$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/BsL3vA6GhpVvLXEn1qGkojdwEWg.roa File: BsL3vA6GhpVvLXEn1qGkojdwEWg.roa (raw, json) Hash identifier: n/ETL8brdisweN5HtLLBIRFWfpzpiy6f0ZDH7tNiJJA= Subject key identifier: 06:C2:F7:BC:0E:86:86:95:6F:2D:71:27:D6:A1:A4:A2:37:70:11:68 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 16FC Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/BsL3vA6GhpVvLXEn1qGkojdwEWg.roa Signing time: Wed 13 Mar 2024 01:21:51 +0000 ROA not before: Wed 13 Mar 2024 01:21:51 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 23724 IP address blocks: 106.75.0.0/19 maxlen: 19 106.75.32.0/19 maxlen: 19 106.75.64.0/19 maxlen: 19 106.75.96.0/19 maxlen: 19 117.50.0.0/19 maxlen: 19 117.50.32.0/19 maxlen: 19 117.50.64.0/19 maxlen: 19 117.50.96.0/19 maxlen: 19 117.50.128.0/19 maxlen: 19 117.50.160.0/19 maxlen: 19 117.50.192.0/19 maxlen: 19 117.50.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5884 (0x16fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Mar 13 01:21:51 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=06C2F7BC0E8686956F2D7127D6A1A4A237701168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8d:59:8d:98:2d:3f:35:e2:45:f2:0d:e2:bc: a7:ff:08:f5:c0:e1:f8:42:e9:c0:66:04:30:2c:91: f6:c2:d4:5a:79:83:d2:89:11:58:36:2b:25:51:cc: 7d:fa:43:8b:19:67:30:a8:44:b0:84:1f:8c:7b:2f: 96:81:72:86:bd:4b:d7:6c:c5:a0:fb:32:8b:91:a9: f9:12:62:f3:73:b3:a9:6b:04:08:1f:1b:a1:07:8e: 2b:11:65:10:65:59:ac:d1:fc:74:3c:61:63:81:6e: 0a:5c:86:42:6b:e7:67:00:9d:9b:dd:ee:7a:2d:4d: 8c:c5:1d:8d:fc:ed:7b:37:5e:ac:16:ac:eb:f5:0e: b0:38:2f:33:d6:1f:c5:b4:cd:fe:30:09:f6:b1:a6: a1:20:c3:cd:4d:4e:a3:ce:16:e7:5a:40:e2:c7:ff: 07:4e:7f:4a:5c:75:5f:2d:c8:54:d8:f1:44:6c:7f: 4d:a4:07:45:de:19:4b:07:b7:a3:11:6d:1d:f9:5a: ad:ac:50:35:54:a7:ca:8c:45:36:a9:d0:40:2d:9e: 33:ab:82:e3:08:e0:a4:7f:4b:bd:06:82:7a:b8:44: 4b:11:e7:f4:e2:a7:44:31:46:02:d3:89:df:c2:2d: e6:af:bc:0c:19:24:d5:37:da:16:0b:48:7d:2b:5b: b1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C2:F7:BC:0E:86:86:95:6F:2D:71:27:D6:A1:A4:A2:37:70:11:68 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/BsL3vA6GhpVvLXEn1qGkojdwEWg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.0.0/17 117.50.0.0/16 Signature Algorithm: sha256WithRSAEncryption b4:a7:cf:02:9e:5e:31:36:36:43:96:b5:cb:86:c0:16:0a:63: c6:4a:31:55:11:3e:c1:68:28:3a:3e:94:53:b6:40:59:94:4d: 35:c4:8b:2d:2d:2c:b1:b2:d7:09:0b:55:27:9f:af:6b:fc:82: c8:35:d5:c9:32:5b:d6:aa:83:cf:83:65:83:e8:90:0f:41:96: 8c:e6:0b:58:52:bd:3a:ce:bd:4b:34:69:13:88:70:3c:bb:c1: 94:7b:31:66:5a:e4:64:f4:1f:f9:8c:45:bb:01:ae:5e:00:de: b9:fa:79:ef:8d:64:ca:d8:fa:cf:d2:98:4f:19:3a:e8:bd:8f: 92:79:c1:5d:cc:cc:fb:60:70:05:b5:a4:d0:51:8c:a8:58:b7: 3d:2f:be:d6:d3:8c:d1:08:14:16:d3:00:82:ff:cd:30:0c:59: 12:00:b7:11:8b:b0:0c:0d:85:2c:69:03:81:36:9f:35:77:82: f2:19:f2:98:90:2e:ba:87:f2:ac:5c:e9:bd:a8:58:76:0a:46: 68:f9:4f:6e:b2:65:24:fc:64:0e:98:16:f6:02:95:71:93:57: 16:5f:f0:5e:17:6a:6a:61:b9:17:6c:5d:64:d9:b3:63:1a:2e: 62:9d:80:36:49:80:c4:d2:6e:ac:b2:39:0c:d4:ea:3c:1a:8a: f1:d9:4e:64 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICFvwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNDAzMTMw MTIxNTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDA2QzJGN0JDMEU4Njg2 OTU2RjJENzEyN0Q2QTFBNEEyMzc3MDExNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRjVmNmC0/NeJF8g3ivKf/CPXA4fhC6cBmBDAskfbC1Fp5g9KJ EVg2KyVRzH36Q4sZZzCoRLCEH4x7L5aBcoa9S9dsxaD7MouRqfkSYvNzs6lrBAgf G6EHjisRZRBlWazR/HQ8YWOBbgpchkJr52cAnZvd7notTYzFHY387Xs3XqwWrOv1 DrA4LzPWH8W0zf4wCfaxpqEgw81NTqPOFudaQOLH/wdOf0pcdV8tyFTY8URsf02k B0XeGUsHt6MRbR35Wq2sUDVUp8qMRTap0EAtnjOrguMI4KR/S70Ggnq4REsR5/Ti p0QxRgLTid/CLeavvAwZJNU32hYLSH0rW7G/AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUBsL3vA6GhpVvLXEn1qGkojdwEWgwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L0JzTDN2QTZHaHBWdkxY RW4xcUdrb2pkd0VXZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwJAYIKwYBBQUHAQcBAf8EFTATMBEEAgABMAsD BAdqSwADAwB1MjANBgkqhkiG9w0BAQsFAAOCAQEAtKfPAp5eMTY2Q5a1y4bAFgpj xkoxVRE+wWgoOj6UU7ZAWZRNNcSLLS0ssbLXCQtVJ5+va/yCyDXVyTJb1qqDz4Nl g+iQD0GWjOYLWFK9Os69SzRpE4hwPLvBlHsxZlrkZPQf+YxFuwGuXgDeufp5741k ytj6z9KYTxk66L2PknnBXczM+2BwBbWk0FGMqFi3PS++1tOM0QgUFtMAgv/NMAxZ EgC3EYuwDA2FLGkDgTafNXeC8hnymJAuuofyrFzpvahYdgpGaPlPbrJlJPxkDpgW 9gKVcZNXFl/wXhdqamG5F2xdZNmzYxouYp2ANkmAxNJurLI5DNTqPBqK8dlOZA== -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:44 2024 by rpki-client on console-fra.rpki-client.org