$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3238/d5KUtbMJ0zY3qyxXev80syzOgrI.roa File: d5KUtbMJ0zY3qyxXev80syzOgrI.roa (raw, json) Hash identifier: HfM1riKkZy1xpm6dibIgNBu3AAtot+IUYpemOy0Hh14= Subject key identifier: 77:92:94:B5:B3:09:D3:36:37:AB:2C:57:7A:FF:34:B3:2C:CE:82:B2 Certificate issuer: /CN=19C72CE7187A5E07E6D0F8E351BD798589B111CC Certificate serial: 0693 Authority key identifier: 19:C7:2C:E7:18:7A:5E:07:E6:D0:F8:E3:51:BD:79:85:89:B1:11:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gccs5xh6Xgfm0PjjUb15hYmxEcw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/d5KUtbMJ0zY3qyxXev80syzOgrI.roa Signing time: Wed 31 Jul 2024 11:37:51 +0000 ROA not before: Wed 31 Jul 2024 11:37:51 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 4837 IP address blocks: 103.21.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/Gccs5xh6Xgfm0PjjUb15hYmxEcw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/Gccs5xh6Xgfm0PjjUb15hYmxEcw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gccs5xh6Xgfm0PjjUb15hYmxEcw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19C72CE7187A5E07E6D0F8E351BD798589B111CC Validity Not Before: Jul 31 11:37:51 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=779294B5B309D33637AB2C577AFF34B32CCE82B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:46:d2:cd:a4:92:13:99:47:b9:b4:25:a6: 7d:dd:2e:5b:14:12:63:0e:55:f2:f3:37:24:36:30: d4:90:3c:42:64:dc:9c:a9:f3:9b:2a:d1:bc:21:c0: 29:dd:d6:3b:3c:fd:64:e2:93:86:75:c8:ae:94:ec: 7b:4d:dd:b1:33:1e:46:76:2e:14:41:36:86:cf:df: 6f:96:5c:e3:ef:93:38:36:7e:48:26:ee:1f:d3:15: 71:f8:55:23:18:97:68:0e:0e:6f:c8:a0:ea:c5:c0: df:e4:17:65:14:c7:bc:a5:24:65:05:ec:f1:7b:d9: 38:52:f1:a5:e0:63:26:51:17:b5:99:12:12:81:0b: 5c:f4:b7:1e:7d:12:3b:b7:db:69:dd:3c:70:0f:3e: 16:44:16:44:05:a0:4d:45:c3:9b:8c:3d:88:e5:4d: cb:c6:60:70:61:fb:ee:e4:5d:ec:1c:97:ef:aa:6b: 1b:36:74:f7:94:65:ab:74:6a:05:65:2a:b0:39:f8: db:98:e3:02:c4:bd:53:8f:3a:89:c2:f0:37:a2:24: 5a:a9:3b:b8:ec:4c:fc:cc:ed:94:b3:eb:1f:e3:b9: cd:28:e8:7a:70:52:e0:b4:09:54:1a:c0:2d:c1:ee: 27:1c:9a:4c:75:1e:25:ee:6a:40:2d:ab:12:1d:a8: ce:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:92:94:B5:B3:09:D3:36:37:AB:2C:57:7A:FF:34:B3:2C:CE:82:B2 X509v3 Authority Key Identifier: keyid:19:C7:2C:E7:18:7A:5E:07:E6:D0:F8:E3:51:BD:79:85:89:B1:11:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/Gccs5xh6Xgfm0PjjUb15hYmxEcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gccs5xh6Xgfm0PjjUb15hYmxEcw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/d5KUtbMJ0zY3qyxXev80syzOgrI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.21.103.0/24 