$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3205/de7ZTIqeXAHXNbLeZHscOc9r7YQ.roa File: de7ZTIqeXAHXNbLeZHscOc9r7YQ.roa (raw, json) Hash identifier: f5Zyk9hSJyxSkRvqbObW7SFoi7FoQH9z/or8Avgnl2o= Subject key identifier: 75:EE:D9:4C:8A:9E:5C:01:D7:35:B2:DE:64:7B:1C:39:CF:6B:ED:84 Certificate issuer: /CN=581041F42679F5E17F19C37E490A7794863B2BEB Certificate serial: 06CC Authority key identifier: 58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/de7ZTIqeXAHXNbLeZHscOc9r7YQ.roa Signing time: Tue 25 Jun 2024 09:55:48 +0000 ROA not before: Tue 25 Jun 2024 09:55:48 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 17621 IP address blocks: 103.96.224.0/23 maxlen: 24 103.96.224.0/24 maxlen: 24 103.96.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581041F42679F5E17F19C37E490A7794863B2BEB Validity Not Before: Jun 25 09:55:48 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=75EED94C8A9E5C01D735B2DE647B1C39CF6BED84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:96:57:1d:5e:ef:9f:6f:ae:8b:c8:1b:ba: 44:0a:31:e3:92:e2:2f:e8:06:94:11:2e:a3:42:7e: ed:45:12:d4:4a:ff:09:ad:f3:9e:62:b2:9f:53:03: 1a:98:39:dc:04:6b:c7:2f:ec:75:dc:f4:c1:5e:63: ee:d3:49:4c:ee:a8:97:4b:c6:79:21:de:63:ec:9f: 75:90:92:40:d8:32:a2:a5:7c:a0:28:72:0f:86:c7: 9c:2c:78:ba:44:86:da:53:6c:b2:c1:9a:3c:fd:2d: 6e:41:34:fb:6e:b6:20:20:41:36:80:ff:e8:2b:a5: a8:e8:95:fa:cb:18:ec:23:a3:45:86:fe:90:a8:d1: 01:e9:8e:4c:04:ff:bc:55:08:09:2a:f3:27:31:24: 79:b4:99:27:ec:03:c2:13:4b:73:57:fc:a6:48:12: 7d:69:8e:a0:1e:ab:0c:74:bf:56:fa:eb:21:80:5e: 1b:bd:1d:81:e7:d3:1c:1f:a8:84:fa:d2:c5:e6:e1: 2c:de:b2:5c:ae:35:e9:e1:b4:33:5b:a6:61:70:49: 1e:51:91:be:5c:f5:80:77:d6:06:d0:25:23:bc:0e: 63:c7:f9:90:14:42:95:38:65:70:c3:43:07:f8:86: a6:12:2e:18:3e:20:b6:df:a0:f7:17:e8:1e:e9:82: db:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EE:D9:4C:8A:9E:5C:01:D7:35:B2:DE:64:7B:1C:39:CF:6B:ED:84 X509v3 Authority Key Identifier: keyid:58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/de7ZTIqeXAHXNbLeZHscOc9r7YQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.96.224.0/23 Signature Algorithm: sha256WithRSAEncryption ce:e7:a2:99:49:61:b8:a6:dd:15:d9:dd:49:7f:a0:a3:af:23: c5:74:70:f4:6d:c3:5b:1e:25:78:e2:59:da:3f:24:9d:cb:ad: 7c:67:67:af:75:02:28:a5:50:1c:00:71:6e:69:4d:fa:3a:f0: c5:50:31:4b:73:2b:8d:01:5e:ee:38:bd:e6:c7:e2:b7:91:9f: 44:f4:de:5b:4a:b6:82:5b:31:d0:a4:9a:7a:3c:61:56:2b:39: 95:55:8c:78:c1:bd:e3:88:5b:07:84:bd:7f:c5:e8:05:cc:55: 64:55:87:35:69:9f:67:5b:bf:28:d8:a4:2a:57:77:b1:13:e5: e5:a3:14:5e:04:2a:05:ed:2c:60:6e:70:c0:16:96:29:7e:53: b5:1f:da:16:fd:1c:60:64:ba:a5:17:67:15:d0:5a:67:30:57: 8b:e5:04:8d:d2:c8:8a:01:53:1c:82:b2:f1:e6:87:d2:6d:e5: 5a:18:2e:0f:9b:cb:4f:89:4c:a8:39:6d:ac:31:39:21:03:d0: 52:4d:38:3d:da:67:53:e3:af:99:3f:a9:bd:cd:e6:f2:99:35: a2:ed:8e:46:67:4d:f4:e3:26:f3:f5:e4:ad:4f:52:01:49:7c: 86:03:cf:e0:61:3c:df:ed:2e:d4:16:8a:1e:dc:26:b2:81:fe: ff:de:6e:59 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTgx MDQxRjQyNjc5RjVFMTdGMTlDMzdFNDkwQTc3OTQ4NjNCMkJFQjAeFw0yNDA2MjUw OTU1NDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDc1RUVEOTRDOEE5RTVD MDFENzM1QjJERTY0N0IxQzM5Q0Y2QkVEODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2mpZXHV7vn2+ui8gbukQKMeOS4i/oBpQRLqNCfu1FEtRK/wmt 855isp9TAxqYOdwEa8cv7HXc9MFeY+7TSUzuqJdLxnkh3mPsn3WQkkDYMqKlfKAo cg+Gx5wseLpEhtpTbLLBmjz9LW5BNPtutiAgQTaA/+grpajolfrLGOwjo0WG/pCo 0QHpjkwE/7xVCAkq8ycxJHm0mSfsA8ITS3NX/KZIEn1pjqAeqwx0v1b66yGAXhu9 HYHn0xwfqIT60sXm4SzeslyuNenhtDNbpmFwSR5Rkb5c9YB31gbQJSO8DmPH+ZAU QpU4ZXDDQwf4hqYSLhg+ILbfoPcX6B7pgtszAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUde7ZTIqeXAHXNbLeZHscOc9r7YQwHwYDVR0jBBgwFoAUWBBB9CZ59eF/GcN+ SQp3lIY7K+swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIw NS9XQkJCOUNaNTllRl9HY04tU1FwM2xJWTdLLXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1dCQkI5Q1o1OWVGX0djTi1TUXAzbElZN0stcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMDUvZGU3WlRJcWVYQUhY TmJMZVpIc2NPYzlyN1lRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWdg4DANBgkqhkiG9w0BAQsFAAOCAQEAzueimUlhuKbdFdndSX+go68jxXRw 9G3DWx4leOJZ2j8kncutfGdnr3UCKKVQHABxbmlN+jrwxVAxS3MrjQFe7ji95sfi t5GfRPTeW0q2glsx0KSaejxhVis5lVWMeMG944hbB4S9f8XoBcxVZFWHNWmfZ1u/ KNikKld3sRPl5aMUXgQqBe0sYG5wwBaWKX5TtR/aFv0cYGS6pRdnFdBaZzBXi+UE jdLIigFTHIKy8eaH0m3lWhguD5vLT4lMqDltrDE5IQPQUk04PdpnU+OvmT+pvc3m 8pk1ou2ORmdN9OMm8/XkrU9SAUl8hgPP4GE83+0u1BaKHtwmsoH+/95uWQ== -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:11 2024 by rpki-client on console-fra.rpki-client.org