$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/j08O8oc1ZKgHlkiYaj7gdZaEmzM.roa File: j08O8oc1ZKgHlkiYaj7gdZaEmzM.roa (raw, json) Hash identifier: qeECB/sxjwUplfrb/cJwIxviUJwv/kmUv484se1WO58= Subject key identifier: 8F:4F:0E:F2:87:35:64:A8:07:96:48:98:6A:3E:E0:75:96:84:9B:33 Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 0AD7 Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/j08O8oc1ZKgHlkiYaj7gdZaEmzM.roa Signing time: Wed 19 Jun 2024 12:31:11 +0000 ROA not before: Wed 19 Jun 2024 12:31:11 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 62387 IP address blocks: 119.59.192.0/22 maxlen: 24 119.59.196.0/22 maxlen: 24 119.59.200.0/22 maxlen: 24 119.59.204.0/22 maxlen: 24 119.59.212.0/22 maxlen: 24 119.59.216.0/22 maxlen: 24 119.59.224.0/22 maxlen: 24 119.59.228.0/22 maxlen: 24 119.59.232.0/22 maxlen: 24 119.59.240.0/22 maxlen: 24 119.59.244.0/22 maxlen: 24 119.59.248.0/22 maxlen: 24 119.59.252.0/22 maxlen: 24 123.98.24.0/22 maxlen: 24 123.98.36.0/22 maxlen: 24 123.98.52.0/22 maxlen: 24 123.98.92.0/22 maxlen: 24 211.149.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 06:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2775 (0xad7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Jun 19 12:31:11 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=8F4F0EF2873564A8079648986A3EE07596849B33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ee:9c:86:c5:64:4f:ae:c4:50:b1:68:05:02: 36:5a:30:de:54:7c:c7:52:cb:3f:62:d1:16:7b:10: 90:a9:39:6e:6c:1e:28:11:24:f5:e9:34:12:d1:62: 14:a6:e6:51:bf:ff:af:f6:73:a4:47:2f:ac:04:1a: 0b:d3:4d:2d:33:26:4b:d6:6d:fc:62:8e:08:c7:3f: d6:f5:ce:b7:89:9d:76:0b:b5:2f:30:bf:16:98:e9: 8e:cc:9b:8f:72:6e:64:a5:44:64:54:bc:cd:34:c9: 8e:1e:c8:7b:6e:90:ed:8a:c2:3f:99:62:a7:49:35: 7d:15:e3:ef:db:84:b6:18:ea:1a:b5:89:6d:fa:56: 1a:0a:54:b0:d4:3e:81:46:14:1d:36:70:52:4b:bd: 07:6a:07:bb:ad:c3:4c:5b:c0:28:62:44:f9:b2:3d: 04:bc:dc:9d:74:57:00:52:72:90:cd:41:62:87:26: 4c:5b:22:79:eb:a0:a1:42:19:34:76:e2:38:cb:22: 15:33:23:fa:d1:2f:1d:af:ce:f2:5f:1d:3c:05:18: 59:e7:47:b0:04:04:9d:8b:14:81:42:59:56:2f:49: 42:f6:74:3f:d8:da:38:78:11:6c:1b:48:f2:ef:aa: 73:4c:82:1c:00:d6:42:1c:68:eb:80:da:57:d2:0a: 8f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4F:0E:F2:87:35:64:A8:07:96:48:98:6A:3E:E0:75:96:84:9B:33 X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/j08O8oc1ZKgHlkiYaj7gdZaEmzM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.59.192.0/20 