$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3318/5rxYcqdXJdtcpXLTewvwvvt6VnM.roa File: 5rxYcqdXJdtcpXLTewvwvvt6VnM.roa (raw, json) Hash identifier: My9WuzhKe41sNd6PytKL4eyyt9tP7vadP6/E1CV3chU= Subject key identifier: E6:BC:58:72:A7:57:25:DB:5C:A5:72:D3:7B:0B:F0:BE:FB:7A:56:73 Certificate issuer: /CN=3DCAE1310119B85AC476B00EFFAC2CA1C34B4631 Certificate serial: 03 Authority key identifier: 3D:CA:E1:31:01:19:B8:5A:C4:76:B0:0E:FF:AC:2C:A1:C3:4B:46:31 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PcrhMQEZuFrEdrAO_6wsocNLRjE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/5rxYcqdXJdtcpXLTewvwvvt6VnM.roa Signing time: Tue 08 Oct 2024 02:02:18 +0000 ROA not before: Tue 08 Oct 2024 02:02:18 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 151951 IP address blocks: 103.142.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/PcrhMQEZuFrEdrAO_6wsocNLRjE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/PcrhMQEZuFrEdrAO_6wsocNLRjE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PcrhMQEZuFrEdrAO_6wsocNLRjE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DCAE1310119B85AC476B00EFFAC2CA1C34B4631 Validity Not Before: Oct 8 02:02:18 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E6BC5872A75725DB5CA572D37B0BF0BEFB7A5673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a1:74:46:09:4c:de:51:e2:3f:11:ae:3b:ba: 91:20:bf:0d:e9:d0:47:49:72:e2:02:b6:49:3c:0e: 46:19:8c:65:c2:c0:77:0f:9c:27:35:83:1d:e5:a5: 8f:a9:97:64:42:87:97:9b:05:ad:f5:46:da:de:91: 84:11:50:6a:1c:8b:26:e1:6c:d1:ac:5d:95:90:19: 1a:d2:11:ad:28:33:f5:20:65:38:41:a6:4c:7a:f0: 55:02:83:36:fe:ad:f6:89:58:24:dd:12:2c:54:f5: 89:b7:35:b0:30:00:d0:a5:69:fc:a9:ee:82:ac:a4: 79:50:ff:2b:d5:84:36:32:56:84:5c:15:a4:43:56: ac:08:ad:be:69:2a:e5:18:ae:f0:cd:24:3d:54:62: 25:86:c8:89:37:b9:80:14:fe:a2:8d:f6:d2:23:8c: 01:23:8f:4a:76:0f:06:12:c5:19:b5:09:18:10:c0: 96:2a:b2:42:ea:65:3e:93:c8:53:3c:9c:f7:bb:48: 27:51:07:e9:cf:df:31:f4:a8:c2:9a:0c:0a:6f:67: 1a:54:60:ad:c0:e2:45:4c:42:73:ec:42:e5:a8:be: 58:5f:62:32:90:50:6b:03:4d:6f:49:76:20:68:5c: fe:07:76:84:10:14:5b:66:9d:7b:32:76:a5:2a:b6: 4a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BC:58:72:A7:57:25:DB:5C:A5:72:D3:7B:0B:F0:BE:FB:7A:56:73 X509v3 Authority Key Identifier: keyid:3D:CA:E1:31:01:19:B8:5A:C4:76:B0:0E:FF:AC:2C:A1:C3:4B:46:31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/PcrhMQEZuFrEdrAO_6wsocNLRjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PcrhMQEZuFrEdrAO_6wsocNLRjE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/5rxYcqdXJdtcpXLTewvwvvt6VnM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.142.82.0/24 