$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2943/37YW15iLsWmoG_oPYuIHXvuuBIc.roa File: 37YW15iLsWmoG_oPYuIHXvuuBIc.roa (raw, json) Hash identifier: pSKQ7bWnbwbE/tXIoQ9xSOGuzx2kr+0GffJUKBbHHtY= Subject key identifier: DF:B6:16:D7:98:8B:B1:69:A8:1B:FA:0F:62:E2:07:5E:FB:AE:04:87 Certificate issuer: /CN=D5C2CE1261E59FD76D3E3FB00E5EBA8E44DA30C9 Certificate serial: 0E Authority key identifier: D5:C2:CE:12:61:E5:9F:D7:6D:3E:3F:B0:0E:5E:BA:8E:44:DA:30:C9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/37YW15iLsWmoG_oPYuIHXvuuBIc.roa Signing time: Wed 16 Oct 2024 05:47:21 +0000 ROA not before: Wed 16 Oct 2024 05:47:21 +0000 ROA not after: Tue 14 Oct 2025 04:34:08 +0000 asID: 139148 IP address blocks: 103.145.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C2CE1261E59FD76D3E3FB00E5EBA8E44DA30C9 Validity Not Before: Oct 16 05:47:21 2024 GMT Not After : Oct 14 04:34:08 2025 GMT Subject: CN=DFB616D7988BB169A81BFA0F62E2075EFBAE0487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:51:af:89:de:ae:e4:e9:2d:03:91:bc:b5:2b: 66:fb:0c:66:b2:8a:3d:d3:41:2a:37:1e:0f:86:4b: 8d:b4:4d:92:1c:a5:4e:95:a0:d4:23:73:24:9e:1e: e1:18:9c:5d:0c:ab:e3:a0:31:0c:48:6e:01:f0:92: de:5c:43:21:3a:fd:30:2e:91:29:55:6c:1b:75:d6: 0c:07:d0:da:c1:06:ef:58:09:6b:7e:c2:b6:dc:2d: 34:10:c9:5b:e2:e8:5f:6f:ac:f7:f7:bb:7e:48:f0: 9c:a0:c9:af:57:8d:38:c4:1b:eb:1a:b4:b3:ac:ed: 02:4a:bc:e0:87:aa:f3:91:76:c9:af:fa:58:9b:25: 53:f2:f7:a9:57:d4:4d:08:9e:46:06:87:c8:83:0c: 81:51:e7:55:fd:0a:22:51:f7:c2:ee:a2:02:db:44: 2c:3f:2f:70:53:b4:91:ab:c9:67:0d:50:79:07:50: 8c:0d:f5:b8:c0:00:02:41:7f:eb:a2:b8:62:e7:4a: 49:5c:e9:65:a2:ea:29:95:80:84:75:41:8c:8a:c3: 99:c0:cb:0a:b4:ad:8e:60:f0:74:76:e3:aa:2c:45: c8:19:6c:28:79:88:a4:6f:00:9a:11:54:49:73:0a: 73:09:63:f2:9e:9f:12:f2:97:48:95:3d:10:bf:64: 6a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B6:16:D7:98:8B:B1:69:A8:1B:FA:0F:62:E2:07:5E:FB:AE:04:87 X509v3 Authority Key Identifier: keyid:D5:C2:CE:12:61:E5:9F:D7:6D:3E:3F:B0:0E:5E:BA:8E:44:DA:30:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/37YW15iLsWmoG_oPYuIHXvuuBIc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.145.42.0/23 Signature Algorithm: sha256WithRSAEncryption 19:b9:f2:b5:89:df:5b:28:35:53:c6:e8:66:da:48:95:f1:0f: 4f:47:2c:f6:cc:5f:dd:92:fd:19:37:6e:6d:eb:26:cf:7e:a4: 