$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2671/Mamz0xnrWqPZI_G22g145_9G0RQ.roa File: Mamz0xnrWqPZI_G22g145_9G0RQ.roa (raw, json) Hash identifier: 8GM6E2cBLoEEK3P50gNaB/oYmksGyS5Y1wKoqPQY9H0= Subject key identifier: 31:A9:B3:D3:19:EB:5A:A3:D9:23:F1:B6:DA:0D:78:E7:FF:46:D1:14 Certificate issuer: /CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F Certificate serial: 1A90 Authority key identifier: DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/Mamz0xnrWqPZI_G22g145_9G0RQ.roa Signing time: Tue 03 Sep 2024 08:19:02 +0000 ROA not before: Tue 03 Sep 2024 08:19:02 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 62387 IP address blocks: 103.108.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6800 (0x1a90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F Validity Not Before: Sep 3 08:19:02 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=31A9B3D319EB5AA3D923F1B6DA0D78E7FF46D114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:7e:f0:06:96:35:17:a9:3c:57:99:49:1e: 07:f7:05:13:ad:74:b0:ea:67:bc:ea:23:c8:30:67: 70:89:74:59:10:1f:1e:98:de:cf:68:bd:c1:d9:a5: e5:ce:cb:3c:45:d8:bb:ee:5c:9c:cc:1f:dc:7e:72: d0:16:fc:10:42:ad:76:45:db:78:55:d0:ee:68:0b: 5c:f7:d5:f4:1e:6d:11:20:b4:96:c5:e2:6a:3a:b5: 2b:42:4e:1d:e2:8a:fb:3c:7a:5b:49:78:fd:67:64: 00:dc:c1:2e:de:b9:e6:08:43:b4:a3:d9:ec:ad:10: 27:20:b3:c3:8f:db:26:41:b6:47:6d:a6:cb:00:d4: bf:ff:d6:ce:12:fa:08:2a:b0:21:a1:26:c4:46:97: 33:08:76:c5:62:b4:63:6a:fd:3b:46:20:c6:1c:ac: 03:7f:eb:6c:fb:f0:bc:b6:75:da:4f:0e:06:26:bf: c9:0c:ad:a7:f1:60:5e:fe:aa:19:01:18:4a:eb:32: 1c:68:70:8e:d2:5b:00:25:38:4e:54:ee:62:56:d6: 69:7b:c5:7f:db:4b:af:65:1b:6d:40:3c:30:20:bd: a0:e8:c4:94:9d:50:b6:96:d6:1a:98:e4:80:3b:51: 5b:41:78:bc:34:b9:c5:47:3d:87:94:40:5d:ee:78: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A9:B3:D3:19:EB:5A:A3:D9:23:F1:B6:DA:0D:78:E7:FF:46:D1:14 X509v3 Authority Key Identifier: keyid:DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/Mamz0xnrWqPZI_G22g145_9G0RQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.108.164.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:17:2c:1b:18:6e:cc:18:5f:6c:0e:fc:e4:93:a9:b0:0f:22: 48:cc:d5:fb:ba:8a:28:da:99:f8:ab:65:94:9f:28:a3:c7:e7: d1:8a:f7:05:3e:87:67:0b:cf:1b:ad:1c:2b:39:b1:b5:05:dc: 7f:54:9d:24:36:18:64:aa:f1:89:f3:e1:17:22:37:42:08:5c: ae:df:13:86:22:cc:28:06:49:04:50:b5:d4:13:f4:21:d7:46: ee:ab:34:41:ba:7a:de:2b:49:9c:c3:47:54:52:22:8e:72:8a: 09:a5:c0:66:22:b0:8d:d5:25:d4:2b:06:ad:15:4e:df:c7:f3: 34:b6:39:c5:8c:7b:ad:97:34:f6:ba:53:ff:de:71:7c:e4:76: 3e:8f:4e:97:22:6a:23:ba:f6:42:62:d3:69:43:46:a8:25:cf: b5:08:1e:65:07:12:cd:91:ba:cd:36:df:c6:15:6f:63:5e:88: eb:ff:6e:6d:5a:68:56:37:9a:e1:ae:f3:ec:4d:92:57:32:37: 44:34:66:e3:e8:41:fa:5a:64:24:25:68:e6:f2:6e:1a:3d:d5: 16:48:6e:4a:62:b4:78:7c:3b:0f:6a:e2:6c:1f:69:fe:76:1e: cb:56:8e:fd:8b:87:f1:f2:51:5b:48:b1:a6:80:14:20:ba:69: e8:e4:e6:16 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGpAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREQ1 OEI4REVFNzdCOEFGRTZFMjkxQTVCODIwNUIxMzEzMTY5Nzg0RjAeFw0yNDA5MDMw ODE5MDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDMxQTlCM0QzMTlFQjVB QTNEOTIzRjFCNkRBMEQ3OEU3RkY0NkQxMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1yn7wBpY1F6k8V5lJHgf3BROtdLDqZ7zqI8gwZ3CJdFkQHx6Y 3s9ovcHZpeXOyzxF2LvuXJzMH9x+ctAW/BBCrXZF23hV0O5oC1z31fQebREgtJbF 4mo6tStCTh3iivs8eltJeP1nZADcwS7eueYIQ7Sj2eytECcgs8OP2yZBtkdtpssA 1L//1s4S+ggqsCGhJsRGlzMIdsVitGNq/TtGIMYcrAN/62z78Ly2ddpPDgYmv8kM rafxYF7+qhkBGErrMhxocI7SWwAlOE5U7mJW1ml7xX/bS69lG21APDAgvaDoxJSd ULaW1hqY5IA7UVtBeLw0ucVHPYeUQF3ueNmvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUMamz0xnrWqPZI/G22g145/9G0RQwHwYDVR0jBBgwFoAU3Vi43ud7iv5uKRpb ggWxMTFpeE8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 MS8zVmk0M3VkN2l2NXVLUnBiZ2dXeE1URnBlRTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNWaTQzdWQ3aXY1dUtScGJnZ1d4TVRGcGVFOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzEvTWFtejB4bnJXcVBa SV9HMjJnMTQ1XzlHMFJRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdspDANBgkqhkiG9w0BAQsFAAOCAQEAGhcsGxhuzBhfbA785JOpsA8iSMzV +7qKKNqZ+KtllJ8oo8fn0Yr3BT6HZwvPG60cKzmxtQXcf1SdJDYYZKrxifPhFyI3 Qghcrt8ThiLMKAZJBFC11BP0IddG7qs0Qbp63itJnMNHVFIijnKKCaXAZiKwjdUl 1CsGrRVO38fzNLY5xYx7rZc09rpT/95xfOR2Po9OlyJqI7r2QmLTaUNGqCXPtQge ZQcSzZG6zTbfxhVvY16I6/9ubVpoVjea4a7z7E2SVzI3RDRm4+hB+lpkJCVo5vJu Gj3VFkhuSmK0eHw7D2ribB9p/nYey1aO/YuH8fJRW0ixpoAUILpp6OTmFg== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:44 2024 by rpki-client on console-ams.rpki-client.org