119.59.212.0-119.59.219.255 119.59.224.0-119.59.235.255 119.59.240.0/20 123.98.24.0/22 123.98.36.0/22 123.98.52.0/22 123.98.92.0/22 211.149.76.0/22 Signature Algorithm: sha256WithRSAEncryption 21:f7:cc:d4:23:75:a8:77:22:fd:b0:9b:c7:ab:58:00:4b:6f: 30:a2:30:55:c1:b4:2b:01:6c:4d:6e:0b:c3:2e:34:9a:51:dd: 00:3a:d8:2e:01:f2:26:bd:69:1d:bb:66:23:fe:af:10:26:88: c6:44:ae:9a:f3:51:8a:86:98:52:bf:42:bf:88:04:26:ac:c0: da:f0:37:89:61:9b:b8:df:9e:b7:e8:e1:48:01:1a:06:9c:fb: 46:71:42:8e:00:0c:9c:0e:8f:fa:39:23:12:8f:37:2f:b8:22: c0:28:d8:db:32:2b:9c:13:14:08:81:a9:8b:87:4e:b6:b9:d3: 35:d0:9a:66:d3:9f:22:41:83:04:59:4a:86:55:8e:e1:ac:f6: 5e:f1:a5:de:cd:c3:5f:b1:1b:06:ca:dc:2c:1d:5b:b2:0c:b2: 29:1e:77:4d:4b:50:7b:a7:9d:02:a9:35:93:a2:34:51:be:8b: 6f:41:c1:22:bd:35:10:91:21:5e:13:de:ec:32:d4:9a:63:f1: 45:a0:72:f1:25:47:83:c2:a0:ae:8c:93:f3:43:d7:a4:96:ba: 81:39:a0:a6:25:96:f5:01:fe:93:06:ca:9f:a8:45:a9:6f:9d: 60:7f:05:63:dd:bd:56:58:83:d0:d8:0b:59:2e:c6:bb:7e:ca: 80:46:7b:60 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgICCtcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNDA2MTkx MjMxMTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDhGNEYwRUYyODczNTY0 QTgwNzk2NDg5ODZBM0VFMDc1OTY4NDlCMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP7pyGxWRPrsRQsWgFAjZaMN5UfMdSyz9i0RZ7EJCpOW5sHigR JPXpNBLRYhSm5lG//6/2c6RHL6wEGgvTTS0zJkvWbfxijgjHP9b1zreJnXYLtS8w vxaY6Y7Mm49ybmSlRGRUvM00yY4eyHtukO2Kwj+ZYqdJNX0V4+/bhLYY6hq1iW36 VhoKVLDUPoFGFB02cFJLvQdqB7utw0xbwChiRPmyPQS83J10VwBScpDNQWKHJkxb InnroKFCGTR24jjLIhUzI/rRLx2vzvJfHTwFGFnnR7AEBJ2LFIFCWVYvSUL2dD/Y 2jh4EWwbSPLvqnNMghwA1kIcaOuA2lfSCo+DAgMBAAGjggIxMIICLTAdBgNVHQ4E FgQUj08O8oc1ZKgHlkiYaj7gdZaEmzMwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL2owOE84b2MxWktnSGxr aVlhajdnZFphRW16TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwXwYIKwYBBQUHAQcBAf8EUDBOMEwEAgABMEYD BAR3O8AwDAMEAnc71AMEAnc72DAMAwQFdzvgAwQCdzvoAwQEdzvwAwQCe2IYAwQC e2IkAwQCe2I0AwQCe2JcAwQC05VMMA0GCSqGSIb3DQEBCwUAA4IBAQAh98zUI3Wo dyL9sJvHq1gAS28wojBVwbQrAWxNbgvDLjSaUd0AOtguAfImvWkdu2Yj/q8QJojG RK6a81GKhphSv0K/iAQmrMDa8DeJYZu435636OFIARoGnPtGcUKOAAycDo/6OSMS jzcvuCLAKNjbMiucExQIgamLh062udM10Jpm058iQYMEWUqGVY7hrPZe8aXezcNf sRsGytwsHVuyDLIpHndNS1B7p50CqTWTojRRvotvQcEivTUQkSFeE97sMtSaY/FF oHLxJUeDwqCujJPzQ9eklrqBOaCmJZb1Af6TBsqfqEWpb51gfwVj3b1WWIPQ2AtZ Lsa7fsqARntg -----END CERTIFICATE-----Generated at Tue Jun 25 02:55:25 2024 by rpki-client on console.sobornost.net