$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/snatyuWsFSZzK5vGm6qsS-IIVAU.roa File: snatyuWsFSZzK5vGm6qsS-IIVAU.roa (raw, json) Hash identifier: 4YvjozQGgdv4XL+O1fkM/nvc/ouZfW1B9xa4puoDW2E= Subject key identifier: B2:76:AD:CA:E5:AC:15:26:73:2B:9B:C6:9B:AA:AC:4B:E2:08:54:05 Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 1C5F Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/snatyuWsFSZzK5vGm6qsS-IIVAU.roa Signing time: Sun 07 Apr 2024 11:10:04 +0000 ROA not before: Sun 07 Apr 2024 11:10:04 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 4538 IP address blocks: 103.152.186.0/24 maxlen: 24 103.152.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7263 (0x1c5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Apr 7 11:10:04 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=B276ADCAE5AC1526732B9BC69BAAAC4BE2085405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:ca:62:85:de:3b:78:b6:62:28:66:30:72: b7:43:43:a4:4f:b2:ea:ff:ec:d4:d0:41:d6:73:21: ab:63:59:91:b5:80:9c:ef:aa:d4:fe:c5:93:de:ac: eb:ca:b7:7d:dc:60:9f:cd:d9:51:c9:2d:ad:9d:e2: de:7b:1b:79:0f:ec:be:24:e9:5f:a9:ea:9a:54:72: 3a:21:12:43:3e:b4:3d:1b:3e:d6:ff:5f:8f:58:81: 1d:d4:9d:e7:51:36:53:d2:af:48:ce:1b:ae:9e:5a: c0:98:c8:fe:01:7a:11:1e:65:3a:ea:e9:1d:73:b6: 17:fc:9e:9b:16:92:21:e6:c0:da:c9:c9:f9:3b:e8: 9d:d8:89:df:7b:87:1f:f0:ed:2c:b1:fb:10:40:cc: 85:f0:30:72:d9:66:26:c6:4b:38:42:91:3a:b3:5f: 61:37:e2:71:30:97:d8:df:1e:6f:f5:9b:e6:77:39: 43:f0:95:e4:e3:fe:19:24:b4:98:82:9d:f9:4b:00: 80:67:cb:bc:f1:7b:c3:a2:3f:dd:72:3d:e0:ed:a0: b6:1a:0c:69:4c:ca:d5:d4:1f:3a:b2:83:0b:fb:cf: 23:95:ef:2e:eb:2f:5c:83:8f:9f:8c:43:39:e3:79: 40:59:3f:c0:4b:3b:9c:19:16:d9:f0:55:27:af:11: 57:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:76:AD:CA:E5:AC:15:26:73:2B:9B:C6:9B:AA:AC:4B:E2:08:54:05 X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/snatyuWsFSZzK5vGm6qsS-IIVAU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.152.186.0/23 Signature Algorithm: sha256WithRSAEncryption 60:43:b4:78:32:74:db:23:11:28:d9:8b:ce:ca:38:3e:f9:47: 43:9c:5d:9b:8e:d4:f4:73:03:73:9a:0e:ed:72:db:1d:94:57: a9:55:57:55:21:65:e4:6c:a3:05:ea:bd:ed:1e:91:61:c0:62: a4:18:e0:e1:48:d6:31:7f:c5:f9:18:0e:f7:ca:0e:61:a6:56: ca:1b:8f:07:e3:ef:8e:32:fd:9a:b9:8d:2e:88:59:55:84:5f: 82:74:0d:44:74:45:ad:b2:58:ec:57:a0:d2:32:57:05:ff:cc: f8:f9:08:d4:05:3c:cd:70:29:df:31:72:85:1e:a9:e3:8c:fb: 1b:58:66:af:38:38:45:81:18:04:43:18:71:c6:19:c4:c9:9b: b2:8f:a9:06:a5:8d:fb:eb:bf:ca:2b:5b:65:9e:40:d4:70:c1: 90:07:7b:96:f5:30:1f:f3:24:0f:87:d5:6d:2a:89:1c:bc:3a: 69:2d:75:23:6c:49:4c:85:0b:d2:43:6a:c1:4e:1c:34:b2:e9: 95:bf:ab:44:e5:65:1b:41:9e:5d:4c:bf:f2:31:54:ea:71:db: 6f:53:80:d4:2a:b6:95:9c:2d:cf:e5:a2:dc:97:b8:4d:c6:57: bc:25:e1:b5:a3:a7:f5:29:f1:3a:ad:f5:e3:58:d4:cf:cb:f2: 2b:d2:12:93 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNDA0MDcx MTEwMDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEIyNzZBRENBRTVBQzE1 MjY3MzJCOUJDNjlCQUFBQzRCRTIwODU0MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJNcpihd47eLZiKGYwcrdDQ6RPsur/7NTQQdZzIatjWZG1gJzv qtT+xZPerOvKt33cYJ/N2VHJLa2d4t57G3kP7L4k6V+p6ppUcjohEkM+tD0bPtb/ X49YgR3UnedRNlPSr0jOG66eWsCYyP4BehEeZTrq6R1zthf8npsWkiHmwNrJyfk7 6J3Yid97hx/w7Syx+xBAzIXwMHLZZibGSzhCkTqzX2E34nEwl9jfHm/1m+Z3OUPw leTj/hkktJiCnflLAIBny7zxe8OiP91yPeDtoLYaDGlMytXUHzqygwv7zyOV7y7r L1yDj5+MQznjeUBZP8BLO5wZFtnwVSevEVfNAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUsnatyuWsFSZzK5vGm6qsS+IIVAUwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvc25hdHl1V3NGU1p6 SzV2R202cXNTLUlJVkFVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWeYujANBgkqhkiG9w0BAQsFAAOCAQEAYEO0eDJ02yMRKNmLzso4PvlHQ5xd m47U9HMDc5oO7XLbHZRXqVVXVSFl5GyjBeq97R6RYcBipBjg4UjWMX/F+RgO98oO YaZWyhuPB+PvjjL9mrmNLohZVYRfgnQNRHRFrbJY7Feg0jJXBf/M+PkI1AU8zXAp 3zFyhR6p44z7G1hmrzg4RYEYBEMYccYZxMmbso+pBqWN++u/yitbZZ5A1HDBkAd7 lvUwH/MkD4fVbSqJHLw6aS11I2xJTIUL0kNqwU4cNLLplb+rROVlG0GeXUy/8jFU 6nHbb1OA1Cq2lZwtz+Wi3Je4TcZXvCXhtaOn9SnxOq3141jUz8vyK9ISkw== -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:10 2024 by rpki-client on console-fra.rpki-client.org