Signature Algorithm: sha256WithRSAEncryption b1:6a:40:12:e8:8c:5d:2b:e6:fb:7a:1c:3a:6a:eb:ee:ee:87: 27:28:ac:f2:d4:de:24:31:6a:bc:f4:f4:16:bb:1a:e8:d0:b9: 13:4f:f7:64:aa:34:b9:c3:db:e2:bf:35:f8:b2:dc:16:e4:fc: 3f:f8:4e:fe:2f:ca:39:e6:d0:13:3e:b4:20:17:86:7f:b4:c2: 38:9f:bd:b4:44:48:22:c5:1c:6c:4b:67:d9:94:8f:3f:e1:3f: 31:be:59:e7:ba:d1:6f:a1:f3:bb:20:f7:23:58:aa:b9:e6:ef: bf:42:3e:68:38:96:9d:37:af:dc:00:2c:ac:1b:32:f7:4e:8f: 7e:ab:06:49:6e:12:26:47:05:7c:63:10:7d:cf:45:98:7e:fb: e8:41:a8:94:de:2d:95:3c:22:85:02:26:b2:a3:8e:9c:64:4f: db:a4:b6:7a:59:f1:31:1f:78:73:a1:2f:d4:f0:58:4b:04:9a: ba:dd:53:92:28:bd:1d:58:ac:ac:b1:30:1e:ce:03:7f:c3:6e: 13:c2:1b:af:f8:b4:00:90:5d:8f:c3:1f:26:18:e0:9c:3b:72: 0b:7d:b5:95:d2:a9:02:72:41:e9:8a:21:d6:fa:06:26:e1:b3: ea:49:c7:6e:84:3f:8f:14:34:dd:63:7a:e3:ad:1a:ad:26:5c: 8c:66:73:76 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTlD NzJDRTcxODdBNUUwN0U2RDBGOEUzNTFCRDc5ODU4OUIxMTFDQzAeFw0yNDA3MzEx MTM3NTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDc3OTI5NEI1QjMwOUQz MzYzN0FCMkM1NzdBRkYzNEIzMkNDRTgyQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNr0bSzaSSE5lHubQlpn3dLlsUEmMOVfLzNyQ2MNSQPEJk3Jyp 85sq0bwhwCnd1js8/WTik4Z1yK6U7HtN3bEzHkZ2LhRBNobP32+WXOPvkzg2fkgm 7h/TFXH4VSMYl2gODm/IoOrFwN/kF2UUx7ylJGUF7PF72ThS8aXgYyZRF7WZEhKB C1z0tx59Eju322ndPHAPPhZEFkQFoE1Fw5uMPYjlTcvGYHBh++7kXewcl++qaxs2 dPeUZat0agVlKrA5+NuY4wLEvVOPOonC8DeiJFqpO7jsTPzM7ZSz6x/juc0o6Hpw UuC0CVQawC3B7iccmkx1HiXuakAtqxIdqM7dAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUd5KUtbMJ0zY3qyxXev80syzOgrIwHwYDVR0jBBgwFoAUGccs5xh6Xgfm0Pjj Ub15hYmxEcwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz OC9HY2NzNXhoNlhnZm0wUGpqVWIxNWhZbXhFY3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0djY3M1eGg2WGdmbTBQampVYjE1aFlteEVjdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzgvZDVLVXRiTUowelkz cXl4WGV2ODBzeXpPZ3JJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGcVZzANBgkqhkiG9w0BAQsFAAOCAQEAsWpAEuiMXSvm+3ocOmrr7u6HJyis 8tTeJDFqvPT0Frsa6NC5E0/3ZKo0ucPb4r81+LLcFuT8P/hO/i/KOebQEz60IBeG f7TCOJ+9tERIIsUcbEtn2ZSPP+E/Mb5Z57rRb6HzuyD3I1iquebvv0I+aDiWnTev 3AAsrBsy906PfqsGSW4SJkcFfGMQfc9FmH776EGolN4tlTwihQImsqOOnGRP26S2 elnxMR94c6Ev1PBYSwSaut1Tkii9HVisrLEwHs4Df8NuE8Ibr/i0AJBdj8MfJhjg nDtyC321ldKpAnJB6Yoh1voGJuGz6knHboQ/jxQ03WN6460arSZcjGZzdg== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:45 2024 by rpki-client on console-ams.rpki-client.org