$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/R0QSB2fcvpg0hARAM1__wl8aMyY.roa File: R0QSB2fcvpg0hARAM1__wl8aMyY.roa (raw, json) Hash identifier: 0K2cMAEgd2qvs7zy4tOkAWD77x3td1R43Zy3b1tB0Lo= Subject key identifier: 47:44:12:07:67:DC:BE:98:34:84:04:40:33:5F:FF:C2:5F:1A:33:26 Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Certificate serial: 15D1 Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/R0QSB2fcvpg0hARAM1__wl8aMyY.roa Signing time: Wed 13 Mar 2024 01:22:16 +0000 ROA not before: Wed 13 Mar 2024 01:22:16 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 63677 IP address blocks: 27.0.204.0/22 maxlen: 24 27.0.208.0/22 maxlen: 24 27.0.212.0/22 maxlen: 24 103.208.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5585 (0x15d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Validity Not Before: Mar 13 01:22:16 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=4744120767DCBE9834840440335FFFC25F1A3326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:85:25:2b:0e:20:7d:4f:a8:28:18:6e:bf: f5:0e:2f:4b:dd:dc:23:d8:ca:40:cf:09:b3:ac:41: 1b:33:a7:ae:99:5a:a5:06:3f:37:e7:05:51:43:27: e1:34:34:de:a6:de:a4:c6:c7:9a:82:16:51:0d:50: b6:6f:4e:80:0b:df:12:90:85:d5:c9:71:b4:5a:2a: 88:33:db:45:92:05:ee:98:82:85:76:cd:44:9a:88: 85:f4:23:96:47:6d:85:09:e4:cb:66:55:8c:d8:fe: d9:24:56:eb:ee:06:6c:2b:17:54:da:1d:9f:ec:e0: 3a:ea:5c:c7:34:15:37:b7:99:2c:87:3c:68:08:09: 23:84:73:f2:01:b3:43:7c:ad:e0:2e:87:f5:de:a9: 31:d1:50:20:e5:b5:eb:30:4e:cf:24:ae:77:a1:cc: 02:bc:c3:a6:8f:38:ea:61:fe:e1:45:d6:fd:67:d9: d2:8d:14:6d:2c:45:85:f3:71:17:9b:69:02:a8:c2: 8a:86:ef:c1:15:5f:67:6a:16:ad:05:0e:22:a8:4b: a7:41:b5:16:e6:7c:f8:9a:af:8e:35:b0:90:c5:45: a0:a7:cd:42:ca:cd:4a:0c:1a:0e:ce:8c:cd:aa:9e: cb:d2:1f:0b:ce:49:04:4c:a4:cb:88:86:06:23:c5: 22:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:44:12:07:67:DC:BE:98:34:84:04:40:33:5F:FF:C2:5F:1A:33:26 X509v3 Authority Key Identifier: keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/R0QSB2fcvpg0hARAM1__wl8aMyY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.0.204.0-27.0.215.255 103.208.48.0/22 Signature Algorithm: sha256WithRSAEncryption 30:c1:2c:53:e6:35:ad:27:eb:95:79:1f:31:af:7e:4b:d0:dd: f8:66:16:2e:cc:8a:e0:17:74:e1:95:17:1f:84:24:f5:cf:94: d8:18:92:d0:67:74:39:ce:db:9f:4b:4d:be:47:51:b9:46:04: 1a:5f:31:00:72:ea:7f:de:e9:e0:d0:37:16:8c:65:02:5c:04: 7a:17:24:1e:7b:33:59:12:cc:d9:ca:a5:d5:6e:bb:36:5b:3d: db:e8:61:d2:46:7f:b1:04:96:41:68:52:34:0c:29:27:69:ec: 56:9b:8e:ca:a2:92:9d:2f:05:9d:81:e5:86:9a:a6:34:f3:c7: 87:84:8d:d2:a2:f1:bf:bf:0a:7e:14:7d:2c:fa:44:a1:6e:9e: 0a:95:8c:a5:81:58:2a:e6:1e:65:99:a1:ea:50:6a:37:55:1b: 75:9f:39:e8:03:8c:87:19:12:47:4b:c5:7d:77:26:8d:da:f0: 4e:ba:e6:52:bb:88:dd:f4:ee:a9:c2:63:de:7a:bd:bd:f2:38: 2c:42:bb:f0:f0:b6:33:6a:94:0d:8b:ac:9d:02:2b:0c:a8:16: 9f:37:7a:d3:b6:96:ad:28:80:1b:af:f6:74:6c:ec:bd:29:f6: d6:8d:85:3a:93:2d:ae:40:f3:3d:8b:3d:a3:75:78:4e:c7:7f: e7:a1:c0:ad -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgICFdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMx RkI1NTNGRjIzMzEyQ0Q5QzI1REUxREE3MjA0OEYwNjQ4M0M1QTAeFw0yNDAzMTMw MTIyMTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ3NDQxMjA3NjdEQ0JF OTgzNDg0MDQ0MDMzNUZGRkMyNUYxQTMzMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPDYUlKw4gfU+oKBhuv/UOL0vd3CPYykDPCbOsQRszp66ZWqUG PzfnBVFDJ+E0NN6m3qTGx5qCFlENULZvToAL3xKQhdXJcbRaKogz20WSBe6YgoV2 zUSaiIX0I5ZHbYUJ5MtmVYzY/tkkVuvuBmwrF1TaHZ/s4DrqXMc0FTe3mSyHPGgI CSOEc/IBs0N8reAuh/XeqTHRUCDlteswTs8krnehzAK8w6aPOOph/uFF1v1n2dKN FG0sRYXzcRebaQKowoqG78EVX2dqFq0FDiKoS6dBtRbmfPiar441sJDFRaCnzULK zUoMGg7OjM2qnsvSHwvOSQRMpMuIhgYjxSI5AgMBAAGjggIBMIIB/TAdBgNVHQ4E FgQUR0QSB2fcvpg0hARAM1//wl8aMyYwHwYDVR0jBBgwFoAUTB+1U/8jMSzZwl3h 2nIEjwZIPFowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTYz MC9UQi0xVV84ak1Telp3bDNoMm5JRWp3WklQRm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RCLTFVXzhqTVN6WndsM2gybklFandaSVBGby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2MzAvUjBRU0IyZmN2cGcw aEFSQU0xX193bDhhTXlZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEw FDAMAwQCGwDMAwQDGwDQAwQCZ9AwMA0GCSqGSIb3DQEBCwUAA4IBAQAwwSxT5jWt J+uVeR8xr35L0N34ZhYuzIrgF3ThlRcfhCT1z5TYGJLQZ3Q5ztufS02+R1G5RgQa XzEAcup/3ung0DcWjGUCXAR6FyQeezNZEszZyqXVbrs2Wz3b6GHSRn+xBJZBaFI0 DCknaexWm47KopKdLwWdgeWGmqY088eHhI3SovG/vwp+FH0s+kShbp4KlYylgVgq 5h5lmaHqUGo3VRt1nznoA4yHGRJHS8V9dyaN2vBOuuZSu4jd9O6pwmPeer298jgs Qrvw8LYzapQNi6ydAisMqBafN3rTtpatKIAbr/Z0bOy9KfbWjYU6ky2uQPM9iz2j dXhOx3/nocCt -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:42 2024 by rpki-client on console-ams.rpki-client.org