$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/k7bsOwTp69S8mMzeYa7fGR8pYd4.roa File: k7bsOwTp69S8mMzeYa7fGR8pYd4.roa (raw, json) Hash identifier: YgGu+kPs8m4CcDMc9xQ6ApDvZYLRAg1QxCfbi/x+Nw0= Subject key identifier: 93:B6:EC:3B:04:E9:EB:D4:BC:98:CC:DE:61:AE:DF:19:1F:29:61:DE Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Certificate serial: 090D Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/k7bsOwTp69S8mMzeYa7fGR8pYd4.roa Signing time: Sat 25 Nov 2023 08:37:49 +0000 ROA not before: Sat 25 Nov 2023 08:37:49 +0000 ROA not after: Tue 08 Oct 2024 00:16:33 +0000 asID: 137443 IP address blocks: 103.139.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Validity Not Before: Nov 25 08:37:49 2023 GMT Not After : Oct 8 00:16:33 2024 GMT Subject: CN=93B6EC3B04E9EBD4BC98CCDE61AEDF191F2961DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bd:9e:ee:dc:6e:a6:94:f0:38:39:57:24:fc: d1:ca:76:99:82:10:71:77:10:83:94:d8:0a:06:fb: 4a:23:51:98:f9:7f:0d:6e:b5:37:48:72:19:0c:25: 4e:bb:33:3d:9d:8c:2f:16:04:b4:8f:c6:b0:0d:db: 79:45:17:8b:cf:8c:d6:09:63:67:76:d8:9a:39:5c: 7b:53:c7:d4:16:26:5a:84:0a:6c:84:a6:dd:e3:e2: 0b:de:ab:76:f1:a4:9c:4e:46:09:58:95:8a:99:60: c4:2c:cb:47:81:97:91:49:ea:eb:5b:d2:05:5d:6f: 0f:11:95:ed:20:76:64:b3:ec:f0:69:c5:0b:f7:fb: 38:22:13:06:d5:4e:32:e0:1b:6f:ca:85:79:22:81: d3:d1:22:3c:0b:2c:78:b5:64:e2:ca:ae:a1:5e:3a: 36:d0:24:93:b0:29:75:50:2d:cc:e2:40:36:ee:4a: ab:65:f7:1c:6e:33:ba:79:73:26:13:26:e6:d8:64: 34:e9:0f:48:53:a7:63:8c:49:41:4c:51:58:19:95: 97:7a:fc:b8:4e:19:29:77:bf:6e:17:94:fc:0f:90: 7b:be:71:23:6e:16:6d:2a:cb:71:39:19:96:93:9c: f9:c9:3a:62:a3:9f:0c:99:b1:46:06:c7:ca:20:a6: 8a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B6:EC:3B:04:E9:EB:D4:BC:98:CC:DE:61:AE:DF:19:1F:29:61:DE X509v3 Authority Key Identifier: keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/k7bsOwTp69S8mMzeYa7fGR8pYd4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.139.92.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:d3:bb:91:d9:af:a2:40:2c:e9:df:98:6d:1d:6d:88:7c:8a: 38:e5:d3:d4:f7:63:12:51:40:57:5d:ff:88:8a:31:52:7b:7e: c7:36:ef:5e:a3:de:0f:d5:21:5e:88:f7:09:29:37:d5:e5:aa: de:84:3f:d9:81:e9:25:9d:dd:cf:08:72:d1:b2:43:7f:c7:60: f4:2b:28:c5:d9:3a:83:78:86:2e:56:8d:aa:b1:df:7e:04:1d: 17:da:06:9b:51:33:b9:16:c7:d6:25:2f:41:a7:46:06:e6:17: d8:72:95:16:72:d6:4d:9c:3b:7a:c7:74:1b:ad:91:ae:ea:ea: 86:c4:fd:8d:4a:aa:c2:4c:44:a4:25:8b:a1:3c:b7:8c:b2:f7: 76:bc:f9:23:a0:9e:eb:47:48:92:60:cd:3b:05:0f:2d:fe:bc: d5:aa:4e:09:a8:7f:c6:3a:4c:28:4f:d7:66:0c:a4:b2:a9:f7: e2:c7:d2:da:7a:38:3e:54:2a:21:54:41:02:50:49:34:50:b6: e2:10:58:02:ab:a5:63:ae:d9:3b:2d:b3:b5:b0:e2:e9:ca:2a: a0:d0:09:15:dd:ae:87:de:04:a6:8e:c5:a5:41:1e:46:a8:10: ee:50:47:45:85:85:52:ea:06:48:a3:26:24:0a:83:1e:32:5b: 56:40:1c:d9 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDJG QjA1REUzQzU0NEE5RjFDMzQ0QTYzRUI1RjZDRkREMzQ4MTE1NjAeFw0yMzExMjUw ODM3NDlaFw0yNDEwMDgwMDE2MzNaMDMxMTAvBgNVBAMTKDkzQjZFQzNCMDRFOUVC RDRCQzk4Q0NERTYxQUVERjE5MUYyOTYxREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfvZ7u3G6mlPA4OVck/NHKdpmCEHF3EIOU2AoG+0ojUZj5fw1u tTdIchkMJU67Mz2djC8WBLSPxrAN23lFF4vPjNYJY2d22Jo5XHtTx9QWJlqECmyE pt3j4gveq3bxpJxORglYlYqZYMQsy0eBl5FJ6utb0gVdbw8Rle0gdmSz7PBpxQv3 +zgiEwbVTjLgG2/KhXkigdPRIjwLLHi1ZOLKrqFeOjbQJJOwKXVQLcziQDbuSqtl 9xxuM7p5cyYTJubYZDTpD0hTp2OMSUFMUVgZlZd6/LhOGSl3v24XlPwPkHu+cSNu Fm0qy3E5GZaTnPnJOmKjnwyZsUYGx8ogporhAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUk7bsOwTp69S8mMzeYa7fGR8pYd4wHwYDVR0jBBgwFoAUAvsF3jxUSp8cNEpj 619s/dNIEVYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE3 MS9BdnNGM2p4VVNwOGNORXBqNjE5c19kTklFVlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0F2c0YzanhVU3A4Y05FcGo2MTlzX2ROSUVWWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNzEvazdic093VHA2OVM4 bU16ZVlhN2ZHUjhwWWQ0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWeLXDANBgkqhkiG9w0BAQsFAAOCAQEATNO7kdmvokAs6d+YbR1tiHyKOOXT 1PdjElFAV13/iIoxUnt+xzbvXqPeD9UhXoj3CSk31eWq3oQ/2YHpJZ3dzwhy0bJD f8dg9Csoxdk6g3iGLlaNqrHffgQdF9oGm1EzuRbH1iUvQadGBuYX2HKVFnLWTZw7 esd0G62RrurqhsT9jUqqwkxEpCWLoTy3jLL3drz5I6Ce60dIkmDNOwUPLf681apO Cah/xjpMKE/XZgyksqn34sfS2no4PlQqIVRBAlBJNFC24hBYAqulY67ZOy2ztbDi 6coqoNAJFd2uh94Epo7FpUEeRqgQ7lBHRYWFUuoGSKMmJAqDHjJbVkAc2Q== -----END CERTIFICATE-----Generated at Thu May 2 17:34:34 2024 by rpki-client on console-ams.rpki-client.org