$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/dtlXcS9ECSBioSeS0D5iWzVGbsc.roa File: dtlXcS9ECSBioSeS0D5iWzVGbsc.roa (raw, json) Hash identifier: VyrYpeoHgDNE+xmLy6mRxQuZl7RT24fo1v2FT+iMaPY= Subject key identifier: 76:D9:57:71:2F:44:09:20:62:A1:27:92:D0:3E:62:5B:35:46:6E:C7 Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Certificate serial: A1 Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/dtlXcS9ECSBioSeS0D5iWzVGbsc.roa Signing time: Thu 20 Jun 2024 04:40:28 +0000 ROA not before: Thu 20 Jun 2024 04:40:28 +0000 ROA not after: Wed 21 May 2025 03:30:10 +0000 asID: 136897 IP address blocks: 113.31.32.0/21 maxlen: 24 113.31.40.0/21 maxlen: 24 113.31.48.0/21 maxlen: 24 113.31.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jul 2024 03:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Validity Not Before: Jun 20 04:40:28 2024 GMT Not After : May 21 03:30:10 2025 GMT Subject: CN=76D957712F44092062A12792D03E625B35466EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:d6:17:06:2f:5f:1a:e1:f7:df:3c:e4:4c: ec:d1:15:82:8c:13:98:66:55:20:6f:25:0f:e5:9a: 9d:1a:80:57:0f:7e:e9:d6:06:d1:d6:67:be:46:da: aa:6f:16:34:f2:db:27:bb:4c:22:35:4d:1d:30:7d: 9d:aa:31:5d:cf:de:19:d9:62:1b:98:47:4b:f7:46: db:1f:8f:53:2f:4f:05:dc:8d:ce:fd:7e:7b:14:aa: 98:db:95:7e:aa:31:b0:81:a6:bc:7f:99:d3:2c:23: 87:ae:82:2e:ab:fd:f7:a5:06:62:ee:08:75:1f:63: fa:da:b9:b0:6c:f9:bb:31:53:31:ff:55:3d:db:97: 71:69:18:05:0a:69:85:8c:f9:cd:ef:7a:b3:23:b9: f4:66:43:9d:87:25:e6:5e:32:22:28:ff:db:1f:57: 26:2e:4e:61:14:c0:03:d2:28:61:d9:14:5b:a4:3e: 28:96:8f:0d:08:5a:b8:cf:40:0e:2a:d9:ab:42:2b: 06:32:02:f6:e7:53:49:5b:e4:f6:95:d8:71:21:bb: 4a:a6:84:7e:f7:96:72:e1:bd:ec:6c:85:02:e4:68: 00:84:a0:b5:bf:a6:c3:0b:20:eb:09:0f:4f:88:22: 5b:f3:d7:f9:ab:98:b9:50:9d:b4:01:51:f8:a1:75: b5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D9:57:71:2F:44:09:20:62:A1:27:92:D0:3E:62:5B:35:46:6E:C7 X509v3 Authority Key Identifier: keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/dtlXcS9ECSBioSeS0D5iWzVGbsc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.31.32.0/19 Signature Algorithm: sha256WithRSAEncryption 0e:36:ae:8c:67:19:15:8f:f4:5f:f2:35:6c:87:13:7b:91:2a: 55:ab:23:3a:48:65:dc:e1:9d:b4:ed:95:25:06:9e:83:fe:4a: f4:e1:3d:ca:37:3c:7c:04:18:e0:29:0a:33:54:2a:b9:59:f7: 76:3c:49:14:ba:c1:08:63:00:3e:e2:1a:a4:02:45:8b:29:1d: 23:1e:d9:69:cc:98:e5:e0:bb:6f:57:e2:4f:51:d1:bc:a9:d9: 22:fc:20:7d:3d:2e:f2:0a:14:c4:11:a1:cf:45:02:91:0e:3f: a5:e5:95:d3:93:ac:3a:34:1d:46:fb:3e:4b:73:b1:f1:d2:84: 28:aa:5f:ca:b0:a5:53:38:19:ee:7c:56:72:c3:1f:e7:a1:7a: 43:7d:09:ca:bb:ad:92:60:28:db:35:9e:8b:7b:ed:93:c1:da: 63:9d:85:cd:00:b1:16:dc:2c:f5:af:0d:93:a4:76:db:e7:29: c8:af:6b:a6:61:be:60:d7:36:6b:7d:17:75:88:a4:9a:98:8e: aa:26:a7:20:2c:ec:3b:67:19:a2:60:c2:04:6b:fd:1e:9b:0e: 10:0c:2a:dd:cf:0a:98:23:12:16:c6:5c:4d:ec:34:48:4e:56: ff:4f:ec:af:36:e1:18:af:0a:9f:12:3a:7a:02:52:19:6d:9a: 19:48:37:fb -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3 MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNDA2MjAw NDQwMjhaFw0yNTA1MjEwMzMwMTBaMDMxMTAvBgNVBAMTKDc2RDk1NzcxMkY0NDA5 MjA2MkExMjc5MkQwM0U2MjVCMzU0NjZFQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0z9YXBi9fGuH33zzkTOzRFYKME5hmVSBvJQ/lmp0agFcPfunW BtHWZ75G2qpvFjTy2ye7TCI1TR0wfZ2qMV3P3hnZYhuYR0v3Rtsfj1MvTwXcjc79 fnsUqpjblX6qMbCBprx/mdMsI4eugi6r/felBmLuCHUfY/raubBs+bsxUzH/VT3b l3FpGAUKaYWM+c3verMjufRmQ52HJeZeMiIo/9sfVyYuTmEUwAPSKGHZFFukPiiW jw0IWrjPQA4q2atCKwYyAvbnU0lb5PaV2HEhu0qmhH73lnLhvexshQLkaACEoLW/ psMLIOsJD0+IIlvz1/mrmLlQnbQBUfihdbWhAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUdtlXcS9ECSBioSeS0D5iWzVGbscwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL2R0bFhjUzlFQ1NCaW9T ZVMwRDVpV3pWR2JzYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAVxHyAwDQYJKoZIhvcNAQELBQADggEBAA42roxnGRWP9F/yNWyHE3uRKlWrIzpI ZdzhnbTtlSUGnoP+SvThPco3PHwEGOApCjNUKrlZ93Y8SRS6wQhjAD7iGqQCRYsp HSMe2WnMmOXgu29X4k9R0byp2SL8IH09LvIKFMQRoc9FApEOP6XlldOTrDo0HUb7 PktzsfHShCiqX8qwpVM4Ge58VnLDH+ehekN9Ccq7rZJgKNs1not77ZPB2mOdhc0A sRbcLPWvDZOkdtvnKciva6ZhvmDXNmt9F3WIpJqYjqompyAs7DtnGaJgwgRr/R6b DhAMKt3PCpgjEhbGXE3sNEhOVv9P7K824RivCp8SOnoCUhltmhlIN/s= -----END CERTIFICATE-----Generated at Thu Jul 11 03:29:14 2024 by rpki-client on console.sobornost.net