$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2785/gSkd6A4h9soSgsnL1gwv_ZaTpXk.roa File: gSkd6A4h9soSgsnL1gwv_ZaTpXk.roa (raw, json) Hash identifier: /ePEyOx0cammh0obLmcE/YBuFH1gX+5nN6CzmwxqWsM= Subject key identifier: 81:29:1D:E8:0E:21:F6:CA:12:82:C9:CB:D6:0C:2F:FD:96:93:A5:79 Certificate issuer: /CN=DEE08F5287F669313CE6990F117401B179848AE1 Certificate serial: 1982 Authority key identifier: DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3uCPUof2aTE85pkPEXQBsXmEiuE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/gSkd6A4h9soSgsnL1gwv_ZaTpXk.roa Signing time: Tue 24 Sep 2024 00:21:44 +0000 ROA not before: Tue 24 Sep 2024 00:21:44 +0000 ROA not after: Sat 20 Sep 2025 07:41:26 +0000 asID: 137720 IP address blocks: 103.120.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3uCPUof2aTE85pkPEXQBsXmEiuE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6530 (0x1982) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEE08F5287F669313CE6990F117401B179848AE1 Validity Not Before: Sep 24 00:21:44 2024 GMT Not After : Sep 20 07:41:26 2025 GMT Subject: CN=81291DE80E21F6CA1282C9CBD60C2FFD9693A579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:a4:36:80:b1:61:e5:53:a5:94:c6:3d:ea: fb:d5:5b:30:5b:65:4c:8b:65:7c:ac:70:7c:f9:2e: 42:59:6b:25:31:53:ef:d1:47:86:36:16:d1:62:0c: fe:83:89:f9:47:28:e9:9a:6d:62:31:20:e4:c0:4d: 88:83:1a:a5:e6:f7:7c:79:99:a0:68:e1:cd:7e:6a: 00:86:eb:4b:4d:51:df:7d:4b:9d:45:6c:22:8c:a9: bd:50:0b:30:05:b9:90:ee:ce:28:8e:28:78:f4:e7: cb:84:9a:96:92:ce:29:6a:e8:a2:54:73:d4:bc:d1: 31:2e:2a:3d:44:28:91:70:7d:4d:f0:5d:39:60:82: 17:82:9a:28:6e:e3:72:e5:5d:c6:42:b3:63:d7:56: b3:50:e6:a6:b7:19:b7:a1:08:75:93:91:b6:66:80: 83:6a:d4:bc:79:6e:a5:f3:c5:54:ff:d9:29:3e:db: db:20:e4:fa:51:39:91:62:2c:54:aa:01:63:24:8b: 44:07:35:d3:df:f3:cf:78:31:67:c5:43:ed:7a:3f: c5:ee:b6:ad:2e:d1:e0:56:e8:d6:7b:31:7a:f3:33: 5b:ef:72:d4:17:78:23:84:63:83:36:35:c4:a3:59: e4:b3:83:93:08:b7:b0:a0:93:91:46:71:5e:f0:53: 68:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:29:1D:E8:0E:21:F6:CA:12:82:C9:CB:D6:0C:2F:FD:96:93:A5:79 X509v3 Authority Key Identifier: keyid:DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3uCPUof2aTE85pkPEXQBsXmEiuE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/gSkd6A4h9soSgsnL1gwv_ZaTpXk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.120.96.0/24 Signature Algorithm: sha256WithRSAEncryption