$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/Ps93tpLhIYba_M9Rp7ZWlHngspk.roa File: Ps93tpLhIYba_M9Rp7ZWlHngspk.roa (raw, json) Hash identifier: l6d3TI6Ri4KBmHox+239MQ7979NmuFUtDcDiFA3lkis= Subject key identifier: 3E:CF:77:B6:92:E1:21:86:DA:FC:CF:51:A7:B6:56:94:79:E0:B2:99 Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Certificate serial: 0AEF Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/Ps93tpLhIYba_M9Rp7ZWlHngspk.roa Signing time: Fri 01 Mar 2024 05:34:38 +0000 ROA not before: Fri 01 Mar 2024 05:34:38 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 137443 IP address blocks: 103.139.92.0/24 maxlen: 24 103.139.93.0/24 maxlen: 24 103.197.180.0/24 maxlen: 24 103.197.181.0/24 maxlen: 24 103.197.182.0/24 maxlen: 24 103.197.183.0/24 maxlen: 24 103.218.92.0/24 maxlen: 24 103.218.93.0/24 maxlen: 24 103.218.94.0/24 maxlen: 24 103.218.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 15:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Validity Not Before: Mar 1 05:34:38 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=3ECF77B692E12186DAFCCF51A7B6569479E0B299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:ec:25:95:d1:29:5c:17:ee:89:bc:61:9b: 64:26:a1:73:76:e3:ee:29:8d:10:a3:f1:ff:a6:ef: 55:b3:a4:ef:7a:b1:70:51:c4:4f:52:8b:43:77:ee: 9b:de:a6:0d:63:f0:0b:0d:b0:92:71:fb:eb:e8:a7: 14:d9:0e:32:3e:69:e2:64:79:3e:b2:92:39:3e:ca: 8b:d7:f5:18:f3:d2:d1:58:53:3e:f1:b0:9d:d2:47: e5:01:8a:8a:09:53:c9:a0:87:b8:a0:8e:e7:eb:14: 8f:94:b5:02:d6:76:3e:02:09:2e:e8:ae:bc:e4:b6: 9a:25:6a:2a:88:e3:4a:79:99:01:be:91:ac:fd:2a: fb:28:a7:46:ec:e1:b4:dd:26:42:27:42:15:2d:d0: db:d2:d9:b4:7c:b7:50:0b:70:5f:92:a5:27:3a:4f: 01:05:85:d7:13:f6:cf:aa:0e:c9:f3:5b:a4:67:7a: f1:5d:1f:0e:6e:dc:86:57:9f:53:49:90:cf:0b:93: 5d:a5:8b:69:13:37:31:fa:38:0a:a7:e1:2a:c6:47: 3f:83:8c:59:98:bf:a6:1d:4c:00:88:87:2a:db:9b: b3:4c:5c:92:8e:9e:3a:4c:e2:54:e7:67:88:4b:65: 04:50:9b:2e:d5:c7:7c:27:08:56:0c:67:5b:9b:3c: d8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CF:77:B6:92:E1:21:86:DA:FC:CF:51:A7:B6:56:94:79:E0:B2:99 X509v3 Authority Key Identifier: keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/Ps93tpLhIYba_M9Rp7ZWlHngspk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.139.92.0/23 103.197.180.0/22 103.218.92.0/22 Signature Algorithm: sha256WithRSAEncryption 73:84:c1:b7:a2:43:3e:f5:32:d0:36:86:f9:f7:a3:db:d1:b9: 