$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/bI7qJDaBx__3-IW_pp53GfEC6M0.roa File: bI7qJDaBx__3-IW_pp53GfEC6M0.roa (raw, json) Hash identifier: CSGTZ1FRGgeCLzTYboZeZjjfVJFP3kcNz3zU9OGRJYM= Subject key identifier: 6C:8E:EA:24:36:81:C7:FF:F7:F8:85:BF:A6:9E:77:19:F1:02:E8:CD Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 1D90 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/bI7qJDaBx__3-IW_pp53GfEC6M0.roa Signing time: Thu 12 Sep 2024 11:20:05 +0000 ROA not before: Thu 12 Sep 2024 11:20:05 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 212237 IP address blocks: 103.31.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7568 (0x1d90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Sep 12 11:20:05 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=6C8EEA243681C7FFF7F885BFA69E7719F102E8CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ac:0f:21:60:82:31:af:e3:e8:b3:00:ee:9b: 0d:93:82:22:f8:f0:e5:86:55:9b:fa:5f:d7:65:7a: 8c:d0:be:e6:84:f4:98:2f:58:ea:63:11:58:73:16: cb:75:21:09:bb:c0:fe:b7:8c:93:a4:52:ed:af:a0: a9:5a:74:64:f7:e7:20:00:12:02:ac:4a:0d:7a:dd: 77:ea:09:33:d4:e8:67:38:31:b2:24:35:1e:39:74: db:77:3c:09:34:53:d1:98:24:39:4d:d5:b0:94:a1: 45:4e:36:78:bc:d6:25:26:d6:a4:4a:fe:8d:96:d3: 66:f6:00:21:cd:48:5c:bc:d4:b3:a0:67:50:fc:6a: 8c:ae:16:42:ee:6e:6e:b6:cf:79:69:2f:b9:61:8b: 4f:a3:22:24:26:57:70:e8:cb:41:bd:88:1a:a1:cd: 80:0d:30:3e:f5:a9:01:15:50:53:d4:04:6b:d2:85: cf:3f:99:41:09:ee:63:3f:a1:a0:5e:c2:93:11:93: 48:c9:36:f8:04:98:6e:9b:3d:36:b8:be:dd:32:d6: 41:8a:e5:25:58:a2:7f:50:bc:6f:f9:1b:c8:db:11: 74:8c:f7:c6:ca:ce:9d:55:4b:0b:5b:a7:e1:85:9d: 2a:00:08:c7:84:dd:38:b1:8d:5a:f3:37:c7:20:d9: b1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8E:EA:24:36:81:C7:FF:F7:F8:85:BF:A6:9E:77:19:F1:02:E8:CD X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/bI7qJDaBx__3-IW_pp53GfEC6M0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.31.237.0/24 Signature Algorithm: sha256WithRSAEncryption 91:d6:cb:51:64:64:c2:a1:f7:0b:7f:f5:60:55:42:96:59:b0: fb:cc:e5:ea:04:75:22:57:a6:25:c8:cf:e9:61:b8:52:1d:a1: 2e:d0:4c:a6:be:6e:01:c8:cc:53:27:83:a0:38:ef:10:17:df: 2b:80:57:3c:5b:fc:d0:c8:b9:5d:f3:3f:ef:be:c6:a0:9d:1e: 1f:be:76:5a:ab:f1:4e:69:ef:03:9b:58:dd:02:9b:3b:40:aa: 89:eb:19:59:bc:9c:38:41:84:a3:be:b3:84:29:97:59:11:3f: c2:37:84:49:70:35:47:d1:76:4a:3b:01:35:66:dc:ea:52:9e: c7:73:81:6e:e6:0a:09:d4:3f:29:27:db:d5:9c:39:8d:2a:74: cb:03:a8:0e:03:be:f0:c0:35:18:95:58:96:5a:c2:a1:ae:2a: 30:52:d3:58:16:ed:cb:06:92:d2:96:4b:42:70:88:aa:c7:2b: 13:60:a3:5e:cb:dc:5a:1a:51:04:7b:15:ee:91:75:1f:84:0f: e3:b0:c8:b6:a3:a6:a0:f3:a5:38:b9:b8:91:12:ee:4e:2d:8f: 7b:78:16:8e:32:c8:b7:63:85:0b:7a:24:d5:70:d9:7e:b3:e6: d3:e5:44:ec:73:36:6e:69:0f:ca:8c:02:92:c3:38:0a:48:79: 17:9c:28:ae -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHZAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNDA5MTIx MTIwMDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZDOEVFQTI0MzY4MUM3 RkZGN0Y4ODVCRkE2OUU3NzE5RjEwMkU4Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtrA8hYIIxr+PoswDumw2TgiL48OWGVZv6X9dleozQvuaE9Jgv WOpjEVhzFst1IQm7wP63jJOkUu2voKladGT35yAAEgKsSg163XfqCTPU6Gc4MbIk NR45dNt3PAk0U9GYJDlN1bCUoUVONni81iUm1qRK/o2W02b2ACHNSFy81LOgZ1D8 aoyuFkLubm62z3lpL7lhi0+jIiQmV3Doy0G9iBqhzYANMD71qQEVUFPUBGvShc8/ mUEJ7mM/oaBewpMRk0jJNvgEmG6bPTa4vt0y1kGK5SVYon9QvG/5G8jbEXSM98bK zp1VSwtbp+GFnSoACMeE3TixjVrzN8cg2bG9AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUbI7qJDaBx//3+IW/pp53GfEC6M0wHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvYkk3cUpEYUJ4X18z LUlXX3BwNTNHZkVDNk0wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGcf7TANBgkqhkiG9w0BAQsFAAOCAQEAkdbLUWRkwqH3C3/1YFVCllmw+8zl 6gR1IlemJcjP6WG4Uh2hLtBMpr5uAcjMUyeDoDjvEBffK4BXPFv80Mi5XfM/777G oJ0eH752WqvxTmnvA5tY3QKbO0CqiesZWbycOEGEo76zhCmXWRE/wjeESXA1R9F2 SjsBNWbc6lKex3OBbuYKCdQ/KSfb1Zw5jSp0ywOoDgO+8MA1GJVYllrCoa4qMFLT WBbtywaS0pZLQnCIqscrE2CjXsvcWhpRBHsV7pF1H4QP47DItqOmoPOlOLm4kRLu Ti2Pe3gWjjLIt2OFC3ok1XDZfrPm0+VE7HM2bmkPyowCksM4Ckh5F5worg== -----END CERTIFICATE-----Generated at Fri Nov 22 13:38:12 2024 by rpki-client on console-fra.rpki-client.org