$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3146/o-uE52XBn3MRXPQPm6BhHmXcrSo.roa File: o-uE52XBn3MRXPQPm6BhHmXcrSo.roa (raw, json) Hash identifier: PrVf1zpUWN9fpoED4q34+0UuSN/dI4vJIV/D0MyL5dQ= Subject key identifier: A3:EB:84:E7:65:C1:9F:73:11:5C:F4:0F:9B:A0:61:1E:65:DC:AD:2A Certificate issuer: /CN=5F478F43F0AF8FEACCB81EDC7A9C76143180C9AB Certificate serial: 2A6A Authority key identifier: 5F:47:8F:43:F0:AF:8F:EA:CC:B8:1E:DC:7A:9C:76:14:31:80:C9:AB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/X0ePQ_Cvj-rMuB7cepx2FDGAyas.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/o-uE52XBn3MRXPQPm6BhHmXcrSo.roa Signing time: Sat 15 Jun 2024 19:55:43 +0000 ROA not before: Sat 15 Jun 2024 19:55:43 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 151492 IP address blocks: 103.186.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/X0ePQ_Cvj-rMuB7cepx2FDGAyas.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/X0ePQ_Cvj-rMuB7cepx2FDGAyas.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/X0ePQ_Cvj-rMuB7cepx2FDGAyas.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 21:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10858 (0x2a6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F478F43F0AF8FEACCB81EDC7A9C76143180C9AB Validity Not Before: Jun 15 19:55:43 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=A3EB84E765C19F73115CF40F9BA0611E65DCAD2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:eb:d6:86:c8:a4:56:e6:a6:21:0b:d2:a8:63: 6c:68:e4:4c:10:4b:df:f4:8a:f3:06:42:03:47:8b: 76:f9:7a:3b:cb:c3:f0:c9:d4:8f:ef:c6:a0:b2:f3: e3:c1:87:f2:e4:fb:79:f2:6d:dc:d4:a6:52:e6:af: a8:56:ec:ca:4f:30:e3:ff:e5:41:ec:61:2f:df:0f: 7a:e0:1e:64:bf:5a:1a:4b:65:46:d5:3d:76:c7:a8: 3c:fd:c7:e9:0f:22:98:42:e3:ec:f2:b1:bd:b5:f9: 44:a3:bc:2c:14:6a:51:5d:1a:57:da:65:9e:95:84: 6f:9b:78:e0:71:1e:97:d0:e0:8d:e2:35:29:ee:fe: 4f:78:8c:2c:3a:32:5a:2e:d6:d8:23:61:15:d6:df: 85:a4:d7:71:e4:46:8b:f3:ba:2c:8c:be:84:48:ab: 33:fc:72:5c:4b:15:f7:50:eb:8c:a0:f5:37:ab:ed: 36:92:7a:a0:a2:b6:c0:46:55:61:95:27:e1:25:38: 02:db:d0:78:e9:76:60:93:d7:fe:37:af:5e:60:2f: 94:97:bc:71:ea:ad:49:cf:48:4d:a8:00:74:28:23: 3f:d8:d7:55:ab:39:f2:e2:1d:c2:71:80:41:4a:eb: c1:67:f8:38:46:75:80:ad:e2:ba:45:26:cd:76:c1: 9f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EB:84:E7:65:C1:9F:73:11:5C:F4:0F:9B:A0:61:1E:65:DC:AD:2A X509v3 Authority Key Identifier: keyid:5F:47:8F:43:F0:AF:8F:EA:CC:B8:1E:DC:7A:9C:76:14:31:80:C9:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/X0ePQ_Cvj-rMuB7cepx2FDGAyas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/X0ePQ_Cvj-rMuB7cepx2FDGAyas.