$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1584/Jmefjwi9I3kxPqKCVhe0VQos-RA.roa File: Jmefjwi9I3kxPqKCVhe0VQos-RA.roa (raw, json) Hash identifier: TtxsxPDOL+17PW69cdfEmxnkR1SMUDrwE/BGCCxb440= Subject key identifier: 26:67:9F:8F:08:BD:23:79:31:3E:A2:82:56:17:B4:55:0A:2C:F9:10 Certificate issuer: /CN=F76C9E43361DEA446077AD7029057380AFFF3266 Certificate serial: 19D4 Authority key identifier: F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/Jmefjwi9I3kxPqKCVhe0VQos-RA.roa Signing time: Wed 13 Mar 2024 01:23:44 +0000 ROA not before: Wed 13 Mar 2024 01:23:44 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24424 IP address blocks: 103.203.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6612 (0x19d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F76C9E43361DEA446077AD7029057380AFFF3266 Validity Not Before: Mar 13 01:23:44 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=26679F8F08BD2379313EA2825617B4550A2CF910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:4e:5e:25:79:19:87:84:ce:ad:fa:a7:9d: 9a:ea:61:a8:e2:f8:0f:3b:6f:49:e1:7d:83:a4:7f: be:be:50:1b:56:ae:3d:52:12:25:bd:bf:a5:db:85: 01:ca:4e:cf:84:b3:78:ef:3e:b5:25:c8:47:df:f0: 3c:d4:b7:da:7e:78:6b:06:55:71:b5:05:bc:00:9f: 0f:4b:12:c8:e1:d8:39:4c:27:54:f7:4d:34:12:04: 98:ff:fe:03:11:db:7e:c0:ae:ac:38:d4:0c:ed:56: bf:ed:34:04:05:bc:ed:84:a5:b9:e6:87:d6:e4:73: 20:b0:18:0e:f8:e0:79:32:60:9c:da:61:9c:91:ba: 16:1b:a0:19:16:d8:c7:5b:5e:d5:c4:db:7c:46:d3: 91:40:06:56:4b:3d:bf:9c:fd:1a:4a:59:84:cc:51: b0:4e:15:86:84:e2:4a:1f:5d:a7:4f:c4:81:35:77: 6c:fb:2f:f6:9a:23:78:c3:fc:32:db:bf:85:c4:50: 85:0d:25:cb:f7:5c:0c:9b:fd:b6:17:0f:6d:e9:fc: ed:11:97:74:2a:09:2b:40:ff:0d:9f:6f:3b:9b:22: 03:db:a8:a8:26:e1:e1:45:20:d0:19:ef:51:99:01: 43:a6:cf:08:95:97:dd:7d:6f:0d:4c:da:18:8e:df: 03:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:67:9F:8F:08:BD:23:79:31:3E:A2:82:56:17:B4:55:0A:2C:F9:10 X509v3 Authority Key Identifier: keyid:F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/Jmefjwi9I3kxPqKCVhe0VQos-RA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.203.212.0/22 Signature Algorithm: sha256WithRSAEncryption 30:b8:58:c4:ce:ad:10:b3:e0:43:cf:ee:aa:ff:24:5d:10:bf: 38:71:21:fd:4c:87:57:c4:fd:72:05:09:d9:57:2a:fa:43:f4: 00:84:9d:df:5d:a8:f0:74:ec:26:a2:15:21:d7:b2:f7:8b:f0: 31:0a:75:db:95:94:3c:14:4c:95:02:98:0f:e8:23:06:8a:33: 18:e2:d9:b3:1e:7a:98:48:e2:97:90:e2:2d:0b:c1:5a:9a:7e: b6:0f:b4:b7:c4:1b:25:06:02:46:3a:8f:de:32:5b:e0:a3:fe: a1:a2:b8:8e:b1:12:15:16:5c:f6:a1:e9:08:82:8a:5c:27:d4: f4:88:22:f4:78:9e:7f:1c:3a:ea:94:ce:f8:9d:5e:a3:89:61: 01:af:6f:67:b0:5d:06:5e:82:2e:97:3f:cc:7b:bd:13:ba:b1: 3d:61:9a:ee:d7:6a:44:bd:3a:f1:23:64:c4:85:f4:6c:ef:e8: 99:d4:9e:3f:85:f4:74:f3:ab:ba:ea:dd:0e:c2:40:c0:d5:47: bd:f4:bd:08:ec:cf:f0:2d:7f:a7:80:06:ca:80:cb:a2:72:c7: 1d:d4:5a:50:a5:78:b7:36:4d:ab:95:e8:dc:a1:86:01:b8:38: ec:ff:27:67:21:31:89:11:90:d1:16:b3:53:d6:e7:28:ad:d1: 1c:6c:f4:ad -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjc2 QzlFNDMzNjFERUE0NDYwNzdBRDcwMjkwNTczODBBRkZGMzI2NjAeFw0yNDAzMTMw MTIzNDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDI2Njc5RjhGMDhCRDIz NzkzMTNFQTI4MjU2MTdCNDU1MEEyQ0Y5MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMsk5eJXkZh4TOrfqnnZrqYaji+A87b0nhfYOkf76+UBtWrj1S EiW9v6XbhQHKTs+Es3jvPrUlyEff8DzUt9p+eGsGVXG1BbwAnw9LEsjh2DlMJ1T3 TTQSBJj//gMR237Arqw41AztVr/tNAQFvO2Epbnmh9bkcyCwGA744HkyYJzaYZyR uhYboBkW2MdbXtXE23xG05FABlZLPb+c/RpKWYTMUbBOFYaE4kofXadPxIE1d2z7 L/aaI3jD/DLbv4XEUIUNJcv3XAyb/bYXD23p/O0Rl3QqCStA/w2fbzubIgPbqKgm 4eFFINAZ71GZAUOmzwiVl919bw1M2hiO3wO7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUJmefjwi9I3kxPqKCVhe0VQos+RAwHwYDVR0jBBgwFoAU92yeQzYd6kRgd61w KQVzgK//MmYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 NC85MnllUXpZZDZrUmdkNjF3S1FWemdLX19NbVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzkyeWVRellkNmtSZ2Q2MXdLUVZ6Z0tfX01tWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODQvSm1lZmp3aTlJM2t4 UHFLQ1ZoZTBWUW9zLVJBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfL1DANBgkqhkiG9w0BAQsFAAOCAQEAMLhYxM6tELPgQ8/uqv8kXRC/OHEh /UyHV8T9cgUJ2Vcq+kP0AISd312o8HTsJqIVIdey94vwMQp125WUPBRMlQKYD+gj BoozGOLZsx56mEjil5DiLQvBWpp+tg+0t8QbJQYCRjqP3jJb4KP+oaK4jrESFRZc 9qHpCIKKXCfU9Igi9Hiefxw66pTO+J1eo4lhAa9vZ7BdBl6CLpc/zHu9E7qxPWGa 7tdqRL068SNkxIX0bO/omdSeP4X0dPOruurdDsJAwNVHvfS9COzP8C1/p4AGyoDL onLHHdRaUKV4tzZNq5Xo3KGGAbg47P8nZyExiRGQ0RazU9bnKK3RHGz0rQ== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:42 2024 by rpki-client on console-ams.rpki-client.org