$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/30WcYGvWBNNrIhdtCG1iHiAv0ek.roa File: 30WcYGvWBNNrIhdtCG1iHiAv0ek.roa (raw, json) Hash identifier: D8o36zQPOQ0O2cwIFsmw/pPXg/QcjP7svyWY8k8tjHo= Subject key identifier: DF:45:9C:60:6B:D6:04:D3:6B:22:17:6D:08:6D:62:1E:20:2F:D1:E9 Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Certificate serial: A2 Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/30WcYGvWBNNrIhdtCG1iHiAv0ek.roa Signing time: Thu 20 Jun 2024 04:40:29 +0000 ROA not before: Thu 20 Jun 2024 04:40:29 +0000 ROA not after: Wed 21 May 2025 03:30:10 +0000 asID: 2914 IP address blocks: 113.31.0.0/21 maxlen: 24 113.31.8.0/21 maxlen: 24 113.31.16.0/21 maxlen: 24 113.31.24.0/21 maxlen: 24 113.31.80.0/22 maxlen: 24 113.31.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jul 2024 13:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Validity Not Before: Jun 20 04:40:29 2024 GMT Not After : May 21 03:30:10 2025 GMT Subject: CN=DF459C606BD604D36B22176D086D621E202FD1E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:5a:bb:42:bc:63:fd:a7:d5:2e:4d:3d:6f: 41:3f:7f:49:e8:de:23:88:4b:1e:4a:a2:de:4a:53: 6e:4c:9e:fc:b9:5e:a9:8c:4a:20:e2:e3:cd:ba:4d: 64:ef:6c:e5:bb:e5:e7:b5:d9:74:38:c1:86:51:68: c0:77:cf:25:0e:b9:7c:bd:1a:07:4f:0a:75:21:39: c1:e2:e2:1b:bc:c7:9b:40:b2:ac:e8:40:7d:74:5e: 26:3d:43:15:5c:ec:e3:5b:8f:ca:6e:c2:3c:b4:00: 8e:14:85:37:69:3e:34:bd:d7:33:93:8e:7f:bb:e6: de:a1:4c:64:97:06:87:fa:f5:5e:a9:94:d7:58:58: 75:31:d3:af:80:e0:19:f6:f9:54:89:61:b1:17:cc: 22:21:91:ab:fa:e4:8c:db:dc:7a:21:66:47:f3:b0: d0:a1:72:e1:fb:9b:fe:fc:0a:70:7c:31:8c:d0:ba: 40:01:44:e8:0b:ed:ef:20:50:7e:07:88:7f:57:ad: b0:b5:39:78:e3:2a:8d:1c:41:8b:c6:94:9f:19:6b: 8a:f9:f6:63:cc:e2:e9:92:0f:a6:87:00:a4:e6:58: 1d:21:38:78:34:47:3e:ad:66:ef:8f:3c:f0:b0:86: 08:1a:1a:13:65:b2:a8:bb:04:bc:b1:0a:c9:c5:04: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:45:9C:60:6B:D6:04:D3:6B:22:17:6D:08:6D:62:1E:20:2F:D1:E9 X509v3 Authority Key Identifier: keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/30WcYGvWBNNrIhdtCG1iHiAv0ek.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.31.0.0/19 113.31.80.0/21 Signature Algorithm: sha256WithRSAEncryption a0:f9:7a:4b:85:00:e8:7d:cb:e8:9e:88:8a:24:72:27:fd:8e: 37:a7:ef:1e:69:83:10:44:44:c3:12:33:97:23:2e:c9:30:fb: 78:99:c6:2d:53:d1:fa:9b:00:7e:87:fb:3c:f2:ed:89:43:db: ba:28:15:2b:7c:de:78:21:a5:85:97:e4:96:1c:44:54:b9:e9: 85:7e:5e:22:fc:8c:d7:93:68:27:6e:9a:69:06:99:00:af:45: 7b:52:65:cc:83:14:90:e9:2f:d8:3e:6b:5a:ff:15:dc:18:25: 9b:b9:81:e4:19:cf:aa:c8:18:80:32:c8:3c:fd:c3:b0:5e:98: 23:be:0d:7c:50:29:69:03:5b:50:e9:af:df:ea:6e:49:fa:a6: 72:0f:0c:94:9e:d5:c4:3e:2f:fe:16:60:b4:06:5d:b1:42:46: 6a:5e:50:ef:0d:ed:5a:ec:23:62:49:3f:53:53:53:a6:d1:ea: 9b:3b:f2:17:63:bc:59:56:f0:1b:63:cf:d2:3a:80:45:47:dd: 6d:11:f6:e0:d7:21:d8:83:21:76:cf:61:4d:77:fd:cf:17:fd: 40:0c:34:b8:4b:1a:81:96:f9:30:5d:cc:8d:9f:0f:80:2b:12: fd:67:c8:3b:0f:a2:0a:00:a1:27:32:37:52:ff:84:50:29:b7: 94:a7:ee:50 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3 MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNDA2MjAw NDQwMjlaFw0yNTA1MjEwMzMwMTBaMDMxMTAvBgNVBAMTKERGNDU5QzYwNkJENjA0 RDM2QjIyMTc2RDA4NkQ2MjFFMjAyRkQxRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLbVq7Qrxj/afVLk09b0E/f0no3iOISx5Kot5KU25Mnvy5XqmM SiDi4826TWTvbOW75ee12XQ4wYZRaMB3zyUOuXy9GgdPCnUhOcHi4hu8x5tAsqzo QH10XiY9QxVc7ONbj8puwjy0AI4UhTdpPjS91zOTjn+75t6hTGSXBof69V6plNdY WHUx06+A4Bn2+VSJYbEXzCIhkav65Izb3HohZkfzsNChcuH7m/78CnB8MYzQukAB ROgL7e8gUH4HiH9XrbC1OXjjKo0cQYvGlJ8Za4r59mPM4umSD6aHAKTmWB0hOHg0 Rz6tZu+PPPCwhggaGhNlsqi7BLyxCsnFBOXhAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQU30WcYGvWBNNrIhdtCG1iHiAv0ekwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzMwV2NZR3ZXQk5Ocklo ZHRDRzFpSGlBdjBlay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAVxHwADBANxH1AwDQYJKoZIhvcNAQELBQADggEBAKD5ekuFAOh9y+ieiIokcif9 jjen7x5pgxBERMMSM5cjLskw+3iZxi1T0fqbAH6H+zzy7YlD27ooFSt83nghpYWX 5JYcRFS56YV+XiL8jNeTaCdummkGmQCvRXtSZcyDFJDpL9g+a1r/FdwYJZu5geQZ z6rIGIAyyDz9w7BemCO+DXxQKWkDW1Dpr9/qbkn6pnIPDJSe1cQ+L/4WYLQGXbFC RmpeUO8N7VrsI2JJP1NTU6bR6ps78hdjvFlW8Btjz9I6gEVH3W0R9uDXIdiDIXbP YU13/c8X/UAMNLhLGoGW+TBdzI2fD4ArEv1nyDsPogoAoScyN1L/hFApt5Sn7lA= -----END CERTIFICATE-----Generated at Sun Jul 14 11:10:08 2024 by rpki-client on console.sobornost.net