$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/40/b8PfpXVzD2EuBiMlzhgmZ5dV2nQ.roa File: b8PfpXVzD2EuBiMlzhgmZ5dV2nQ.roa (raw, json) Hash identifier: Iy75CL3PVv5S8h/Dm3h2nw3zYHbj+HlVQ/XL65AIV/o= Subject key identifier: 6F:C3:DF:A5:75:73:0F:61:2E:06:23:25:CE:18:26:67:97:55:DA:74 Certificate issuer: /CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847 Certificate serial: 1374 Authority key identifier: AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/b8PfpXVzD2EuBiMlzhgmZ5dV2nQ.roa Signing time: Sat 11 May 2024 07:48:02 +0000 ROA not before: Sat 11 May 2024 07:48:02 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 17429 IP address blocks: 43.247.236.0/22 maxlen: 24 103.238.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4980 (0x1374) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847 Validity Not Before: May 11 07:48:02 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=6FC3DFA575730F612E062325CE1826679755DA74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:86:5b:a1:76:20:1c:d0:13:3a:9d:e6:7f: 07:30:64:23:dc:98:9b:34:20:da:73:94:79:95:75: ce:35:cc:67:24:71:9c:97:6f:8d:3c:39:fe:68:06: 14:0f:d8:fb:b0:8c:f8:e9:50:9e:31:6e:40:62:19: 9c:1c:25:1c:f9:b7:df:af:d2:37:17:a1:96:24:e6: 05:a2:e1:7d:a8:cb:5e:13:af:5f:e7:30:60:b0:f4: 29:23:c1:15:1c:64:bc:75:05:9a:78:ae:95:eb:07: 10:66:bc:31:87:99:20:6a:d1:ec:91:24:e1:ef:d7: 8f:e6:c2:6b:c7:fc:f7:0a:ce:64:ad:08:d4:13:44: 50:06:46:af:7f:e2:de:2f:47:84:ec:56:ba:7c:5c: 65:bc:92:13:e6:cf:33:d2:52:9f:b8:b7:bb:cb:c2: da:90:d7:46:98:54:90:24:f0:26:9b:37:3d:ab:3d: c2:73:5c:cc:e5:bf:3a:78:0d:68:81:a3:a4:49:b1: 78:ed:7f:5c:7e:b4:57:69:d0:04:9b:a0:24:91:f4: 98:8c:96:1e:0e:fe:e7:4f:a0:07:ac:76:ec:64:34: be:eb:39:4a:7d:7b:d8:6b:6e:2f:85:67:3c:ce:0c: 72:7a:84:69:f9:4d:7e:d0:c6:97:e4:80:84:17:db: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C3:DF:A5:75:73:0F:61:2E:06:23:25:CE:18:26:67:97:55:DA:74 X509v3 Authority Key Identifier: keyid:AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/b8PfpXVzD2EuBiMlzhgmZ5dV2nQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.247.236.0/22 103.238.48.0/22 Signature Algorithm: sha256WithRSAEncryption a9:a3:87:fe:83:6b:d7:e6:6d:28:ab:4d:5b:96:fa:57:3c:52: 55:74:ea:50:26:cc:15:b4:20:a7:c4:af:9f:d9:59:b9:48:42: 60:97:0b:ea:93:f0:d7:30:12:c6:ae:14:e2:69:a0:7e:c9:80: f6:76:82:06:27:da:b6:87:f4:8b:da:b0:27:33:cf:2d:27:1c: 87:8c:e3:a6:ae:a6:76:a6:5e:12:ee:86:dc:0b:61:60:f6:36: ca:18:ab:37:57:db:86:5d:47:bb:14:70:98:1b:47:44:cc:82: 7e:af:04:94:ec:59:82:76:1d:0f:ba:8b:4b:5a:9a:f4:84:c9: b8:32:6b:43:8f:c7:06:63:2c:af:e6:c5:47:b7:35:f2:91:c3: a6:44:e9:56:fe:fb:96:85:4d:de:b6:66:86:6b:1c:f2:91:b8: 08:f0:f8:1a:4a:61:cd:07:d7:da:ff:7f:b5:85:1b:10:82:d9: 76:6c:77:4f:1a:c3:ae:af:64:da:ea:7a:f3:1b:82:b4:b6:bd: 08:b0:77:43:6a:61:07:1c:37:8b:f3:ee:60:05:1c:96:3b:ad: da:aa:38:d7:fc:59:d8:3d:b5:22:6e:82:af:0c:f0:30:17:6b: 26:2c:c8:ca:75:ca:a6:2f:fd:7e:6b:67:df:1f:bf:97:b5:9f: b1:f5:c1:f3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICE3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUVD Q0NDQjc5REZFNkM0NjZDQ0FEQjM5ODk2NzEwRUNBQzM3Qjg0NzAeFw0yNDA1MTEw NzQ4MDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZGQzNERkE1NzU3MzBG NjEyRTA2MjMyNUNFMTgyNjY3OTc1NURBNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvqYZboXYgHNATOp3mfwcwZCPcmJs0INpzlHmVdc41zGckcZyX b408Of5oBhQP2PuwjPjpUJ4xbkBiGZwcJRz5t9+v0jcXoZYk5gWi4X2oy14Tr1/n MGCw9CkjwRUcZLx1BZp4rpXrBxBmvDGHmSBq0eyRJOHv14/mwmvH/PcKzmStCNQT RFAGRq9/4t4vR4TsVrp8XGW8khPmzzPSUp+4t7vLwtqQ10aYVJAk8CabNz2rPcJz XMzlvzp4DWiBo6RJsXjtf1x+tFdp0ASboCSR9JiMlh4O/udPoAesduxkNL7rOUp9 e9hrbi+FZzzODHJ6hGn5TX7QxpfkgIQX217HAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUb8PfpXVzD2EuBiMlzhgmZ5dV2nQwHwYDVR0jBBgwFoAUrszMt53+bEZsyts5 iWcQ7Kw3uEcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDAv cnN6TXQ1My1iRVpzeXRzNWlXY1E3S3czdUVjLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9yc3pNdDUzLWJFWnN5dHM1aVdjUTdLdzN1RWMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC80MC9iOFBmcFhWekQyRXVCaU1s emhnbVo1ZFYyblEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC K/fsAwQCZ+4wMA0GCSqGSIb3DQEBCwUAA4IBAQCpo4f+g2vX5m0oq01blvpXPFJV dOpQJswVtCCnxK+f2Vm5SEJglwvqk/DXMBLGrhTiaaB+yYD2doIGJ9q2h/SL2rAn M88tJxyHjOOmrqZ2pl4S7obcC2Fg9jbKGKs3V9uGXUe7FHCYG0dEzIJ+rwSU7FmC dh0PuotLWpr0hMm4MmtDj8cGYyyv5sVHtzXykcOmROlW/vuWhU3etmaGaxzykbgI 8PgaSmHNB9fa/3+1hRsQgtl2bHdPGsOur2Ta6nrzG4K0tr0IsHdDamEHHDeL8+5g BRyWO63aqjjX/FnYPbUiboKvDPAwF2smLMjKdcqmL/1+a2ffH7+XtZ+x9cHz -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:46 2024 by rpki-client on console-ams.rpki-client.org