$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/1Rj3WzQCw5Sf-QLqzaIfIkY-bV0.roa File: 1Rj3WzQCw5Sf-QLqzaIfIkY-bV0.roa (raw, json) Hash identifier: 7SwHEtSzLhMZYZy0DAbRzJTOuKw9VWYIhg7ZwPA0KUs= Subject key identifier: D5:18:F7:5B:34:02:C3:94:9F:F9:02:EA:CD:A2:1F:22:46:3E:6D:5D Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14F2 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/1Rj3WzQCw5Sf-QLqzaIfIkY-bV0.roa Signing time: Wed 11 Sep 2024 02:26:10 +0000 ROA not before: Wed 11 Sep 2024 02:26:10 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5362 (0x14f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:26:10 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=D518F75B3402C3949FF902EACDA21F22463E6D5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:14:47:7d:cd:99:1a:75:f3:4e:7f:9b:14:e7: fb:5f:b3:38:a2:9d:5b:98:29:c6:76:9a:70:b7:6c: 22:4e:02:c1:08:ed:b7:05:12:b3:22:29:a8:55:8d: 35:a6:22:8b:ae:25:90:cf:f4:40:9b:5a:20:a8:0c: 67:9e:a8:5c:03:3d:42:e2:8d:22:4b:60:f1:d0:23: 62:5e:67:57:0b:cd:19:97:31:d7:83:e5:97:6d:bf: 56:09:b0:15:97:38:c8:37:9f:fd:4a:cb:be:35:8e: dc:fb:28:cf:13:f0:e6:e4:1f:f1:d8:57:44:cf:08: 3b:ed:ec:63:4f:0f:cd:f3:35:68:37:3f:94:60:9a: 3d:67:9b:3b:43:cd:94:3a:28:6c:c1:45:c5:96:ea: dd:74:04:8f:2c:ec:15:e4:20:eb:e5:f9:23:d9:9f: ab:bf:ad:e3:c0:21:53:eb:d2:fe:03:c5:82:90:d5: 14:35:45:87:d6:ff:d3:fb:5a:7a:1f:a3:cf:fc:cc: 05:9f:b1:fe:97:22:84:89:24:9b:af:13:a3:8c:ef: e6:08:63:57:11:10:a4:d1:1e:ca:80:8e:1f:d4:25: b6:b3:95:dd:53:1c:b0:a0:dc:4d:a6:25:79:2e:f6: 47:34:2d:65:78:ba:a0:d6:7c:62:75:5d:ba:1f:b4: a7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:18:F7:5B:34:02:C3:94:9F:F9:02:EA:CD:A2:1F:22:46:3E:6D:5D X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/1Rj3WzQCw5Sf-QLqzaIfIkY-bV0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.10.0/24 Signature Algorithm: sha256WithRSAEncryption 69:47:d0:d3:b2:bd:92:65:cc:50:ba:f1:6f:1f:1c:92:b4:20: 42:36:f2:8d:64:a0:d8:7f:f0:6c:63:a4:e2:2e:de:22:6d:91: dd:e4:ef:db:67:20:f4:34:70:8f:fd:06:5d:77:c3:e0:c7:57: f4:91:c9:b3:ae:1a:0e:08:d2:a7:4f:f5:cb:15:c2:b6:50:fe: 66:89:84:0c:03:63:51:ff:c7:58:76:bd:94:08:21:af:69:25: 35:a6:92:b5:ae:54:eb:5f:f2:70:43:4b:f8:b7:2a:49:89:05: ed:56:f1:f0:11:59:f4:e7:2f:81:83:e9:db:03:8c:74:13:04: 51:60:30:14:6a:46:d1:96:6a:1c:bb:5f:ec:56:7c:84:24:aa: 18:27:f4:fd:0c:a0:21:3a:e3:c9:83:82:59:50:68:81:e5:ce: b6:8d:3a:e7:bb:0f:ae:08:26:ce:f6:f2:56:39:20:f2:d2:46: 94:a5:3c:ae:d8:b9:c6:04:04:0b:a9:e3:e4:e6:8b:ab:3c:9f: e4:ea:38:81:26:f5:ea:e8:6b:cf:2d:a7:14:19:58:20:bd:0e: 4e:e3:b7:96:93:00:5a:d6:06:a7:3f:95:35:f6:be:d6:4f:26: 64:63:05:45:c6:66:a9:0f:b0:d1:e9:01:53:8c:11:76:fe:0b: 9b:43:c1:40 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFPIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjI2MTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQ1MThGNzVCMzQwMkMz OTQ5RkY5MDJFQUNEQTIxRjIyNDYzRTZENUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlFEd9zZkadfNOf5sU5/tfsziinVuYKcZ2mnC3bCJOAsEI7bcF ErMiKahVjTWmIouuJZDP9ECbWiCoDGeeqFwDPULijSJLYPHQI2JeZ1cLzRmXMdeD 5Zdtv1YJsBWXOMg3n/1Ky741jtz7KM8T8ObkH/HYV0TPCDvt7GNPD83zNWg3P5Rg mj1nmztDzZQ6KGzBRcWW6t10BI8s7BXkIOvl+SPZn6u/rePAIVPr0v4DxYKQ1RQ1 RYfW/9P7Wnofo8/8zAWfsf6XIoSJJJuvE6OM7+YIY1cREKTRHsqAjh/UJbazld1T HLCg3E2mJXku9kc0LWV4uqDWfGJ1XboftKcVAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU1Rj3WzQCw5Sf+QLqzaIfIkY+bV0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzFSajNXelFDdzVTZi1R THF6YUlmSWtZLWJWMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QowDQYJKoZIhvcNAQELBQADggEBAGlH0NOyvZJlzFC68W8fHJK0IEI28o1k oNh/8GxjpOIu3iJtkd3k79tnIPQ0cI/9Bl13w+DHV/SRybOuGg4I0qdP9csVwrZQ /maJhAwDY1H/x1h2vZQIIa9pJTWmkrWuVOtf8nBDS/i3KkmJBe1W8fARWfTnL4GD 6dsDjHQTBFFgMBRqRtGWahy7X+xWfIQkqhgn9P0MoCE648mDgllQaIHlzraNOue7 D64IJs728lY5IPLSRpSlPK7YucYEBAup4+Tmi6s8n+TqOIEm9eroa88tpxQZWCC9 Dk7jt5aTAFrWBqc/lTX2vtZPJmRjBUXGZqkPsNHpAVOMEXb+C5tDwUA= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:40 2024 by rpki-client on console-fra.rpki-client.org