$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/AwFgeqEkjXom2-0T327HGFL3gi4.roa File: AwFgeqEkjXom2-0T327HGFL3gi4.roa (raw, json) Hash identifier: 0oqryPTJmmVhxUPDI8LVI7lYGQf4UgyKUyfm6yQQrMI= Subject key identifier: 03:01:60:7A:A1:24:8D:7A:26:DB:ED:13:DF:6E:C7:18:52:F7:82:2E Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 1D98 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/AwFgeqEkjXom2-0T327HGFL3gi4.roa Signing time: Thu 12 Sep 2024 11:20:08 +0000 ROA not before: Thu 12 Sep 2024 11:20:08 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139648 IP address blocks: 103.244.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 22:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7576 (0x1d98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Sep 12 11:20:08 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=0301607AA1248D7A26DBED13DF6EC71852F7822E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:99:e7:6e:56:69:a1:10:a3:93:43:86:19:b4: a3:66:a7:54:ea:8f:c5:7a:92:32:84:96:23:11:9f: 27:7a:e8:80:6a:30:ff:3b:67:6b:d0:8e:24:46:9a: 03:98:e0:d8:66:15:2c:ca:e2:cd:3f:f6:ca:5e:f2: b9:37:44:dc:1a:53:cc:bf:d9:2e:f2:61:18:5e:6f: 27:50:88:65:2e:03:47:70:17:2f:b8:75:77:7b:e0: 96:78:c6:41:0f:73:51:65:30:5e:69:25:18:5e:f0: cb:9c:7f:37:fa:9d:bc:ef:2f:77:16:67:20:a0:bc: c6:90:aa:54:33:7c:45:dc:d6:1b:43:bf:13:8c:c7: 01:62:ed:64:bd:a3:44:92:4d:e9:55:a2:15:48:13: b1:5b:06:de:4f:d2:26:48:e3:33:c2:b3:8f:be:df: 6d:1e:14:2a:c9:fc:e6:86:97:88:28:22:d1:df:1d: 34:62:6a:c0:2e:fb:cb:0a:2b:f5:d0:98:28:94:2f: c5:c4:45:af:9b:5e:e3:f6:53:fb:24:f9:9f:44:c1: a0:99:29:6a:e0:6f:1a:7a:90:9a:ac:64:33:f0:3c: d3:97:80:19:ea:6e:a1:f2:3e:ce:83:14:a1:e7:66: c5:58:e5:3c:78:5a:e4:5a:ec:bb:c1:2d:f5:e4:7e: dc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:01:60:7A:A1:24:8D:7A:26:DB:ED:13:DF:6E:C7:18:52:F7:82:2E X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/AwFgeqEkjXom2-0T327HGFL3gi4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.244.118.0/24 Signature Algorithm: sha256WithRSAEncryption 29:93:35:8a:14:c6:45:e4:ae:61:da:56:f7:03:c1:d8:30:89: 14:92:ef:da:65:46:74:d6:5b:a3:01:03:6a:95:ae:9d:e2:ad: 5f:8a:77:bd:d3:a3:35:cf:11:d3:da:19:3b:b3:dd:78:2a:2a: ad:c7:da:12:91:43:5f:76:d0:04:cb:44:9c:a8:53:8f:a7:bd: 15:d7:e4:0b:5b:a5:52:9c:ac:4b:18:eb:da:48:f9:89:ab:70: c0:c2:86:26:40:a5:55:8d:53:44:21:64:f0:94:fb:b6:f7:78: 65:47:e5:95:86:5e:6d:34:4d:f4:4f:5c:e7:57:9e:dc:45:78: ca:10:89:01:d2:12:68:4e:a6:9a:a1:f6:c1:c2:a3:23:cc:5e: ea:bf:3c:d5:5f:7c:2b:eb:0e:aa:12:7d:af:b1:44:c4:80:1c: 8a:b5:d2:c8:ef:19:fe:6d:8f:b0:80:56:a8:f5:ce:c4:b5:25: f9:19:ae:93:ce:67:b5:e4:39:37:37:c1:49:ea:b3:ba:a9:a0: b7:1a:de:79:78:99:05:d5:0d:6b:fc:85:9b:ff:42:72:98:14: c7:08:6c:7a:69:ca:ae:9e:0a:67:ad:c7:33:e4:f6:95:f0:f5: 0a:01:b7:66:35:05:fe:d1:2f:ee:17:4f:5c:61:9c:da:43:95: c5:80:0b:05 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHZgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNDA5MTIx MTIwMDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDAzMDE2MDdBQTEyNDhE N0EyNkRCRUQxM0RGNkVDNzE4NTJGNzgyMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCmeduVmmhEKOTQ4YZtKNmp1Tqj8V6kjKEliMRnyd66IBqMP87 Z2vQjiRGmgOY4NhmFSzK4s0/9spe8rk3RNwaU8y/2S7yYRhebydQiGUuA0dwFy+4 dXd74JZ4xkEPc1FlMF5pJRhe8Mucfzf6nbzvL3cWZyCgvMaQqlQzfEXc1htDvxOM xwFi7WS9o0SSTelVohVIE7FbBt5P0iZI4zPCs4++320eFCrJ/OaGl4goItHfHTRi asAu+8sKK/XQmCiUL8XERa+bXuP2U/sk+Z9EwaCZKWrgbxp6kJqsZDPwPNOXgBnq bqHyPs6DFKHnZsVY5Tx4WuRa7LvBLfXkftyfAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUAwFgeqEkjXom2+0T327HGFL3gi4wHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvQXdGZ2VxRWtqWG9t Mi0wVDMyN0hHRkwzZ2k0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGf0djANBgkqhkiG9w0BAQsFAAOCAQEAKZM1ihTGReSuYdpW9wPB2DCJFJLv 2mVGdNZbowEDapWuneKtX4p3vdOjNc8R09oZO7PdeCoqrcfaEpFDX3bQBMtEnKhT j6e9FdfkC1ulUpysSxjr2kj5iatwwMKGJkClVY1TRCFk8JT7tvd4ZUfllYZebTRN 9E9c51ee3EV4yhCJAdISaE6mmqH2wcKjI8xe6r881V98K+sOqhJ9r7FExIAcirXS yO8Z/m2PsIBWqPXOxLUl+Rmuk85nteQ5NzfBSeqzuqmgtxreeXiZBdUNa/yFm/9C cpgUxwhsemnKrp4KZ63HM+T2lfD1CgG3ZjUF/tEv7hdPXGGc2kOVxYALBQ== -----END CERTIFICATE-----Generated at Mon Nov 25 21:48:21 2024 by rpki-client on console-ams.rpki-client.org