$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/fWWcqMr1Rx36saVyyGcw4W_y8KY.roa File: fWWcqMr1Rx36saVyyGcw4W_y8KY.roa (raw, json) Hash identifier: Z/ntlef4VuosHAeVPaauLd7lkjfboFyCmFuuFmoe5kE= Subject key identifier: 7D:65:9C:A8:CA:F5:47:1D:FA:B1:A5:72:C8:67:30:E1:6F:F2:F0:A6 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 1701 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/fWWcqMr1Rx36saVyyGcw4W_y8KY.roa Signing time: Wed 13 Mar 2024 01:21:52 +0000 ROA not before: Wed 13 Mar 2024 01:21:52 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 136958 IP address blocks: 42.240.128.0/20 maxlen: 20 42.240.144.0/20 maxlen: 20 42.240.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5889 (0x1701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Mar 13 01:21:52 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=7D659CA8CAF5471DFAB1A572C86730E16FF2F0A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:51:54:6e:c8:07:a3:31:6a:69:4c:b8:17:a6: c5:ec:5d:b7:91:03:e7:7e:59:03:86:41:db:e7:88: 91:b9:a5:48:c4:47:63:f4:1d:0e:51:87:6b:e1:b5: ec:bc:e1:74:88:da:25:de:32:e9:bf:43:ed:1c:59: 9e:49:f3:eb:66:53:61:fb:85:fe:c9:02:9f:8c:5d: 3e:b3:54:a5:5b:e3:a0:4a:05:84:1e:8e:e7:f3:e9: cd:08:14:29:67:75:54:fc:a1:ff:fb:77:b1:ee:42: 30:18:d9:40:c1:ac:de:37:9f:72:65:03:ec:cc:c2: 67:f8:56:64:59:52:a5:81:b3:c2:94:2b:f7:81:de: fe:5d:0c:04:51:7b:18:3f:09:a7:cb:48:90:e9:4f: 3b:0b:7a:a2:5b:8b:d3:3f:05:fc:0b:cc:74:15:b7: d6:8e:97:27:77:d9:f3:63:17:e5:a4:a7:f5:dc:d4: 5b:51:de:c1:5a:77:ea:76:bc:07:58:91:b3:24:73: 2c:14:e9:97:59:ad:8d:a0:ca:a7:5a:33:22:f5:52: 99:4b:f6:5c:05:d8:52:46:c0:f9:b9:3c:69:51:b0: 89:c1:54:cf:69:58:28:12:93:23:ac:3c:00:9f:6b: b0:b7:72:09:d8:87:00:4f:14:e2:f7:69:7a:a4:18: 13:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:65:9C:A8:CA:F5:47:1D:FA:B1:A5:72:C8:67:30:E1:6F:F2:F0:A6 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/fWWcqMr1Rx36saVyyGcw4W_y8KY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.240.128.0-42.240.175.255 Signature Algorithm: sha256WithRSAEncryption 47:94:fe:37:8c:61:f9:05:68:87:29:c6:35:f9:ff:05:3d:24: 7d:06:13:72:5d:ef:98:21:69:43:aa:d9:7d:29:b1:66:44:dc: 83:65:9e:4f:2c:58:68:ed:e8:73:e2:d7:46:e1:67:16:14:c6: cd:8b:1e:43:25:f7:79:f7:14:4f:41:49:2c:f1:57:56:91:d6: 79:8f:c8:e8:58:40:0f:ef:c1:49:e6:6f:1d:2b:5b:e8:d3:ec: 1b:23:95:e3:73:e7:e1:a9:87:99:2c:b3:c1:a4:fb:b8:a2:4f: 13:d7:d4:09:2d:05:fc:ae:6a:62:89:54:eb:a3:75:b2:af:cd: 8a:1c:08:b8:e6:c0:9d:d2:69:5e:5d:69:e6:98:ae:0e:80:8e: f9:3e:8d:37:cb:8d:88:d4:07:33:e1:6b:06:cc:be:c2:20:ed: a8:85:f2:ca:e2:60:de:56:d0:ff:21:b7:81:d9:8b:8d:ea:61: 1a:2e:ed:d5:40:73:21:42:0c:11:0e:2c:e7:31:ea:5e:8c:b5: 0d:6d:54:e0:b2:4e:9c:a6:8c:04:82:a8:1c:ef:a7:cb:a7:0d: 73:b3:26:ca:67:2c:56:c0:31:ed:e5:1e:71:51:97:9d:a1:32: d2:05:4f:19:12:2c:da:a2:e3:44:6a:60:b2:ed:67:22:6b:b5: 1f:6f:99:1c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICFwEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNDAzMTMw MTIxNTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDdENjU5Q0E4Q0FGNTQ3 MURGQUIxQTU3MkM4NjczMEUxNkZGMkYwQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmUVRuyAejMWppTLgXpsXsXbeRA+d+WQOGQdvniJG5pUjER2P0 HQ5Rh2vhtey84XSI2iXeMum/Q+0cWZ5J8+tmU2H7hf7JAp+MXT6zVKVb46BKBYQe jufz6c0IFClndVT8of/7d7HuQjAY2UDBrN43n3JlA+zMwmf4VmRZUqWBs8KUK/eB 3v5dDARRexg/CafLSJDpTzsLeqJbi9M/BfwLzHQVt9aOlyd32fNjF+Wkp/Xc1FtR 3sFad+p2vAdYkbMkcywU6ZdZrY2gyqdaMyL1UplL9lwF2FJGwPm5PGlRsInBVM9p WCgSkyOsPACfa7C3cgnYhwBPFOL3aXqkGBNvAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUfWWcqMr1Rx36saVyyGcw4W/y8KYwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L2ZXV2NxTXIxUngzNnNh Vnl5R2N3NFdfeThLWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4w DAMEByrwgAMEBCrwoDANBgkqhkiG9w0BAQsFAAOCAQEAR5T+N4xh+QVohynGNfn/ BT0kfQYTcl3vmCFpQ6rZfSmxZkTcg2WeTyxYaO3oc+LXRuFnFhTGzYseQyX3efcU T0FJLPFXVpHWeY/I6FhAD+/BSeZvHStb6NPsGyOV43Pn4amHmSyzwaT7uKJPE9fU CS0F/K5qYolU66N1sq/NihwIuObAndJpXl1p5piuDoCO+T6NN8uNiNQHM+FrBsy+ wiDtqIXyyuJg3lbQ/yG3gdmLjephGi7t1UBzIUIMEQ4s5zHqXoy1DW1U4LJOnKaM BIKoHO+ny6cNc7MmymcsVsAx7eUecVGXnaEy0gVPGRIs2qLjRGpgsu1nImu1H2+Z HA== -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:48 2024 by rpki-client on console-ams.rpki-client.org