$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/-wbywfiovCytcAe_UqdKht_vqwM.roa File: -wbywfiovCytcAe_UqdKht_vqwM.roa (raw, json) Hash identifier: fE5yfAo14VlktPaRqx5WbBKID9wd6nSj6Fk0FqQ65vI= Subject key identifier: FB:06:F2:C1:F8:A8:BC:2C:AD:70:07:BF:52:A7:4A:86:DF:EF:AB:03 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1503 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-wbywfiovCytcAe_UqdKht_vqwM.roa Signing time: Wed 11 Sep 2024 02:27:32 +0000 ROA not before: Wed 11 Sep 2024 02:27:32 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5379 (0x1503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:27:32 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=FB06F2C1F8A8BC2CAD7007BF52A74A86DFEFAB03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a5:57:34:b6:7b:99:7d:3a:d6:f5:92:7f:71: c3:0e:15:85:e9:3c:08:24:46:31:2c:6c:76:fe:11: 16:7e:f9:6e:21:59:2b:96:ac:31:4a:35:34:ea:82: 1d:55:69:4b:f0:8a:b1:17:32:b5:ba:67:2a:b4:d8: 1f:dd:c2:46:5a:e2:aa:c7:0f:33:78:9d:dd:02:55: 3b:5f:40:54:05:e0:9f:6b:d3:5c:21:f2:e1:6b:e1: 33:33:dc:58:3d:78:df:f1:5b:fe:13:6e:ca:29:7b: a0:cf:ad:8d:02:de:1e:17:46:49:26:26:48:d7:58: 3a:da:a1:c9:00:0f:38:3d:98:1e:5e:6b:f7:6a:a6: 2b:c0:cb:9d:4f:88:9c:11:be:d8:74:fe:f1:b6:aa: 79:16:a5:94:58:94:e4:41:61:54:1f:01:9e:8a:19: c1:82:be:17:07:34:09:83:4e:bd:d9:cd:ce:04:0c: ba:95:75:b9:9e:fc:dc:32:87:b4:76:4d:7c:36:3c: 6f:4b:8f:52:11:82:6e:79:ad:2a:4f:59:8a:94:c1: 56:11:06:34:80:5c:0e:ab:5c:a8:89:1d:c5:8c:18: 30:e9:47:a8:74:4c:fb:dd:3b:38:73:fc:be:fa:ac: 69:e3:62:62:04:b0:9a:78:75:35:76:c2:3d:24:2b: 0c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:06:F2:C1:F8:A8:BC:2C:AD:70:07:BF:52:A7:4A:86:DF:EF:AB:03 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-wbywfiovCytcAe_UqdKht_vqwM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.29.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:34:ad:45:e4:53:ac:29:26:e5:5a:cd:29:62:c5:03:6b:b0: c6:94:af:b2:fb:e7:84:67:5b:64:f2:93:21:f5:34:a9:fd:64: 32:e3:f4:d5:3f:f5:b4:3b:fd:59:39:fb:96:f1:14:d6:7b:08: 8f:b9:e6:2d:97:60:1a:7f:e7:e8:f1:2c:5d:0d:5a:9f:fb:f9: a9:64:cc:cb:b7:91:ba:84:6e:4f:c4:22:4a:39:b6:53:14:e6: 95:ea:00:e8:80:1d:1c:d6:d0:9f:de:78:2b:a0:94:f5:45:7a: 55:29:0f:c3:e9:35:a8:1b:fb:73:d2:80:39:cd:62:c6:b7:44: 05:cb:4b:1c:9c:d8:f6:a2:35:ec:90:00:6b:93:03:a1:10:de: 01:cd:71:d2:f2:3c:fa:7a:71:f6:44:67:c6:3c:b4:39:9e:48: 49:2f:90:e9:5f:de:18:f1:18:24:0b:c6:67:45:bd:eb:40:57: 8e:63:2b:fc:7c:a4:e8:bf:a6:7f:ae:aa:10:57:97:c2:98:15: c0:3c:6a:11:64:3f:70:c1:90:c4:63:1b:ea:1e:ab:92:50:0b: 47:8f:5d:08:89:90:ad:ba:10:61:ef:cd:d0:b4:f3:d8:d2:d3: 8f:97:6c:47:2c:88:e2:7b:2c:73:14:6e:25:5e:8a:1a:47:a2: 98:26:4b:45 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjI3MzJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZCMDZGMkMxRjhBOEJD MkNBRDcwMDdCRjUyQTc0QTg2REZFRkFCMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkpVc0tnuZfTrW9ZJ/ccMOFYXpPAgkRjEsbHb+ERZ++W4hWSuW rDFKNTTqgh1VaUvwirEXMrW6Zyq02B/dwkZa4qrHDzN4nd0CVTtfQFQF4J9r01wh 8uFr4TMz3Fg9eN/xW/4Tbsope6DPrY0C3h4XRkkmJkjXWDraockADzg9mB5ea/dq pivAy51PiJwRvth0/vG2qnkWpZRYlORBYVQfAZ6KGcGCvhcHNAmDTr3Zzc4EDLqV dbme/Nwyh7R2TXw2PG9Lj1IRgm55rSpPWYqUwVYRBjSAXA6rXKiJHcWMGDDpR6h0 TPvdOzhz/L76rGnjYmIEsJp4dTV2wj0kKwwTAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU+wbywfiovCytcAe/UqdKht/vqwMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3Ly13Ynl3ZmlvdkN5dGNB ZV9VcWRLaHRfdnF3TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3R0wDQYJKoZIhvcNAQELBQADggEBAJw0rUXkU6wpJuVazSlixQNrsMaUr7L7 54RnW2TykyH1NKn9ZDLj9NU/9bQ7/Vk5+5bxFNZ7CI+55i2XYBp/5+jxLF0NWp/7 +alkzMu3kbqEbk/EIko5tlMU5pXqAOiAHRzW0J/eeCuglPVFelUpD8PpNagb+3PS gDnNYsa3RAXLSxyc2PaiNeyQAGuTA6EQ3gHNcdLyPPp6cfZEZ8Y8tDmeSEkvkOlf 3hjxGCQLxmdFvetAV45jK/x8pOi/pn+uqhBXl8KYFcA8ahFkP3DBkMRjG+oeq5JQ C0ePXQiJkK26EGHvzdC089jS04+XbEcsiOJ7LHMUbiVeihpHopgmS0U= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:40 2024 by rpki-client on console-fra.rpki-client.org