$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/TC5SGEsSbk6qOZDQOZMOKJRJzS8.roa File: TC5SGEsSbk6qOZDQOZMOKJRJzS8.roa (raw, json) Hash identifier: TMi874/SBAig+zK+xBqHWaRYSavUYVZMUZDHF5gp/Nk= Subject key identifier: 4C:2E:52:18:4B:12:6E:4E:AA:39:90:D0:39:93:0E:28:94:49:CD:2F Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 0FEE Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/TC5SGEsSbk6qOZDQOZMOKJRJzS8.roa Signing time: Mon 28 Oct 2024 07:22:54 +0000 ROA not before: Mon 28 Oct 2024 07:22:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 146806 IP address blocks: 103.79.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4078 (0xfee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Oct 28 07:22:54 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4C2E52184B126E4EAA3990D039930E289449CD2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8b:8f:4f:58:b3:93:9c:c9:7b:5c:2f:ba:23: c7:5e:0f:18:b6:3e:59:c3:f7:5b:ad:d2:76:0f:3d: c6:12:65:c9:72:5c:96:69:3a:a9:ec:e4:5f:e0:fd: 71:6d:e0:de:86:11:8b:b4:25:de:d6:88:4d:d0:d4: da:b7:87:69:bb:c7:51:f7:19:ec:99:3f:29:03:a3: 1d:24:e7:8f:e7:3e:7c:7e:01:40:1b:8f:43:75:4d: a2:48:ac:09:00:5a:05:37:df:23:81:65:e3:d5:f5: 7b:70:f7:91:ad:3d:29:f0:e3:1c:54:a3:dc:76:71: d5:bf:99:d8:df:52:9b:8e:ff:f1:bd:6f:c1:6b:1f: 22:5a:87:37:57:02:a0:9a:7c:e5:8c:8d:9c:27:dc: 4f:71:d6:5d:a6:4c:7c:12:0b:fc:0d:af:06:d8:89: 38:b2:a0:96:5c:b6:c1:5e:f3:d0:66:f4:a4:07:13: 93:ce:43:5b:1b:54:4c:43:4d:fe:5b:51:bb:6f:0f: a8:c8:c3:ef:ee:35:ea:b6:d5:f7:2f:67:46:b0:c1: d0:f2:f8:36:8b:db:79:80:37:a8:71:e9:02:f6:05: 92:a1:4c:37:95:10:17:8d:87:8b:95:89:c0:ea:5c: a4:22:e3:72:b3:ae:eb:ca:a1:27:ef:11:02:b9:ef: cb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2E:52:18:4B:12:6E:4E:AA:39:90:D0:39:93:0E:28:94:49:CD:2F X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/TC5SGEsSbk6qOZDQOZMOKJRJzS8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.79.229.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:f3:fc:49:a2:e2:53:8d:fe:67:b9:13:7a:35:a5:30:ba:ad: c6:ba:9c:10:ef:96:5e:38:90:1b:e0:3c:93:03:74:cd:73:bd: 8a:ca:40:29:ff:90:96:1d:69:46:2b:2f:66:1a:0f:58:7f:2c: cc:93:f6:23:0b:a1:8c:a4:d9:f0:97:25:fd:69:1f:b8:b3:fd: 46:fe:e8:4e:f2:7c:8a:53:c2:f1:fa:90:a7:7f:66:63:8d:9e: 9a:d6:4b:0f:00:04:d4:05:fc:6b:a5:5c:d2:c5:bb:d9:7c:a0: 98:29:cf:c9:04:1c:1e:41:37:7a:28:66:48:71:a1:6a:2d:de: 34:67:8e:da:0a:79:fa:f8:f3:3f:b2:b1:37:d4:6a:a5:81:77: fc:63:2d:27:14:b0:b3:63:a8:59:a1:b8:94:5f:50:3b:b9:df: bb:b8:8d:ae:0a:9e:68:1e:8d:32:7d:1b:0a:0b:b0:73:41:f1: 37:a3:65:e8:1a:93:72:21:9f:d0:2c:c7:2b:96:d9:f4:9d:03: 7a:df:1b:14:e0:f8:d3:ff:94:56:bb:88:f7:37:91:1b:e3:4e: 53:fd:e8:35:9d:12:7c:64:32:dd:6d:96:0f:5f:5a:ee:9d:1d: b8:4f:2b:85:1e:be:8b:0f:40:b4:c9:f4:8e:be:d7:3a:5e:4c: 93:e9:b1:60 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICD+4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNDEwMjgw NzIyNTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRDMkU1MjE4NEIxMjZF NEVBQTM5OTBEMDM5OTMwRTI4OTQ0OUNEMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdi49PWLOTnMl7XC+6I8deDxi2PlnD91ut0nYPPcYSZclyXJZp Oqns5F/g/XFt4N6GEYu0Jd7WiE3Q1Nq3h2m7x1H3GeyZPykDox0k54/nPnx+AUAb j0N1TaJIrAkAWgU33yOBZePV9Xtw95GtPSnw4xxUo9x2cdW/mdjfUpuO//G9b8Fr HyJahzdXAqCafOWMjZwn3E9x1l2mTHwSC/wNrwbYiTiyoJZctsFe89Bm9KQHE5PO Q1sbVExDTf5bUbtvD6jIw+/uNeq21fcvZ0awwdDy+DaL23mAN6hx6QL2BZKhTDeV EBeNh4uVicDqXKQi43KzruvKoSfvEQK578sJAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUTC5SGEsSbk6qOZDQOZMOKJRJzS8wHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvVEM1U0dFc1NiazZx T1pEUU9aTU9LSlJKelM4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdP5TANBgkqhkiG9w0BAQsFAAOCAQEAbPP8SaLiU43+Z7kTejWlMLqtxrqc EO+WXjiQG+A8kwN0zXO9ispAKf+Qlh1pRisvZhoPWH8szJP2IwuhjKTZ8Jcl/Wkf uLP9Rv7oTvJ8ilPC8fqQp39mY42emtZLDwAE1AX8a6Vc0sW72XygmCnPyQQcHkE3 eihmSHGhai3eNGeO2gp5+vjzP7KxN9RqpYF3/GMtJxSws2OoWaG4lF9QO7nfu7iN rgqeaB6NMn0bCguwc0HxN6Nl6BqTciGf0CzHK5bZ9J0Det8bFOD40/+UVruI9zeR G+NOU/3oNZ0SfGQy3W2WD19a7p0duE8rhR6+iw9AtMn0jr7XOl5Mk+mxYA== -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:38 2024 by rpki-client on console-fra.rpki-client.org