$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2694/hA0YjLsz08uvTbdYus_U1IoDr7U.roa File: hA0YjLsz08uvTbdYus_U1IoDr7U.roa (raw, json) Hash identifier: qf9VRnkExwNHbRiHqpKYTuHXeTB5WyacG8OiMRx4Zbs= Subject key identifier: 84:0D:18:8C:BB:33:D3:CB:AF:4D:B7:58:BA:CF:D4:D4:8A:03:AF:B5 Certificate issuer: /CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7 Certificate serial: 2B27 Authority key identifier: 8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/hA0YjLsz08uvTbdYus_U1IoDr7U.roa Signing time: Mon 16 Sep 2024 19:47:56 +0000 ROA not before: Mon 16 Sep 2024 19:47:56 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59024 IP address blocks: 103.111.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 21:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11047 (0x2b27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7 Validity Not Before: Sep 16 19:47:56 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=840D188CBB33D3CBAF4DB758BACFD4D48A03AFB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:84:07:01:6b:e9:9c:52:cb:83:46:83:c5: b0:46:d0:cb:e1:73:4d:02:fc:57:67:58:6e:9b:3a: 2c:c4:7d:ee:bd:c7:f2:30:20:e5:7d:93:bd:00:3a: 34:fb:b1:76:54:7a:0f:fe:2f:61:06:f8:96:6c:d3: 25:bb:35:c3:41:b5:0f:18:e3:c7:cc:de:b1:3c:f6: d9:ef:6d:f7:f3:49:32:9c:64:c3:4b:98:30:52:02: 34:b2:e5:51:09:e4:af:f4:17:56:64:ef:d7:78:c8: e3:0c:cf:80:c5:e5:57:d5:87:c4:38:21:df:a5:26: d4:78:80:b3:70:98:a6:8f:d8:ad:2e:b7:ab:18:43: 21:a3:a7:4e:28:d0:df:a2:96:6a:2d:5c:95:23:de: 1a:b4:93:8d:74:c2:b1:95:1c:1d:9a:b3:be:ac:19: ca:eb:38:36:1c:70:de:63:32:ed:59:1b:9b:ca:6f: 6f:e2:a4:20:3e:c5:91:2e:2c:fc:38:3a:a6:20:2c: 2d:59:ed:51:bd:19:d9:65:92:d5:47:0a:3e:da:64: d9:78:2f:dd:e8:dc:28:03:4d:85:92:09:34:05:5b: 6b:6d:49:e3:37:05:53:77:ed:01:d8:e0:db:03:89: 5d:3e:90:31:4c:c7:80:ef:56:52:88:b0:30:df:df: 2a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0D:18:8C:BB:33:D3:CB:AF:4D:B7:58:BA:CF:D4:D4:8A:03:AF:B5 X509v3 Authority Key Identifier: keyid:8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/hA0YjLsz08uvTbdYus_U1IoDr7U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.111.172.0/24 Signature Algorithm: sha256WithRSAEncryption 19:36:61:d0:66:b7:04:6f:4a:7c:24:08:b6:15:0d:af:d6:4e: c0:f8:46:90:26:d4:d7:10:1a:6b:8f:f4:40:be:fe:e2:e9:5d: 13:cf:f6:41:0c:7e:a6:cb:d9:ca:d8:19:e4:3a:12:38:98:e7: 16:1c:55:aa:68:5c:77:55:4c:0c:00:17:3b:49:83:c2:b6:fe: 28:c1:97:8d:c3:29:17:68:89:5c:e3:fc:54:3b:c6:52:77:c1: 96:87:5b:c9:73:f4:44:94:f8:67:32:f6:15:4d:55:80:95:60: 18:d4:9c:ac:b0:7d:41:02:56:a3:83:1c:8e:35:b2:0a:fc:ca: bc:cd:0d:b9:6a:c0:dc:d0:88:d5:07:4d:27:e8:fc:70:e0:a5: 58:a3:64:0d:a0:84:41:c6:67:eb:2d:3c:28:5c:c8:d2:6e:e8: 06:3e:6e:e2:35:6f:05:65:b6:27:04:3e:02:65:2d:cd:d0:49: 34:d1:19:7d:34:d0:70:29:63:fb:fa:af:1b:05:47:73:32:cc: 4b:d9:7f:96:cf:5f:a1:5d:76:41:03:38:da:bf:24:fd:00:43: 90:d7:07:16:1b:6f:7a:f6:7c:39:da:e8:95:3c:80:01:50:40: ec:c7:34:8f:86:38:31:05:e7:1d:ad:17:db:11:77:fa:a7:90: c6:ea:75:13 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICKycwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEY3 QzlGMjRGMTZBQ0RGQTI5MTgwQjMzN0YzMjEzNjAyN0NDMzRENzAeFw0yNDA5MTYx OTQ3NTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDg0MEQxODhDQkIzM0Qz Q0JBRjREQjc1OEJBQ0ZENEQ0OEEwM0FGQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJmoQHAWvpnFLLg0aDxbBG0Mvhc00C/FdnWG6bOizEfe69x/Iw IOV9k70AOjT7sXZUeg/+L2EG+JZs0yW7NcNBtQ8Y48fM3rE89tnvbffzSTKcZMNL mDBSAjSy5VEJ5K/0F1Zk79d4yOMMz4DF5VfVh8Q4Id+lJtR4gLNwmKaP2K0ut6sY QyGjp04o0N+ilmotXJUj3hq0k410wrGVHB2as76sGcrrODYccN5jMu1ZG5vKb2/i pCA+xZEuLPw4OqYgLC1Z7VG9GdllktVHCj7aZNl4L93o3CgDTYWSCTQFW2ttSeM3 BVN37QHY4NsDiV0+kDFMx4DvVlKIsDDf3yqHAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUhA0YjLsz08uvTbdYus/U1IoDr7UwHwYDVR0jBBgwFoAUj3yfJPFqzfopGAsz fzITYCfMNNcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY5 NC9qM3lmSlBGcXpmb3BHQXN6ZnpJVFlDZk1OTmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ozeWZKUEZxemZvcEdBc3pmeklUWUNmTU5OYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2OTQvaEEwWWpMc3owOHV2 VGJkWXVzX1UxSW9EcjdVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdvrDANBgkqhkiG9w0BAQsFAAOCAQEAGTZh0Ga3BG9KfCQIthUNr9ZOwPhG kCbU1xAaa4/0QL7+4uldE8/2QQx+psvZytgZ5DoSOJjnFhxVqmhcd1VMDAAXO0mD wrb+KMGXjcMpF2iJXOP8VDvGUnfBlodbyXP0RJT4ZzL2FU1VgJVgGNScrLB9QQJW o4McjjWyCvzKvM0NuWrA3NCI1QdNJ+j8cOClWKNkDaCEQcZn6y08KFzI0m7oBj5u 4jVvBWW2JwQ+AmUtzdBJNNEZfTTQcClj+/qvGwVHczLMS9l/ls9foV12QQM42r8k /QBDkNcHFhtvevZ8OdrolTyAAVBA7Mc0j4Y4MQXnHa0X2xF3+qeQxup1Ew== -----END CERTIFICATE-----Generated at Fri Nov 22 19:57:40 2024 by rpki-client on console-ams.rpki-client.org