29:19:4d:28:8b:57:b6:a2:dd:91:10:d3:66:86:f7:bb:9a:0e: ee:28:08:5d:28:64:a0:1b:f7:b9:a4:ed:96:bd:69:8c:0c:c9: 0c:b2:b3:4c:bd:a3:66:ad:f8:84:14:c4:1b:41:0b:92:1c:eb: e4:b3:bc:92:88:0f:70:e8:13:e1:74:48:f8:87:e3:ab:19:ca: f4:7e:5c:e9:f2:7c:0f:f3:7b:f1:ee:51:1f:75:1d:87:ac:18: 28:c8:49:d1:f5:48:d1:96:00:a9:0b:d1:0b:ac:c4:62:07:96: 93:20:13:85:82:87:56:69:11:3b:08:ac:b5:b2:0c:e8:7f:88: d4:bc:66:88:d9:17:55:d4:1c:75:38:1b:94:17:4f:db:bb:fd: aa:32:bf:e9:af:7c:b4:5e:22:fa:4c:be:2b:89:36:84:52:cd: 52:a7:cf:49:03:f5:80:61:13:09:6d:54:03:d3:e6:84:4b:d5: 14:39:a5:fd:6b:87:43:7c:f3:0b:4c:b7:86:bf:ee:aa:be:86: 4f:d1:3a:18:03:58:ad:dc:13:a6:24:2b:7d:02:d9:66:f9:f7: 1f:ca:bc:4c:39:aa:fc:e8:0c:24:df:46:65:17:fa:43:e6:24: c8:c6:83:cd -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDJG QjA1REUzQzU0NEE5RjFDMzQ0QTYzRUI1RjZDRkREMzQ4MTE1NjAeFw0yNDAzMDEw NTM0MzhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNFQ0Y3N0I2OTJFMTIx ODZEQUZDQ0Y1MUE3QjY1Njk0NzlFMEIyOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5X+wlldEpXBfuibxhm2QmoXN24+4pjRCj8f+m71WzpO96sXBR xE9Si0N37pvepg1j8AsNsJJx++vopxTZDjI+aeJkeT6ykjk+yovX9Rjz0tFYUz7x sJ3SR+UBiooJU8mgh7igjufrFI+UtQLWdj4CCS7orrzktpolaiqI40p5mQG+kaz9 Kvsop0bs4bTdJkInQhUt0NvS2bR8t1ALcF+SpSc6TwEFhdcT9s+qDsnzW6RnevFd Hw5u3IZXn1NJkM8Lk12li2kTNzH6OAqn4SrGRz+DjFmYv6YdTACIhyrbm7NMXJKO njpM4lTnZ4hLZQRQmy7Vx3wnCFYMZ1ubPNhvAgMBAAGjggH/MIIB+zAdBgNVHQ4E FgQUPs93tpLhIYba/M9Rp7ZWlHngspkwHwYDVR0jBBgwFoAUAvsF3jxUSp8cNEpj 619s/dNIEVYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE3 MS9BdnNGM2p4VVNwOGNORXBqNjE5c19kTklFVlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0F2c0YzanhVU3A4Y05FcGo2MTlzX2ROSUVWWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNzEvUHM5M3RwTGhJWWJh X005UnA3WldsSG5nc3BrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEw EgMEAWeLXAMEAmfFtAMEAmfaXDANBgkqhkiG9w0BAQsFAAOCAQEAc4TBt6JDPvUy 0DaG+fej29G5KRlNKItXtqLdkRDTZob3u5oO7igIXShkoBv3uaTtlr1pjAzJDLKz TL2jZq34hBTEG0ELkhzr5LO8kogPcOgT4XRI+IfjqxnK9H5c6fJ8D/N78e5RH3Ud h6wYKMhJ0fVI0ZYAqQvRC6zEYgeWkyAThYKHVmkROwistbIM6H+I1LxmiNkXVdQc dTgblBdP27v9qjK/6a98tF4i+ky+K4k2hFLNUqfPSQP1gGETCW1UA9PmhEvVFDml /WuHQ3zzC0y3hr/uqr6GT9E6GANYrdwTpiQrfQLZZvn3H8q8TDmq/OgMJN9GZRf6 Q+YkyMaDzQ== -----END CERTIFICATE-----Generated at Thu May 2 10:20:45 2024 by rpki-client on console-ams.rpki-client.org