$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/Zf0KaO2lvAqTZzRNnzm_99ii-aI.roa File: Zf0KaO2lvAqTZzRNnzm_99ii-aI.roa (raw, json) Hash identifier: Rt65UKUI1MIChaQ4kid1nM0Cmb+I+LuUZ5rVsZCJ5zk= Subject key identifier: 65:FD:0A:68:ED:A5:BC:0A:93:67:34:4D:9F:39:BF:F7:D8:A2:F9:A2 Certificate issuer: /CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A Certificate serial: 17C0 Authority key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/Zf0KaO2lvAqTZzRNnzm_99ii-aI.roa Signing time: Tue 24 Sep 2024 00:18:53 +0000 ROA not before: Tue 24 Sep 2024 00:18:53 +0000 ROA not after: Sat 20 Sep 2025 07:41:26 +0000 asID: 136958 IP address blocks: 43.255.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6080 (0x17c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A Validity Not Before: Sep 24 00:18:53 2024 GMT Not After : Sep 20 07:41:26 2025 GMT Subject: CN=65FD0A68EDA5BC0A9367344D9F39BFF7D8A2F9A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ed:6a:16:eb:22:70:42:88:4f:29:49:75:14: 41:e3:e8:71:8b:be:70:de:97:1d:19:77:7b:7c:cd: 51:5f:88:3f:08:4d:ce:37:99:4c:cb:eb:11:bd:26: 9d:41:26:06:c0:ef:36:19:ca:8f:16:d8:1b:bd:8f: f4:a6:96:19:72:9a:0b:32:be:d2:1a:38:1e:ab:ba: 58:6c:e9:8d:e5:5a:d3:fe:b6:df:31:02:bf:9f:1f: bb:ac:c6:b5:b1:ad:48:fe:46:44:8c:3f:de:a3:07: 53:89:35:75:b7:73:bd:91:1f:71:1e:00:5d:e8:e6: 22:44:31:39:92:c4:f0:4f:be:33:3b:ee:9e:f1:ee: 93:44:79:61:d4:d4:65:5d:3b:33:30:62:0f:8a:93: 66:d2:30:02:28:c9:f8:94:3d:c5:37:0a:49:4b:55: 30:66:16:1a:48:e9:d5:05:d7:36:2c:b9:7e:c3:5a: 63:85:a8:af:75:7a:ae:b1:a6:fd:8e:0e:b3:04:d4: 85:e9:35:d9:56:2f:77:6a:75:f3:59:a5:b5:dd:99: a4:35:3d:0a:df:e8:76:b0:ff:f1:3d:61:41:4a:11: 4f:b3:05:4d:42:e7:08:ce:55:e1:6a:44:69:3e:63: 8a:1e:0c:8f:4b:be:be:d2:6d:c5:74:28:af:ea:54: ee:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FD:0A:68:ED:A5:BC:0A:93:67:34:4D:9F:39:BF:F7:D8:A2:F9:A2 X509v3 Authority Key Identifier: keyid:EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/Zf0KaO2lvAqTZzRNnzm_99ii-aI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.255.212.0/22 Signature Algorithm: sha256WithRSAEncryption 62:1f:40:d4:ea:b6:43:1c:60:73:e9:52:74:ee:03:eb:a9:30: 1f:72:47:17:95:2f:6c:a1:ba:b5:09:a2:ea:25:01:d1:bd:fa: 29:c8:73:56:c9:8c:86:80:40:1f:c7:99:2b:49:b5:18:4e:51: 31:21:70:6a:9e:a5:f8:89:75:84:a6:a0:7c:a3:29:f5:5f:55: d5:1f:27:64:5b:9f:e8:78:b4:1c:fb:d5:35:13:b0:68:be:70: 16:73:47:64:0e:31:d1:ae:ba:32:9d:bd:7f:5c:0a:6c:8a:f6: e9:2b:13:9d:28:c8:c0:71:83:81:e6:d7:04:cc:58:bd:a9:53: 91:ce:66:66:f9:8d:2f:a9:3f:38:77:16:8c:c3:8c:ac:46:5c: 85:c0:56:ca:38:93:d9:27:ab:33:c7:0c:03:81:ae:67:0b:57: 70:5f:11:ff:97:92:c7:b0:4f:e7:fa:d5:49:7a:64:62:ab:7b: 6a:cc:d6:1c:03:d9:3e:7e:14:8c:7a:23:ab:80:fe:22:27:e9: 8b:68:6e:9a:9d:32:15:3f:d8:ea:39:d5:3a:8d:b5:ea:c5:cd: b4:61:c3:bf:2b:b4:fa:b9:2b:24:cc:70:41:90:db:3c:f0:25: e9:47:47:df:86:b8:de:34:04:2f:53:d0:6f:d6:3a:40:8d:16: 06:dc:57:df -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICF8AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUU4 ODdBQ0M3Q0U0QjVGNjZDQ0Y0OTQ2RjAyQkZBQ0JERTI4Qjc2QTAeFw0yNDA5MjQw MDE4NTNaFw0yNTA5MjAwNzQxMjZaMDMxMTAvBgNVBAMTKDY1RkQwQTY4RURBNUJD MEE5MzY3MzQ0RDlGMzlCRkY3RDhBMkY5QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDs7WoW6yJwQohPKUl1FEHj6HGLvnDelx0Zd3t8zVFfiD8ITc43 mUzL6xG9Jp1BJgbA7zYZyo8W2Bu9j/SmlhlymgsyvtIaOB6rulhs6Y3lWtP+tt8x Ar+fH7usxrWxrUj+RkSMP96jB1OJNXW3c72RH3EeAF3o5iJEMTmSxPBPvjM77p7x 7pNEeWHU1GVdOzMwYg+Kk2bSMAIoyfiUPcU3CklLVTBmFhpI6dUF1zYsuX7DWmOF qK91eq6xpv2ODrME1IXpNdlWL3dqdfNZpbXdmaQ1PQrf6Haw//E9YUFKEU+zBU1C 5wjOVeFqRGk+Y4oeDI9Lvr7SbcV0KK/qVO6dAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUZf0KaO2lvAqTZzRNnzm/99ii+aIwHwYDVR0jBBgwFoAU7oh6zHzktfZsz0lG 8Cv6y94ot2owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIx LzdvaDZ6SHprdGZac3owbEc4Q3Y2eTk0b3Qyby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvN29oNnpIemt0ZlpzejBsRzhDdjZ5OTRvdDJvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIxL1pmMEthTzJsdkFxVFp6 Uk5uem1fOTlpaS1hSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr/9QwDQYJKoZIhvcNAQELBQADggEBAGIfQNTqtkMcYHPpUnTuA+upMB9yRxeV L2yhurUJouolAdG9+inIc1bJjIaAQB/HmStJtRhOUTEhcGqepfiJdYSmoHyjKfVf VdUfJ2Rbn+h4tBz71TUTsGi+cBZzR2QOMdGuujKdvX9cCmyK9ukrE50oyMBxg4Hm 1wTMWL2pU5HOZmb5jS+pPzh3FozDjKxGXIXAVso4k9knqzPHDAOBrmcLV3BfEf+X ksewT+f61Ul6ZGKre2rM1hwD2T5+FIx6I6uA/iIn6YtobpqdMhU/2Oo51TqNterF zbRhw78rtPq5KyTMcEGQ2zzwJelHR9+GuN40BC9T0G/WOkCNFgbcV98= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:48 2024 by rpki-client on console-ams.rpki-client.org