$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/y10ORlGidjrpfkLfLpPjn1Egg2A.roa File: y10ORlGidjrpfkLfLpPjn1Egg2A.roa (raw, json) Hash identifier: 2YnnhjcfraPbKAbskr3ANZy598Im5Zu0tVVk3t5unog= Subject key identifier: CB:5D:0E:46:51:A2:76:3A:E9:7E:42:DF:2E:93:E3:9F:51:20:83:60 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 0E1B Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/y10ORlGidjrpfkLfLpPjn1Egg2A.roa Signing time: Sat 27 Jul 2024 07:45:17 +0000 ROA not before: Sat 27 Jul 2024 07:45:17 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 209242 IP address blocks: 103.79.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 06:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3611 (0xe1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Jul 27 07:45:17 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=CB5D0E4651A2763AE97E42DF2E93E39F51208360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:83:76:ba:d5:63:25:e0:87:ae:99:b5:cc:47: df:69:67:ef:e2:c1:aa:6d:9b:f2:c7:6f:69:2e:f0: 67:7f:44:9f:32:a0:2b:fd:72:df:eb:bf:e1:86:28: fc:a2:3e:8c:5a:97:0b:ff:a0:bc:9a:e1:b7:6f:bc: 0d:15:27:ca:a0:19:5f:b4:ff:02:b6:43:3e:77:03: 31:76:cf:5f:1a:6b:63:34:5d:16:6b:09:30:04:af: d1:c1:82:c1:ba:2f:fb:97:e6:16:69:f2:54:05:23: e3:a7:70:02:f4:ef:eb:8e:ee:47:4b:e8:55:be:9a: 11:ed:cc:61:fe:f6:e6:9f:e2:ac:8d:10:30:c2:6a: 13:a5:0e:f9:1d:10:93:b7:ee:b8:8b:ef:33:b6:1c: 2a:f6:d4:4d:3d:53:13:fd:da:59:75:4e:be:e5:bf: 0e:3e:f1:0d:cd:2a:62:33:12:b4:b9:00:60:f6:b1: ba:17:48:dd:4b:e6:fe:31:1b:a7:6a:a3:c5:d6:98: fa:0d:26:24:8e:c1:e1:bb:ee:80:fb:2f:9b:2f:a7: fd:fd:0f:1a:f1:80:f8:d2:61:20:f0:0a:78:25:29: 8b:25:ee:37:ef:f0:e5:e4:67:5d:0e:fb:5f:dc:9f: aa:e4:d1:ac:0f:32:db:78:b8:85:3e:44:56:5f:ac: 17:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5D:0E:46:51:A2:76:3A:E9:7E:42:DF:2E:93:E3:9F:51:20:83:60 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/y10ORlGidjrpfkLfLpPjn1Egg2A.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.79.228.0/23 Signature Algorithm: sha256WithRSAEncryption a2:d0:80:aa:b0:63:a1:aa:e6:e7:c4:95:e9:db:a7:03:2e:85: c1:ef:fd:f7:3c:d6:c6:4f:19:6b:c4:1f:6e:b9:35:7b:c9:db: 10:2b:98:91:79:28:8f:cb:2e:24:87:f6:68:b4:75:e0:62:93: 1a:60:c6:29:cb:92:f6:50:4c:b9:48:fa:f2:97:0d:0d:97:f5: ad:c9:9f:31:29:bd:02:53:9f:d5:0e:dc:1c:74:57:e3:9a:d4: 5d:12:a4:67:6c:7d:64:6e:76:25:ce:8a:8b:b8:81:b9:ee:6f: fc:94:12:63:de:16:f7:bf:ee:25:50:ce:ff:0e:04:86:4c:53: 9e:ad:7a:7d:2b:56:39:dd:cb:ea:4b:45:88:d9:79:6d:9a:26: c0:db:be:31:f2:40:9d:9a:01:9c:f2:af:d3:9c:b1:02:c8:f4: 30:87:32:3b:a3:06:f8:7d:f5:81:23:30:0e:d9:f7:b9:ae:32: 52:17:b2:90:7c:15:a0:7e:58:bf:fb:34:06:53:dc:2c:15:c1: 3f:ab:3a:51:d7:87:fe:8a:f6:f5:c0:62:a8:19:b3:f1:b0:e2: bf:32:15:6d:26:4e:76:4e:44:a4:93:f6:5b:3d:82:4d:57:98: 08:01:b0:c5:f8:05:a4:ba:f3:83:42:27:b5:8e:d1:2c:78:4c: 65:a7:3e:86 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNDA3Mjcw NzQ1MTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENCNUQwRTQ2NTFBMjc2 M0FFOTdFNDJERjJFOTNFMzlGNTEyMDgzNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKg3a61WMl4IeumbXMR99pZ+/iwaptm/LHb2ku8Gd/RJ8yoCv9 ct/rv+GGKPyiPoxalwv/oLya4bdvvA0VJ8qgGV+0/wK2Qz53AzF2z18aa2M0XRZr CTAEr9HBgsG6L/uX5hZp8lQFI+OncAL07+uO7kdL6FW+mhHtzGH+9uaf4qyNEDDC ahOlDvkdEJO37riL7zO2HCr21E09UxP92ll1Tr7lvw4+8Q3NKmIzErS5AGD2sboX SN1L5v4xG6dqo8XWmPoNJiSOweG77oD7L5svp/39DxrxgPjSYSDwCnglKYsl7jfv 8OXkZ10O+1/cn6rk0awPMtt4uIU+RFZfrBfhAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUy10ORlGidjrpfkLfLpPjn1Egg2AwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgveTEwT1JsR2lkanJw ZmtMZkxwUGpuMUVnZzJBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWdP5DANBgkqhkiG9w0BAQsFAAOCAQEAotCAqrBjoarm58SV6dunAy6Fwe/9 9zzWxk8Za8Qfbrk1e8nbECuYkXkoj8suJIf2aLR14GKTGmDGKcuS9lBMuUj68pcN DZf1rcmfMSm9AlOf1Q7cHHRX45rUXRKkZ2x9ZG52Jc6Ki7iBue5v/JQSY94W97/u JVDO/w4EhkxTnq16fStWOd3L6ktFiNl5bZomwNu+MfJAnZoBnPKv05yxAsj0MIcy O6MG+H31gSMwDtn3ua4yUheykHwVoH5Yv/s0BlPcLBXBP6s6UdeH/or29cBiqBmz 8bDivzIVbSZOdk5EpJP2Wz2CTVeYCAGwxfgFpLrzg0IntY7RLHhMZac+hg== -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:45 2024 by rpki-client on console-ams.rpki-client.org