$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2898/6NUj9HpyhgHSES6s63mqA6yTP18.roa File: 6NUj9HpyhgHSES6s63mqA6yTP18.roa (raw, json) Hash identifier: NHiur0WBWQDDTyIPrb2gc3PXODrnScUfz+/gbcy++Zk= Subject key identifier: E8:D5:23:F4:7A:72:86:01:D2:11:2E:AC:EB:79:AA:03:AC:93:3F:5F Certificate issuer: /CN=2F39D6C238893451A06EB34C52D77ABC18906BE0 Certificate serial: 1871 Authority key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/6NUj9HpyhgHSES6s63mqA6yTP18.roa Signing time: Sat 27 Jul 2024 07:45:30 +0000 ROA not before: Sat 27 Jul 2024 07:45:30 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 17621 IP address blocks: 103.140.14.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6257 (0x1871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0 Validity Not Before: Jul 27 07:45:30 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=E8D523F47A728601D2112EACEB79AA03AC933F5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:b6:42:1e:fc:9e:96:9a:15:a0:d4:37:db: 06:f7:46:58:34:ab:5a:0e:c3:c1:ab:cd:3c:1f:f7: fa:1f:bf:09:6b:4d:58:88:3c:55:05:eb:1f:c6:45: 12:11:0d:1e:0e:65:a6:02:99:57:ec:8e:40:49:be: e9:56:10:b5:3b:91:03:97:a3:91:39:0c:a1:06:59: 27:70:27:83:b5:48:b5:b0:d7:39:19:f4:d2:9d:ce: aa:bd:a0:78:2c:c9:70:e0:b3:d0:d0:e2:4b:4a:8f: 4d:4a:b0:89:18:91:f1:4a:d0:a0:ae:39:90:9c:e5: df:8f:ec:ef:23:44:19:81:a0:66:a9:1e:bb:c9:65: bd:0b:90:b7:2d:62:2f:39:58:bc:82:f7:0b:9d:db: 94:dc:05:f7:4e:0f:6f:75:c0:95:33:18:1c:9c:5a: 11:35:de:e3:d3:f2:cf:f3:29:3d:7b:5a:f6:51:93: 13:10:a5:be:e8:a8:92:5e:eb:cd:34:3c:b7:c2:a9: ff:bf:8b:42:e2:1e:ff:e3:a8:49:7a:07:4a:59:e4: 72:12:56:91:5d:8c:d8:6a:a1:f2:32:3a:6e:a8:a0: bf:b3:20:6d:75:02:78:d2:09:3e:6d:a1:bf:26:94: 95:42:7f:ff:ec:01:05:1b:28:a0:8a:74:f0:1e:64: 27:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D5:23:F4:7A:72:86:01:D2:11:2E:AC:EB:79:AA:03:AC:93:3F:5F X509v3 Authority Key Identifier: keyid:2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/6NUj9HpyhgHSES6s63mqA6yTP18.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.140.14.0/23 Signature Algorithm: sha256WithRSAEncryption 49:da:88:63:0b:ba:bd:0b:fc:7f:5e:a3:27:48:28:b7:dd:e8: 97:88:ac:35:6d:e4:9c:ad:e3:db:7e:8a:92:92:df:6d:12:f5: df:90:4d:9f:24:bc:df:3a:1c:f1:58:ec:16:bc:f7:ec:e2:35: a6:fb:4b:33:e7:88:ed:ec:94:83:2c:9b:0e:b5:6e:21:c2:a8: 8b:9c:e3:e1:e7:7a:71:63:e8:74:14:a7:07:da:3b:35:bf:51: e0:ff:b4:85:e2:25:78:e6:87:73:36:1f:66:34:4e:b9:f1:f0: 30:ea:04:64:1c:da:c6:80:02:ca:04:91:10:40:dd:0a:92:a4: c4:57:fb:3b:36:9a:9b:d9:8e:c5:d7:a1:45:9e:bd:99:08:90: a3:ef:e3:41:9f:22:1b:c2:ee:c8:e8:dc:af:d8:86:45:b7:97: cb:88:c9:f7:89:98:84:fb:ce:dc:2b:df:db:b6:84:4d:60:47: 37:b1:29:83:88:7b:e5:13:d4:2e:fc:6a:66:e2:b9:a6:32:c0: 70:f3:14:da:6e:00:8b:fa:50:a5:e0:cc:85:8e:9f:83:06:3e: 96:ba:3d:33:a3:e6:a7:1a:3d:3f:bc:57:b7:52:66:22:48:a0: f4:29:ba:e9:c2:f6:64:ab:81:a4:ee:62:eb:c4:6f:ad:0a:28: 2d:49:b7:b2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGHEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYz OUQ2QzIzODg5MzQ1MUEwNkVCMzRDNTJENzdBQkMxODkwNkJFMDAeFw0yNDA3Mjcw NzQ1MzBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU4RDUyM0Y0N0E3Mjg2 MDFEMjExMkVBQ0VCNzlBQTAzQUM5MzNGNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEYbZCHvyelpoVoNQ32wb3Rlg0q1oOw8GrzTwf9/ofvwlrTViI PFUF6x/GRRIRDR4OZaYCmVfsjkBJvulWELU7kQOXo5E5DKEGWSdwJ4O1SLWw1zkZ 9NKdzqq9oHgsyXDgs9DQ4ktKj01KsIkYkfFK0KCuOZCc5d+P7O8jRBmBoGapHrvJ Zb0LkLctYi85WLyC9wud25TcBfdOD291wJUzGBycWhE13uPT8s/zKT17WvZRkxMQ pb7oqJJe6800PLfCqf+/i0LiHv/jqEl6B0pZ5HISVpFdjNhqofIyOm6ooL+zIG11 AnjSCT5tob8mlJVCf//sAQUbKKCKdPAeZCdPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU6NUj9HpyhgHSES6s63mqA6yTP18wHwYDVR0jBBgwFoAULznWwjiJNFGgbrNM Utd6vBiQa+AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5 OC9Mem5Xd2ppSk5GR2dick5NVXRkNnZCaVFhLUEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0x6bld3amlKTkZHZ2JyTk1VdGQ2dkJpUWEtQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTgvNk5VajlIcHloZ0hT RVM2czYzbXFBNnlUUDE4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWeMDjANBgkqhkiG9w0BAQsFAAOCAQEASdqIYwu6vQv8f16jJ0got93ol4is NW3knK3j236KkpLfbRL135BNnyS83zoc8VjsFrz37OI1pvtLM+eI7eyUgyybDrVu IcKoi5zj4ed6cWPodBSnB9o7Nb9R4P+0heIleOaHczYfZjROufHwMOoEZBzaxoAC ygSREEDdCpKkxFf7Ozaam9mOxdehRZ69mQiQo+/jQZ8iG8LuyOjcr9iGRbeXy4jJ 94mYhPvO3Cvf27aETWBHN7Epg4h75RPULvxqZuK5pjLAcPMU2m4Ai/pQpeDMhY6f gwY+lro9M6Pmpxo9P7xXt1JmIkig9Cm66cL2ZKuBpO5i68RvrQooLUm3sg== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:44 2024 by rpki-client on console-ams.rpki-client.org