$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/c7QiWWHGdCFDYC7nN4W5_rLRu40.roa File: c7QiWWHGdCFDYC7nN4W5_rLRu40.roa (raw, json) Hash identifier: Kp/USaGBA5FEHNzQFrbjqDb0Q6N2VDLnQJFi98sKlCA= Subject key identifier: 73:B4:22:59:61:C6:74:21:43:60:2E:E7:37:85:B9:FE:B2:D1:BB:8D Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 0E1C Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/c7QiWWHGdCFDYC7nN4W5_rLRu40.roa Signing time: Sat 27 Jul 2024 07:45:17 +0000 ROA not before: Sat 27 Jul 2024 07:45:17 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 4134 IP address blocks: 103.79.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 03:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3612 (0xe1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Jul 27 07:45:17 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=73B4225961C6742143602EE73785B9FEB2D1BB8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:22:9a:cd:eb:25:ce:72:81:94:34:5e:9a:4a: 5d:3a:9b:5c:e1:72:c1:f8:ad:00:80:d0:80:e7:61: ce:2c:b8:8a:ec:5d:28:ee:63:96:39:46:9e:b5:1b: 13:99:30:9b:78:c9:cc:a7:94:20:bd:76:3e:32:f8: 08:cc:f3:f5:e9:e5:d5:9a:c1:0a:7c:18:6d:2a:1c: df:8e:d4:02:d8:7b:04:88:94:d6:50:46:c5:45:a2: 25:bb:81:3a:ab:7c:fa:41:da:e9:e1:50:ba:b5:82: 3c:fd:a7:2b:90:78:02:f1:d4:de:f4:d5:bf:5b:63: 5a:25:b2:1b:72:c0:90:93:a1:a7:72:e6:6d:af:95: eb:7e:0f:71:6c:4b:16:74:31:5d:3c:17:ba:db:35: b7:dd:13:0c:23:7d:a2:c7:9a:91:0e:86:aa:db:60: ce:89:d3:6f:b5:91:e2:e4:48:b1:6e:54:1b:fe:fa: 70:e2:d5:2e:7e:3d:23:77:47:18:cd:f4:bc:4d:75: 8e:be:f8:bd:8b:9c:7b:55:d8:05:55:94:8c:21:74: b2:45:cc:68:70:27:a3:ae:a0:3b:18:7a:82:f2:64: 5f:63:45:7c:1a:b6:ad:61:39:63:94:ac:b2:88:86: 8e:60:86:6a:62:b4:58:2c:25:67:a1:b7:de:de:81: ab:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B4:22:59:61:C6:74:21:43:60:2E:E7:37:85:B9:FE:B2:D1:BB:8D X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/c7QiWWHGdCFDYC7nN4W5_rLRu40.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.79.228.0/23 Signature Algorithm: sha256WithRSAEncryption 41:fc:70:ea:0c:5f:1c:82:09:2d:d8:8a:87:ab:1d:6e:92:29: 42:ac:a3:22:5d:8a:ea:72:da:fa:65:30:e2:0a:f7:b0:f2:ea: f4:a4:59:0e:d5:bd:d7:08:d4:a4:cd:c1:60:f0:d1:a0:3d:0e: a9:86:bf:a4:61:e5:b6:0a:61:65:95:7e:d5:32:ab:c9:6b:a6: a7:24:fe:82:8a:55:2f:1e:6c:21:8c:b4:60:92:9d:9a:bd:02: 27:0c:ed:4c:ca:f1:e2:3a:3e:33:4b:a6:77:32:0a:47:cd:86: 14:e0:f4:ff:d9:22:7d:be:18:69:26:1c:e3:8e:39:79:83:b8: 27:63:77:77:a2:03:5f:71:d5:20:65:87:a0:30:e5:2b:a9:c3: 47:8a:20:1a:c8:f3:7b:9b:2d:b0:95:c9:8f:e9:af:36:ea:40: 30:c3:05:d4:96:40:fc:bf:0e:00:ea:1c:86:69:a0:a7:c7:77: 5c:4b:56:6e:39:43:6e:c2:b8:18:65:7f:b6:fa:56:a6:0f:72: 84:87:a8:56:8d:7a:7a:98:cc:ba:f8:2f:b4:49:d9:a1:1e:32: fb:44:cd:25:c1:13:e7:3e:de:72:2b:08:b5:f4:3a:dc:65:41: 1a:98:b7:1f:4d:f1:2d:00:14:08:a9:3a:df:f4:c2:41:69:36: c7:64:99:18 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNDA3Mjcw NzQ1MTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDczQjQyMjU5NjFDNjc0 MjE0MzYwMkVFNzM3ODVCOUZFQjJEMUJCOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDIprN6yXOcoGUNF6aSl06m1zhcsH4rQCA0IDnYc4suIrsXSju Y5Y5Rp61GxOZMJt4ycynlCC9dj4y+AjM8/Xp5dWawQp8GG0qHN+O1ALYewSIlNZQ RsVFoiW7gTqrfPpB2unhULq1gjz9pyuQeALx1N701b9bY1olshtywJCToady5m2v let+D3FsSxZ0MV08F7rbNbfdEwwjfaLHmpEOhqrbYM6J02+1keLkSLFuVBv++nDi 1S5+PSN3RxjN9LxNdY6++L2LnHtV2AVVlIwhdLJFzGhwJ6OuoDsYeoLyZF9jRXwa tq1hOWOUrLKIho5ghmpitFgsJWeht97egauZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUc7QiWWHGdCFDYC7nN4W5/rLRu40wHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvYzdRaVdXSEdkQ0ZE WUM3bk40VzVfckxSdTQwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWdP5DANBgkqhkiG9w0BAQsFAAOCAQEAQfxw6gxfHIIJLdiKh6sdbpIpQqyj Il2K6nLa+mUw4gr3sPLq9KRZDtW91wjUpM3BYPDRoD0OqYa/pGHltgphZZV+1TKr yWumpyT+gopVLx5sIYy0YJKdmr0CJwztTMrx4jo+M0umdzIKR82GFOD0/9kifb4Y aSYc4445eYO4J2N3d6IDX3HVIGWHoDDlK6nDR4ogGsjze5stsJXJj+mvNupAMMMF 1JZA/L8OAOochmmgp8d3XEtWbjlDbsK4GGV/tvpWpg9yhIeoVo16epjMuvgvtEnZ oR4y+0TNJcET5z7ecisItfQ63GVBGpi3H03xLQAUCKk63/TCQWk2x2SZGA== -----END CERTIFICATE-----Generated at Tue Nov 26 00:28:16 2024 by rpki-client on console-ams.rpki-client.org