$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/6-5JDz1xnDr3HyTVDSPghvUanyk.roa File: 6-5JDz1xnDr3HyTVDSPghvUanyk.roa (raw, json) Hash identifier: Q/w2V2gxvGv0VWCEuVLmgmMCtJx9XtJr8mscXlzsNUs= Subject key identifier: EB:EE:49:0F:3D:71:9C:3A:F7:1F:24:D5:0D:23:E0:86:F5:1A:9F:29 Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Certificate serial: 1058 Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/6-5JDz1xnDr3HyTVDSPghvUanyk.roa Signing time: Sat 14 Sep 2024 07:29:55 +0000 ROA not before: Sat 14 Sep 2024 07:29:55 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 63719 IP address blocks: 45.255.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4184 (0x1058) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Validity Not Before: Sep 14 07:29:55 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=EBEE490F3D719C3AF71F24D50D23E086F51A9F29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:42:67:10:5d:57:38:89:15:d5:90:b9:c6: 9a:f9:ea:c9:74:8c:81:19:6c:de:62:d2:66:d5:44: 38:bb:bf:1e:e2:2e:90:db:65:26:2c:c6:a2:6f:98: 41:88:6a:9e:bf:22:ad:5a:7e:99:60:40:10:fb:20: 93:35:6d:cf:3d:ef:3a:7d:09:da:97:6a:dc:08:27: 1e:42:44:c1:08:a7:5d:f7:a9:39:a9:b8:b5:bd:01: d7:69:a8:da:c9:4c:99:ca:5c:b6:70:80:b0:71:2f: c3:3c:b5:b0:35:ad:00:ed:c2:76:ce:b7:f8:3a:08: c5:3f:12:9c:12:c5:a4:70:18:49:cf:f1:96:98:1c: 34:61:84:7a:a8:b0:16:6f:6e:04:5d:22:09:d1:19: ea:d0:69:ad:65:5c:f9:93:7b:92:d8:0d:6f:97:8e: b7:0a:30:c8:71:79:0b:31:8f:38:75:36:42:8a:b9: 49:99:f4:ff:1a:b6:76:18:ec:6f:d7:20:53:89:ce: f4:4b:00:a5:28:e6:8d:1c:4f:d6:9b:6b:5e:2c:dc: 74:91:b1:f2:b7:63:78:ab:6a:05:70:b9:04:37:52: 86:e8:67:10:55:e7:09:e0:3e:2b:da:1c:fb:c9:2b: 54:a0:86:ec:d0:2e:7d:88:62:47:c9:fd:54:7b:58: 1f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EE:49:0F:3D:71:9C:3A:F7:1F:24:D5:0D:23:E0:86:F5:1A:9F:29 X509v3 Authority Key Identifier: keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/6-5JDz1xnDr3HyTVDSPghvUanyk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.255.152.0/22 Signature Algorithm: sha256WithRSAEncryption 69:60:55:bd:7b:69:ad:fc:1d:b2:1a:d0:d4:fc:a6:fe:1a:8f: b9:5d:a3:d4:48:24:b0:f3:4c:b3:01:bd:86:59:ad:f0:53:a1: 85:fd:06:f5:21:40:df:cc:77:b3:61:54:b1:c2:3c:6c:70:ea: 8f:e4:3a:b1:30:a9:89:b5:a6:c4:7b:4c:58:b7:09:0c:77:b9: e0:7e:54:68:4b:5a:66:f5:d2:1a:fd:a1:0c:02:35:64:cc:0a: f1:56:1c:83:37:ad:3f:ba:bc:78:65:f9:1b:3c:10:d4:f5:df: fb:7e:7c:aa:6c:80:49:2c:05:86:2d:77:34:76:6c:7c:de:ad: 21:93:e8:b1:9e:7a:04:c9:81:4e:19:75:58:2b:07:e8:dc:bc: 4f:3c:b7:12:d5:cf:08:2a:e6:c3:15:44:d7:37:4a:bd:d4:83: 09:02:30:e5:46:45:84:4b:db:f8:f7:7c:35:68:de:2e:f0:51: 73:29:90:be:43:f3:29:df:ec:e5:b2:ad:de:82:c3:6d:86:61: 30:ff:67:dd:9d:30:9b:72:a5:9c:23:63:54:cb:32:67:05:b2: cf:3a:b1:b8:c7:6c:b7:b0:82:81:2c:04:eb:c7:25:0c:b6:45: 84:73:0a:a1:9c:28:87:f4:be:20:48:fe:0c:04:5d:81:2e:91: 34:48:5e:72 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkx QzVCMDNDOTdDRTBGRTNFQzc4RTIzQzY4NTZGNzkyQzIwRDQwNDAeFw0yNDA5MTQw NzI5NTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVCRUU0OTBGM0Q3MTlD M0FGNzFGMjRENTBEMjNFMDg2RjUxQTlGMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNtUJnEF1XOIkV1ZC5xpr56sl0jIEZbN5i0mbVRDi7vx7iLpDb ZSYsxqJvmEGIap6/Iq1afplgQBD7IJM1bc897zp9CdqXatwIJx5CRMEIp133qTmp uLW9AddpqNrJTJnKXLZwgLBxL8M8tbA1rQDtwnbOt/g6CMU/EpwSxaRwGEnP8ZaY HDRhhHqosBZvbgRdIgnRGerQaa1lXPmTe5LYDW+XjrcKMMhxeQsxjzh1NkKKuUmZ 9P8atnYY7G/XIFOJzvRLAKUo5o0cT9aba14s3HSRsfK3Y3iragVwuQQ3UoboZxBV 5wngPivaHPvJK1SghuzQLn2IYkfJ/VR7WB+XAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU6+5JDz1xnDr3HyTVDSPghvUanykwHwYDVR0jBBgwFoAUWRxbA8l84P4+x44j xoVveSwg1AQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2 L1dSeGJBOGw4NFA0LXg0NGp4b1Z2ZVN3ZzFBUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV1J4YkE4bDg0UDQteDQ0anhvVnZlU3dnMUFRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2LzYtNUpEejF4bkRyM0h5 VFZEU1BnaHZVYW55ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/5gwDQYJKoZIhvcNAQELBQADggEBAGlgVb17aa38HbIa0NT8pv4aj7ldo9RI JLDzTLMBvYZZrfBToYX9BvUhQN/Md7NhVLHCPGxw6o/kOrEwqYm1psR7TFi3CQx3 ueB+VGhLWmb10hr9oQwCNWTMCvFWHIM3rT+6vHhl+Rs8ENT13/t+fKpsgEksBYYt dzR2bHzerSGT6LGeegTJgU4ZdVgrB+jcvE88txLVzwgq5sMVRNc3Sr3UgwkCMOVG RYRL2/j3fDVo3i7wUXMpkL5D8ynf7OWyrd6Cw22GYTD/Z92dMJtypZwjY1TLMmcF ss86sbjHbLewgoEsBOvHJQy2RYRzCqGcKIf0viBI/gwEXYEukTRIXnI= -----END CERTIFICATE-----Generated at Fri Nov 22 19:57:53 2024 by rpki-client on console-ams.rpki-client.org