$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/316/axE17Fh5Beb0FRGHPDYgXwhg19o.roa File: axE17Fh5Beb0FRGHPDYgXwhg19o.roa (raw, json) Hash identifier: 3XmYGYxaXuzTxlvCzxhFYZwOhWAkn5o/Y8hkwzgXGns= Subject key identifier: 6B:11:35:EC:58:79:05:E6:F4:15:11:87:3C:36:20:5F:08:60:D7:DA Certificate issuer: /CN=4BC6A9B58BBEEAD50DDD48F844782C8294A18B39 Certificate serial: 115F Authority key identifier: 4B:C6:A9:B5:8B:BE:EA:D5:0D:DD:48:F8:44:78:2C:82:94:A1:8B:39 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/S8aptYu-6tUN3Uj4RHgsgpShizk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/axE17Fh5Beb0FRGHPDYgXwhg19o.roa Signing time: Sat 27 Jul 2024 07:45:49 +0000 ROA not before: Sat 27 Jul 2024 07:45:49 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 38378 IP address blocks: 103.92.88.0/22 maxlen: 24 119.40.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/S8aptYu-6tUN3Uj4RHgsgpShizk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/S8aptYu-6tUN3Uj4RHgsgpShizk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/S8aptYu-6tUN3Uj4RHgsgpShizk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4447 (0x115f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC6A9B58BBEEAD50DDD48F844782C8294A18B39 Validity Not Before: Jul 27 07:45:49 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=6B1135EC587905E6F41511873C36205F0860D7DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:14:56:79:25:1f:dd:a0:ff:3a:0b:d7:45: 4b:58:0c:25:bf:7a:d4:88:fb:4b:0c:fc:dc:75:a4: 34:b5:66:02:bf:c1:5c:98:ec:e9:f0:39:28:60:90: 3a:d0:b4:5a:c6:50:87:d8:ee:33:3e:e8:40:72:7a: c8:9c:8c:c5:de:38:7d:9f:d8:09:59:41:e1:73:00: 8e:2c:40:99:12:a4:e2:14:49:56:62:16:d3:f6:23: 29:45:0b:01:b1:ec:57:84:67:33:65:de:7b:3b:f7: 5e:21:b8:6d:5c:5a:05:e5:ea:3b:f8:00:4f:0c:97: 2a:9a:9b:6d:df:d1:05:91:36:6d:7b:cb:2a:d6:a5: e6:ac:cb:62:3f:b3:ac:d0:ad:0b:d4:35:92:3a:6e: 2e:6b:12:49:75:29:f4:50:2a:a8:1a:d7:16:aa:b7: dc:6f:4d:28:a3:74:e2:72:ac:35:35:fc:1f:f3:ef: f5:a9:62:5d:f2:08:a8:ad:1f:24:96:53:3f:59:ed: 3f:61:dd:eb:17:5e:8b:d9:8a:01:b5:68:2d:dd:c8: 71:be:d4:a0:3b:ad:96:49:30:f8:cd:c1:2a:3e:0d: 99:d2:50:6c:06:02:12:04:88:5f:68:a1:6a:09:25: bc:39:07:2f:65:b7:76:b1:02:51:e7:8f:f5:05:72: 2e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:11:35:EC:58:79:05:E6:F4:15:11:87:3C:36:20:5F:08:60:D7:DA X509v3 Authority Key Identifier: keyid:4B:C6:A9:B5:8B:BE:EA:D5:0D:DD:48:F8:44:78:2C:82:94:A1:8B:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/S8aptYu-6tUN3Uj4RHgsgpShizk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/S8aptYu-6tUN3Uj4RHgsgpShizk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/axE17Fh5Beb0FRGHPDYgXwhg19o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.92.88.0/22 