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/o-uE52XBn3MRXPQPm6BhHmXcrSo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.186.136.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:c3:f8:03:31:8d:f2:64:e0:fa:19:8b:ab:b2:c0:f1:6f:07: c4:f9:2d:92:a1:f2:88:4c:6f:d6:27:64:a3:a5:6d:4a:6f:8f: 63:e6:c5:32:a0:91:1b:63:a8:16:b2:c8:d9:54:1e:d4:04:08: 49:af:a9:81:e8:8c:b5:74:0c:fd:69:b3:1d:63:73:9c:2b:6a: 77:ce:08:57:42:ae:c0:af:30:a5:07:ba:00:6c:a6:81:ca:5a: 9e:74:44:5b:83:00:37:cf:2d:71:9a:c9:0b:3e:14:7a:8f:6e: f4:06:a1:29:a0:be:7b:ed:4d:47:fb:5f:fd:f6:76:79:7f:d2: 3f:0c:2a:77:c3:ac:4e:c5:f2:5c:d2:f8:23:a1:28:9f:aa:2f: 15:9f:e8:72:3f:8e:41:ab:47:2c:c2:42:1e:b9:db:9e:c4:e5: 42:6d:d9:b5:39:bd:ea:d5:ae:01:ee:e1:37:78:00:97:eb:9c: f2:07:51:ce:4b:68:9a:94:ed:16:28:25:07:cf:12:04:c8:fc: aa:ce:86:b0:a0:09:d7:03:03:ee:56:dd:d5:32:bd:1d:44:26: 69:66:83:c0:22:6a:12:c6:16:c1:4d:2d:93:6e:7c:6b:da:a6: 89:95:9b:93:7b:6e:00:25:c7:69:0d:e3:8b:fb:f7:73:a5:e4: 5c:bd:d3:90 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICKmowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUY0 NzhGNDNGMEFGOEZFQUNDQjgxRURDN0E5Qzc2MTQzMTgwQzlBQjAeFw0yNDA2MTUx OTU1NDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEEzRUI4NEU3NjVDMTlG NzMxMTVDRjQwRjlCQTA2MTFFNjVEQ0FEMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG69aGyKRW5qYhC9KoY2xo5EwQS9/0ivMGQgNHi3b5ejvLw/DJ 1I/vxqCy8+PBh/Lk+3nybdzUplLmr6hW7MpPMOP/5UHsYS/fD3rgHmS/WhpLZUbV PXbHqDz9x+kPIphC4+zysb21+USjvCwUalFdGlfaZZ6VhG+beOBxHpfQ4I3iNSnu /k94jCw6Mlou1tgjYRXW34Wk13HkRovzuiyMvoRIqzP8clxLFfdQ64yg9Ter7TaS eqCitsBGVWGVJ+ElOALb0HjpdmCT1/43r15gL5SXvHHqrUnPSE2oAHQoIz/Y11Wr OfLiHcJxgEFK68Fn+DhGdYCt4rpFJs12wZ/zAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUo+uE52XBn3MRXPQPm6BhHmXcrSowHwYDVR0jBBgwFoAUX0ePQ/Cvj+rMuB7c epx2FDGAyaswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0 Ni9YMGVQUV9Ddmotck11QjdjZXB4MkZER0F5YXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1gwZVBRX0N2ai1yTXVCN2NlcHgyRkRHQXlhcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDYvby11RTUyWEJuM01S WFBRUG02QmhIbVhjclNvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWe6iDANBgkqhkiG9w0BAQsFAAOCAQEASsP4AzGN8mTg+hmLq7LA8W8HxPkt kqHyiExv1idko6VtSm+PY+bFMqCRG2OoFrLI2VQe1AQISa+pgeiMtXQM/WmzHWNz nCtqd84IV0KuwK8wpQe6AGymgcpannREW4MAN88tcZrJCz4Ueo9u9AahKaC+e+1N R/tf/fZ2eX/SPwwqd8OsTsXyXNL4I6Eon6ovFZ/ocj+OQatHLMJCHrnbnsTlQm3Z tTm96tWuAe7hN3gAl+uc8gdRzktompTtFiglB88SBMj8qs6GsKAJ1wMD7lbd1TK9 HUQmaWaDwCJqEsYWwU0tk258a9qmiZWbk3tuACXHaQ3ji/v3c6XkXL3TkA== -----END CERTIFICATE-----Generated at Fri Nov 22 19:57:41 2024 by rpki-client on console-ams.rpki-client.org