$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/_Rv_OdbhX8-stFs5_dbsK3lUAug.roa File: _Rv_OdbhX8-stFs5_dbsK3lUAug.roa (raw, json) Hash identifier: COkYo5o7mLCcEL8QbfJHhbN8o4yiZ1ad7iUHgz3PqH0= Subject key identifier: FD:1B:FF:39:D6:E1:5F:CF:AC:B4:5B:39:FD:D6:EC:2B:79:54:02:E8 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 1705 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/_Rv_OdbhX8-stFs5_dbsK3lUAug.roa Signing time: Wed 13 Mar 2024 01:21:54 +0000 ROA not before: Wed 13 Mar 2024 01:21:54 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 4811 IP address blocks: 106.75.208.0/20 maxlen: 20 113.31.96.0/20 maxlen: 20 113.31.112.0/20 maxlen: 20 113.31.144.0/20 maxlen: 20 113.31.160.0/20 maxlen: 20 113.31.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5893 (0x1705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Mar 13 01:21:54 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=FD1BFF39D6E15FCFACB45B39FDD6EC2B795402E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a9:df:d0:41:c4:fe:32:9a:a0:31:f4:95:c6: 37:9b:c0:cc:ac:d7:af:11:da:eb:ae:8b:0d:3c:52: 24:3f:d2:95:a4:b7:88:a4:f6:19:58:0b:a8:db:78: 41:d9:b0:43:3d:24:35:85:52:0f:42:91:03:2b:ed: 83:f0:2c:94:95:ba:13:94:87:04:43:5a:d9:83:6d: 5b:19:75:08:42:a2:57:a2:52:16:5e:d2:8c:35:8c: 4a:33:86:bc:81:21:b4:5c:fc:4c:18:da:7c:15:7f: 8f:b3:07:05:c8:c5:32:24:ff:74:00:ed:15:85:8c: 1e:a2:53:56:1b:0b:7d:b7:ee:58:6f:9a:b7:b7:3b: fd:cc:e6:cb:61:81:9d:44:a3:6f:42:c1:a7:f8:ba: 54:97:63:c8:04:36:62:70:0f:87:dc:8e:d6:14:5e: 89:64:30:0d:52:25:9d:f9:ef:4c:50:41:93:31:56: ba:d9:8a:66:1b:35:7b:f5:f5:f1:e7:95:89:d9:d9: b6:b7:dd:a2:dc:89:46:7f:40:c8:c0:3d:6b:11:88: 21:9d:5d:a8:3c:14:c5:73:cd:5c:ff:c8:6a:5d:09: 5f:bf:6a:eb:e1:c0:09:82:60:7f:4e:d8:07:a0:0d: fc:bc:68:61:00:2e:98:ad:b7:92:50:82:81:0b:b3: 07:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1B:FF:39:D6:E1:5F:CF:AC:B4:5B:39:FD:D6:EC:2B:79:54:02:E8 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/_Rv_OdbhX8-stFs5_dbsK3lUAug.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.208.0/20 113.31.96.0/19 113.31.144.0-113.31.191.255 Signature Algorithm: sha256WithRSAEncryption 1d:a0:2d:66:51:12:55:d1:ea:23:ac:f3:a4:93:6f:3c:c2:13: 73:3a:87:8c:e0:82:4a:eb:12:2a:44:15:e4:23:f2:89:02:8b: cd:64:41:48:f8:a3:32:19:63:3e:ff:d4:05:33:bc:93:c2:a6: de:c7:6a:b4:04:96:ee:9a:a6:bd:bb:1c:97:d4:76:c2:cd:57: b5:68:fc:d3:e2:98:ff:13:56:3e:36:f8:32:fe:b3:7e:00:9b: 2e:e0:68:67:f7:b2:30:a5:53:9a:db:82:7d:11:5c:27:9d:08: a8:80:ce:46:8a:7b:45:5b:ca:d1:42:94:92:f5:ec:06:49:f4: a2:a3:e9:a5:b7:ae:7d:52:1e:f5:70:11:98:9a:2e:c0:e4:14: b0:8e:56:5a:ba:4b:39:f0:a5:fd:b0:7e:f5:93:cf:40:3c:3a: 8e:f5:37:f8:b3:d0:af:d9:81:ad:80:f8:33:82:d8:33:88:3a: a0:25:12:85:aa:d8:c3:ac:d1:06:3b:24:2e:1c:15:13:34:e9: cd:fd:0f:8c:12:25:17:b0:0b:1e:16:3f:9c:de:1f:66:66:cc: 14:c0:e5:59:f7:7a:7d:a0:d9:65:bd:92:22:86:a0:c7:7d:91: 45:c3:14:fc:df:53:ee:9c:7f:39:99:c9:a1:7d:6e:73:59:80: 5b:be:a0:2d -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICFwUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNDAzMTMw MTIxNTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZEMUJGRjM5RDZFMTVG Q0ZBQ0I0NUIzOUZERDZFQzJCNzk1NDAyRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZqd/QQcT+MpqgMfSVxjebwMys168R2uuuiw08UiQ/0pWkt4ik 9hlYC6jbeEHZsEM9JDWFUg9CkQMr7YPwLJSVuhOUhwRDWtmDbVsZdQhColeiUhZe 0ow1jEozhryBIbRc/EwY2nwVf4+zBwXIxTIk/3QA7RWFjB6iU1YbC3237lhvmre3 O/3M5sthgZ1Eo29Cwaf4ulSXY8gENmJwD4fcjtYUXolkMA1SJZ3570xQQZMxVrrZ imYbNXv19fHnlYnZ2ba33aLciUZ/QMjAPWsRiCGdXag8FMVzzVz/yGpdCV+/auvh wAmCYH9O2AegDfy8aGEALpitt5JQgoELswenAgMBAAGjggIFMIICATAdBgNVHQ4E FgQU/Rv/OdbhX8+stFs5/dbsK3lUAugwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L19Sdl9PZGJoWDgtc3RG czVfZGJzSzNsVUF1Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBoD BARqS9ADBAVxH2AwDAMEBHEfkAMEBnEfgDANBgkqhkiG9w0BAQsFAAOCAQEAHaAt ZlESVdHqI6zzpJNvPMITczqHjOCCSusSKkQV5CPyiQKLzWRBSPijMhljPv/UBTO8 k8Km3sdqtASW7pqmvbscl9R2ws1XtWj80+KY/xNWPjb4Mv6zfgCbLuBoZ/eyMKVT mtuCfRFcJ50IqIDORop7RVvK0UKUkvXsBkn0oqPppbeufVIe9XARmJouwOQUsI5W WrpLOfCl/bB+9ZPPQDw6jvU3+LPQr9mBrYD4M4LYM4g6oCUSharYw6zRBjskLhwV EzTpzf0PjBIlF7ALHhY/nN4fZmbMFMDlWfd6faDZZb2SIoagx32RRcMU/N9T7px/ OZnJoX1uc1mAW76gLQ== -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:44 2024 by rpki-client on console-fra.rpki-client.org