$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2802/HBdQsgAKkLtSl-G6eG9u_c_2buk.roa File: HBdQsgAKkLtSl-G6eG9u_c_2buk.roa (raw, json) Hash identifier: OLHs4NAQc+wrW3bbzR5uIA8Zb/2FzyWC8D/lfJnEZwo= Subject key identifier: 1C:17:50:B2:00:0A:90:BB:52:97:E1:BA:78:6F:6E:FD:CF:F6:6E:E9 Certificate issuer: /CN=4FCA8BCB6EB3EC61032F88D26FC02B05224D4718 Certificate serial: 4994 Authority key identifier: 4F:CA:8B:CB:6E:B3:EC:61:03:2F:88:D2:6F:C0:2B:05:22:4D:47:18 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T8qLy26z7GEDL4jSb8ArBSJNRxg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/HBdQsgAKkLtSl-G6eG9u_c_2buk.roa Signing time: Fri 27 Sep 2024 02:33:07 +0000 ROA not before: Fri 27 Sep 2024 02:33:07 +0000 ROA not after: Sat 27 Sep 2025 02:22:57 +0000 asID: 9392 IP address blocks: 103.122.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/T8qLy26z7GEDL4jSb8ArBSJNRxg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/T8qLy26z7GEDL4jSb8ArBSJNRxg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T8qLy26z7GEDL4jSb8ArBSJNRxg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18836 (0x4994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FCA8BCB6EB3EC61032F88D26FC02B05224D4718 Validity Not Before: Sep 27 02:33:07 2024 GMT Not After : Sep 27 02:22:57 2025 GMT Subject: CN=1C1750B2000A90BB5297E1BA786F6EFDCFF66EE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ac:43:f8:89:53:a8:19:39:c8:73:18:27:cc: dc:44:bc:eb:fd:42:5e:c5:e5:51:5b:80:bb:e9:46: ac:82:90:f5:f9:5f:c3:69:28:11:b3:2b:1a:63:b9: 98:8f:66:f3:97:ca:4f:b1:0f:61:48:d6:7a:bc:b9: 84:3f:80:fb:34:70:f3:10:ab:a3:40:e3:91:5e:5c: a4:00:81:b3:db:5b:49:df:60:85:34:a8:cb:3f:64: 77:0d:db:89:fb:50:ae:3b:2e:ef:dd:96:81:25:37: e6:d3:ab:d6:b1:ee:b3:47:e7:87:93:f8:7c:a4:13: 9d:82:c2:ef:0e:a1:f2:bc:12:46:34:5b:aa:ca:15: 08:c2:86:97:20:0b:a3:25:2b:9b:3f:1f:57:c5:14: 99:27:91:cb:63:27:f8:3c:df:2c:a1:b5:0d:9f:a2: 92:dd:73:00:31:9a:eb:65:ed:4c:72:4f:29:6a:83: 88:26:53:e8:5d:a7:2f:98:0b:12:43:c5:c6:85:9b: e6:e8:5c:9c:95:31:4c:19:c3:74:a9:78:fc:ea:fd: 0e:4f:39:69:02:92:69:65:29:3e:63:37:c2:cc:31: 47:b2:1a:27:ab:f4:49:c1:31:ec:43:f2:d8:e0:64: 66:17:e8:04:e2:77:c3:bb:f3:e5:17:3b:ba:5f:7b: 20:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:17:50:B2:00:0A:90:BB:52:97:E1:BA:78:6F:6E:FD:CF:F6:6E:E9 X509v3 Authority Key Identifier: keyid:4F:CA:8B:CB:6E:B3:EC:61:03:2F:88:D2:6F:C0:2B:05:22:4D:47:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/T8qLy26z7GEDL4jSb8ArBSJNRxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T8qLy26z7GEDL4jSb8ArBSJNRxg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/HBdQsgAKkLtSl-G6eG9u_c_2buk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.240.0/24 