$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/PE1JuwRqjdeE0_2_zBRqPg-z_-Q.roa File: PE1JuwRqjdeE0_2_zBRqPg-z_-Q.roa (raw, json) Hash identifier: ShBeN130BTW+RbGe+BH2hPpjAdRxXH63WYlMo4eC/Hs= Subject key identifier: 3C:4D:49:BB:04:6A:8D:D7:84:D3:FD:BF:CC:14:6A:3E:0F:B3:FF:E4 Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Certificate serial: 0E Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/PE1JuwRqjdeE0_2_zBRqPg-z_-Q.roa Signing time: Mon 24 Jun 2024 07:33:56 +0000 ROA not before: Mon 24 Jun 2024 07:33:56 +0000 ROA not after: Tue 24 Jun 2025 01:23:54 +0000 asID: 146761 IP address blocks: 114.111.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jul 2024 15:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Validity Not Before: Jun 24 07:33:56 2024 GMT Not After : Jun 24 01:23:54 2025 GMT Subject: CN=3C4D49BB046A8DD784D3FDBFCC146A3E0FB3FFE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f4:c9:2a:e2:b2:eb:ff:7a:16:2c:d2:05:00: 50:0b:94:ec:38:6d:c9:c2:10:94:7a:15:df:db:b6: ff:26:66:ce:4a:01:bc:1d:48:98:ea:e6:da:f2:ff: d4:c5:d2:18:c1:ab:b7:58:13:af:04:ff:e3:5b:72: be:ec:af:8f:b3:3a:60:cb:9f:f2:ba:7e:6b:5f:1e: 2d:12:ce:15:37:55:14:90:ba:f7:90:b5:b8:ff:7d: af:49:25:df:4d:28:ed:75:bb:df:ba:41:ad:f7:0d: 93:27:5c:49:47:26:4b:ab:74:94:83:aa:f8:97:ab: 79:79:90:38:2d:de:26:27:aa:63:0f:f0:36:06:a2: 73:17:a6:29:19:28:3a:b0:f2:bf:62:9b:f4:62:3f: ca:b3:ac:8e:b4:bc:38:72:92:d9:16:1c:ef:36:72: 07:d5:35:c2:a6:03:02:c2:e5:7a:8e:43:51:c8:f9: c8:49:98:33:a9:59:0c:48:3a:3d:2c:70:2a:db:2f: cd:6d:8a:57:19:8f:60:01:02:5f:98:ae:6e:4e:aa: 40:3f:2c:58:de:fc:59:5a:48:4e:9f:71:e0:b2:9e: 26:70:7b:28:2a:2f:8e:50:86:bb:d6:ab:55:13:0e: 89:5c:35:80:2d:f5:ea:e2:8a:90:1d:39:db:e2:92: 21:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4D:49:BB:04:6A:8D:D7:84:D3:FD:BF:CC:14:6A:3E:0F:B3:FF:E4 X509v3 Authority Key Identifier: keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/PE1JuwRqjdeE0_2_zBRqPg-z_-Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.111.176.0/20 Signature Algorithm: sha256WithRSAEncryption 78:d7:88:36:86:86:03:93:8b:47:5a:80:5e:01:43:10:ca:41: 48:f5:b0:cb:af:fe:36:e2:99:27:24:32:96:de:40:dc:a5:a1: 9d:43:5d:b8:76:c3:05:f9:7e:ee:94:07:0b:35:03:63:2a:08: bb:20:55:fd:74:51:74:5d:1d:6a:78:f5:6b:3d:80:3c:f8:d3: 79:18:76:9a:fc:f0:12:b6:f5:34:93:6f:19:02:72:6c:97:ed: aa:28:80:b3:70:f6:a9:b4:b7:b2:a3:4d:55:4a:e3:5b:c8:95: 49:1e:fe:2c:bb:be:87:43:b7:4e:30:d9:d9:d7:ed:4c:65:38: 49:02:43:c4:3d:f0:5f:85:80:a4:22:6a:60:8c:57:23:b3:fa: e7:58:ac:9c:fe:7f:bb:36:8a:cb:55:a9:b5:c2:f5:3d:3b:d1: 41:2d:fc:74:e6:e3:b4:47:56:31:4a:c0:66:d2:11:31:cc:e1: 5c:ea:cf:83:4b:17:3c:b5:25:fc:83:34:65:71:e6:2e:d6:23: f9:93:f4:a5:68:e0:5b:19:c3:bb:1d:9d:c4:35:a0:58:56:3d: 5b:66:4c:a2:f2:c3:e5:c2:9b:7e:41:72:85:a2:35:a9:a1:56: d6:e8:00:4a:e4:89:b4:dd:fb:d1:b6:ed:19:4e:85:60:89:b1: d7:f9:30:d2 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQkM2 RDlBOUY0QTIyNkE2MUY1RkExQTkxNjM5NDFENEIzNUJBMzVCMB4XDTI0MDYyNDA3 MzM1NloXDTI1MDYyNDAxMjM1NFowMzExMC8GA1UEAxMoM0M0RDQ5QkIwNDZBOERE Nzg0RDNGREJGQ0MxNDZBM0UwRkIzRkZFNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKz0ySrisuv/ehYs0gUAUAuU7DhtycIQlHoV39u2/yZmzkoBvB1I mOrm2vL/1MXSGMGrt1gTrwT/41tyvuyvj7M6YMuf8rp+a18eLRLOFTdVFJC695C1 uP99r0kl300o7XW737pBrfcNkydcSUcmS6t0lIOq+JereXmQOC3eJieqYw/wNgai cxemKRkoOrDyv2Kb9GI/yrOsjrS8OHKS2RYc7zZyB9U1wqYDAsLleo5DUcj5yEmY M6lZDEg6PSxwKtsvzW2KVxmPYAECX5iubk6qQD8sWN78WVpITp9x4LKeJnB7KCov jlCGu9arVRMOiVw1gC316uKKkB052+KSIcMCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQ8TUm7BGqN14TT/b/MFGo+D7P/5DAfBgNVHSMEGDAWgBQbxtmp9KImph9foakW OUHUs1ujWzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMTM0 L0c4YlpxZlNpSnFZZlg2R3BGamxCMUxOYm8xcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvRzhiWnFmU2lKcVlmWDZHcEZqbEIxTE5ibzFzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEzNC9QRTFKdXdScWpkZUUw XzJfekJScVBnLXpfLVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQEcm+wMA0GCSqGSIb3DQEBCwUAA4IBAQB414g2hoYDk4tHWoBeAUMQykFI9bDL r/424pknJDKW3kDcpaGdQ124dsMF+X7ulAcLNQNjKgi7IFX9dFF0XR1qePVrPYA8 +NN5GHaa/PAStvU0k28ZAnJsl+2qKICzcPaptLeyo01VSuNbyJVJHv4su76HQ7dO MNnZ1+1MZThJAkPEPfBfhYCkImpgjFcjs/rnWKyc/n+7NorLVam1wvU9O9FBLfx0 5uO0R1YxSsBm0hExzOFc6s+DSxc8tSX8gzRlceYu1iP5k/SlaOBbGcO7HZ3ENaBY Vj1bZkyi8sPlwpt+QXKFojWpoVbW6ABK5Im03fvRtu0ZToVgibHX+TDS -----END CERTIFICATE-----Generated at Sun Jul 14 11:10:07 2024 by rpki-client on console.sobornost.net