7b:c0:bd:b8:59:1f:1e:af:9e:0f:27:d6:55:05:82:10:65:28: ef:8b:df:c7:3b:84:e5:da:fd:c5:2a:36:b7:41:01:30:69:4e: ff:5f:9a:62:ad:6e:62:31:e5:cc:cc:ca:0c:bc:ef:43:01:d8: c9:cc:be:20:71:30:b6:2d:78:b5:b2:de:e7:7e:d7:b4:ae:02: 2a:13:de:74:4f:23:60:c9:7e:c7:47:9e:60:c9:90:0b:aa:1f: 07:75:0c:58:22:f9:65:c2:93:f2:6a:13:48:09:d4:d8:00:0b: 73:98:af:bf:1f:75:ef:70:bd:7f:a7:c4:fd:fa:0f:b7:07:e7: 1b:70:0d:50:87:fc:0e:59:12:d5:32:7f:59:2a:28:a9:58:9f: 5c:24:a5:15:4b:bd:57:dc:de:ec:47:14:ff:8f:cf:55:6c:6b: f6:1d:6f:2e:9b:87:52:98:1e:59:36:db:34:f2:2d:96:3a:dc: ce:32:1d:40:27:8a:58:5b:49:16:73:a5:46:4a:6a:60:b7:62: cb:36:8f:f5:6f:a5:09:0f:46:34:a4:99:92:e7:09:5c:0c:1b: 6e:b5:59:45 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENUMy Q0UxMjYxRTU5RkQ3NkQzRTNGQjAwRTVFQkE4RTQ0REEzMEM5MB4XDTI0MTAxNjA1 NDcyMVoXDTI1MTAxNDA0MzQwOFowMzExMC8GA1UEAxMoREZCNjE2RDc5ODhCQjE2 OUE4MUJGQTBGNjJFMjA3NUVGQkFFMDQ4NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMtRr4neruTpLQORvLUrZvsMZrKKPdNBKjceD4ZLjbRNkhylTpWg 1CNzJJ4e4RicXQyr46AxDEhuAfCS3lxDITr9MC6RKVVsG3XWDAfQ2sEG71gJa37C ttwtNBDJW+LoX2+s9/e7fkjwnKDJr1eNOMQb6xq0s6ztAkq84Ieq85F2ya/6WJsl U/L3qVfUTQieRgaHyIMMgVHnVf0KIlH3wu6iAttELD8vcFO0kavJZw1QeQdQjA31 uMAAAkF/66K4YudKSVzpZaLqKZWAhHVBjIrDmcDLCrStjmDwdHbjqixFyBlsKHmI pG8AmhFUSXMKcwlj8p6fEvKXSJU9EL9kai0CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBTfthbXmIuxaagb+g9i4gde+64EhzAfBgNVHSMEGDAWgBTVws4SYeWf120+P7AO XrqORNowyTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yOTQz LzFjTE9FbUhsbjlkdFBqLXdEbDY2amtUYU1Nay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMWNMT0VtSGxuOWR0UGotd0RsNjZqa1RhTU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk0My8zN1lXMTVpTHNXbW9H X29QWXVJSFh2dXVCSWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5EqMA0GCSqGSIb3DQEBCwUAA4IBAQAZufK1id9bKDVTxuhm2kiV8Q9PRyz2 zF/dkv0ZN25t6ybPfqR7wL24WR8er54PJ9ZVBYIQZSjvi9/HO4Tl2v3FKja3QQEw aU7/X5pirW5iMeXMzMoMvO9DAdjJzL4gcTC2LXi1st7nfte0rgIqE950TyNgyX7H R55gyZALqh8HdQxYIvllwpPyahNICdTYAAtzmK+/H3XvcL1/p8T9+g+3B+cbcA1Q h/wOWRLVMn9ZKiipWJ9cJKUVS71X3N7sRxT/j89VbGv2HW8um4dSmB5ZNts08i2W OtzOMh1AJ4pYW0kWc6VGSmpgt2LLNo/1b6UJD0Y0pJmS5wlcDBtutVlF -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:10 2024 by rpki-client on console-fra.rpki-client.org