$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/ODRAR04nY1r69_eFMBmJQr5Rs_Q.roa File: ODRAR04nY1r69_eFMBmJQr5Rs_Q.roa (raw, json) Hash identifier: CbMW/Zj94wzq5OS5Dfli8zwBWxJv6wPZ2iqacgZNzHc= Subject key identifier: 38:34:40:47:4E:27:63:5A:FA:F7:F7:85:30:19:89:42:BE:51:B3:F4 Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53 Certificate serial: 48F2 Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/ODRAR04nY1r69_eFMBmJQr5Rs_Q.roa Signing time: Sat 15 Jun 2024 19:55:55 +0000 ROA not before: Sat 15 Jun 2024 19:55:55 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 398704 IP address blocks: 103.72.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 10:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18674 (0x48f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53 Validity Not Before: Jun 15 19:55:55 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=383440474E27635AFAF7F78530198942BE51B3F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:1d:93:a4:a8:a9:99:85:1c:a4:c9:e6:39: 78:b0:ad:13:ad:4e:3d:95:57:e2:07:19:3b:94:d3: b6:c8:af:92:23:7c:94:5a:1f:b4:81:18:e0:6b:7d: 22:00:7c:d5:a2:e7:b1:a2:53:69:f9:98:11:00:98: b9:35:18:cb:b0:0e:3f:57:3d:1d:46:d4:ef:b6:5b: a7:6a:a9:e6:b6:3b:28:37:7a:1c:b6:25:c6:9b:56: c1:48:65:56:7a:9d:fd:e1:45:e3:35:cb:e6:33:dd: 8d:56:cd:65:35:2a:09:22:64:5b:7f:9e:10:3f:fe: c4:03:e5:ca:3e:57:bb:3e:8c:87:1e:a7:cd:a1:5d: 97:b6:6b:25:9e:38:ad:b7:ca:7b:2e:d8:86:0d:12: ee:1c:6e:59:22:40:58:e8:bb:3f:bd:c5:85:9c:95: fb:e5:e8:09:79:e1:e0:ba:38:c0:90:18:cf:cd:09: fa:c8:94:e8:9a:89:6f:7a:36:88:a5:c3:22:2b:0c: 60:15:51:33:56:ae:29:74:a9:40:e9:59:58:c5:5e: 88:c9:62:08:e2:14:cc:92:18:8e:c4:3e:9c:7c:25: c2:ba:d5:57:42:f3:e3:3b:f8:de:0a:bb:e6:50:56: eb:cf:0f:60:f9:01:eb:e6:ac:b7:c7:dc:f5:51:af: 5a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:34:40:47:4E:27:63:5A:FA:F7:F7:85:30:19:89:42:BE:51:B3:F4 X509v3 Authority Key Identifier: keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/ODRAR04nY1r69_eFMBmJQr5Rs_Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.72.120.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:c0:83:93:ad:c3:28:91:e0:81:12:0d:40:72:62:46:60:27: 39:06:d7:7d:d9:b6:1b:32:76:5c:a1:13:93:bc:07:4a:69:c9: 1c:b7:2a:62:1e:45:0a:d5:51:e1:3a:1d:28:84:a2:e1:eb:90: f7:73:b4:f1:bf:84:b7:64:fa:42:4a:f9:d4:6d:c9:4a:f4:42: f5:de:d8:04:47:2a:3f:dc:c5:68:ba:b4:33:90:56:9e:59:24: b9:4a:60:41:78:44:71:a5:a1:c3:5a:0b:ac:11:1d:e2:06:8b: ca:4f:21:cf:2b:c2:55:1e:f6:c5:64:7a:40:8f:44:4f:b2:b6: a6:55:35:be:ad:d6:7b:88:21:88:e0:97:8a:5c:a0:7d:74:70: 0f:49:40:9b:a7:3e:44:86:ab:2f:aa:22:6c:57:05:62:bd:6d: 3b:18:e2:83:f7:fb:83:6e:57:83:56:20:84:47:15:d8:d2:f9: a2:a0:b3:68:69:5a:e0:fb:ad:67:0d:e1:3f:db:5a:29:9f:41: 29:c1:ee:4e:9e:a1:5b:59:ef:80:bd:a3:89:85:bb:1a:2f:57: cf:da:3a:d4:36:a4:7c:17:42:9c:ce:4a:62:15:fc:16:d0:c4: 6f:3b:eb:59:c2:83:c9:eb:cb:e9:8f:bb:b0:e0:6b:a2:1f:3c: 1b:63:d1:ab -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICSPIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTk4 QTU5NTg2NjVGMzRBMjZBM0RDQUY5NEM2M0IzM0EwNzA1OUE1MzAeFw0yNDA2MTUx OTU1NTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDM4MzQ0MDQ3NEUyNzYz NUFGQUY3Rjc4NTMwMTk4OTQyQkU1MUIzRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFah2TpKipmYUcpMnmOXiwrROtTj2VV+IHGTuU07bIr5IjfJRa H7SBGOBrfSIAfNWi57GiU2n5mBEAmLk1GMuwDj9XPR1G1O+2W6dqqea2Oyg3ehy2 JcabVsFIZVZ6nf3hReM1y+Yz3Y1WzWU1KgkiZFt/nhA//sQD5co+V7s+jIcep82h XZe2ayWeOK23ynsu2IYNEu4cblkiQFjouz+9xYWclfvl6Al54eC6OMCQGM/NCfrI lOiaiW96NoilwyIrDGAVUTNWril0qUDpWVjFXojJYgjiFMySGI7EPpx8JcK61VdC 8+M7+N4Ku+ZQVuvPD2D5AevmrLfH3PVRr1o9AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUODRAR04nY1r69/eFMBmJQr5Rs/QwHwYDVR0jBBgwFoAU6YpZWGZfNKJqPcr5 TGOzOgcFmlMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA3 NS82WXBaV0daZk5LSnFQY3I1VEdPek9nY0ZtbE0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzZZcFpXR1pmTktKcVBjcjVUR096T2djRm1sTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIwNzUvT0RSQVIwNG5ZMXI2 OV9lRk1CbUpRcjVSc19RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdIeDANBgkqhkiG9w0BAQsFAAOCAQEAHMCDk63DKJHggRINQHJiRmAnOQbX fdm2GzJ2XKETk7wHSmnJHLcqYh5FCtVR4TodKISi4euQ93O08b+Et2T6Qkr51G3J SvRC9d7YBEcqP9zFaLq0M5BWnlkkuUpgQXhEcaWhw1oLrBEd4gaLyk8hzyvCVR72 xWR6QI9ET7K2plU1vq3We4ghiOCXilygfXRwD0lAm6c+RIarL6oibFcFYr1tOxji g/f7g25Xg1YghEcV2NL5oqCzaGla4PutZw3hP9taKZ9BKcHuTp6hW1nvgL2jiYW7 Gi9Xz9o61DakfBdCnM5KYhX8FtDEbzvrWcKDyevL6Y+7sOBroh88G2PRqw== -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:09 2024 by rpki-client on console-ams.rpki-client.org