Signature Algorithm: sha256WithRSAEncryption 14:a7:57:59:f6:95:7c:6d:a5:42:29:d3:43:be:cd:9a:de:63: 83:16:03:26:ce:ff:8d:14:76:99:77:7e:e5:30:cf:d3:aa:85: 86:20:2a:25:5c:c7:38:7f:e8:01:aa:e5:b0:08:63:af:28:c9: ed:86:00:4f:db:3e:e7:61:16:7d:f5:f3:de:72:04:68:d2:42: d9:bd:20:02:3e:fa:84:52:70:35:3c:d1:3c:64:5f:3d:93:2c: 45:24:fe:b8:2a:03:61:d2:cd:54:67:26:f2:c4:b1:7c:86:7d: 54:00:c0:8d:8b:78:c4:7d:8f:ca:e5:6d:d4:88:22:71:f6:f1: 58:96:93:04:81:39:ce:9c:bc:c8:62:79:c9:e4:48:dd:5d:be: 5b:da:0d:a1:26:4c:c1:87:92:67:3d:37:3f:33:da:db:2f:0a: 8d:b0:da:3b:04:76:b9:3a:d9:a4:c0:b9:13:26:69:e2:9a:14: 09:81:26:65:ff:a1:1a:d0:b8:61:9f:c3:65:c9:52:6d:9f:7d: 37:20:6a:4b:bd:53:55:4e:de:08:e2:8b:59:02:01:73:e1:f1: 53:90:d6:f6:12:88:b7:9e:19:81:06:4f:be:72:ff:87:2b:fc: 21:87:98:ad:dc:a2:e1:13:28:a9:27:df:2f:56:71:c7:8c:55: 2b:d6:b2:64 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRENB RTEzMTAxMTlCODVBQzQ3NkIwMEVGRkFDMkNBMUMzNEI0NjMxMB4XDTI0MTAwODAy MDIxOFoXDTI1MDkyNzAyNDAxNFowMzExMC8GA1UEAxMoRTZCQzU4NzJBNzU3MjVE QjVDQTU3MkQzN0IwQkYwQkVGQjdBNTY3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANOhdEYJTN5R4j8Rrju6kSC/DenQR0ly4gK2STwORhmMZcLAdw+c JzWDHeWlj6mXZEKHl5sFrfVG2t6RhBFQahyLJuFs0axdlZAZGtIRrSgz9SBlOEGm THrwVQKDNv6t9olYJN0SLFT1ibc1sDAA0KVp/KnugqykeVD/K9WENjJWhFwVpENW rAitvmkq5Riu8M0kPVRiJYbIiTe5gBT+oo320iOMASOPSnYPBhLFGbUJGBDAliqy QuplPpPIUzyc97tIJ1EH6c/fMfSowpoMCm9nGlRgrcDiRUxCc+xC5ai+WF9iMpBQ awNNb0l2IGhc/gd2hBAUW2adezJ2pSq2ShECAwEAAaOCAfMwggHvMB0GA1UdDgQW BBTmvFhyp1cl21ylctN7C/C++3pWczAfBgNVHSMEGDAWgBQ9yuExARm4WsR2sA7/ rCyhw0tGMTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzE4 L1BjcmhNUUVadUZyRWRyQU9fNndzb2NOTFJqRS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUGNyaE1RRVp1RnJFZHJBT182d3NvY05MUmpFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMxOC81cnhZY3FkWEpkdGNw WExUZXd2d3Z2dDZWbk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ45SMA0GCSqGSIb3DQEBCwUAA4IBAQAUp1dZ9pV8baVCKdNDvs2a3mODFgMm zv+NFHaZd37lMM/TqoWGIColXMc4f+gBquWwCGOvKMnthgBP2z7nYRZ99fPecgRo 0kLZvSACPvqEUnA1PNE8ZF89kyxFJP64KgNh0s1UZybyxLF8hn1UAMCNi3jEfY/K 5W3UiCJx9vFYlpMEgTnOnLzIYnnJ5EjdXb5b2g2hJkzBh5JnPTc/M9rbLwqNsNo7 BHa5OtmkwLkTJmnimhQJgSZl/6Ea0Lhhn8NlyVJtn303IGpLvVNVTt4I4otZAgFz 4fFTkNb2Eoi3nhmBBk++cv+HK/whh5it3KLhEyipJ98vVnHHjFUr1rJk -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:12 2024 by rpki-client on console-fra.rpki-client.org