$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1823/1S59-P5SWwas5ZHiepf_RfnweqY.roa File: 1S59-P5SWwas5ZHiepf_RfnweqY.roa (raw, json) Hash identifier: sfm0B+UynP7MeHXhur0Hw3inRRYVSvBRKv83Wsg7qyo= Subject key identifier: D5:2E:7D:F8:FE:52:5B:06:AC:E5:91:E2:7A:97:FF:45:F9:F0:7A:A6 Certificate issuer: /CN=46E7400FC97FC7A2093E054CF0DF42CB77564023 Certificate serial: 28 Authority key identifier: 46:E7:40:0F:C9:7F:C7:A2:09:3E:05:4C:F0:DF:42:CB:77:56:40:23 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/1S59-P5SWwas5ZHiepf_RfnweqY.roa Signing time: Tue 01 Oct 2024 13:24:52 +0000 ROA not before: Tue 01 Oct 2024 13:24:52 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59065 IP address blocks: 103.59.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 21:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46E7400FC97FC7A2093E054CF0DF42CB77564023 Validity Not Before: Oct 1 13:24:52 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D52E7DF8FE525B06ACE591E27A97FF45F9F07AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:13:b4:52:35:43:7f:78:3c:9f:51:75:07: 8b:29:27:03:8c:5a:82:56:58:3e:fa:92:a3:c8:ed: 03:d9:43:4c:3e:b0:24:69:e2:4c:8d:e3:e9:03:db: c7:4d:8b:3b:1a:1c:0a:d4:02:32:06:3f:ec:96:9d: 59:c9:44:e0:59:4a:fe:8e:bf:9a:c4:2e:e9:44:56: cc:90:88:ba:55:f4:6f:ec:db:cb:bc:eb:df:33:d3: a4:10:4f:33:3d:fb:9b:60:14:75:48:95:be:4e:7d: 48:2c:f0:4f:90:91:fe:0e:fb:45:4f:d4:11:66:8f: 88:c5:f2:94:ca:22:bf:3f:9c:bc:9e:e4:2c:36:d8: 5c:df:1d:e5:aa:6e:77:9e:99:53:c0:0f:8d:20:86: b6:42:f8:cc:2d:8d:b6:8e:88:81:14:4b:3f:cf:d4: 20:e1:05:d8:cd:87:11:b1:da:49:1a:fa:f8:d4:fb: f2:7b:85:fd:8f:fa:26:d2:2f:bc:82:8e:10:67:d7: 43:fe:53:e9:ee:59:2c:39:46:3d:8a:ec:cc:6e:5e: b5:1c:c1:e7:ab:43:8b:fb:97:fc:e0:5c:a8:2d:9e: 46:d2:3d:23:ab:ca:e1:d0:a1:8b:73:d1:85:91:9f: be:9e:70:00:a7:b3:07:79:12:33:46:d3:e6:0b:28: 05:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2E:7D:F8:FE:52:5B:06:AC:E5:91:E2:7A:97:FF:45:F9:F0:7A:A6 X509v3 Authority Key Identifier: keyid:46:E7:40:0F:C9:7F:C7:A2:09:3E:05:4C:F0:DF:42:CB:77:56:40:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/1S59-P5SWwas5ZHiepf_RfnweqY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.59.123.0/24 Signature Algorithm: sha256WithRSAEncryption 67:15:04:1c:e0:16:e1:88:f3:f6:23:ad:6c:72:7d:6c:91:49: 