$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/775/Hzhgzo6r7Dc7AhWVXTO0YwkJldw.roa File: Hzhgzo6r7Dc7AhWVXTO0YwkJldw.roa (raw, json) Hash identifier: wdkONXPoKkXF4kgClxYuINjHx4v9d49dvFTHajLsd0E= Subject key identifier: 1F:38:60:CE:8E:AB:EC:37:3B:02:15:95:5D:33:B4:63:09:09:95:DC Certificate issuer: /CN=CD65DDFFCA490F695E12F3A53EEBAFF0EDA77050 Certificate serial: 06CC Authority key identifier: CD:65:DD:FF:CA:49:0F:69:5E:12:F3:A5:3E:EB:AF:F0:ED:A7:70:50 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/Hzhgzo6r7Dc7AhWVXTO0YwkJldw.roa Signing time: Wed 21 Aug 2024 05:46:17 +0000 ROA not before: Wed 21 Aug 2024 05:46:17 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59078 IP address blocks: 101.48.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 21:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD65DDFFCA490F695E12F3A53EEBAFF0EDA77050 Validity Not Before: Aug 21 05:46:17 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=1F3860CE8EABEC373B0215955D33B463090995DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0c:d1:4a:bf:70:29:cc:4b:1a:63:db:f7:ee: a5:7a:5e:20:86:ed:64:17:51:e4:76:02:00:c4:77: 6c:e9:14:88:12:c9:2c:f9:4a:75:5c:32:ae:b5:1f: 23:bd:5a:1e:23:0b:d0:cf:ef:f6:f3:02:42:e5:af: 91:7d:9d:d6:0f:d0:92:79:e5:d0:34:02:e4:1e:27: 9b:5e:c6:c4:6a:32:1f:9c:e3:5d:9b:99:c0:bd:39: 4d:96:f9:86:d9:1a:4a:b1:c9:86:4c:12:26:67:16: 58:cb:9c:39:b5:07:0d:73:d4:f4:0e:bd:21:bf:9b: be:e3:ff:65:73:b7:6b:3d:c5:29:ff:a6:18:dc:e2: bd:f1:45:71:d5:22:bb:c3:48:98:65:dc:d9:fb:84: fe:fd:67:45:67:f9:8f:fd:a7:0a:4c:86:ec:d1:1a: 1c:c6:98:2b:ce:85:4b:cd:06:eb:75:ac:92:95:27: bc:a7:a9:f3:41:bd:56:e8:12:b6:64:93:27:da:25: 00:31:ad:40:a4:44:30:63:20:7b:ac:17:15:a2:da: 2a:da:23:c1:a0:69:75:a3:7e:8a:b1:a1:f4:01:b8: 0d:32:09:62:8f:a4:bc:45:f1:98:0d:41:55:38:ae: 76:77:e4:51:d3:50:89:e6:2b:7a:25:04:d6:04:a4: 56:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:38:60:CE:8E:AB:EC:37:3B:02:15:95:5D:33:B4:63:09:09:95:DC X509v3 Authority Key Identifier: keyid:CD:65:DD:FF:CA:49:0F:69:5E:12:F3:A5:3E:EB:AF:F0:ED:A7:70:50 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/Hzhgzo6r7Dc7AhWVXTO0YwkJldw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.48.0.0/16 Signature Algorithm: sha256WithRSAEncryption 29:33:ac:d0:60:69:46:97:f2:56:59:c2:96:fb:d8:4b:ec:00: 34:bc:54:5f:54:bd:ab:f7:13:a0:4a:5f:66:94:9b:e2:29:3f: 09:a9:ba:0d:bc:6f:db:b5:ad:86:32:b8:98:75:c6:00:82:c4: 48:7c:63:60:7a:23:89:b3:f4:ac:74:cc:ed:bc:4a:60:1a:0d: ae:47:1f:00:92:8c:44:7c:93:45:ea:06:4a:f0:46:bf:83:08: fb:78:f9:7e:fa:99:ee:60:78:ea:7c:ef:00:fa:0e:b5:59:9f: ca:59:78:59:42:35:57:61:1b:fb:9d:e3:2a:13:63:88:1e:e6: f3:9d:34:72:02:d5:6f:04:dc:a8:85:53:50:de:1f:94:d3:dc: 5f:10:c7:0f:a6:0c:ad:18:57:b4:7f:7a:08:4b:b2:9b:03:84: 1c:24:df:19:d6:ba:09:b9:2a:b6:19:53:6e:c8:8b:dd:4e:ab: 0d:0b:1f:06:f8:a7:46:5c:87:8c:79:ed:a1:b0:45:a0:ad:39: 25:04:4d:99:66:e5:84:86:68:83:8a:3f:bb:a9:9b:53:b2:4b: 0b:93:0c:dd:98:f1:51:3a:c5:1c:6a:82:6c:c5:04:bc:b5:0f: 3c:03:8a:4b:b9:1e:51:bb:0b:a6:24:af:3f:22:d7:bc:77:09: c4:8b:65:5f -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Q2 NURERkZDQTQ5MEY2OTVFMTJGM0E1M0VFQkFGRjBFREE3NzA1MDAeFw0yNDA4MjEw NTQ2MTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDFGMzg2MENFOEVBQkVD MzczQjAyMTU5NTVEMzNCNDYzMDkwOTk1REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMDNFKv3ApzEsaY9v37qV6XiCG7WQXUeR2AgDEd2zpFIgSySz5 SnVcMq61HyO9Wh4jC9DP7/bzAkLlr5F9ndYP0JJ55dA0AuQeJ5texsRqMh+c412b mcC9OU2W+YbZGkqxyYZMEiZnFljLnDm1Bw1z1PQOvSG/m77j/2Vzt2s9xSn/phjc 4r3xRXHVIrvDSJhl3Nn7hP79Z0Vn+Y/9pwpMhuzRGhzGmCvOhUvNBut1rJKVJ7yn qfNBvVboErZkkyfaJQAxrUCkRDBjIHusFxWi2iraI8GgaXWjfoqxofQBuA0yCWKP pLxF8ZgNQVU4rnZ35FHTUInmK3olBNYEpFalAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUHzhgzo6r7Dc7AhWVXTO0YwkJldwwHwYDVR0jBBgwFoAUzWXd/8pJD2leEvOl Puuv8O2ncFAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzc1 L3pXWGRfOHBKRDJsZUV2T2xQdXV2OE8ybmNGQS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveldYZF84cEpEMmxlRXZPbFB1dXY4TzJuY0ZBLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzc1L0h6aGd6bzZyN0RjN0Fo V1ZYVE8wWXdrSmxkdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwBlMDANBgkqhkiG9w0BAQsFAAOCAQEAKTOs0GBpRpfyVlnClvvYS+wANLxUX1S9 q/cToEpfZpSb4ik/Cam6Dbxv27WthjK4mHXGAILESHxjYHojibP0rHTM7bxKYBoN rkcfAJKMRHyTReoGSvBGv4MI+3j5fvqZ7mB46nzvAPoOtVmfyll4WUI1V2Eb+53j KhNjiB7m8500cgLVbwTcqIVTUN4flNPcXxDHD6YMrRhXtH96CEuymwOEHCTfGda6 CbkqthlTbsiL3U6rDQsfBvinRlyHjHntobBFoK05JQRNmWblhIZog4o/u6mbU7JL C5MM3ZjxUTrFHGqCbMUEvLUPPAOKS7keUbsLpiSvPyLXvHcJxItlXw== -----END CERTIFICATE-----Generated at Fri Nov 22 19:57:54 2024 by rpki-client on console-ams.rpki-client.org