$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/6tzQ7nCeNJ19naIwALqmtn5G0Kg.roa File: 6tzQ7nCeNJ19naIwALqmtn5G0Kg.roa (raw, json) Hash identifier: cJYLiw9PltpvUw8IOXoAyMGHl5zud1sahOEUIk43cvA= Subject key identifier: EA:DC:D0:EE:70:9E:34:9D:7D:9D:A2:30:00:BA:A6:B6:7E:46:D0:A8 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 1D89 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/6tzQ7nCeNJ19naIwALqmtn5G0Kg.roa Signing time: Thu 12 Sep 2024 11:20:02 +0000 ROA not before: Thu 12 Sep 2024 11:20:02 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 212237 IP address blocks: 103.31.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 22:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7561 (0x1d89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Sep 12 11:20:02 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=EADCD0EE709E349D7D9DA23000BAA6B67E46D0A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:bc:b0:c5:f1:82:af:20:05:46:92:be:e0: af:e6:80:fb:c8:82:3d:6f:34:2b:7f:23:bc:4f:d1: 9a:8d:06:6f:1c:78:38:94:df:95:fa:b7:23:9a:83: 2c:b6:c2:57:fe:15:56:48:28:d2:f5:aa:9e:18:79: 74:08:f4:e0:c4:71:f6:e5:b7:b1:bf:7a:d6:28:e2: 66:f9:3f:aa:8e:f6:37:c2:2b:76:4f:90:49:d1:06: 18:3f:fe:20:0b:5b:04:d3:09:fe:8a:97:a2:37:ac: d0:f4:45:d5:42:ee:e4:1e:38:07:a6:82:b9:25:91: 05:48:7a:bf:fa:a6:e3:cd:f1:e6:51:c7:59:8f:ac: 12:7d:f0:ed:71:74:a9:ce:9a:2e:8c:07:43:21:cc: 4d:90:5e:1e:8b:d6:37:ca:1a:92:5c:f4:4a:f3:40: c4:a6:d3:fa:73:9e:bf:5d:a4:b1:f2:54:b5:69:a7: 6a:9b:c6:fa:93:ca:30:ed:d2:dd:9f:5a:60:09:19: 1d:e7:e1:6d:1e:66:1f:2c:90:e3:f5:c0:06:35:95: 7b:13:c6:36:71:0f:e3:b5:cb:9c:46:0f:ea:0b:6d: cc:7b:fb:35:55:a2:1d:b1:f0:62:d2:34:43:be:c8: 37:d1:d5:99:22:10:c9:47:fc:14:c9:04:ee:99:f2: 89:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DC:D0:EE:70:9E:34:9D:7D:9D:A2:30:00:BA:A6:B6:7E:46:D0:A8 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/6tzQ7nCeNJ19naIwALqmtn5G0Kg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.31.236.0/22 Signature Algorithm: sha256WithRSAEncryption 28:74:73:4b:74:d9:05:55:3c:6a:a2:5c:26:51:be:65:f6:1d: e7:55:2a:60:fb:3a:90:17:a9:6f:c2:1e:56:1c:f6:8b:a8:86: e8:c5:e9:9a:d9:dc:ea:08:75:ab:b3:d7:e0:be:55:36:05:2b: 0d:51:c4:d3:7d:e9:75:99:c3:d7:7b:7d:1e:ca:90:a1:8d:c2: 03:a9:3c:ef:f3:1a:4a:ea:01:e8:d8:6e:93:25:4f:2f:8a:3b: 1c:5b:6a:51:91:48:49:fe:58:2e:40:d1:bc:16:12:53:ff:86: 5c:44:b1:b5:a6:9a:d2:8f:af:eb:cd:28:a1:4b:48:89:a0:73: 8d:02:43:b0:9c:05:70:22:90:f9:f0:a5:0b:fa:28:0a:76:52: ff:b4:51:e0:74:ff:1e:f4:b1:73:eb:8c:37:aa:a5:10:83:a0: a7:4f:da:58:80:12:9f:7c:22:51:8a:a2:81:84:39:41:cd:41: d3:61:8c:c3:16:af:d6:59:b8:8b:27:93:7e:96:95:1f:77:2a: 66:b0:32:aa:d7:60:7f:82:a6:a7:c9:f4:18:77:03:ae:27:4e: 47:1b:1c:26:ee:64:d6:e4:df:88:f8:18:f4:2c:5c:8c:fc:c2: 63:62:6d:37:3e:d9:44:bd:34:ae:f6:c7:07:5b:56:61:b7:7e: 4d:9a:80:1e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNDA5MTIx MTIwMDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVBRENEMEVFNzA5RTM0 OUQ3RDlEQTIzMDAwQkFBNkI2N0U0NkQwQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDStLywxfGCryAFRpK+4K/mgPvIgj1vNCt/I7xP0ZqNBm8ceDiU 35X6tyOagyy2wlf+FVZIKNL1qp4YeXQI9ODEcfblt7G/etYo4mb5P6qO9jfCK3ZP kEnRBhg//iALWwTTCf6Kl6I3rND0RdVC7uQeOAemgrklkQVIer/6puPN8eZRx1mP rBJ98O1xdKnOmi6MB0MhzE2QXh6L1jfKGpJc9ErzQMSm0/pznr9dpLHyVLVpp2qb xvqTyjDt0t2fWmAJGR3n4W0eZh8skOP1wAY1lXsTxjZxD+O1y5xGD+oLbcx7+zVV oh2x8GLSNEO+yDfR1ZkiEMlH/BTJBO6Z8omxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU6tzQ7nCeNJ19naIwALqmtn5G0KgwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvNnR6UTduQ2VOSjE5 bmFJd0FMcW10bjVHMEtnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcf7DANBgkqhkiG9w0BAQsFAAOCAQEAKHRzS3TZBVU8aqJcJlG+ZfYd51Uq YPs6kBepb8IeVhz2i6iG6MXpmtnc6gh1q7PX4L5VNgUrDVHE033pdZnD13t9HsqQ oY3CA6k87/MaSuoB6NhukyVPL4o7HFtqUZFISf5YLkDRvBYSU/+GXESxtaaa0o+v 680ooUtIiaBzjQJDsJwFcCKQ+fClC/ooCnZS/7RR4HT/HvSxc+uMN6qlEIOgp0/a WIASn3wiUYqigYQ5Qc1B02GMwxav1lm4iyeTfpaVH3cqZrAyqtdgf4Kmp8n0GHcD ridORxscJu5k1uTfiPgY9CxcjPzCY2JtNz7ZRL00rvbHB1tWYbd+TZqAHg== -----END CERTIFICATE-----Generated at Mon Nov 25 21:48:21 2024 by rpki-client on console-ams.rpki-client.org