$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1023/phU4YJh5EUs8U1V3CbndmrNmfO0.roa File: phU4YJh5EUs8U1V3CbndmrNmfO0.roa (raw, json) Hash identifier: CZhyDj2FMIi+v5w3tJPQMA4talNR9mcJmi9qREPZn/A= Subject key identifier: A6:15:38:60:98:79:11:4B:3C:53:55:77:09:B9:DD:9A:B3:66:7C:ED Certificate issuer: /CN=32D5EC15C5E564E470EC7B14CD47DE2D862ACE83 Certificate serial: 03 Authority key identifier: 32:D5:EC:15:C5:E5:64:E4:70:EC:7B:14:CD:47:DE:2D:86:2A:CE:83 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/phU4YJh5EUs8U1V3CbndmrNmfO0.roa Signing time: Wed 06 Nov 2024 09:54:29 +0000 ROA not before: Wed 06 Nov 2024 09:54:29 +0000 ROA not after: Thu 06 Nov 2025 09:48:25 +0000 asID: 132883 IP address blocks: 203.83.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32D5EC15C5E564E470EC7B14CD47DE2D862ACE83 Validity Not Before: Nov 6 09:54:29 2024 GMT Not After : Nov 6 09:48:25 2025 GMT Subject: CN=A61538609879114B3C53557709B9DD9AB3667CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:32:74:4a:6b:89:a9:53:14:63:20:46:41: ca:6f:03:56:71:29:34:29:80:8e:19:29:27:83:8e: fb:25:8f:92:a4:99:c5:62:2a:d9:dc:e2:ca:67:1b: cd:1d:62:cc:63:dd:3a:4b:a1:d2:8b:ba:6f:7e:6b: 5c:9f:ef:1f:dd:3d:8e:87:e7:6c:73:06:e9:c7:54: 4b:43:0c:83:1d:94:a7:7c:23:b2:77:6e:f8:88:9d: 9e:8e:d6:8e:c2:c7:ac:05:b6:66:6d:19:81:e0:1c: 5f:25:ca:af:a3:08:00:b4:82:43:30:45:23:df:c3: 4e:37:2e:5d:ce:6e:a3:09:bd:70:1e:35:a5:3d:ec: ae:de:c9:2f:0f:a9:dc:ca:69:12:23:c3:11:94:65: c4:d7:6a:2d:66:53:95:e4:aa:e9:9e:49:65:b8:1e: a5:9f:26:b2:53:76:97:a2:d3:b6:75:15:39:86:62: 59:aa:5e:74:8c:4a:80:9d:64:ce:3d:44:c4:ed:dd: 34:47:23:0f:34:ed:1c:00:a8:e2:e1:1d:52:3b:c9: 72:9d:ee:4a:a4:55:65:0f:2c:ca:96:b8:0b:5d:d4: 15:19:8b:59:a7:95:58:84:a1:81:18:e5:c0:e8:e9: 0b:25:4e:bd:39:80:d5:87:e7:f2:95:82:a2:20:84: 3e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:15:38:60:98:79:11:4B:3C:53:55:77:09:B9:DD:9A:B3:66:7C:ED X509v3 Authority Key Identifier: keyid:32:D5:EC:15:C5:E5:64:E4:70:EC:7B:14:CD:47:DE:2D:86:2A:CE:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/phU4YJh5EUs8U1V3CbndmrNmfO0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.83.8.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:83:8f:ec:56:91:66:8e:21:10:37:31:5b:51:18:e3:8d:d7: d5:4a:1a:8f:3a:d4:77:79:a8:3a:32:0d:44:97:fe:95:2e:1d: bb:25:9c:2c:cc:24:78:79:a8:8a:29:50:4b:ae:83:bd:a8:93: 8f:11:19:65:f9:6f:a7:1b:37:c4:6b:e6:df:5e:61:1d:5e:40: 6f:2e:87:e4:24:fc:86:92:49:da:06:f9:63:3e:f2:90:2c:36: 68:97:70:af:03:7b:e0:48:17:53:d1:67:13:16:f0:d5:fb:e9: 22:ef:34:57:cf:bc:13:5a:6b:91:6c:29:80:0d:24:45:b1:17: 5a:5f:bd:51:33:61:42:74:88:41:7c:06:9d:e7:73:29:1c:58: 7e:b9:78:99:18:8e:38:3c:02:14:04:4c:6e:0d:ad:61:07:79: ce:2c:52:73:41:47:de:1f:f9:a0:be:80:aa:7e:74:68:bb:0f: 89:d2:0a:ae:90:26:f5:f9:48:32:f2:a8:f7:49:7c:ae:d1:d5: 08:c2:25:b0:c6:f7:0e:8c:2a:ac:e0:ba:13:ca:9f:d5:a8:0d: 0e:f2:d3:99:4f:67:13:24:96:57:3b:4b:d8:52:f1:db:74:f6: 59:2b:5e:86:1f:43:38:7f:7f:05:0c:fa:c8:89:72:5a:be:1f: f1:4c:a2:5e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzMkQ1 RUMxNUM1RTU2NEU0NzBFQzdCMTRDRDQ3REUyRDg2MkFDRTgzMB4XDTI0MTEwNjA5 NTQyOVoXDTI1MTEwNjA5NDgyNVowMzExMC8GA1UEAxMoQTYxNTM4NjA5ODc5MTE0 QjNDNTM1NTc3MDlCOUREOUFCMzY2N0NFRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMLGMnRKa4mpUxRjIEZBym8DVnEpNCmAjhkpJ4OO+yWPkqSZxWIq 2dziymcbzR1izGPdOkuh0ou6b35rXJ/vH909jofnbHMG6cdUS0MMgx2Up3wjsndu +Iidno7WjsLHrAW2Zm0ZgeAcXyXKr6MIALSCQzBFI9/DTjcuXc5uowm9cB41pT3s rt7JLw+p3MppEiPDEZRlxNdqLWZTleSq6Z5JZbgepZ8mslN2l6LTtnUVOYZiWape dIxKgJ1kzj1ExO3dNEcjDzTtHACo4uEdUjvJcp3uSqRVZQ8sypa4C13UFRmLWaeV WIShgRjlwOjpCyVOvTmA1Yfn8pWCoiCEPtcCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSmFThgmHkRSzxTVXcJud2as2Z87TAfBgNVHSMEGDAWgBQy1ewVxeVk5HDsexTN R94thirOgzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMDIz L010WHNGY1hsWk9SdzdIc1V6VWZlTFlZcXpvTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTXRYc0ZjWGxaT1J3N0hzVXpVZmVMWVlxem9NLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTAyMy9waFU0WUpoNUVVczhV MVYzQ2JuZG1yTm1mTzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAy1MIMA0GCSqGSIb3DQEBCwUAA4IBAQBLg4/sVpFmjiEQNzFbURjjjdfVShqP OtR3eag6Mg1El/6VLh27JZwszCR4eaiKKVBLroO9qJOPERll+W+nGzfEa+bfXmEd XkBvLofkJPyGkknaBvljPvKQLDZol3CvA3vgSBdT0WcTFvDV++ki7zRXz7wTWmuR bCmADSRFsRdaX71RM2FCdIhBfAad53MpHFh+uXiZGI44PAIUBExuDa1hB3nOLFJz QUfeH/mgvoCqfnRouw+J0gqukCb1+Ugy8qj3SXyu0dUIwiWwxvcOjCqs4LoTyp/V qA0O8tOZT2cTJJZXO0vYUvHbdPZZK16GH0M4f38FDPrIiXJavh/xTKJe -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:42 2024 by rpki-client on console-ams.rpki-client.org