$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/1IDLaFGcVDTvtikaFRrcJ7-L_-A.roa File: 1IDLaFGcVDTvtikaFRrcJ7-L_-A.roa (raw, json) Hash identifier: sXw9vp4Da+jDgR0pcFeAiC1OMY7yBSJKibiySCQUYGU= Subject key identifier: D4:80:CB:68:51:9C:54:34:EF:B6:29:1A:15:1A:DC:27:BF:8B:FF:E0 Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Certificate serial: 15E6 Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/1IDLaFGcVDTvtikaFRrcJ7-L_-A.roa Signing time: Wed 13 Mar 2024 01:22:26 +0000 ROA not before: Wed 13 Mar 2024 01:22:26 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 138527 IP address blocks: 118.184.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Jul 2024 10:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5606 (0x15e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Validity Not Before: Mar 13 01:22:26 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=D480CB68519C5434EFB6291A151ADC27BF8BFFE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:83:a4:29:d8:2d:ed:9b:98:ed:9d:3c:91: a2:b3:b6:91:e4:81:d4:52:db:15:52:3c:44:0c:bd: 84:62:a4:46:f0:62:5a:03:17:5e:6d:ae:c2:b9:34: 19:75:f1:ab:25:5a:fb:1d:3a:2e:73:ad:63:47:f7: 31:6c:31:4c:b2:5a:20:2a:f8:b2:a7:3e:6f:c6:ba: 63:82:05:ea:55:bf:ed:7f:92:0e:ca:e7:c7:6a:5a: 84:4b:ef:13:cc:24:52:65:fd:96:71:e5:9b:ce:b1: db:bd:b0:ff:53:eb:ee:29:b1:be:9b:57:b3:55:ad: 71:3c:85:30:f5:0b:94:3b:e1:c2:0a:70:a8:e3:34: b5:d8:c1:fe:a3:fc:ff:99:11:ba:af:bf:ad:59:dd: ad:a9:ef:0e:56:c1:ea:fe:cf:10:56:bb:e1:10:a2: 09:11:76:27:e4:33:ef:80:e3:29:2d:b2:f3:6b:30: 15:b3:36:00:65:53:4d:e4:3f:34:a5:64:d5:de:9c: 7d:bb:7c:a5:00:1c:52:d1:a4:84:e2:5e:a2:02:fc: 7b:d0:0f:87:ab:80:da:bc:ac:c3:8e:2b:32:db:10: df:3f:0e:40:37:c5:68:21:73:ac:5e:03:f2:cf:65: 83:1b:66:fc:c2:79:e9:cd:ed:c0:96:67:4e:0f:4f: 38:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:80:CB:68:51:9C:54:34:EF:B6:29:1A:15:1A:DC:27:BF:8B:FF:E0 X509v3 Authority Key Identifier: keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/1IDLaFGcVDTvtikaFRrcJ7-L_-A.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.184.157.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:a0:3b:bb:ee:be:67:0c:dd:bb:16:30:bd:32:34:33:7f:fb: 8c:a0:6d:d5:ad:51:2f:26:29:1c:17:06:d1:65:ef:04:6c:01: d7:06:d6:84:9d:9a:6d:1a:4d:20:bd:93:e0:26:7e:fa:eb:67: a4:33:cf:a3:0e:63:26:e3:7f:af:e6:a7:03:b5:3b:5c:6a:25: 1c:56:c2:02:22:84:aa:23:4d:16:86:a5:39:c9:1b:a0:8f:52: d0:1b:f5:cb:75:f9:16:ea:de:b3:bd:97:f5:61:db:b6:37:ec: d8:a4:7c:ff:40:06:18:02:19:c7:18:db:98:56:ca:6c:c3:15: 97:e4:d4:4e:4f:b4:df:f7:6c:5a:d5:e9:66:f0:0c:9a:6d:d9: f5:ff:1d:4e:1f:82:e8:5e:24:bc:40:64:0f:cd:8b:35:72:1e: 80:53:b6:cd:44:90:80:75:f9:d9:bc:43:5c:40:c4:39:8e:bc: 37:ec:8a:b4:7e:d8:4d:e2:37:3f:96:d1:5f:bc:0b:fb:ad:33: ad:dc:b7:48:c3:f1:ad:2f:69:5f:6a:05:05:0c:71:a9:16:51: d0:c5:a2:54:1c:d9:21:a5:05:9a:b2:b1:e4:d9:19:00:9a:fb: 2b:55:39:dc:1c:54:ef:bd:e5:eb:c4:7d:02:c3:86:f5:5f:43: eb:c5:64:de -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFeYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUMx MEM5MzQ1NTc1OUM2NTlEMkJCODE5RkIwN0ZGNzA2M0NFQ0MzMjAeFw0yNDAzMTMw MTIyMjZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQ0ODBDQjY4NTE5QzU0 MzRFRkI2MjkxQTE1MUFEQzI3QkY4QkZGRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA6YOkKdgt7ZuY7Z08kaKztpHkgdRS2xVSPEQMvYRipEbwYloD F15trsK5NBl18aslWvsdOi5zrWNH9zFsMUyyWiAq+LKnPm/GumOCBepVv+1/kg7K 58dqWoRL7xPMJFJl/ZZx5ZvOsdu9sP9T6+4psb6bV7NVrXE8hTD1C5Q74cIKcKjj NLXYwf6j/P+ZEbqvv61Z3a2p7w5Wwer+zxBWu+EQogkRdifkM++A4yktsvNrMBWz NgBlU03kPzSlZNXenH27fKUAHFLRpITiXqIC/HvQD4ergNq8rMOOKzLbEN8/DkA3 xWghc6xeA/LPZYMbZvzCeenN7cCWZ04PTzjdAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU1IDLaFGcVDTvtikaFRrcJ7+L/+AwHwYDVR0jBBgwFoAU7BDJNFV1nGWdK7gZ +wf/cGPOzDIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMy OS83QkRKTkZWMW5HV2RLN2daLXdmX2NHUE96REkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzdCREpORlYxbkdXZEs3Z1otd2ZfY0dQT3pESS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMjkvMUlETGFGR2NWRFR2 dGlrYUZScmNKNy1MXy1BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHa4nTANBgkqhkiG9w0BAQsFAAOCAQEASqA7u+6+ZwzduxYwvTI0M3/7jKBt 1a1RLyYpHBcG0WXvBGwB1wbWhJ2abRpNIL2T4CZ++utnpDPPow5jJuN/r+anA7U7 XGolHFbCAiKEqiNNFoalOckboI9S0Bv1y3X5Fures72X9WHbtjfs2KR8/0AGGAIZ xxjbmFbKbMMVl+TUTk+03/dsWtXpZvAMmm3Z9f8dTh+C6F4kvEBkD82LNXIegFO2 zUSQgHX52bxDXEDEOY68N+yKtH7YTeI3P5bRX7wL+60zrdy3SMPxrS9pX2oFBQxx qRZR0MWiVBzZIaUFmrKx5NkZAJr7K1U53BxU773l68R9AsOG9V9D68Vk3g== -----END CERTIFICATE-----Generated at Mon Jul 1 07:57:47 2024 by rpki-client on console.sobornost.net