$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2816/DIIzwjna6x5VEpKk2HYN0-HevDw.roa File: DIIzwjna6x5VEpKk2HYN0-HevDw.roa (raw, json) Hash identifier: lwJ18gPT7MLZ8D++sLG4Luhl2MCnByjAr/kDAeeg/8o= Subject key identifier: 0C:82:33:C2:39:DA:EB:1E:55:12:92:A4:D8:76:0D:D3:E1:DE:BC:3C Certificate issuer: /CN=857BE9F90A5B737CA00E8E04B62C26E142D4A3BA Certificate serial: 0CA2 Authority key identifier: 85:7B:E9:F9:0A:5B:73:7C:A0:0E:8E:04:B6:2C:26:E1:42:D4:A3:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/DIIzwjna6x5VEpKk2HYN0-HevDw.roa Signing time: Wed 13 Mar 2024 01:22:25 +0000 ROA not before: Wed 13 Mar 2024 01:22:25 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 137768 IP address blocks: 103.131.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3234 (0xca2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=857BE9F90A5B737CA00E8E04B62C26E142D4A3BA Validity Not Before: Mar 13 01:22:25 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=0C8233C239DAEB1E551292A4D8760DD3E1DEBC3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:9d:d1:bd:fe:91:68:7e:91:25:32:d0:d3: fe:6e:f8:c8:10:4c:4e:74:65:5e:7d:65:5b:bc:69: 5b:cf:4c:81:80:ab:34:22:cf:67:3d:c0:59:57:1a: 31:57:f9:99:fc:be:52:3b:34:ca:9f:19:84:3d:00: ef:ba:b5:fd:87:c6:4a:4c:c9:b8:c5:f3:40:df:69: d5:98:79:c4:c0:b2:65:1c:a8:0e:f5:e3:94:ce:9e: 03:34:ae:4d:d9:d8:71:18:9c:66:c1:3d:b4:ac:00: 92:35:fc:36:be:94:a6:71:3b:c9:3b:c5:bf:ec:11: c6:09:5b:7c:92:e5:85:52:41:3b:c7:1f:3f:cb:1e: d3:88:35:b2:79:84:93:aa:4b:a9:ec:3c:69:5a:08: 76:72:15:1f:e2:3b:e6:81:03:eb:93:10:b0:3c:b5: ab:e1:ae:bb:42:93:ea:c7:cd:94:84:ad:81:e0:81: 2a:2b:aa:7b:9f:6b:08:f8:79:0f:3b:25:14:0d:b4: 65:34:f9:09:64:9b:51:21:c2:95:44:1d:dc:4d:6c: aa:79:2f:b6:6e:27:ca:1c:0b:4e:2b:9b:10:4a:05: db:2c:80:d3:af:52:82:76:aa:d0:2d:bf:c8:7f:b4: 14:1a:0e:d2:d5:31:04:0b:2c:27:32:b6:76:96:44: 2e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:82:33:C2:39:DA:EB:1E:55:12:92:A4:D8:76:0D:D3:E1:DE:BC:3C X509v3 Authority Key Identifier: keyid:85:7B:E9:F9:0A:5B:73:7C:A0:0E:8E:04:B6:2C:26:E1:42:D4:A3:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/DIIzwjna6x5VEpKk2HYN0-HevDw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.131.36.0/24 Signature Algorithm: sha256WithRSAEncryption c7:9b:7f:76:82:10:a2:d9:fa:b5:fb:95:08:df:6b:43:98:d2: e1:db:43:5d:2b:0a:76:c5:b2:a7:06:34:10:67:48:b6:aa:6d: 5e:b0:05:05:61:80:bb:4d:ca:37:24:19:f0:25:dc:ab:cd:72: 80:d7:e0:21:35:5f:11:70:df:9c:c9:95:07:aa:03:cd:d4:ed: e9:95:c0:93:a4:1f:84:19:5c:e0:21:92:53:6e:34:b8:b7:1f: e2:33:3b:cf:f6:f7:c3:6a:aa:2a:d1:42:97:a2:ed:e5:78:0d: 84:b0:11:1e:45:34:9f:1a:46:ed:fb:c1:e9:94:d7:ff:76:fd: 53:d8:6c:8c:08:d8:03:84:48:4f:2e:10:2b:b3:af:b7:15:d8: 40:97:04:c9:8e:f6:ae:de:63:59:b3:f2:83:e7:66:15:91:b2: 0f:e3:0b:d8:eb:12:94:b2:19:9f:b4:a5:78:95:da:58:25:f6: 96:5a:75:2b:6c:ab:48:2f:a5:06:e4:50:ef:a6:fe:d5:00:84: 63:95:44:32:30:7a:1b:36:f1:6e:74:f6:02:c2:de:d6:1c:10: c7:15:59:0b:af:0b:e7:ec:a2:af:c4:a7:1a:3b:54:74:ee:72: f6:dc:8f:74:6b:74:b1:04:8c:09:72:32:ee:c1:c4:8f:49:6a: b1:5e:e9:b1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODU3 QkU5RjkwQTVCNzM3Q0EwMEU4RTA0QjYyQzI2RTE0MkQ0QTNCQTAeFw0yNDAzMTMw MTIyMjVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDBDODIzM0MyMzlEQUVC MUU1NTEyOTJBNEQ4NzYwREQzRTFERUJDM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDF9Z3Rvf6RaH6RJTLQ0/5u+MgQTE50ZV59ZVu8aVvPTIGAqzQi z2c9wFlXGjFX+Zn8vlI7NMqfGYQ9AO+6tf2HxkpMybjF80DfadWYecTAsmUcqA71 45TOngM0rk3Z2HEYnGbBPbSsAJI1/Da+lKZxO8k7xb/sEcYJW3yS5YVSQTvHHz/L HtOINbJ5hJOqS6nsPGlaCHZyFR/iO+aBA+uTELA8tavhrrtCk+rHzZSErYHggSor qnufawj4eQ87JRQNtGU0+Qlkm1EhwpVEHdxNbKp5L7ZuJ8ocC04rmxBKBdssgNOv UoJ2qtAtv8h/tBQaDtLVMQQLLCcytnaWRC6XAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUDIIzwjna6x5VEpKk2HYN0+HevDwwHwYDVR0jBBgwFoAUhXvp+Qpbc3ygDo4E tiwm4ULUo7owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx Ni9oWHZwLVFwYmMzeWdEbzRFdGl3bTRVTFVvN28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2hYdnAtUXBiYzN5Z0RvNEV0aXdtNFVMVW83by5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTYvRElJendqbmE2eDVW RXBLazJIWU4wLUhldkR3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGeDJDANBgkqhkiG9w0BAQsFAAOCAQEAx5t/doIQotn6tfuVCN9rQ5jS4dtD XSsKdsWypwY0EGdItqptXrAFBWGAu03KNyQZ8CXcq81ygNfgITVfEXDfnMmVB6oD zdTt6ZXAk6QfhBlc4CGSU240uLcf4jM7z/b3w2qqKtFCl6Lt5XgNhLARHkU0nxpG 7fvB6ZTX/3b9U9hsjAjYA4RITy4QK7OvtxXYQJcEyY72rt5jWbPyg+dmFZGyD+ML 2OsSlLIZn7SleJXaWCX2llp1K2yrSC+lBuRQ76b+1QCEY5VEMjB6GzbxbnT2AsLe 1hwQxxVZC68L5+yir8SnGjtUdO5y9tyPdGt0sQSMCXIy7sHEj0lqsV7psQ== -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:10 2024 by rpki-client on console-fra.rpki-client.org