$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/ROpkJGWoi6e_v6vT4FxS7Qgv7IU.roa File: ROpkJGWoi6e_v6vT4FxS7Qgv7IU.roa (raw, json) Hash identifier: JNas7Wlg0AX26m1efzNFcy+W/bWb/XZ8L4u88VFkih0= Subject key identifier: 44:EA:64:24:65:A8:8B:A7:BF:BF:AB:D3:E0:5C:52:ED:08:2F:EC:85 Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 16FA Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/ROpkJGWoi6e_v6vT4FxS7Qgv7IU.roa Signing time: Tue 14 May 2024 05:30:44 +0000 ROA not before: Tue 14 May 2024 05:30:44 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139021 IP address blocks: 43.250.116.0/22 maxlen: 24 103.235.184.0/22 maxlen: 24 150.242.224.0/22 maxlen: 24 219.234.0.0/21 maxlen: 24 219.234.8.0/21 maxlen: 24 219.234.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jul 2024 12:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5882 (0x16fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: May 14 05:30:44 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=44EA642465A88BA7BFBFABD3E05C52ED082FEC85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:27:f7:b8:48:56:1f:1b:9d:46:6a:5c:de:0f: 15:17:e1:e5:f4:86:c2:6a:f6:02:d7:5a:87:3a:99: a8:97:89:f1:98:93:9b:bf:8e:f8:fd:e8:99:2f:48: 43:cc:cf:0f:e6:94:e4:04:ff:e3:c7:c9:55:f5:f4: 7f:d4:38:b3:d5:1c:ee:b2:4b:5b:b9:08:b1:34:37: f2:9f:b3:38:ad:94:94:64:b3:21:81:eb:57:a9:cd: 00:91:7e:c9:04:0a:c2:31:fd:57:ca:5c:49:65:c4: 93:0a:b7:6a:ae:d3:37:7c:d7:12:82:d1:71:d9:af: d0:5a:40:bf:f8:61:bd:9e:6e:94:56:6e:ff:09:53: 0a:13:c5:2f:a2:d1:f0:59:46:34:f3:28:e1:3d:c9: ba:06:f6:54:2e:a1:92:6d:c0:f7:c7:01:ef:34:5e: 38:4e:d0:27:3d:6d:30:d8:f0:37:35:32:cc:ab:26: dd:c3:19:e2:8e:71:4b:0f:da:db:b4:53:6d:b9:0d: f1:8a:c7:75:eb:69:5d:1e:a3:95:40:65:7f:2b:36: 2e:70:69:03:49:5c:b6:3e:32:6e:3e:45:26:f5:d2: ae:5d:04:70:8d:77:39:d9:5f:e4:55:63:1d:f2:d7: 39:ac:7c:ab:bf:87:dd:91:2c:71:35:35:d2:e7:d7: 1b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EA:64:24:65:A8:8B:A7:BF:BF:AB:D3:E0:5C:52:ED:08:2F:EC:85 X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/ROpkJGWoi6e_v6vT4FxS7Qgv7IU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.250.116.0/22 103.235.184.0/22 150.242.224.0/22 219.234.0.0/19 Signature Algorithm: sha256WithRSAEncryption 5c:53:14:03:53:ea:60:cd:9b:de:dd:24:7b:96:8f:d5:c6:80: aa:03:46:92:b5:96:6f:02:6f:62:ef:93:f4:34:8e:d8:25:1c: 0d:61:fe:3b:a4:d1:6a:31:7c:9e:16:c4:80:da:40:e6:11:13: 6a:81:3f:4d:29:4c:bd:8e:f4:42:e9:17:05:2d:4f:ec:21:d8: 85:2e:cf:29:0b:b5:80:a9:12:e2:b4:bb:f3:9b:02:1f:70:b6: c4:03:03:d0:72:80:52:26:ba:2f:00:47:c4:0c:30:89:14:00: 0a:cd:3a:4d:52:72:3c:66:de:ed:e4:7f:61:e6:4c:f1:cf:0a: bb:c5:a5:01:1f:fc:8d:cd:6b:31:39:53:36:b3:af:06:a2:d0: fc:ff:79:63:28:46:7b:22:5b:16:54:58:72:e6:49:74:1e:60: 43:00:39:98:51:fd:0f:ab:fd:0b:31:1e:2e:f3:bc:1d:47:d3: b2:c1:1b:1b:52:fd:04:3b:91:6c:4f:86:7c:23:3f:ce:ef:d0: da:2b:29:4d:8a:f4:53:90:33:d3:f2:25:d7:7a:2c:91:11:99: 02:5c:29:07:a1:c4:c5:de:66:4c:c1:60:b5:3b:44:36:c4:90: b3:93:fd:bc:5d:cf:22:11:ca:7e:4b:7e:fd:96:75:0b:50:69: 58:e0:98:20 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICFvowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNDA1MTQw NTMwNDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ0RUE2NDI0NjVBODhC QTdCRkJGQUJEM0UwNUM1MkVEMDgyRkVDODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3J/e4SFYfG51GalzeDxUX4eX0hsJq9gLXWoc6maiXifGYk5u/ jvj96JkvSEPMzw/mlOQE/+PHyVX19H/UOLPVHO6yS1u5CLE0N/KfszitlJRksyGB 61epzQCRfskECsIx/VfKXEllxJMKt2qu0zd81xKC0XHZr9BaQL/4Yb2ebpRWbv8J UwoTxS+i0fBZRjTzKOE9yboG9lQuoZJtwPfHAe80XjhO0Cc9bTDY8Dc1MsyrJt3D GeKOcUsP2tu0U225DfGKx3XraV0eo5VAZX8rNi5waQNJXLY+Mm4+RSb10q5dBHCN dznZX+RVYx3y1zmsfKu/h92RLHE1NdLn1xulAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUROpkJGWoi6e/v6vT4FxS7Qgv7IUwHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvUk9wa0pHV29pNmVf djZ2VDRGeFM3UWd2N0lVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw GAMEAiv6dAMEAmfruAMEApby4AMEBdvqADANBgkqhkiG9w0BAQsFAAOCAQEAXFMU A1PqYM2b3t0ke5aP1caAqgNGkrWWbwJvYu+T9DSO2CUcDWH+O6TRajF8nhbEgNpA 5hETaoE/TSlMvY70QukXBS1P7CHYhS7PKQu1gKkS4rS785sCH3C2xAMD0HKAUia6 LwBHxAwwiRQACs06TVJyPGbe7eR/YeZM8c8Ku8WlAR/8jc1rMTlTNrOvBqLQ/P95 YyhGeyJbFlRYcuZJdB5gQwA5mFH9D6v9CzEeLvO8HUfTssEbG1L9BDuRbE+GfCM/ zu/Q2ispTYr0U5Az0/Il13oskRGZAlwpB6HExd5mTMFgtTtENsSQs5P9vF3PIhHK fkt+/ZZ1C1BpWOCYIA== -----END CERTIFICATE-----Generated at Tue Jul 9 11:29:21 2024 by rpki-client on console.sobornost.net