$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2833/jhEl146Xh18nVcFHzrgpQEmSx_o.roa File: jhEl146Xh18nVcFHzrgpQEmSx_o.roa (raw, json) Hash identifier: /SsBB3irtj2eTzoAwSinOxBMNYgfwekptzt5QE81VUY= Subject key identifier: 8E:11:25:D7:8E:97:87:5F:27:55:C1:47:CE:B8:29:40:49:92:C7:FA Certificate issuer: /CN=63D6C9D8941744BA15480050C04EF53320CA0FC3 Certificate serial: 04A6 Authority key identifier: 63:D6:C9:D8:94:17:44:BA:15:48:00:50:C0:4E:F5:33:20:CA:0F:C3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/jhEl146Xh18nVcFHzrgpQEmSx_o.roa Signing time: Thu 21 Nov 2024 09:10:53 +0000 ROA not before: Thu 21 Nov 2024 09:10:53 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 398704 IP address blocks: 103.125.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 09:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1190 (0x4a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63D6C9D8941744BA15480050C04EF53320CA0FC3 Validity Not Before: Nov 21 09:10:53 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8E1125D78E97875F2755C147CEB829404992C7FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4d:b4:64:f2:2a:16:1d:8b:e1:fd:f3:ef:e2: 75:97:94:19:d1:ca:99:68:e0:e1:1b:56:21:47:32: 3e:9e:b5:24:61:e1:6f:1e:ce:b3:68:ad:27:6f:8d: 96:22:3a:7e:ae:fe:18:d5:7f:25:3c:2d:ab:56:18: c8:6f:a4:e0:35:77:63:02:ab:65:cb:cc:87:ff:1f: 9b:da:42:65:c2:a7:37:ff:d1:54:b0:73:c3:3f:52: c9:82:59:59:f7:3b:15:b5:6e:03:39:b1:23:f5:5c: 61:37:c0:c5:18:18:c4:66:22:b5:18:de:da:a8:51: 58:27:fd:2a:05:76:4f:84:92:3b:23:3a:fc:3b:fa: 4c:a9:5c:9e:c9:7b:49:98:af:1e:96:df:93:38:48: a6:f6:93:43:f5:dd:c6:fc:54:b4:24:69:5c:fc:cd: 41:bb:b1:c0:ae:dd:f4:15:1b:94:6c:d2:d2:4a:00: 4b:27:d5:4c:18:54:05:cb:43:77:06:13:c8:02:44: 79:41:b0:49:26:63:08:44:9b:44:a2:f4:10:c7:1e: 61:0d:38:86:6d:62:92:7c:bb:74:18:dc:02:50:ff: 9f:7c:7b:2b:0c:88:86:6f:68:bf:2c:4b:5f:32:70: 72:6b:62:a0:11:8f:4a:e9:c7:be:aa:26:b7:f9:cb: 7d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:11:25:D7:8E:97:87:5F:27:55:C1:47:CE:B8:29:40:49:92:C7:FA X509v3 Authority Key Identifier: keyid:63:D6:C9:D8:94:17:44:BA:15:48:00:50:C0:4E:F5:33:20:CA:0F:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/jhEl146Xh18nVcFHzrgpQEmSx_o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.125.236.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:c0:33:ec:9e:2d:8c:20:af:4a:b5:aa:e4:5d:63:da:27:b2: 67:5e:55:00:e1:94:77:6a:c8:51:96:df:84:68:71:a6:3d:1a: 8d:4a:2a:a5:3e:57:71:5b:8f:dd:a5:91:05:44:e0:fa:22:b3: 8b:17:1e:c6:f5:1c:e2:62:c8:eb:79:01:77:c1:72:04:c3:17: 89:e1:b3:ad:10:fc:d5:35:16:d6:f0:40:fc:42:9a:69:2e:88: 3c:e6:a4:d4:d7:f1:0b:62:b9:a4:9f:01:b4:8b:bf:33:3c:25: 43:6d:31:1d:a1:a4:95:de:a3:51:b6:d9:ff:34:81:ac:be:43: 9b:26:ad:8f:89:55:77:06:bf:38:f3:b5:b1:e5:f2:e7:8f:be: 0f:29:63:a7:25:b9:19:e8:94:f9:db:95:f8:ef:59:08:0c:f5: 40:2f:5a:d5:86:89:10:45:b7:c3:70:8b:9b:aa:26:63:30:40: c7:83:d0:97:40:70:d2:b2:f7:b4:b8:f3:29:bf:1b:e5:83:e1: 2a:d6:c5:3c:aa:b3:1f:e7:57:fa:0e:bd:1d:40:82:9d:2a:5c: 3d:f2:b0:15:1e:ed:40:2f:9a:ad:59:7d:26:ef:09:b6:85:65: 77:3b:5e:8d:68:fd:6b:47:05:3d:50:c4:1a:88:c3:d5:4d:a6: 07:43:23:41 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjNE NkM5RDg5NDE3NDRCQTE1NDgwMDUwQzA0RUY1MzMyMENBMEZDMzAeFw0yNDExMjEw OTEwNTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhFMTEyNUQ3OEU5Nzg3 NUYyNzU1QzE0N0NFQjgyOTQwNDk5MkM3RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKTbRk8ioWHYvh/fPv4nWXlBnRyplo4OEbViFHMj6etSRh4W8e zrNorSdvjZYiOn6u/hjVfyU8LatWGMhvpOA1d2MCq2XLzIf/H5vaQmXCpzf/0VSw c8M/UsmCWVn3OxW1bgM5sSP1XGE3wMUYGMRmIrUY3tqoUVgn/SoFdk+EkjsjOvw7 +kypXJ7Je0mYrx6W35M4SKb2k0P13cb8VLQkaVz8zUG7scCu3fQVG5Rs0tJKAEsn 1UwYVAXLQ3cGE8gCRHlBsEkmYwhEm0Si9BDHHmENOIZtYpJ8u3QY3AJQ/598eysM iIZvaL8sS18ycHJrYqARj0rpx76qJrf5y32pAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUjhEl146Xh18nVcFHzrgpQEmSx/owHwYDVR0jBBgwFoAUY9bJ2JQXRLoVSABQ wE71MyDKD8MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgz My9ZOWJKMkpRWFJMb1ZTQUJRd0U3MU15REtEOE0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1k5YkoySlFYUkxvVlNBQlF3RTcxTXlES0Q4TS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MzMvamhFbDE0NlhoMThu VmNGSHpyZ3BRRW1TeF9vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmd97DANBgkqhkiG9w0BAQsFAAOCAQEAj8Az7J4tjCCvSrWq5F1j2ieyZ15V AOGUd2rIUZbfhGhxpj0ajUoqpT5XcVuP3aWRBUTg+iKzixcexvUc4mLI63kBd8Fy BMMXieGzrRD81TUW1vBA/EKaaS6IPOak1NfxC2K5pJ8BtIu/MzwlQ20xHaGkld6j UbbZ/zSBrL5Dmyatj4lVdwa/OPO1seXy54++DyljpyW5GeiU+duV+O9ZCAz1QC9a 1YaJEEW3w3CLm6omYzBAx4PQl0Bw0rL3tLjzKb8b5YPhKtbFPKqzH+dX+g69HUCC nSpcPfKwFR7tQC+arVl9Ju8JtoVldztejWj9a0cFPVDEGojD1U2mB0MjQQ== -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:10 2024 by rpki-client on console-ams.rpki-client.org