$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/aASXeOzVTrhPUbwsoJokrZwrC18.roa File: aASXeOzVTrhPUbwsoJokrZwrC18.roa (raw, json) Hash identifier: kMg64xQE+MBX4TxtPWzQ5GbjhnHesWhs/8WCwl94HJM= Subject key identifier: 68:04:97:78:EC:D5:4E:B8:4F:51:BC:2C:A0:9A:24:AD:9C:2B:0B:5F Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 1D8E Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/aASXeOzVTrhPUbwsoJokrZwrC18.roa Signing time: Thu 12 Sep 2024 11:20:04 +0000 ROA not before: Thu 12 Sep 2024 11:20:04 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139648 IP address blocks: 103.244.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7566 (0x1d8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Sep 12 11:20:04 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=68049778ECD54EB84F51BC2CA09A24AD9C2B0B5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d3:2c:c5:c2:ef:e3:b9:df:54:f0:fc:0c:1d: 78:41:22:05:8a:95:4c:15:ba:99:f3:53:4c:d5:70: bb:ad:02:19:cf:80:d6:e1:92:6b:db:a9:83:91:0e: 54:13:bf:68:95:b0:31:16:55:78:e5:b9:e9:e9:ac: dc:85:0c:d2:86:ba:50:1c:10:ea:ef:1f:0e:ef:9b: 37:c7:6a:d3:0a:51:a2:dd:da:84:c2:fa:b3:dc:db: ec:d3:5c:9e:d3:11:ae:39:c2:ce:69:1f:1b:db:bf: 75:d1:44:17:83:ca:11:46:44:72:25:c2:38:1d:4c: 3e:73:e1:b8:9d:a0:f8:7b:3d:69:bb:94:e4:e9:b9: 4e:c5:a8:b9:4d:16:a4:65:df:bd:28:34:19:bc:dd: 07:5d:b4:8b:49:11:98:ec:ef:61:de:77:96:72:7e: 86:42:5e:e8:38:4d:86:e1:8f:ec:16:e1:9f:67:62: 4b:80:81:a4:49:7f:09:c8:04:9d:a2:b9:9c:aa:a3: e9:f1:72:69:ff:71:67:64:93:1c:ef:42:ef:4c:6e: 60:22:4c:2e:10:b5:e7:ca:c5:c3:6c:37:3f:b2:39: 02:f5:b7:5b:07:26:cc:f4:52:ca:c6:be:53:04:55: a5:a1:86:58:19:8d:f0:41:a4:23:9d:b0:2f:b5:2f: 15:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:04:97:78:EC:D5:4E:B8:4F:51:BC:2C:A0:9A:24:AD:9C:2B:0B:5F X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/aASXeOzVTrhPUbwsoJokrZwrC18.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.244.116.0/22 Signature Algorithm: sha256WithRSAEncryption b2:b1:3a:f4:f2:a1:e5:7f:f1:ba:35:0a:f8:3b:85:f1:e5:a2: ed:2c:58:87:c2:21:86:b1:22:b1:67:fd:b1:18:5b:e4:e1:0a: b7:90:c9:8a:1e:1a:bd:3d:5b:a6:09:0a:91:9d:26:5f:6a:a1: 49:f0:53:81:01:a8:b9:ba:94:af:92:63:e0:a5:ca:ec:8a:ba: 91:13:61:7c:1a:cd:35:14:bd:f1:4c:aa:2b:57:7e:1b:b5:51: 5f:9b:b8:a2:9c:e9:cb:e0:55:4b:18:0a:0f:d9:0d:03:42:2a: 1b:37:dd:b8:6f:3e:a6:ca:d1:54:fb:99:f3:e4:63:a2:ee:23: 74:17:32:7f:06:d4:81:7d:e0:c9:e2:ca:1b:51:da:f6:fe:7b: d0:03:8d:69:bd:fb:99:2d:e8:40:32:eb:c6:86:84:1e:ac:85: 6e:45:74:d9:b4:3e:ff:5e:0d:ca:c4:36:2e:ab:95:b6:c4:64: 56:3e:ad:78:78:06:6a:f5:97:99:aa:40:21:ff:b1:6c:7e:e8: 15:b7:d0:cd:6a:d8:04:30:80:22:4e:a8:fd:eb:eb:c4:55:c5: 5b:cf:8e:95:62:de:2d:2a:dd:1f:6d:ba:37:ab:13:5b:98:a1: 4a:a7:80:55:ff:60:13:bd:7d:c7:65:03:5a:2e:03:cb:d2:e0: ca:c3:79:42 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNDA5MTIx MTIwMDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY4MDQ5Nzc4RUNENTRF Qjg0RjUxQkMyQ0EwOUEyNEFEOUMyQjBCNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDh0yzFwu/jud9U8PwMHXhBIgWKlUwVupnzU0zVcLutAhnPgNbh kmvbqYORDlQTv2iVsDEWVXjluenprNyFDNKGulAcEOrvHw7vmzfHatMKUaLd2oTC +rPc2+zTXJ7TEa45ws5pHxvbv3XRRBeDyhFGRHIlwjgdTD5z4bidoPh7PWm7lOTp uU7FqLlNFqRl370oNBm83QddtItJEZjs72Hed5ZyfoZCXug4TYbhj+wW4Z9nYkuA gaRJfwnIBJ2iuZyqo+nxcmn/cWdkkxzvQu9MbmAiTC4QtefKxcNsNz+yOQL1t1sH Jsz0UsrGvlMEVaWhhlgZjfBBpCOdsC+1LxXbAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUaASXeOzVTrhPUbwsoJokrZwrC18wHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvYUFTWGVPelZUcmhQ VWJ3c29Kb2tyWndyQzE4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmf0dDANBgkqhkiG9w0BAQsFAAOCAQEAsrE69PKh5X/xujUK+DuF8eWi7SxY h8IhhrEisWf9sRhb5OEKt5DJih4avT1bpgkKkZ0mX2qhSfBTgQGoubqUr5Jj4KXK 7Iq6kRNhfBrNNRS98UyqK1d+G7VRX5u4opzpy+BVSxgKD9kNA0IqGzfduG8+psrR VPuZ8+Rjou4jdBcyfwbUgX3gyeLKG1Ha9v570AONab37mS3oQDLrxoaEHqyFbkV0 2bQ+/14NysQ2LquVtsRkVj6teHgGavWXmapAIf+xbH7oFbfQzWrYBDCAIk6o/evr xFXFW8+OlWLeLSrdH226N6sTW5ihSqeAVf9gE719x2UDWi4Dy9LgysN5Qg== -----END CERTIFICATE-----Generated at Fri Nov 22 14:30:51 2024 by rpki-client on console-ams.rpki-client.org