8d:1b:0e:9b:f2:4f:95:09:25:a1:4c:ec:50:e9:68:a0:fc:65: 1c:25:96:28:53:55:a7:0a:ed:b7:84:9d:84:5f:19:4c:cc:46: 42:2f:39:23:79:82:e3:07:78:8d:a4:bb:aa:28:3e:bf:af:b8: 90:5b:b7:83:20:ac:92:95:31:ae:c4:7b:4f:14:4f:93:2a:bd: bf:08:a5:26:1e:73:f8:2a:f0:95:7c:ae:61:64:16:dc:7d:b8: 47:21:32:05:48:d1:b5:c7:6f:98:d9:7e:8f:51:26:06:67:42: bc:51:42:8c:19:37:0f:5f:b3:a6:92:e2:b9:e5:50:3b:7f:34: 54:42:e4:d1:25:50:0f:74:bd:a5:82:92:48:ae:f4:3a:c4:ac: bc:91:6e:2a:2e:05:6e:7d:e7:dd:23:c6:76:a9:9a:6f:a6:19: d0:24:50:04:02:b4:84:14:a7:58:5d:d2:75:ff:50:0d:e2:ee: 9a:13:22:d2:88:2b:07:67:d1:42:8a:14:31:7e:86:0d:59:0c: 51:ae:80:d2:d2:e8:05:34:1c:98:aa:e8:2a:d6:64:0b:16:c1: b8:e3:d2:28:ca:d4:6b:84:50:48:f3:7a:b0:d3:3b:10:a8:14: 48:4a:32:c7 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0NkU3 NDAwRkM5N0ZDN0EyMDkzRTA1NENGMERGNDJDQjc3NTY0MDIzMB4XDTI0MTAwMTEz MjQ1MloXDTI1MDkyNzAyNDAxNFowMzExMC8GA1UEAxMoRDUyRTdERjhGRTUyNUIw NkFDRTU5MUUyN0E5N0ZGNDVGOUYwN0FBNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJtME7RSNUN/eDyfUXUHiyknA4xaglZYPvqSo8jtA9lDTD6wJGni TI3j6QPbx02LOxocCtQCMgY/7JadWclE4FlK/o6/msQu6URWzJCIulX0b+zby7zr 3zPTpBBPMz37m2AUdUiVvk59SCzwT5CR/g77RU/UEWaPiMXylMoivz+cvJ7kLDbY XN8d5apud56ZU8APjSCGtkL4zC2Nto6IgRRLP8/UIOEF2M2HEbHaSRr6+NT78nuF /Y/6JtIvvIKOEGfXQ/5T6e5ZLDlGPYrszG5etRzB56tDi/uX/OBcqC2eRtI9I6vK 4dChi3PRhZGfvp5wAKezB3kSM0bT5gsoBdsCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBTVLn34/lJbBqzlkeJ6l/9F+fB6pjAfBgNVHSMEGDAWgBRG50APyX/Hogk+BUzw 30LLd1ZAIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xODIz L1J1ZEFEOGxfeDZJSlBnVk04TjlDeTNkV1FDTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUnVkQUQ4bF94NklKUGdWTThOOUN5M2RXUUNNLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTgyMy8xUzU5LVA1U1d3YXM1 WkhpZXBmX1JmbndlcVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZzt7MA0GCSqGSIb3DQEBCwUAA4IBAQBnFQQc4BbhiPP2I61scn1skUmNGw6b 8k+VCSWhTOxQ6Wig/GUcJZYoU1WnCu23hJ2EXxlMzEZCLzkjeYLjB3iNpLuqKD6/ r7iQW7eDIKySlTGuxHtPFE+TKr2/CKUmHnP4KvCVfK5hZBbcfbhHITIFSNG1x2+Y 2X6PUSYGZ0K8UUKMGTcPX7OmkuK55VA7fzRUQuTRJVAPdL2lgpJIrvQ6xKy8kW4q LgVufefdI8Z2qZpvphnQJFAEArSEFKdYXdJ1/1AN4u6aEyLSiCsHZ9FCihQxfoYN WQxRroDS0ugFNByYqugq1mQLFsG449IoytRrhFBI83qw0zsQqBRISjLH -----END CERTIFICATE-----Generated at Fri Nov 22 19:57:39 2024 by rpki-client on console-ams.rpki-client.org