$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/akoD9DuvAG3U4nq_wQgcV1qWHRc.roa File: akoD9DuvAG3U4nq_wQgcV1qWHRc.roa (raw, json) Hash identifier: p354Kkb3VaI9JeAGMbO6Th8RSrdcsaZWKmZ4vRtUcn4= Subject key identifier: 6A:4A:03:F4:3B:AF:00:6D:D4:E2:7A:BF:C1:08:1C:57:5A:96:1D:17 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 1639 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/akoD9DuvAG3U4nq_wQgcV1qWHRc.roa Signing time: Sat 03 Feb 2024 02:49:49 +0000 ROA not before: Sat 03 Feb 2024 02:49:49 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 23724 IP address blocks: 101.237.34.0/24 maxlen: 24 101.237.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5689 (0x1639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Feb 3 02:49:49 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=6A4A03F43BAF006DD4E27ABFC1081C575A961D17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1a:43:7a:dc:bb:80:99:4b:c6:cf:3a:7b:0a: 59:ca:bb:29:be:a8:fc:2c:2f:0a:75:b5:83:6a:9b: d8:6a:d1:c0:a6:1b:94:4d:50:4e:db:66:1c:a5:4f: f4:cb:13:b3:b9:28:86:46:e3:78:f4:f6:1a:70:f8: ea:d9:3d:95:fb:5c:14:96:60:c5:3b:78:29:d2:73: f6:02:05:e2:f7:61:8c:50:55:97:f3:12:57:e5:da: 4e:f1:5f:42:04:0a:60:36:5a:9e:ef:b6:be:2b:6b: 91:e8:c8:f6:e5:27:22:c6:66:6b:30:37:33:58:9e: a6:f3:f9:52:60:44:99:b0:17:0f:22:2a:21:f2:f1: 80:c7:eb:a4:68:82:ba:00:5c:3d:1f:0a:f4:62:76: 89:24:c2:80:be:86:1b:47:6b:73:82:cd:ae:7c:4a: fa:9a:fc:ed:2a:24:be:1d:7e:cb:03:fc:24:5f:da: 6d:ac:d1:84:99:d3:8d:6d:ef:1b:ec:37:15:bd:33: 9e:23:25:b8:e0:c5:b6:9d:73:11:52:a6:27:f3:18: 85:b2:98:c3:78:51:e9:fe:db:a1:94:49:2f:86:01: 6d:40:7b:c4:67:dc:59:7d:69:16:d3:28:b1:09:fa: ea:04:3d:db:8a:06:11:80:c1:53:d6:f1:46:82:13: e3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4A:03:F4:3B:AF:00:6D:D4:E2:7A:BF:C1:08:1C:57:5A:96:1D:17 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/akoD9DuvAG3U4nq_wQgcV1qWHRc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.237.34.0/24 101.237.37.0/24 Signature Algorithm: sha256WithRSAEncryption b8:c1:6e:f5:37:bc:69:04:3d:7f:17:bb:93:a3:26:30:90:75: 3b:40:c3:55:75:9b:28:97:30:45:64:1f:23:97:fb:a0:a6:eb: 50:a2:39:18:2c:ae:cd:b0:5e:9e:fc:42:66:71:8e:dd:f5:c2: 1a:95:6d:e8:4e:27:f9:a2:5a:78:cb:f0:e5:c9:aa:ac:de:ce: 0c:c2:d3:8f:37:6d:cb:46:ca:97:ca:e4:78:ae:0d:e7:66:10: c2:b1:3c:d2:4e:94:af:06:a7:a1:50:2c:59:d7:9b:fa:db:a0: dc:3a:94:28:0f:87:26:0a:c4:12:23:b0:6b:e3:57:5f:ab:23: dd:bf:80:a7:5a:5f:e4:d7:f8:70:04:99:64:9c:70:67:c5:22: 5a:9a:86:2a:f2:47:b1:ab:dd:05:e9:f1:c6:8f:98:23:86:3e: 08:52:a6:ed:c7:d1:f3:4d:99:e0:de:c6:7b:6f:76:61:f3:c1: 40:cd:d2:db:0e:29:64:3a:88:48:5e:50:e4:94:0d:fb:e4:a4: c1:5d:35:b4:4d:6f:28:6b:be:1c:fc:c7:b6:06:ea:33:8f:63: 3f:8a:49:31:36:72:e4:27:bc:fb:28:f3:8e:5a:06:6a:e8:ba: af:fa:1d:5a:8a:95:c6:e6:a4:52:88:c5:c0:59:f4:3a:c3:b4: 97:6e:cc:df -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICFjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNDAyMDMw MjQ5NDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZBNEEwM0Y0M0JBRjAw NkRENEUyN0FCRkMxMDgxQzU3NUE5NjFEMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrGkN63LuAmUvGzzp7ClnKuym+qPwsLwp1tYNqm9hq0cCmG5RN UE7bZhylT/TLE7O5KIZG43j09hpw+OrZPZX7XBSWYMU7eCnSc/YCBeL3YYxQVZfz Elfl2k7xX0IECmA2Wp7vtr4ra5HoyPblJyLGZmswNzNYnqbz+VJgRJmwFw8iKiHy 8YDH66RogroAXD0fCvRidokkwoC+hhtHa3OCza58Svqa/O0qJL4dfssD/CRf2m2s 0YSZ041t7xvsNxW9M54jJbjgxbadcxFSpifzGIWymMN4Uen+26GUSS+GAW1Ae8Rn 3Fl9aRbTKLEJ+uoEPduKBhGAwVPW8UaCE+NvAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUakoD9DuvAG3U4nq/wQgcV1qWHRcwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L2Frb0Q5RHV2QUczVTRu cV93UWdjVjFxV0hSYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABl7SIDBABl7SUwDQYJKoZIhvcNAQELBQADggEBALjBbvU3vGkEPX8Xu5OjJjCQ dTtAw1V1myiXMEVkHyOX+6Cm61CiORgsrs2wXp78QmZxjt31whqVbehOJ/miWnjL 8OXJqqzezgzC0483bctGypfK5HiuDedmEMKxPNJOlK8Gp6FQLFnXm/rboNw6lCgP hyYKxBIjsGvjV1+rI92/gKdaX+TX+HAEmWSccGfFIlqahiryR7Gr3QXp8caPmCOG PghSpu3H0fNNmeDexntvdmHzwUDN0tsOKWQ6iEheUOSUDfvkpMFdNbRNbyhrvhz8 x7YG6jOPYz+KSTE2cuQnvPso845aBmrouq/6HVqKlcbmpFKIxcBZ9DrDtJduzN8= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:44 2024 by rpki-client on console-fra.rpki-client.org