$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/CC_Z3FqMOA6M40PVObkOH4049o0.roa File: CC_Z3FqMOA6M40PVObkOH4049o0.roa (raw, json) Hash identifier: xz54JSqVba2LEnEPB5qdOMvSXmalHq8yhSOwueIw1CI= Subject key identifier: 08:2F:D9:DC:5A:8C:38:0E:8C:E3:43:D5:39:B9:0E:1F:8D:38:F6:8D Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022 Certificate serial: 15FC Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/CC_Z3FqMOA6M40PVObkOH4049o0.roa Signing time: Wed 13 Mar 2024 01:22:01 +0000 ROA not before: Wed 13 Mar 2024 01:22:01 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59033 IP address blocks: 103.204.72.0/22 maxlen: 24 202.160.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5628 (0x15fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022 Validity Not Before: Mar 13 01:22:01 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=082FD9DC5A8C380E8CE343D539B90E1F8D38F68D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:87:d4:f2:35:72:00:01:b9:e7:5f:72:19: 1a:fe:2a:7d:b0:ec:dd:aa:4c:15:10:67:ba:55:a9: 97:93:db:b8:5d:05:27:7f:dd:43:c6:88:c0:6c:7d: 79:bf:56:33:9e:2c:b2:e6:b9:e6:b4:c8:de:77:c7: 67:88:29:52:d3:20:b3:01:30:b9:f7:7e:94:a8:f3: 74:a5:7c:4d:3e:07:e1:7d:d8:f8:a6:3f:3e:f8:f7: ec:c8:28:4a:c4:5d:0d:8b:f7:70:29:eb:fd:53:c8: 66:a1:d6:60:74:10:d2:3b:69:18:77:b9:d4:bc:a5: 6e:9f:2d:cd:cc:69:43:2b:47:28:de:7d:0c:c3:2d: fc:4b:a9:6a:6f:bf:a1:db:88:09:4d:d0:fa:18:f5: 93:10:0c:60:df:63:d6:98:76:8e:dc:3e:ed:bc:fd: a2:58:ac:ad:a1:cb:06:5f:a5:9e:2a:2c:bb:ec:db: d8:07:74:f0:89:b5:f1:90:4d:c0:8f:ab:a2:03:8a: 78:95:35:b5:d5:c7:55:51:d7:8e:de:2f:53:6f:6e: b4:53:a2:36:c3:e6:2e:98:f4:ed:5f:d0:52:7b:23: 29:55:20:7c:8f:11:0d:9c:35:37:5b:65:91:47:ce: d6:a1:4f:e0:62:45:70:55:21:e3:a8:6c:1a:5b:d7: 21:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2F:D9:DC:5A:8C:38:0E:8C:E3:43:D5:39:B9:0E:1F:8D:38:F6:8D X509v3 Authority Key Identifier: keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/CC_Z3FqMOA6M40PVObkOH4049o0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.204.72.0/22 202.160.140.0/22 Signature Algorithm: sha256WithRSAEncryption 66:5b:a3:22:ab:d8:c0:0d:3c:fe:6b:f3:95:47:d2:1d:82:24: 1b:5a:86:23:41:c7:cb:3d:84:67:9d:71:1e:ec:73:41:80:31: 2f:a3:e5:ce:37:7e:93:e0:52:09:8c:7d:5c:84:a4:46:0e:2f: 06:62:ac:9c:90:2f:61:c5:9a:b3:1a:41:d3:ab:01:60:cc:7e: cd:b8:2e:26:9d:44:16:31:a5:89:78:fc:6a:2c:d4:33:f6:2c: 44:81:38:79:09:cc:d9:fb:da:af:03:10:db:81:e6:ba:96:bc: a0:61:f5:98:49:71:45:25:2a:f7:c7:62:25:fc:2a:e6:bb:36: 21:c7:cb:e4:d6:65:83:ed:b8:72:f2:54:79:f7:a8:d9:7c:42: 32:70:ec:16:42:01:44:ee:89:e6:36:1b:c9:b9:02:43:24:0c: 77:96:70:a1:a3:47:e5:31:14:4c:93:38:df:3a:3e:c9:ba:16: e3:d8:f7:b4:3d:b2:d8:1e:83:2e:3b:8d:4e:57:3b:76:ad:91: 45:d6:95:fe:2d:e4:ab:68:8b:e1:70:11:a3:55:70:e2:da:70: 69:b1:b5:0f:ec:a3:af:a1:12:f4:22:6e:e8:4f:ce:fb:9a:72: f8:32:d4:9e:87:9b:1c:93:82:8a:1e:97:bb:bf:92:e4:d9:ff: b1:3d:2f:6e -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICFfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF MTRGMkFDN0YwMjM4MTM3MDUyRUFBMzE1QzVCRDY0MzEzNDAyMjAeFw0yNDAzMTMw MTIyMDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDA4MkZEOURDNUE4QzM4 MEU4Q0UzNDNENTM5QjkwRTFGOEQzOEY2OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZvYfU8jVyAAG5519yGRr+Kn2w7N2qTBUQZ7pVqZeT27hdBSd/ 3UPGiMBsfXm/VjOeLLLmuea0yN53x2eIKVLTILMBMLn3fpSo83SlfE0+B+F92Pim Pz749+zIKErEXQ2L93Ap6/1TyGah1mB0ENI7aRh3udS8pW6fLc3MaUMrRyjefQzD LfxLqWpvv6HbiAlN0PoY9ZMQDGDfY9aYdo7cPu28/aJYrK2hywZfpZ4qLLvs29gH dPCJtfGQTcCPq6IDiniVNbXVx1VR147eL1NvbrRTojbD5i6Y9O1f0FJ7IylVIHyP EQ2cNTdbZZFHztahT+BiRXBVIeOobBpb1yF7AgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUCC/Z3FqMOA6M40PVObkOH4049o0wHwYDVR0jBBgwFoAULeFPKsfwI4E3BS6q MVxb1kMTQCIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9MZUZQS3Nmd0k0RTNCUzZxTVZ4YjFrTVRRQ0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xlRlBLc2Z3STRFM0JTNnFNVnhiMWtNVFFDSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvQ0NfWjNGcU1PQTZN NDBQVk9ia09INDA0OW8wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEw DAMEAmfMSAMEAsqgjDANBgkqhkiG9w0BAQsFAAOCAQEAZlujIqvYwA08/mvzlUfS HYIkG1qGI0HHyz2EZ51xHuxzQYAxL6Plzjd+k+BSCYx9XISkRg4vBmKsnJAvYcWa sxpB06sBYMx+zbguJp1EFjGliXj8aizUM/YsRIE4eQnM2fvarwMQ24Hmupa8oGH1 mElxRSUq98diJfwq5rs2IcfL5NZlg+24cvJUefeo2XxCMnDsFkIBRO6J5jYbybkC QyQMd5ZwoaNH5TEUTJM43zo+yboW49j3tD2y2B6DLjuNTlc7dq2RRdaV/i3kq2iL 4XARo1Vw4tpwabG1D+yjr6ES9CJu6E/O+5py+DLUnoebHJOCih6Xu7+S5Nn/sT0v bg== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:42 2024 by rpki-client on console-ams.rpki-client.org