cd:0d:dd:63:f8:7c:d9:e1:a7:95:c7:44:80:7c:2e:6c:27:c9: 19:df:85:a9:82:16:9b:ab:51:c9:2d:a3:b1:09:1b:56:95:58: c6:0d:ce:9f:74:13:be:a2:65:30:ae:cd:f5:d8:92:9f:f6:04: 63:0b:a8:40:10:b7:f4:17:5b:9e:ca:a6:ae:a1:29:a6:b4:bc: 18:31:d2:55:39:01:c0:ce:82:ba:cd:33:77:d3:bd:ca:b3:af: b2:5d:b8:ec:29:05:96:38:6e:a3:bd:91:93:de:1a:f8:a2:97: 10:4a:48:a3:29:ec:e5:8a:6a:10:ac:5b:08:17:a4:d8:78:04: 95:99:58:33:03:2e:9e:06:e0:f6:59:09:fa:c7:f6:c8:a0:33: d7:a2:a2:1d:1c:f2:3a:62:b4:02:1f:b9:d1:f4:95:be:5b:66: d7:35:da:e8:27:21:95:01:b7:e0:c1:35:32:aa:db:ef:95:4d: cf:43:3d:24:a2:b7:89:7a:7e:02:56:bb:69:ea:83:1b:50:19: f2:c4:6b:2f:f9:4f:8d:6d:c1:a8:21:1a:41:0e:9c:06:b3:d8: 7e:7d:f1:f8:17:d9:85:0a:ff:2d:35:da:76:1b:fc:4a:e2:8c: 5c:6f:d4:f3:d2:b0:b3:94:5d:e3:f9:1f:40:5f:36:7e:83:1e: 17:73:6c:5f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGYIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVF MDhGNTI4N0Y2NjkzMTNDRTY5OTBGMTE3NDAxQjE3OTg0OEFFMTAeFw0yNDA5MjQw MDIxNDRaFw0yNTA5MjAwNzQxMjZaMDMxMTAvBgNVBAMTKDgxMjkxREU4MEUyMUY2 Q0ExMjgyQzlDQkQ2MEMyRkZEOTY5M0E1NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsbaQ2gLFh5VOllMY96vvVWzBbZUyLZXyscHz5LkJZayUxU+/R R4Y2FtFiDP6DiflHKOmabWIxIOTATYiDGqXm93x5maBo4c1+agCG60tNUd99S51F bCKMqb1QCzAFuZDuziiOKHj058uEmpaSzilq6KJUc9S80TEuKj1EKJFwfU3wXTlg gheCmihu43LlXcZCs2PXVrNQ5qa3GbehCHWTkbZmgINq1Lx5bqXzxVT/2Sk+29sg 5PpROZFiLFSqAWMki0QHNdPf8894MWfFQ+16P8Xutq0u0eBW6NZ7MXrzM1vvctQX eCOEY4M2NcSjWeSzg5MIt7Cgk5FGcV7wU2j7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUgSkd6A4h9soSgsnL1gwv/ZaTpXkwHwYDVR0jBBgwFoAU3uCPUof2aTE85pkP EXQBsXmEiuEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc4 NS8zdUNQVW9mMmFURTg1cGtQRVhRQnNYbUVpdUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzN1Q1BVb2YyYVRFODVwa1BFWFFCc1htRWl1RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3ODUvZ1NrZDZBNGg5c29T Z3NuTDFnd3ZfWmFUcFhrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGd4YDANBgkqhkiG9w0BAQsFAAOCAQEAzQ3dY/h82eGnlcdEgHwubCfJGd+F qYIWm6tRyS2jsQkbVpVYxg3On3QTvqJlMK7N9diSn/YEYwuoQBC39BdbnsqmrqEp prS8GDHSVTkBwM6Cus0zd9O9yrOvsl247CkFljhuo72Rk94a+KKXEEpIoyns5Ypq EKxbCBek2HgElZlYMwMungbg9lkJ+sf2yKAz16KiHRzyOmK0Ah+50fSVvltm1zXa 6CchlQG34ME1Mqrb75VNz0M9JKK3iXp+Ala7aeqDG1AZ8sRrL/lPjW3BqCEaQQ6c BrPYfn3x+BfZhQr/LTXadhv8SuKMXG/U89Kws5Rd4/kfQF82foMeF3NsXw== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:44 2024 by rpki-client on console-ams.rpki-client.org