Xc7kaRmsztAlFG6wyWwtUhqYe4qW120dWDeLtNhWw zO2lGCSxeCvbgt0ObiUXbR2B5Y4Zf6UQrT3KrtxI+ZDyEl0dds2dxGVQUjhqzzWh z3mVd9v5My1VI7ylyUCqigekgzExDR1GEMUVDw4wNxXEvWe4n7I4D+c= -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:13 2024 by rpki-client on console-ams.rpki-client.org