119.40.64.0/20 Signature Algorithm: sha256WithRSAEncryption 28:6f:ef:c3:ca:89:2f:23:f3:45:7f:98:83:a9:13:1d:09:ee: d0:18:11:26:f0:d0:5a:a8:70:e0:8b:66:7d:1d:bd:74:c0:53: d7:26:b8:4e:d1:2a:83:c2:ff:f2:83:87:64:5e:a0:a0:45:58: 72:a0:a6:d8:6a:72:44:40:2a:30:e3:16:b6:99:4d:0d:f7:2d: 36:aa:17:3b:f5:1c:b4:05:d4:a8:36:7d:78:52:4a:57:4f:72: 11:22:a8:b0:b5:bc:a1:0f:36:14:ae:9a:4b:f1:55:de:56:bb: 03:59:22:8d:1b:63:37:89:d3:76:e3:74:a5:9d:78:d1:b0:05: 33:09:b6:a4:af:ce:aa:94:67:75:97:be:2d:bc:65:db:ab:4b: 84:dc:86:18:c9:6c:3e:62:41:4b:ed:b5:d8:76:c3:20:52:64: 73:9d:7a:ab:38:9f:60:75:ef:39:77:79:d7:2e:e3:09:eb:b3: 4d:6b:94:20:02:bf:53:9f:2f:1e:5a:ff:0b:a7:2d:0d:aa:a7: bf:6d:02:3e:04:07:9e:53:c3:45:69:4d:24:53:4f:90:aa:86: c6:46:cf:45:e8:66:ae:74:c8:92:e2:4c:33:75:2d:e1:d0:a7: ee:b9:61:f8:19:42:ae:e8:c0:d3:2d:bf:65:1d:38:80:87:41: ed:27:0e:91 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICEV8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEJD NkE5QjU4QkJFRUFENTBEREQ0OEY4NDQ3ODJDODI5NEExOEIzOTAeFw0yNDA3Mjcw NzQ1NDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZCMTEzNUVDNTg3OTA1 RTZGNDE1MTE4NzNDMzYyMDVGMDg2MEQ3REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrORRWeSUf3aD/OgvXRUtYDCW/etSI+0sM/Nx1pDS1ZgK/wVyY 7OnwOShgkDrQtFrGUIfY7jM+6EByesicjMXeOH2f2AlZQeFzAI4sQJkSpOIUSVZi FtP2IylFCwGx7FeEZzNl3ns7914huG1cWgXl6jv4AE8Mlyqam23f0QWRNm17yyrW peasy2I/s6zQrQvUNZI6bi5rEkl1KfRQKqga1xaqt9xvTSijdOJyrDU1/B/z7/Wp Yl3yCKitHySWUz9Z7T9h3esXXovZigG1aC3dyHG+1KA7rZZJMPjNwSo+DZnSUGwG AhIEiF9ooWoJJbw5By9lt3axAlHnj/UFci7/AgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUaxE17Fh5Beb0FRGHPDYgXwhg19owHwYDVR0jBBgwFoAUS8aptYu+6tUN3Uj4 RHgsgpShizkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 L1M4YXB0WXUtNnRVTjNVajRSSGdzZ3BTaGl6ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUzhhcHRZdS02dFVOM1VqNFJIZ3NncFNoaXprLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2L2F4RTE3Rmg1QmViMEZS R0hQRFlnWHdoZzE5by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAJnXFgDBAR3KEAwDQYJKoZIhvcNAQELBQADggEBAChv78PKiS8j80V/mIOpEx0J 7tAYESbw0FqocOCLZn0dvXTAU9cmuE7RKoPC//KDh2ReoKBFWHKgpthqckRAKjDj FraZTQ33LTaqFzv1HLQF1Kg2fXhSSldPchEiqLC1vKEPNhSumkvxVd5WuwNZIo0b YzeJ03bjdKWdeNGwBTMJtqSvzqqUZ3WXvi28ZdurS4TchhjJbD5iQUvttdh2wyBS ZHOdeqs4n2B17zl3edcu4wnrs01rlCACv1OfLx5a/wunLQ2qp79tAj4EB55Tw0Vp TSRTT5CqhsZGz0XoZq50yJLiTDN1LeHQp+65YfgZQq7owNMtv2UdOICHQe0nDpE= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:11 2024 by rpki-client on console-fra.rpki-client.org