$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/D0zYmxEZ0SHZb1gmnWF3ojUTNUs.roa File: D0zYmxEZ0SHZb1gmnWF3ojUTNUs.roa (raw, json) Hash identifier: ElwPAAB/RBdxmPJCt34rJ3jgiG/FnJnHOmYYjmFgxQk= Subject key identifier: 0F:4C:D8:9B:11:19:D1:21:D9:6F:58:26:9D:61:77:A2:35:13:35:4B Certificate issuer: /CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F Certificate serial: 01F0 Authority key identifier: 7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/D0zYmxEZ0SHZb1gmnWF3ojUTNUs.roa Signing time: Sun 31 Mar 2024 08:57:41 +0000 ROA not before: Sun 31 Mar 2024 08:57:41 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 137443 IP address blocks: 103.97.56.0/24 maxlen: 24 103.97.57.0/24 maxlen: 24 103.97.58.0/24 maxlen: 24 103.97.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F Validity Not Before: Mar 31 08:57:41 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=0F4CD89B1119D121D96F58269D6177A23513354B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:36:8e:db:7c:5f:ae:70:ae:cf:c4:5c:ab: dc:6e:ff:9e:e2:12:ab:b7:d1:87:a4:67:89:c4:0a: 27:97:11:c7:81:dc:e1:ee:ab:b5:71:97:66:b1:ae: f3:c4:50:e2:5a:98:9e:18:b8:2d:f9:88:bc:7e:27: bd:d5:a7:f7:52:39:ca:27:3b:29:68:61:18:77:62: 71:9f:f1:4a:f6:cb:3f:b6:5b:e4:a6:2c:4f:45:a8: b5:3d:b1:22:8e:9a:20:36:b5:d3:1b:df:59:6b:ee: a0:e4:84:84:0a:fa:9b:b1:09:70:ce:4d:0b:07:a6: d7:89:ce:c2:34:9f:af:d8:b1:c6:2c:99:00:57:7a: cb:a1:e0:03:09:f3:a3:5a:29:94:53:78:45:6a:86: 13:1f:22:bf:68:dc:b3:60:80:29:ba:ee:7c:ab:79: ac:fa:04:45:57:88:cc:9a:a7:cd:0d:63:d9:72:7a: 38:c1:b8:69:a8:e7:8e:58:2e:2c:b6:2b:80:60:3d: a9:f8:78:59:a9:44:57:c5:87:70:c5:c2:dd:04:94: f9:e8:a4:77:62:a0:0f:07:35:eb:80:f1:ff:3b:e8: 15:3f:32:92:32:a1:f0:77:9d:c0:04:98:08:18:08: f7:47:53:e8:a6:af:f5:6b:e0:02:44:7f:e2:e2:ee: d5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4C:D8:9B:11:19:D1:21:D9:6F:58:26:9D:61:77:A2:35:13:35:4B X509v3 Authority Key Identifier: keyid:7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/D0zYmxEZ0SHZb1gmnWF3ojUTNUs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.97.56.0/22 Signature Algorithm: sha256WithRSAEncryption 74:58:ea:d3:92:d1:e9:f5:1f:89:56:47:a5:74:b4:66:c5:ad: e3:6f:00:b2:2f:7e:c9:81:b2:6d:77:86:eb:f1:0b:c3:d7:c6: 3e:24:3e:f2:ce:7c:f5:0a:af:ec:19:65:e4:40:f7:2a:2c:f0: 3c:5e:34:02:da:39:1b:0e:2f:76:76:05:54:47:57:50:27:18: 55:c9:35:87:e5:f2:12:2e:69:f1:8d:f8:34:cc:09:48:57:40: 0b:e4:b1:f6:af:e6:69:02:e1:56:3b:6b:6e:70:4a:fe:3a:97: a3:e6:10:96:7b:61:34:0c:91:eb:34:e6:c7:71:1a:8e:f5:4b: 0d:f0:db:f1:50:62:7a:c9:23:9f:3c:25:75:e7:8b:0d:4a:b9: 25:75:7a:71:73:36:a4:2a:43:5b:b5:28:36:66:0d:81:c1:c7: 6c:4b:a4:91:23:2f:58:e8:85:07:55:1d:6c:5f:99:06:44:54: 60:63:9a:2c:19:ab:08:17:bf:11:bc:61:a1:af:d5:d8:ef:e9: 02:f0:c4:15:bf:7f:9b:35:1a:e7:75:6b:d3:e4:df:11:c4:64: 19:93:5f:0c:7f:c4:ae:20:1a:83:06:fd:10:0c:85:8f:e8:c0: e4:c5:7b:50:c1:2b:30:ef:c9:5a:09:95:34:15:e2:82:e5:2a: 61:2b:71:38 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0I1 REM5NTU5OUJFNERFNDU0QTk5QzBDMjU3NTNEMUUwMEM3NDE0RjAeFw0yNDAzMzEw ODU3NDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDBGNENEODlCMTExOUQx MjFEOTZGNTgyNjlENjE3N0EyMzUxMzM1NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgBzaO23xfrnCuz8Rcq9xu/57iEqu30YekZ4nECieXEceB3OHu q7Vxl2axrvPEUOJamJ4YuC35iLx+J73Vp/dSOconOyloYRh3YnGf8Ur2yz+2W+Sm LE9FqLU9sSKOmiA2tdMb31lr7qDkhIQK+puxCXDOTQsHpteJzsI0n6/YscYsmQBX esuh4AMJ86NaKZRTeEVqhhMfIr9o3LNggCm67nyreaz6BEVXiMyap80NY9lyejjB uGmo545YLiy2K4BgPan4eFmpRFfFh3DFwt0ElPnopHdioA8HNeuA8f876BU/MpIy ofB3ncAEmAgYCPdHU+imr/Vr4AJEf+Li7tXtAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUD0zYmxEZ0SHZb1gmnWF3ojUTNUswHwYDVR0jBBgwFoAUe13JVZm+TeRUqZwM JXU9HgDHQU8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUz Ny9lMTNKVlptLVRlUlVxWndNSlhVOUhnREhRVTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2UxM0pWWm0tVGVSVXFad01KWFU5SGdESFFVOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MzcvRDB6WW14RVowU0ha YjFnbW5XRjNvalVUTlVzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdhODANBgkqhkiG9w0BAQsFAAOCAQEAdFjq05LR6fUfiVZHpXS0ZsWt428A si9+yYGybXeG6/ELw9fGPiQ+8s589Qqv7Bll5ED3KizwPF40Ato5Gw4vdnYFVEdX UCcYVck1h+XyEi5p8Y34NMwJSFdAC+Sx9q/maQLhVjtrbnBK/jqXo+YQlnthNAyR 6zTmx3EajvVLDfDb8VBieskjnzwldeeLDUq5JXV6cXM2pCpDW7UoNmYNgcHHbEuk kSMvWOiFB1UdbF+ZBkRUYGOaLBmrCBe/Ebxhoa/V2O/pAvDEFb9/mzUa53Vr0+Tf EcRkGZNfDH/EriAagwb9EAyFj+jA5MV7UMErMO/JWgmVNBXiguUqYStxOA== -----END CERTIFICATE-----Generated at Thu May 2 17:34:34 2024 by rpki-client on console-ams.rpki-client.org