$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/8eSZNkxhMpH3hUusHxZKfYGN428.roa File: 8eSZNkxhMpH3hUusHxZKfYGN428.roa (raw, json) Hash identifier: CaT7AmuDtLCoAa/D8K8kvuXkR0saTwmRNPCVFyZVC/I= Subject key identifier: F1:E4:99:36:4C:61:32:91:F7:85:4B:AC:1F:16:4A:7D:81:8D:E3:6F Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 1700 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/8eSZNkxhMpH3hUusHxZKfYGN428.roa Signing time: Wed 13 Mar 2024 01:21:52 +0000 ROA not before: Wed 13 Mar 2024 01:21:52 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 58466 IP address blocks: 42.240.128.0/20 maxlen: 20 42.240.144.0/20 maxlen: 20 42.240.160.0/20 maxlen: 20 106.75.128.0/20 maxlen: 20 106.75.144.0/20 maxlen: 20 106.75.160.0/20 maxlen: 20 106.75.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5888 (0x1700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Mar 13 01:21:52 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=F1E499364C613291F7854BAC1F164A7D818DE36F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:89:d7:7a:ba:50:89:77:bc:40:e2:4e:a6: dd:bc:46:b7:20:db:36:91:4a:aa:56:50:f9:80:fe: 67:65:80:07:66:6e:63:8c:36:70:32:0c:25:53:65: 3a:63:a2:c5:ee:e1:53:89:04:8f:33:47:62:53:24: 77:09:36:12:ad:dc:81:65:25:7c:a6:a8:b4:8a:88: ee:24:f8:08:ab:2d:8f:14:3f:3b:bc:86:cc:ba:20: 33:a4:b0:a1:bb:57:d3:32:01:4c:2b:ec:0c:d4:77: 7d:4e:08:96:aa:ae:2c:89:91:20:fa:e6:c8:17:37: 47:4b:9b:6c:8b:b8:35:a5:4a:48:6f:ce:e4:c7:86: a5:58:a6:ed:96:e6:7a:61:75:10:3a:bb:fc:e5:9d: 68:bb:c9:dc:34:9d:e7:54:f3:15:e0:8b:2d:ef:12: ca:cd:ac:64:16:d2:ac:ea:af:3f:61:4a:ca:1f:d0: b9:ed:f2:25:14:e3:da:e3:2e:69:cc:6f:78:d7:3e: 00:89:a3:b0:e8:e1:43:be:9f:13:bb:e6:aa:ec:41: 37:b6:fe:d1:7a:6b:cd:45:10:e5:b6:aa:15:84:5d: 65:14:9a:d9:a1:1e:3e:5c:2a:79:98:cb:be:41:fe: 73:21:a2:18:36:a3:b6:9a:78:76:65:f7:28:04:55: eb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E4:99:36:4C:61:32:91:F7:85:4B:AC:1F:16:4A:7D:81:8D:E3:6F X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/8eSZNkxhMpH3hUusHxZKfYGN428.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.240.128.0-42.240.175.255 106.75.128.0/18 Signature Algorithm: sha256WithRSAEncryption 87:35:dd:d7:d2:cc:c2:5b:c3:f3:44:9d:bc:43:ce:a3:ab:a9: 21:0e:84:41:04:f3:7d:80:04:d2:34:db:a5:47:f6:4d:45:e8: 5b:80:8a:b9:04:40:22:35:37:ce:75:50:47:8b:46:46:36:20: 4e:bc:20:f5:11:77:dd:68:c6:8e:e4:78:49:e6:0c:27:63:36: 24:4f:ff:19:27:2c:47:27:d9:5a:70:fe:94:1f:0e:ac:d9:41: 82:bf:d9:47:79:55:41:01:fc:05:d2:09:46:0f:58:86:8d:64: 8c:6b:3a:54:dd:06:80:39:cf:7d:06:e3:8e:63:18:4f:88:6d: fc:68:78:22:92:64:b6:2e:5a:11:17:ff:6e:d7:35:ed:c2:d8: 7d:74:04:dc:ea:00:3b:40:06:1c:a8:97:1e:45:82:bd:8c:dd: 3f:3c:6f:4f:26:9b:9a:58:9a:d9:93:31:53:6b:53:b7:50:bc: b6:69:c1:0d:71:6e:a6:5a:39:45:f7:5c:50:97:56:74:2c:c8: 30:de:29:7d:9f:07:40:3b:78:86:c4:e8:fd:b1:03:e4:56:80: e4:b7:a3:51:c8:1d:8e:99:2b:a3:bb:de:11:26:4c:25:61:98: d3:dd:72:50:b1:8e:36:4c:55:b3:af:8d:13:d4:5f:6d:ae:66: b2:42:10:fe -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgICFwAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNDAzMTMw MTIxNTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYxRTQ5OTM2NEM2MTMy OTFGNzg1NEJBQzFGMTY0QTdEODE4REUzNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGvonXerpQiXe8QOJOpt28Rrcg2zaRSqpWUPmA/mdlgAdmbmOM NnAyDCVTZTpjosXu4VOJBI8zR2JTJHcJNhKt3IFlJXymqLSKiO4k+AirLY8UPzu8 hsy6IDOksKG7V9MyAUwr7AzUd31OCJaqriyJkSD65sgXN0dLm2yLuDWlSkhvzuTH hqVYpu2W5nphdRA6u/zlnWi7ydw0nedU8xXgiy3vEsrNrGQW0qzqrz9hSsof0Lnt 8iUU49rjLmnMb3jXPgCJo7Do4UO+nxO75qrsQTe2/tF6a81FEOW2qhWEXWUUmtmh Hj5cKnmYy75B/nMhohg2o7aaeHZl9ygEVetTAgMBAAGjggH/MIIB+zAdBgNVHQ4E FgQU8eSZNkxhMpH3hUusHxZKfYGN428wHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3LzhlU1pOa3hoTXBIM2hV dXNIeFpLZllHTjQyOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgABMBQw DAMEByrwgAMEBCrwoAMEBmpLgDANBgkqhkiG9w0BAQsFAAOCAQEAhzXd19LMwlvD 80SdvEPOo6upIQ6EQQTzfYAE0jTbpUf2TUXoW4CKuQRAIjU3znVQR4tGRjYgTrwg 9RF33WjGjuR4SeYMJ2M2JE//GScsRyfZWnD+lB8OrNlBgr/ZR3lVQQH8BdIJRg9Y ho1kjGs6VN0GgDnPfQbjjmMYT4ht/Gh4IpJkti5aERf/btc17cLYfXQE3OoAO0AG HKiXHkWCvYzdPzxvTyabmlia2ZMxU2tTt1C8tmnBDXFuplo5RfdcUJdWdCzIMN4p fZ8HQDt4hsTo/bED5FaA5LejUcgdjpkro7veESZMJWGY091yULGONkxVs6+NE9Rf ba5mskIQ/g== -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:48 2024 by rpki-client on console-ams.rpki-client.org