$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/ruDAApQtnQqODzqBzOT-ZJ8jsmw.roa File: ruDAApQtnQqODzqBzOT-ZJ8jsmw.roa (raw, json) Hash identifier: UIGLFuI1po41QeUYI/n5Pww9tob3MLP9TUzdaUkD7O0= Subject key identifier: AE:E0:C0:02:94:2D:9D:0A:8E:0F:3A:81:CC:E4:FE:64:9F:23:B2:6C Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Certificate serial: 1BB5 Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/ruDAApQtnQqODzqBzOT-ZJ8jsmw.roa Signing time: Wed 13 Mar 2024 01:23:25 +0000 ROA not before: Wed 13 Mar 2024 01:23:25 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59067 IP address blocks: 103.36.96.0/22 maxlen: 22 103.202.116.0/22 maxlen: 22 103.255.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7093 (0x1bb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Validity Not Before: Mar 13 01:23:25 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=AEE0C002942D9D0A8E0F3A81CCE4FE649F23B26C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:72:59:bd:a1:e8:4f:e8:5a:cf:b3:ce:66: b0:9d:5e:fb:5b:bc:ad:d6:1f:f0:2e:ec:d4:c5:7a: dc:3f:df:5e:51:31:d3:9c:64:90:a8:40:f7:d4:47: da:a5:2c:c6:5e:d1:a1:1f:74:c0:18:5b:f8:e7:34: d7:d7:e5:39:ed:e0:df:bd:aa:05:21:e6:f0:f9:d2: fb:ff:78:68:a7:83:c3:be:8a:1c:88:7e:58:19:99: 8a:de:99:1d:81:51:24:cc:78:fd:4b:2b:23:0b:9d: 7e:2a:a6:6a:9f:8a:53:bb:5d:48:c4:1b:62:05:36: ac:86:8c:9b:06:42:27:7e:1e:65:d2:f2:15:f4:ee: 0e:72:c4:b7:99:1a:74:6c:2b:74:98:8c:14:34:c8: dc:24:6b:d7:f8:b8:c0:a8:1f:98:de:75:96:ce:98: f8:07:25:fa:b8:7f:f8:00:65:fb:fe:54:3f:c7:0a: eb:59:be:68:0c:82:22:d9:63:7d:f8:ac:04:cb:a8: d3:47:71:1b:c3:f0:89:4c:f3:e2:14:5e:57:c5:f1: f5:9c:c1:0f:45:dd:40:5a:d2:c3:6a:bb:a6:67:73: 4e:5f:ad:65:91:7b:8e:e9:6c:09:86:51:4a:4d:43: 5e:09:ad:d8:1f:b6:e6:ce:44:1e:55:69:06:5b:73: 4f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E0:C0:02:94:2D:9D:0A:8E:0F:3A:81:CC:E4:FE:64:9F:23:B2:6C X509v3 Authority Key Identifier: keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/ruDAApQtnQqODzqBzOT-ZJ8jsmw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.36.96.0/22 103.202.116.0/22 103.255.140.0/22 Signature Algorithm: sha256WithRSAEncryption 84:2b:c2:7a:c8:04:7d:5f:cd:ea:f1:92:c2:a6:be:17:d6:91: 29:39:4a:1c:d2:e5:81:98:9a:79:a0:72:7f:d7:ff:f4:0b:c2: 69:d7:b5:eb:49:75:09:13:76:33:e9:6d:96:b4:ee:ef:54:ae: 7d:c4:f0:8c:60:20:0c:2f:35:91:26:7b:5d:55:45:db:0c:3a: 8b:ed:42:e8:0a:d4:84:70:bc:ba:ef:7f:ed:fe:09:65:10:35: a6:1a:cb:5f:f7:32:57:87:2c:47:a4:9a:1b:b0:f8:94:45:22: 50:90:e1:aa:e7:1a:b1:0e:c7:70:ed:44:2c:62:e7:01:4e:55: 4c:76:fb:aa:68:ea:71:5a:0b:b0:1f:80:cb:eb:fc:2f:aa:08: 01:f7:d8:71:1d:36:9c:47:81:38:42:28:5d:06:5b:e6:98:b9: 61:b3:7b:18:53:b6:8f:43:9a:8b:74:32:5e:7d:c8:32:1b:b4: 14:d0:8d:49:49:03:a5:6d:ef:4a:d8:cb:bf:50:56:ca:c0:d3: c1:b2:5f:81:1d:cd:b8:fb:a9:ee:cf:79:85:86:f7:a5:2a:4f: 1a:5f:df:ee:8a:8f:ab:8c:54:3f:77:de:c9:57:49:cf:48:26: a3:9f:fa:17:03:9f:98:50:7d:5d:91:af:7c:f1:f5:2b:e7:4c: 28:32:26:1b -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgICG7UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENB NEYxODNDNjU5RUQ1N0ZCNDZENTlBRDU0ODNENkZFOUIzNEY0RTAeFw0yNDAzMTMw MTIzMjVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEFFRTBDMDAyOTQyRDlE MEE4RTBGM0E4MUNDRTRGRTY0OUYyM0IyNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6knJZvaHoT+haz7POZrCdXvtbvK3WH/Au7NTFetw/315RMdOc ZJCoQPfUR9qlLMZe0aEfdMAYW/jnNNfX5Tnt4N+9qgUh5vD50vv/eGing8O+ihyI flgZmYremR2BUSTMeP1LKyMLnX4qpmqfilO7XUjEG2IFNqyGjJsGQid+HmXS8hX0 7g5yxLeZGnRsK3SYjBQ0yNwka9f4uMCoH5jedZbOmPgHJfq4f/gAZfv+VD/HCutZ vmgMgiLZY334rATLqNNHcRvD8IlM8+IUXlfF8fWcwQ9F3UBa0sNqu6Znc05frWWR e47pbAmGUUpNQ14JrdgftubORB5VaQZbc0+1AgMBAAGjggH/MIIB+zAdBgNVHQ4E FgQUruDAApQtnQqODzqBzOT+ZJ8jsmwwHwYDVR0jBBgwFoAUDKTxg8ZZ7Vf7RtWa 1Ug9b+mzT04wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz NC9ES1R4ZzhaWjdWZjdSdFdhMVVnOWItbXpUMDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RLVHhnOFpaN1ZmN1J0V2ExVWc5Yi1telQwNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQvcnVEQUFwUXRuUXFP RHpxQnpPVC1aSjhqc213LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEw EgMEAmckYAMEAmfKdAMEAmf/jDANBgkqhkiG9w0BAQsFAAOCAQEAhCvCesgEfV/N 6vGSwqa+F9aRKTlKHNLlgZiaeaByf9f/9AvCade160l1CRN2M+ltlrTu71SufcTw jGAgDC81kSZ7XVVF2ww6i+1C6ArUhHC8uu9/7f4JZRA1phrLX/cyV4csR6SaG7D4 lEUiUJDhqucasQ7HcO1ELGLnAU5VTHb7qmjqcVoLsB+Ay+v8L6oIAffYcR02nEeB OEIoXQZb5pi5YbN7GFO2j0Oai3QyXn3IMhu0FNCNSUkDpW3vStjLv1BWysDTwbJf gR3NuPup7s95hYb3pSpPGl/f7oqPq4xUP3feyVdJz0gmo5/6FwOfmFB9XZGvfPH1 K+dMKDImGw== -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:09 2024 by rpki-client on console-fra.rpki-client.org