$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/mIQYWST3YcrwSleeIIEQP5ONM_o.roa File: mIQYWST3YcrwSleeIIEQP5ONM_o.roa (raw, json) Hash identifier: 31n9izE+ZdLBmMZX6Th/PuKHbVFQgdD/IB8DJzWO81M= Subject key identifier: 98:84:18:59:24:F7:61:CA:F0:4A:57:9E:20:81:10:3F:93:8D:33:FA Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Certificate serial: 44D8 Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/mIQYWST3YcrwSleeIIEQP5ONM_o.roa Signing time: Wed 13 Mar 2024 01:21:27 +0000 ROA not before: Wed 13 Mar 2024 01:21:27 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 63603 IP address blocks: 103.102.196.0/24 maxlen: 24 103.102.197.0/24 maxlen: 24 103.102.198.0/24 maxlen: 24 103.102.199.0/24 maxlen: 24 163.53.44.0/24 maxlen: 24 163.53.45.0/24 maxlen: 24 163.53.46.0/24 maxlen: 24 163.53.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17624 (0x44d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Validity Not Before: Mar 13 01:21:27 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=9884185924F761CAF04A579E2081103F938D33FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b0:31:86:e0:fb:c0:a4:6d:2f:55:f0:f6:95: 0e:7f:bf:58:01:a5:16:11:2c:03:1b:c5:0f:fe:36: a2:48:fc:42:33:5b:2d:9c:bd:75:24:5a:73:09:bb: c5:df:8d:d7:40:f2:9c:cf:0f:74:5a:bd:fb:1f:d7: 98:e6:5e:4c:cb:6a:8f:99:81:58:3b:04:d6:65:1d: 87:1c:24:eb:9a:0e:c3:5c:b5:1c:e0:a3:89:ca:0f: 07:cc:8d:3e:d1:f7:f5:fc:c7:54:c6:c2:93:47:a3: cc:d1:46:65:32:66:10:c3:65:cb:68:d5:9c:14:3c: a5:33:b6:91:35:a6:ce:d7:e4:c3:e2:5d:f0:e6:2b: 3f:e6:6b:0d:cc:2e:f3:fe:bf:64:11:89:68:ae:bf: b1:02:8a:a8:6e:40:99:e8:31:d1:8e:42:b4:4f:f7: b4:37:d0:82:30:04:ee:8d:f5:fc:2f:4f:9f:6f:4c: 74:de:3b:65:4e:3c:78:b1:69:a8:a7:87:b1:f7:50: 33:98:fe:02:d0:4d:12:ac:b6:d2:0b:0d:fc:37:b3: 92:01:dd:58:9e:bc:90:1b:89:3e:17:49:3b:bd:1b: 79:94:57:d2:bb:ce:8e:07:8f:a9:10:22:35:86:bc: 69:0f:6c:41:00:3f:40:dc:ee:d8:6d:f2:62:e7:2b: 2d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:84:18:59:24:F7:61:CA:F0:4A:57:9E:20:81:10:3F:93:8D:33:FA X509v3 Authority Key Identifier: keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/mIQYWST3YcrwSleeIIEQP5ONM_o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.102.196.0/22 163.53.44.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:a1:4b:d9:1d:4f:58:9c:49:a6:c3:4f:b5:cf:7a:b2:9d:ad: 6a:5a:4a:a7:af:81:58:2f:94:f6:ce:5f:a0:ad:89:50:6f:c2: a4:b6:76:d8:49:70:0f:6b:51:69:32:90:9e:bd:ab:cc:bd:1b: 5d:f8:0e:15:71:53:a1:1f:64:fa:7e:55:0f:7b:18:98:68:25: e3:ef:95:f9:39:48:9a:82:f3:f7:6d:eb:7b:51:45:44:2f:99: 35:e9:17:7c:8b:5b:ed:31:b5:a6:eb:9b:11:b7:12:a7:32:60: de:32:c4:fe:82:2b:8c:f0:a9:30:2e:43:96:ec:59:95:2b:40: 83:47:87:16:9a:99:32:7c:a3:c0:fe:e8:cb:a5:78:11:c9:fd: 16:3c:98:24:e9:73:85:15:88:9a:ca:7d:e9:e0:96:29:70:37: f1:15:7e:22:08:af:63:b3:4b:a8:24:b6:5a:e3:93:f8:81:92: e1:06:df:5f:b5:72:fe:9b:ae:86:40:a2:2f:f4:74:de:57:cf: 48:86:08:93:e1:d3:e9:58:91:22:4e:c8:c3:c7:bd:a2:8c:16: 27:a2:b5:fe:b1:f6:32:f7:04:e5:b2:36:83:10:80:c4:be:8e: 47:8e:6f:3d:65:e4:87:38:7b:66:85:49:ad:fd:3b:7a:82:63: 89:b3:7a:84 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICRNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEz NjA0MUEyRjUzRjI2QjQyMEQ2QkQ0RkQwRTlDMkQ3NzMyMDk3MTAeFw0yNDAzMTMw MTIxMjdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDk4ODQxODU5MjRGNzYx Q0FGMDRBNTc5RTIwODExMDNGOTM4RDMzRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBsDGG4PvApG0vVfD2lQ5/v1gBpRYRLAMbxQ/+NqJI/EIzWy2c vXUkWnMJu8XfjddA8pzPD3Ravfsf15jmXkzLao+ZgVg7BNZlHYccJOuaDsNctRzg o4nKDwfMjT7R9/X8x1TGwpNHo8zRRmUyZhDDZcto1ZwUPKUztpE1ps7X5MPiXfDm Kz/maw3MLvP+v2QRiWiuv7ECiqhuQJnoMdGOQrRP97Q30IIwBO6N9fwvT59vTHTe O2VOPHixaainh7H3UDOY/gLQTRKsttILDfw3s5IB3VievJAbiT4XSTu9G3mUV9K7 zo4Hj6kQIjWGvGkPbEEAP0Dc7tht8mLnKy2ZAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUmIQYWST3YcrwSleeIIEQP5ONM/owHwYDVR0jBBgwFoAUATYEGi9T8mtCDWvU /Q6cLXcyCXEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx OC9BVFlFR2k5VDhtdENEV3ZVX1E2Y0xYY3lDWEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FUWUVHaTlUOG10Q0RXdlVfUTZjTFhjeUNYRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MTgvbUlRWVdTVDNZY3J3 U2xlZUlJRVFQNU9OTV9vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEw DAMEAmdmxAMEAqM1LDANBgkqhkiG9w0BAQsFAAOCAQEAW6FL2R1PWJxJpsNPtc96 sp2talpKp6+BWC+U9s5foK2JUG/CpLZ22ElwD2tRaTKQnr2rzL0bXfgOFXFToR9k +n5VD3sYmGgl4++V+TlImoLz923re1FFRC+ZNekXfItb7TG1puubEbcSpzJg3jLE /oIrjPCpMC5DluxZlStAg0eHFpqZMnyjwP7oy6V4Ecn9FjyYJOlzhRWImsp96eCW KXA38RV+IgivY7NLqCS2WuOT+IGS4QbfX7Vy/puuhkCiL/R03lfPSIYIk+HT6ViR Ik7Iw8e9oowWJ6K1/rH2MvcE5bI2gxCAxL6OR45vPWXkhzh7ZoVJrf07eoJjibN6 hA== -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:10 2024 by rpki-client on console-fra.rpki-client.org