$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/NsqXFtmbLmdkbjz7xTWYsdGFSeU.roa File: NsqXFtmbLmdkbjz7xTWYsdGFSeU.roa (raw, json) Hash identifier: xvutAQhMubRWUKrhuTp3EUHcnZB5KCkuVVNsxU4iSy4= Subject key identifier: 36:CA:97:16:D9:9B:2E:67:64:6E:3C:FB:C5:35:98:B1:D1:85:49:E5 Certificate issuer: /CN=9A5C74AE3F8CD3B679AC56C473F450378591926B Certificate serial: 19DA Authority key identifier: 9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NsqXFtmbLmdkbjz7xTWYsdGFSeU.roa Signing time: Tue 03 Sep 2024 19:46:43 +0000 ROA not before: Tue 03 Sep 2024 19:46:43 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 9391 IP address blocks: 124.29.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6618 (0x19da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5C74AE3F8CD3B679AC56C473F450378591926B Validity Not Before: Sep 3 19:46:43 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=36CA9716D99B2E67646E3CFBC53598B1D18549E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:ed:1e:e0:08:b0:1a:73:4a:52:87:64:65: a7:17:21:8a:a1:2d:cb:5a:9a:16:bb:f8:3c:da:bb: 7a:9e:15:27:55:c5:a6:81:bd:20:e8:7f:b8:83:9f: c2:bf:b2:65:5f:bd:05:d3:1d:c1:31:bf:99:8e:fa: 40:22:fe:c4:9f:d2:40:46:23:74:fd:9b:91:4d:c4: 81:14:59:18:74:50:7a:c3:9f:a3:3b:b5:2b:a3:78: cf:8d:64:e4:f3:7c:97:76:f9:48:a9:9a:7e:10:ff: 24:d2:2f:e8:4d:75:0f:b7:24:62:be:0d:b4:25:af: 8a:6c:5b:f8:90:85:3d:48:f4:01:27:76:b2:8a:4c: cb:33:d1:56:ad:a2:f3:84:75:e7:04:c8:bb:16:d7: 04:c2:c9:86:56:8e:d1:dd:62:46:3c:a7:96:4c:ae: 4a:9b:91:11:49:02:04:e0:7e:62:85:99:1a:bb:d0: 3e:64:44:2a:d6:bc:e5:b1:3b:10:66:c3:1e:e3:2c: 5e:6b:a2:10:1f:3f:11:8b:ef:87:6d:04:4f:ed:73: e4:b1:a2:8b:20:26:5e:c8:c6:e7:a7:5e:c7:af:2f: 9f:b8:48:1f:d7:a1:85:c3:30:dd:84:21:c7:06:d6: d1:89:41:4e:2e:28:e1:6f:5d:27:d4:f4:7c:00:49: e0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CA:97:16:D9:9B:2E:67:64:6E:3C:FB:C5:35:98:B1:D1:85:49:E5 X509v3 Authority Key Identifier: keyid:9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NsqXFtmbLmdkbjz7xTWYsdGFSeU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.29.0.0/17 Signature Algorithm: sha256WithRSAEncryption 9d:d4:3d:10:e3:74:4a:39:7e:e4:21:87:25:c2:c6:a0:1d:7e: da:27:da:24:e3:2e:52:8c:36:58:a5:cf:70:5d:14:23:7b:d8: ff:43:e7:3e:d3:24:ef:3b:f9:6c:61:bd:6b:6d:92:6c:d0:02: 1b:f2:4a:eb:b6:e5:70:cb:77:33:28:b0:b4:2e:13:cb:22:ec: 4b:8f:eb:b5:7c:f7:e9:f4:de:f9:00:48:6b:18:f3:9c:54:ea: ab:c5:0b:26:7d:f3:58:10:4a:d2:f2:23:b1:26:19:43:07:e5: 0d:46:8a:9e:0d:b4:6e:4f:84:92:be:f5:c5:bf:67:64:27:3c: 36:b2:08:db:82:a2:50:46:09:c4:8c:14:98:05:81:7d:a7:66: 84:13:55:f3:c0:30:23:b0:6d:35:11:d0:73:f9:a4:2b:e6:4f: 89:8d:fc:7a:d1:d8:75:18:2d:2a:bb:3a:93:04:f1:97:cd:24: 56:43:2a:bd:8d:90:0c:9a:a7:e2:49:70:42:f7:f9:10:f4:7d: 50:4b:2c:d9:9f:77:d7:f1:9f:8c:b2:a7:7b:17:18:2a:bd:14: ed:4b:4c:40:15:29:32:3f:f0:e1:ab:13:89:d9:58:72:e4:a3: e0:6b:69:95:52:c8:1f:83:d5:96:37:a5:b9:ff:64:f3:ca:a1: d9:f1:90:af -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICGdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUE1 Qzc0QUUzRjhDRDNCNjc5QUM1NkM0NzNGNDUwMzc4NTkxOTI2QjAeFw0yNDA5MDMx OTQ2NDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDM2Q0E5NzE2RDk5QjJF Njc2NDZFM0NGQkM1MzU5OEIxRDE4NTQ5RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0pe0e4AiwGnNKUodkZacXIYqhLctamha7+Dzau3qeFSdVxaaB vSDof7iDn8K/smVfvQXTHcExv5mO+kAi/sSf0kBGI3T9m5FNxIEUWRh0UHrDn6M7 tSujeM+NZOTzfJd2+Uipmn4Q/yTSL+hNdQ+3JGK+DbQlr4psW/iQhT1I9AEndrKK TMsz0VatovOEdecEyLsW1wTCyYZWjtHdYkY8p5ZMrkqbkRFJAgTgfmKFmRq70D5k RCrWvOWxOxBmwx7jLF5rohAfPxGL74dtBE/tc+SxoosgJl7IxuenXsevL5+4SB/X oYXDMN2EIccG1tGJQU4uKOFvXSfU9HwASeDTAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUNsqXFtmbLmdkbjz7xTWYsdGFSeUwHwYDVR0jBBgwFoAUmlx0rj+M07Z5rFbE c/RQN4WRkmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv bWx4MHJqLU0wN1o1ckZiRWNfUlFONFdSa21zLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tbHgwcmotTTA3WjVyRmJFY19SUU40V1JrbXMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9Oc3FYRnRtYkxtZGtiano3 eFRXWXNkR0ZTZVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH fB0AMA0GCSqGSIb3DQEBCwUAA4IBAQCd1D0Q43RKOX7kIYclwsagHX7aJ9ok4y5S jDZYpc9wXRQje9j/Q+c+0yTvO/lsYb1rbZJs0AIb8krrtuVwy3czKLC0LhPLIuxL j+u1fPfp9N75AEhrGPOcVOqrxQsmffNYEErS8iOxJhlDB+UNRoqeDbRuT4SSvvXF v2dkJzw2sgjbgqJQRgnEjBSYBYF9p2aEE1XzwDAjsG01EdBz+aQr5k+Jjfx60dh1 GC0quzqTBPGXzSRWQyq9jZAMmqfiSXBC9/kQ9H1QSyzZn3fX8Z+Msqd7FxgqvRTt S0xAFSkyP/DhqxOJ2Vhy5KPga2mVUsgfg9WWN6W5/2TzyqHZ8ZCv -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:51 2024 by rpki-client on console-ams.rpki-client.org