$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2903/6mDN8Bj1tpsdwwCB-cbaS2rpIOg.roa File: 6mDN8Bj1tpsdwwCB-cbaS2rpIOg.roa (raw, json) Hash identifier: nZloh0u1ObZqaKZZLL4dVuFeMBF1O8CjlXd9zr795DU= Subject key identifier: EA:60:CD:F0:18:F5:B6:9B:1D:C3:00:81:F9:C6:DA:4B:6A:E9:20:E8 Certificate issuer: /CN=193519DD773C40D04F641CC44558D3461297B003 Certificate serial: 1707 Authority key identifier: 19:35:19:DD:77:3C:40:D0:4F:64:1C:C4:45:58:D3:46:12:97:B0:03 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/6mDN8Bj1tpsdwwCB-cbaS2rpIOg.roa Signing time: Fri 24 May 2024 02:25:23 +0000 ROA not before: Fri 24 May 2024 02:25:23 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 131482 IP address blocks: 103.108.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 22:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5895 (0x1707) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=193519DD773C40D04F641CC44558D3461297B003 Validity Not Before: May 24 02:25:23 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=EA60CDF018F5B69B1DC30081F9C6DA4B6AE920E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:d3:02:6c:8d:f3:07:54:52:ed:fd:1d:9c: 09:41:7e:07:15:0e:d4:de:77:b8:7f:52:aa:d8:4d: 24:75:b0:7b:2d:f6:da:c9:89:ea:5d:5c:98:21:6c: 6d:5a:5b:f8:49:45:85:cf:1c:52:8c:71:20:c2:8e: af:c5:35:54:bc:84:ff:80:96:34:69:eb:6e:6f:17: da:e8:16:d6:f6:8e:38:cc:26:85:f9:5b:b8:ed:05: 73:4b:62:fe:28:85:4e:4a:e2:d0:cb:10:03:97:fd: 51:0c:1c:08:75:04:0e:f6:b2:f6:3a:80:f0:09:39: 96:8f:da:02:24:54:25:9b:d5:b9:56:2e:1e:74:6d: 6e:84:aa:d7:08:99:00:37:3b:10:32:7b:dd:c1:56: 89:c3:b4:15:aa:6b:04:16:09:fe:53:90:08:ae:0a: c5:fc:23:06:c2:3a:29:65:63:02:f0:42:ef:0b:9b: 10:cd:dd:ea:d6:5b:a2:0c:a6:cc:64:5f:14:8c:f9: 15:fc:13:00:74:53:02:0a:14:5d:03:58:88:15:a9: e7:85:22:6e:6d:b6:18:7c:bf:a4:ce:98:2c:ff:12: 5d:19:f1:db:73:7b:9a:57:0b:3d:88:ef:10:22:74: 6f:95:c8:ec:18:72:3f:9c:f9:a5:7a:5d:ee:0e:04: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:60:CD:F0:18:F5:B6:9B:1D:C3:00:81:F9:C6:DA:4B:6A:E9:20:E8 X509v3 Authority Key Identifier: keyid:19:35:19:DD:77:3C:40:D0:4F:64:1C:C4:45:58:D3:46:12:97:B0:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/6mDN8Bj1tpsdwwCB-cbaS2rpIOg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.108.160.0/22 Signature Algorithm: sha256WithRSAEncryption 61:3e:1c:be:7e:31:ed:57:3b:e3:15:60:78:8e:43:c4:b3:e9: 8c:98:b6:59:51:f8:e5:68:3f:b1:08:3c:b9:3e:f4:a3:d3:7c: d7:bb:2b:99:2c:a7:8a:3b:f9:d0:aa:28:ee:e6:48:d7:8b:44: 83:52:c0:0c:ca:98:5a:6d:b9:91:8f:51:cb:3c:b2:85:db:46: 72:26:fe:2d:64:70:ef:99:1d:94:f4:59:22:f2:c3:59:a7:50: 2d:ce:2f:80:c4:a8:52:41:82:2b:b0:4c:da:16:bd:70:a8:3f: 6c:75:90:a5:d4:44:cf:af:cf:70:df:bb:12:a8:fe:71:f3:14: a2:be:03:6b:f9:02:ec:21:fb:53:ef:a2:81:ac:95:e6:ff:7c: 02:69:80:a9:77:e6:59:a8:93:e5:c5:0f:96:f8:a2:84:b8:bf: 0c:b4:50:bd:87:e5:e5:30:e3:e9:43:11:5f:4b:b6:64:9f:a5: 87:a8:f5:be:b0:ef:57:13:71:61:54:07:83:4e:15:86:37:be: ba:64:36:13:a5:d6:c1:bb:3d:bd:b1:69:a0:78:fa:1a:90:47: d5:a8:53:c4:d7:d7:8f:56:0e:07:80:72:69:f6:d1:56:63:ba: ea:0d:3a:74:1b:3f:d2:4d:61:08:fb:e8:a6:01:dd:f8:cc:f7: 7a:79:c0:80 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFwcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTkz NTE5REQ3NzNDNDBEMDRGNjQxQ0M0NDU1OEQzNDYxMjk3QjAwMzAeFw0yNDA1MjQw MjI1MjNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVBNjBDREYwMThGNUI2 OUIxREMzMDA4MUY5QzZEQTRCNkFFOTIwRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAGdMCbI3zB1RS7f0dnAlBfgcVDtTed7h/UqrYTSR1sHst9trJ iepdXJghbG1aW/hJRYXPHFKMcSDCjq/FNVS8hP+AljRp625vF9roFtb2jjjMJoX5 W7jtBXNLYv4ohU5K4tDLEAOX/VEMHAh1BA72svY6gPAJOZaP2gIkVCWb1blWLh50 bW6EqtcImQA3OxAye93BVonDtBWqawQWCf5TkAiuCsX8IwbCOillYwLwQu8LmxDN 3erWW6IMpsxkXxSM+RX8EwB0UwIKFF0DWIgVqeeFIm5tthh8v6TOmCz/El0Z8dtz e5pXCz2I7xAidG+VyOwYcj+c+aV6Xe4OBALvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU6mDN8Bj1tpsdwwCB+cbaS2rpIOgwHwYDVR0jBBgwFoAUGTUZ3Xc8QNBPZBzE RVjTRhKXsAMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjkw My9HVFVaM1hjOFFOQlBaQnpFUlZqVFJoS1hzQU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dUVVozWGM4UU5CUFpCekVSVmpUUmhLWHNBTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5MDMvNm1ETjhCajF0cHNk d3dDQi1jYmFTMnJwSU9nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdsoDANBgkqhkiG9w0BAQsFAAOCAQEAYT4cvn4x7Vc74xVgeI5DxLPpjJi2 WVH45Wg/sQg8uT70o9N817srmSynijv50Koo7uZI14tEg1LADMqYWm25kY9Ryzyy hdtGcib+LWRw75kdlPRZIvLDWadQLc4vgMSoUkGCK7BM2ha9cKg/bHWQpdREz6/P cN+7Eqj+cfMUor4Da/kC7CH7U++igayV5v98AmmAqXfmWaiT5cUPlviihLi/DLRQ vYfl5TDj6UMRX0u2ZJ+lh6j1vrDvVxNxYVQHg04Vhje+umQ2E6XWwbs9vbFpoHj6 GpBH1ahTxNfXj1YOB4ByafbRVmO66g06dBs/0k1hCPvopgHd+Mz3ennAgA== -----END CERTIFICATE-----Generated at Tue Jun 25 22:35:12 2024 by rpki-client on console-ams.rpki-client.org