Signature Algorithm: sha256WithRSAEncryption 81:e0:55:ae:a2:45:8a:0c:ee:10:b3:11:56:dc:9a:76:29:63: d8:bc:5c:f7:f3:32:a6:57:a7:22:9b:97:75:ad:dd:5c:b6:e7: 48:48:68:fe:72:75:3a:dc:a3:fd:6f:d9:67:38:5d:29:13:3d: d7:90:a2:0f:db:01:52:3d:24:c2:fe:5c:f9:66:c9:02:db:6f: e8:01:a4:bc:be:ce:6e:ea:59:18:f7:20:fc:d1:8b:b9:3d:be: 16:90:81:3f:56:de:e6:6b:13:ea:e8:39:8a:9c:cf:3d:22:51: 56:c0:e0:b9:1c:af:7b:64:8b:43:1c:37:f0:e0:bd:65:75:74: 31:e1:0f:15:ad:ea:be:d1:b3:30:fb:7e:44:d9:76:21:ff:5a: 6f:41:66:50:74:58:a8:c5:a3:0b:d9:4b:18:c9:4c:dd:97:26: f4:72:a2:c7:cf:ce:f3:ef:f3:62:86:fe:34:83:d2:4a:f6:9b: df:cb:96:d9:d9:29:28:61:32:84:01:0d:d9:c5:f6:51:1c:66: 6d:e5:68:3d:64:26:6c:46:0c:19:00:50:ae:8b:0a:51:91:d5: 27:d6:a1:96:f4:4a:a4:80:3b:12:df:7d:8b:6e:9b:b0:64:6e: 99:09:2b:6f:cf:cb:c1:25:39:26:f6:ca:f6:84:cc:2d:a0:c4: e2:9d:01:74 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICSZQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZD QThCQ0I2RUIzRUM2MTAzMkY4OEQyNkZDMDJCMDUyMjRENDcxODAeFw0yNDA5Mjcw MjMzMDdaFw0yNTA5MjcwMjIyNTdaMDMxMTAvBgNVBAMTKDFDMTc1MEIyMDAwQTkw QkI1Mjk3RTFCQTc4NkY2RUZEQ0ZGNjZFRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCSrEP4iVOoGTnIcxgnzNxEvOv9Ql7F5VFbgLvpRqyCkPX5X8Np KBGzKxpjuZiPZvOXyk+xD2FI1nq8uYQ/gPs0cPMQq6NA45FeXKQAgbPbW0nfYIU0 qMs/ZHcN24n7UK47Lu/dloElN+bTq9ax7rNH54eT+HykE52Cwu8OofK8EkY0W6rK FQjChpcgC6MlK5s/H1fFFJknkctjJ/g83yyhtQ2fopLdcwAxmutl7UxyTylqg4gm U+hdpy+YCxJDxcaFm+boXJyVMUwZw3SpePzq/Q5POWkCkmllKT5jN8LMMUeyGier 9EnBMexD8tjgZGYX6ATid8O78+UXO7pfeyDRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUHBdQsgAKkLtSl+G6eG9u/c/2bukwHwYDVR0jBBgwFoAUT8qLy26z7GEDL4jS b8ArBSJNRxgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgw Mi9UOHFMeTI2ejdHRURMNGpTYjhBckJTSk5SeGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1Q4cUx5MjZ6N0dFREw0alNiOEFyQlNKTlJ4Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MDIvSEJkUXNnQUtrTHRT bC1HNmVHOXVfY18yYnVrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGd68DANBgkqhkiG9w0BAQsFAAOCAQEAgeBVrqJFigzuELMRVtyadilj2Lxc 9/MyplenIpuXda3dXLbnSEho/nJ1Otyj/W/ZZzhdKRM915CiD9sBUj0kwv5c+WbJ Attv6AGkvL7ObupZGPcg/NGLuT2+FpCBP1be5msT6ug5ipzPPSJRVsDguRyve2SL Qxw38OC9ZXV0MeEPFa3qvtGzMPt+RNl2If9ab0FmUHRYqMWjC9lLGMlM3Zcm9HKi x8/O8+/zYob+NIPSSvab38uW2dkpKGEyhAEN2cX2URxmbeVoPWQmbEYMGQBQrosK UZHVJ9ahlvRKpIA7Et99i26bsGRumQkrb8/LwSU5JvbK9oTMLaDE4p0BdA== -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:10 2024 by rpki-client on console-fra.rpki-client.org