$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/-eUMhXMDYNtryx9wROlBgZCIpdA.roa File: -eUMhXMDYNtryx9wROlBgZCIpdA.roa (raw, json) Hash identifier: 80e12qXXP9T2GFhOQINZ3lPKEGp5X96gp6TsXfNT2HU= Subject key identifier: F9:E5:0C:85:73:03:60:DB:6B:CB:1F:70:44:E9:41:81:90:88:A5:D0 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 151B Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-eUMhXMDYNtryx9wROlBgZCIpdA.roa Signing time: Wed 11 Sep 2024 02:30:08 +0000 ROA not before: Wed 11 Sep 2024 02:30:08 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5403 (0x151b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:30:08 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=F9E50C85730360DB6BCB1F7044E941819088A5D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3f:63:9a:42:ed:ad:c1:57:bf:02:4c:dd:96: dd:03:a6:8b:80:1b:92:5a:bd:ee:6e:f3:ab:a4:7f: 1b:6b:6a:9c:c5:a2:fe:1c:d5:dd:8b:90:c3:fd:67: d8:85:9a:88:fb:ad:4f:1b:da:24:44:a1:a7:71:59: 26:a1:5f:83:32:2f:c5:a5:f5:00:ea:a7:a6:55:65: 87:51:a5:6d:8a:8f:6c:4c:95:69:27:d5:fc:8a:80: cb:13:ed:51:d4:b9:1d:ed:03:ba:bf:95:cb:41:73: 12:bc:77:ba:e5:48:99:48:c2:17:3e:0e:99:cc:8e: 51:ab:f0:62:cc:2d:48:1b:d6:e9:2a:10:3d:cb:84: 55:9f:3e:d5:de:82:ac:69:ef:33:b4:46:f5:bf:a2: 3a:b2:cd:ea:54:95:d1:07:ec:44:60:72:b2:49:5e: 09:5d:9f:3d:83:39:10:de:28:19:64:3e:f0:5e:b8: 7a:a4:58:62:5b:1e:d6:80:48:dd:28:cd:ae:b7:12: 7e:28:b3:8b:72:1d:b9:53:96:81:d2:f7:f5:f2:86: 26:61:25:66:ee:0a:9c:f7:29:61:b2:e9:9c:d1:6d: 47:89:5e:99:5e:59:1e:87:8c:fd:e4:92:48:b0:cb: a3:97:ea:b3:eb:6c:81:d5:c7:b1:5c:33:20:37:1d: f0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E5:0C:85:73:03:60:DB:6B:CB:1F:70:44:E9:41:81:90:88:A5:D0 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-eUMhXMDYNtryx9wROlBgZCIpdA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.42.0/24 Signature Algorithm: sha256WithRSAEncryption 31:c9:1d:0c:7a:fb:ce:26:13:35:b5:9f:26:66:7b:10:3e:1f: 4d:a2:70:79:ae:1e:a2:b5:43:58:25:3b:8a:75:6c:73:65:5e: 28:95:71:cf:10:e2:ae:76:3a:2e:54:f8:a3:d8:ce:41:69:f7: d0:01:03:e1:ac:66:1d:57:ae:10:48:1b:d8:0c:c7:61:64:16: 34:8b:f8:b6:b9:89:5a:b0:08:fd:c3:c1:c9:6e:56:c5:4f:b5: f1:13:c2:e5:55:cd:14:c1:a6:f4:50:2e:d6:dc:d5:99:b6:99: 99:6a:f1:31:a8:83:8a:1a:17:5a:81:16:bc:6a:1e:ab:60:25: af:e8:c2:7f:7e:a8:7b:8b:05:6e:2f:f3:e8:e6:33:ee:b9:2e: 59:1e:da:24:9f:59:05:50:e6:34:68:17:af:b3:64:e0:39:e3: 33:aa:15:da:13:e3:b8:37:5f:dd:48:8c:47:19:b2:88:ed:ef: d5:b4:76:90:ce:3a:65:10:7f:e2:7f:f6:f4:4c:2d:d0:7f:cb: 4e:d8:a3:f9:39:0e:1f:85:40:99:90:15:b9:05:ca:cd:90:d2: b3:6e:16:44:99:84:5c:64:7f:42:71:09:96:5b:8c:b9:5a:69: 7a:bd:2f:00:8a:94:76:8e:0b:93:f5:b4:96:71:12:e3:74:f6: a6:d5:e7:11 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjMwMDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEY5RTUwQzg1NzMwMzYw REI2QkNCMUY3MDQ0RTk0MTgxOTA4OEE1RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPP2OaQu2twVe/Akzdlt0DpouAG5Jave5u86ukfxtrapzFov4c 1d2LkMP9Z9iFmoj7rU8b2iREoadxWSahX4MyL8Wl9QDqp6ZVZYdRpW2Kj2xMlWkn 1fyKgMsT7VHUuR3tA7q/lctBcxK8d7rlSJlIwhc+DpnMjlGr8GLMLUgb1ukqED3L hFWfPtXegqxp7zO0RvW/ojqyzepUldEH7ERgcrJJXgldnz2DORDeKBlkPvBeuHqk WGJbHtaASN0oza63En4os4tyHblTloHS9/XyhiZhJWbuCpz3KWGy6ZzRbUeJXple WR6HjP3kkkiwy6OX6rPrbIHVx7FcMyA3HfBrAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU+eUMhXMDYNtryx9wROlBgZCIpdAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3Ly1lVU1oWE1EWU50cnl4 OXdST2xCZ1pDSXBkQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SowDQYJKoZIhvcNAQELBQADggEBADHJHQx6+84mEzW1nyZmexA+H02icHmu HqK1Q1glO4p1bHNlXiiVcc8Q4q52Oi5U+KPYzkFp99ABA+GsZh1XrhBIG9gMx2Fk FjSL+La5iVqwCP3DwcluVsVPtfETwuVVzRTBpvRQLtbc1Zm2mZlq8TGog4oaF1qB FrxqHqtgJa/own9+qHuLBW4v8+jmM+65Llke2iSfWQVQ5jRoF6+zZOA54zOqFdoT 47g3X91IjEcZsojt79W0dpDOOmUQf+J/9vRMLdB/y07Yo/k5Dh+FQJmQFbkFys2Q 0rNuFkSZhFxkf0JxCZZbjLlaaXq9LwCKlHaOC5P1tJZxEuN09qbV5xE= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:40 2024 by rpki-client on console-fra.rpki-client.org