$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/oGVNYraFzoy23d28dMWFOXR7bQ4.roa File: oGVNYraFzoy23d28dMWFOXR7bQ4.roa (raw, json) Hash identifier: gxig9kWgKm7yjMUYJRwX7ylRUrHYzX6b/8/0eoj+2TE= Subject key identifier: A0:65:4D:62:B6:85:CE:8C:B6:DD:DD:BC:74:C5:85:39:74:7B:6D:0E Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Certificate serial: 0F5E Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/oGVNYraFzoy23d28dMWFOXR7bQ4.roa Signing time: Tue 15 Oct 2024 09:41:08 +0000 ROA not before: Tue 15 Oct 2024 09:41:08 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137443 IP address blocks: 103.218.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 10:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3934 (0xf5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Validity Not Before: Oct 15 09:41:08 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=A0654D62B685CE8CB6DDDDBC74C58539747B6D0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a4:09:63:9b:d4:a8:77:bb:39:f9:c6:ca:0d: 55:c1:56:c6:a4:3e:94:30:1a:37:fc:96:35:fe:d6: 19:1d:59:98:30:c3:22:b4:fc:ed:c7:44:8a:05:53: e2:fa:a3:20:3f:f4:9d:03:97:9e:b6:ff:1b:8e:c4: 1d:43:5e:44:3a:48:fa:c6:a7:8d:69:88:35:d6:46: 7a:63:2e:d1:ec:81:38:80:73:dd:bf:11:13:81:02: db:aa:fd:ae:d1:45:ae:6e:ca:c3:e1:1e:70:26:db: 59:e0:8d:c6:58:da:74:50:df:84:f9:b7:7f:1c:7f: 33:22:f2:26:f6:33:7f:ce:68:93:da:1f:e7:31:6b: c2:79:a0:4a:0b:db:db:34:55:2f:69:d8:80:a0:ee: 90:4d:c9:cf:05:92:cc:59:9b:78:78:27:36:5f:99: 8d:fd:af:6e:0b:8e:90:9f:04:fc:5d:e8:36:54:ba: 5d:70:ed:3d:c8:60:29:ea:4d:08:d5:c6:df:4f:cf: 48:e2:27:07:3a:37:96:04:7f:1b:49:81:7d:cd:d2: 03:34:4d:8c:4e:61:78:47:78:09:76:90:3c:f1:68: bd:19:69:57:20:4d:34:ad:dd:b1:43:9d:ab:72:d1: 05:e9:62:f4:83:61:5e:f5:fe:c3:c7:b5:02:96:0b: 91:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:65:4D:62:B6:85:CE:8C:B6:DD:DD:BC:74:C5:85:39:74:7B:6D:0E X509v3 Authority Key Identifier: keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/oGVNYraFzoy23d28dMWFOXR7bQ4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.218.95.0/24 Signature Algorithm: sha256WithRSAEncryption 22:99:4c:00:0a:95:13:ae:b3:03:b9:2a:34:db:4e:33:37:4f: 74:24:f4:32:08:0b:94:2f:3c:0c:63:f7:3e:84:27:c6:d4:63: ea:b9:4b:ac:d1:f8:cd:63:14:27:d5:52:1c:14:96:90:11:db: 63:61:d8:26:ef:77:2d:4a:73:19:a5:86:bf:8a:bf:40:46:4b: 93:b9:64:1b:c8:0d:7a:ed:4d:8e:6b:37:04:d1:23:ac:8b:aa: ca:41:65:05:9f:d8:e9:9d:2c:49:20:c9:4a:c3:91:d8:76:61: 89:7c:68:f5:d5:59:4a:ac:59:53:b3:3b:c0:e7:f6:da:fe:cb: b9:cc:4c:a9:b1:47:f7:2a:63:b4:7e:53:f3:a2:0b:2d:de:d0: 4f:d4:d8:94:28:04:a3:9f:2b:b8:53:57:40:35:3b:ee:f5:39: 15:20:06:28:e1:a8:b0:46:3c:2f:07:c9:bc:2a:17:d9:68:93: 6f:0b:79:be:c2:16:f3:e5:cc:8a:06:a6:c4:b8:1a:0d:7b:c7: 36:e6:19:e7:72:e3:50:b7:3b:14:b7:23:14:f3:2c:8a:9b:10: 04:60:07:f8:cb:89:c0:8e:b1:78:9b:99:e3:c7:94:be:d1:f4: 6c:3f:a8:51:c5:92:13:f4:2b:dd:32:73:fc:01:a1:88:81:4b: 40:92:0d:3e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICD14wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDJG QjA1REUzQzU0NEE5RjFDMzQ0QTYzRUI1RjZDRkREMzQ4MTE1NjAeFw0yNDEwMTUw OTQxMDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEEwNjU0RDYyQjY4NUNF OENCNkRERERCQzc0QzU4NTM5NzQ3QjZEMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOpAljm9Sod7s5+cbKDVXBVsakPpQwGjf8ljX+1hkdWZgwwyK0 /O3HRIoFU+L6oyA/9J0Dl562/xuOxB1DXkQ6SPrGp41piDXWRnpjLtHsgTiAc92/ EROBAtuq/a7RRa5uysPhHnAm21ngjcZY2nRQ34T5t38cfzMi8ib2M3/OaJPaH+cx a8J5oEoL29s0VS9p2ICg7pBNyc8FksxZm3h4JzZfmY39r24LjpCfBPxd6DZUul1w 7T3IYCnqTQjVxt9Pz0jiJwc6N5YEfxtJgX3N0gM0TYxOYXhHeAl2kDzxaL0ZaVcg TTSt3bFDnaty0QXpYvSDYV71/sPHtQKWC5EVAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUoGVNYraFzoy23d28dMWFOXR7bQ4wHwYDVR0jBBgwFoAUAvsF3jxUSp8cNEpj 619s/dNIEVYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE3 MS9BdnNGM2p4VVNwOGNORXBqNjE5c19kTklFVlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0F2c0YzanhVU3A4Y05FcGo2MTlzX2ROSUVWWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNzEvb0dWTllyYUZ6b3ky M2QyOGRNV0ZPWFI3YlE0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfaXzANBgkqhkiG9w0BAQsFAAOCAQEAIplMAAqVE66zA7kqNNtOMzdPdCT0 MggLlC88DGP3PoQnxtRj6rlLrNH4zWMUJ9VSHBSWkBHbY2HYJu93LUpzGaWGv4q/ QEZLk7lkG8gNeu1Njms3BNEjrIuqykFlBZ/Y6Z0sSSDJSsOR2HZhiXxo9dVZSqxZ U7M7wOf22v7LucxMqbFH9ypjtH5T86ILLd7QT9TYlCgEo58ruFNXQDU77vU5FSAG KOGosEY8LwfJvCoX2WiTbwt5vsIW8+XMigamxLgaDXvHNuYZ53LjULc7FLcjFPMs ipsQBGAH+MuJwI6xeJuZ48eUvtH0bD+oUcWSE/Qr3TJz/AGhiIFLQJINPg== -----END CERTIFICATE-----Generated at Fri Nov 22 07:02:35 2024 by rpki-client on console-fra.rpki-client.org