$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/NoIL6StYpSIxo-AEZPif8fiXOS8.roa File: NoIL6StYpSIxo-AEZPif8fiXOS8.roa (raw, json) Hash identifier: pggJrJCdR6zrjpYj2Fj3+DaEmWZOk5uXOFmwKqUCSjY= Subject key identifier: 36:82:0B:E9:2B:58:A5:22:31:A3:E0:04:64:F8:9F:F1:F8:97:39:2F Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 0FEF Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/NoIL6StYpSIxo-AEZPif8fiXOS8.roa Signing time: Mon 28 Oct 2024 07:22:54 +0000 ROA not before: Mon 28 Oct 2024 07:22:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4812 IP address blocks: 103.79.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4079 (0xfef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Oct 28 07:22:54 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=36820BE92B58A52231A3E00464F89FF1F897392F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:68:13:09:8c:06:ae:24:8f:08:b5:54:da: c3:a3:bc:66:64:3e:ff:a7:9b:78:fa:ce:78:ed:b6: db:fa:8a:37:ba:61:4b:9e:ea:89:c8:47:c7:da:b3: eb:f0:71:8c:1a:96:12:21:a4:e6:c1:df:9b:e6:27: e5:d5:dc:ef:84:f0:9a:9c:ce:2e:12:0e:a6:f7:78: 08:77:ec:ec:12:9f:cf:8f:a0:50:56:63:51:f3:d5: a1:6f:45:53:5e:d7:46:bb:67:f8:a5:43:90:e5:2b: 27:9f:b4:19:4c:9a:97:eb:f0:82:46:8b:e2:77:84: 9e:12:a8:59:91:64:24:10:a7:3a:29:10:a9:34:05: 30:03:95:fe:2d:08:21:ca:ea:eb:91:d5:de:5b:36: 51:52:f2:69:c0:3e:59:be:49:2b:90:0b:57:6a:51: d9:23:a3:5e:50:5f:83:fd:c4:43:a4:16:19:b1:a5: 80:ce:82:d0:fe:26:38:95:b3:cd:48:88:22:75:b7: 60:b2:4f:4c:9b:93:18:63:3d:86:26:b8:76:cc:54: d4:a2:e9:f8:5e:40:48:b6:44:58:f2:e0:65:a5:22: a0:a4:56:48:0d:b9:e3:e2:2a:18:4c:74:a3:44:a3: 72:21:81:02:43:d3:08:15:0e:8d:f1:93:6c:24:28: 06:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:82:0B:E9:2B:58:A5:22:31:A3:E0:04:64:F8:9F:F1:F8:97:39:2F X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/NoIL6StYpSIxo-AEZPif8fiXOS8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.79.228.0/24 Signature Algorithm: sha256WithRSAEncryption c5:fb:0e:d8:54:28:55:48:ec:61:93:d4:75:38:6c:a4:6a:aa: 19:6d:e2:5e:ce:e7:45:04:a4:1e:d7:2e:a1:4e:02:21:91:d8: 41:c5:57:e7:9b:83:b4:92:2d:48:f1:bf:32:7b:87:e2:eb:52: 95:d5:89:d7:c6:3f:af:73:48:f2:12:ce:b9:5e:69:d0:a3:52: 99:63:20:61:8e:ca:27:a8:5a:9d:4f:d2:63:ba:42:52:d1:c0: dc:e0:da:88:36:bf:d3:e8:6b:24:29:38:db:c2:3e:ce:0d:a1: 59:0c:2b:0a:38:37:c4:cb:d9:33:94:1e:48:74:2b:39:71:39: 06:2e:68:96:3e:78:d9:8b:a6:d9:74:dd:b0:0a:46:0d:56:58: a5:99:47:61:97:78:1a:2a:48:cd:98:aa:66:3e:7b:62:c5:34: cd:53:a2:30:d9:18:50:01:c4:ba:fd:22:3b:fc:87:00:d0:cf: 8a:91:b6:74:40:ba:e7:97:41:b7:4d:ab:84:96:60:e0:df:64: 55:36:12:38:18:a6:4b:6b:81:fb:32:de:75:5a:a4:f2:2a:22: 0a:c2:f2:bc:69:06:5e:76:f2:7e:e2:e1:56:54:fa:4f:0b:e3: 86:52:f4:4e:c8:66:bb:30:27:53:11:9a:16:f2:64:48:be:eb: c7:33:32:d7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICD+8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNDEwMjgw NzIyNTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM2ODIwQkU5MkI1OEE1 MjIzMUEzRTAwNDY0Rjg5RkYxRjg5NzM5MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC652gTCYwGriSPCLVU2sOjvGZkPv+nm3j6znjtttv6ije6YUue 6onIR8fas+vwcYwalhIhpObB35vmJ+XV3O+E8Jqczi4SDqb3eAh37OwSn8+PoFBW Y1Hz1aFvRVNe10a7Z/ilQ5DlKyeftBlMmpfr8IJGi+J3hJ4SqFmRZCQQpzopEKk0 BTADlf4tCCHK6uuR1d5bNlFS8mnAPlm+SSuQC1dqUdkjo15QX4P9xEOkFhmxpYDO gtD+JjiVs81IiCJ1t2CyT0ybkxhjPYYmuHbMVNSi6fheQEi2RFjy4GWlIqCkVkgN uePiKhhMdKNEo3IhgQJD0wgVDo3xk2wkKAYzAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUNoIL6StYpSIxo+AEZPif8fiXOS8wHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvTm9JTDZTdFlwU0l4 by1BRVpQaWY4ZmlYT1M4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdP5DANBgkqhkiG9w0BAQsFAAOCAQEAxfsO2FQoVUjsYZPUdThspGqqGW3i Xs7nRQSkHtcuoU4CIZHYQcVX55uDtJItSPG/MnuH4utSldWJ18Y/r3NI8hLOuV5p 0KNSmWMgYY7KJ6hanU/SY7pCUtHA3ODaiDa/0+hrJCk428I+zg2hWQwrCjg3xMvZ M5QeSHQrOXE5Bi5olj542Yum2XTdsApGDVZYpZlHYZd4GipIzZiqZj57YsU0zVOi MNkYUAHEuv0iO/yHANDPipG2dEC655dBt02rhJZg4N9kVTYSOBimS2uB+zLedVqk 8ioiCsLyvGkGXnbyfuLhVlT6TwvjhlL0TshmuzAnUxGaFvJkSL7rxzMy1w== -----END CERTIFICATE-----Generated at Fri Nov 22 14:30:53 2024 by rpki-client on console-ams.rpki-client.org