$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/2kbwgq-z4fLXO56r6VQuuvATg3w.roa File: 2kbwgq-z4fLXO56r6VQuuvATg3w.roa (raw, json) Hash identifier: HeD9enn604N3+XMnkTO2EGTIXJpCD0P4Ee6wJxGr0A0= Subject key identifier: DA:46:F0:82:AF:B3:E1:F2:D7:3B:9E:AB:E9:54:2E:BA:F0:13:83:7C Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1512 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/2kbwgq-z4fLXO56r6VQuuvATg3w.roa Signing time: Wed 11 Sep 2024 02:30:06 +0000 ROA not before: Wed 11 Sep 2024 02:30:06 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5394 (0x1512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:30:06 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=DA46F082AFB3E1F2D73B9EABE9542EBAF013837C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:bf:03:09:4f:8f:2f:ea:ab:e8:fc:24:62: c1:7e:d2:33:ef:bb:ba:1a:ec:3b:78:50:a5:09:2b: 3f:6a:b9:08:79:7f:69:49:d1:66:a5:a8:9b:f3:e8: 7d:a7:a7:c4:30:ff:af:d2:4b:8d:17:fc:92:1a:ed: 23:08:ed:95:54:0a:36:47:80:3b:8e:9a:d4:6b:f2: 33:df:d1:b4:fb:4e:2a:bc:0c:39:dd:ee:a5:64:a0: 06:6c:ca:a9:d8:d7:e0:7f:f4:75:38:93:27:e9:f1: d9:33:76:f6:28:ed:ed:f8:89:3a:d8:2c:bc:7a:c7: 4a:fb:71:30:eb:e3:1e:54:89:f0:a1:7b:91:a2:73: cd:ee:c2:32:07:d4:6a:21:eb:8a:55:8d:d8:1d:9d: 83:40:9b:e5:5e:5e:41:a3:3d:4e:4d:34:13:9e:c9: 42:6d:46:bc:07:61:6e:f5:d7:6b:5c:84:d5:04:b5: 00:61:97:66:e2:60:26:86:c8:ff:1f:9f:0e:d3:57: a0:16:2f:fa:11:b5:9d:93:8c:92:18:96:73:a2:8b: 5a:fc:c5:ec:37:5b:fb:9b:f5:23:bb:cd:0b:65:98: e9:39:e4:53:90:19:d2:94:a5:b1:3c:d0:a7:b6:ad: 90:6c:43:17:9b:f1:1d:5c:1f:70:94:3d:a0:6a:55: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:46:F0:82:AF:B3:E1:F2:D7:3B:9E:AB:E9:54:2E:BA:F0:13:83:7C X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/2kbwgq-z4fLXO56r6VQuuvATg3w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.92.0/24 Signature Algorithm: sha256WithRSAEncryption aa:ed:7a:f1:63:5b:68:df:5a:6a:83:8e:38:7e:d5:10:b6:a8: b2:48:03:c4:80:c4:4c:45:ca:ba:1d:43:89:de:38:85:2b:e3: 54:bc:20:4a:76:17:80:66:c8:1a:2b:89:14:fb:ed:01:50:70: 58:b7:61:40:c4:c3:e0:f8:e0:5e:3e:65:65:64:e5:9e:75:35: f7:31:41:98:d6:77:f3:f2:94:41:90:8a:fa:9e:69:65:3f:f8: f3:8b:27:57:b2:4b:05:74:da:4f:13:9a:7e:57:03:51:d0:44: e3:a1:05:00:7a:34:e0:f4:8b:64:0b:f0:f8:5d:cf:52:0d:5e: 3f:ab:87:ee:a7:96:91:e7:a2:93:5d:d3:44:94:fb:1a:61:7b: 5a:74:0c:b4:c7:d9:1c:4e:ab:bb:9a:5e:f8:fa:62:4c:f7:e7: 0f:c4:40:c5:83:cb:b9:0c:74:00:e9:1a:6a:7e:2f:d5:d2:2f: 86:3c:ed:c1:ae:31:b9:b2:6a:73:26:3e:2d:8b:3e:ee:6c:9e: e4:53:9d:c6:cc:84:50:6d:8c:90:3f:c5:c2:b6:5f:d0:16:18: 55:94:61:8d:45:b4:43:e8:4e:dc:d2:2b:09:9a:c6:34:cc:0e: 3d:d3:94:be:27:20:2e:91:5c:71:54:0b:7e:43:76:e3:a4:0c: 88:12:10:e8 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFRIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjMwMDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKERBNDZGMDgyQUZCM0Ux RjJENzNCOUVBQkU5NTQyRUJBRjAxMzgzN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVv78DCU+PL+qr6PwkYsF+0jPvu7oa7Dt4UKUJKz9quQh5f2lJ 0WalqJvz6H2np8Qw/6/SS40X/JIa7SMI7ZVUCjZHgDuOmtRr8jPf0bT7Tiq8DDnd 7qVkoAZsyqnY1+B/9HU4kyfp8dkzdvYo7e34iTrYLLx6x0r7cTDr4x5UifChe5Gi c83uwjIH1Goh64pVjdgdnYNAm+VeXkGjPU5NNBOeyUJtRrwHYW7112tchNUEtQBh l2biYCaGyP8fnw7TV6AWL/oRtZ2TjJIYlnOii1r8xew3W/ub9SO7zQtlmOk55FOQ GdKUpbE80Ke2rZBsQxeb8R1cH3CUPaBqVWo7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU2kbwgq+z4fLXO56r6VQuuvATg3wwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzJrYndncS16NGZMWE81 NnI2VlF1dXZBVGczdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3VwwDQYJKoZIhvcNAQELBQADggEBAKrtevFjW2jfWmqDjjh+1RC2qLJIA8SA xExFyrodQ4neOIUr41S8IEp2F4BmyBoriRT77QFQcFi3YUDEw+D44F4+ZWVk5Z51 NfcxQZjWd/PylEGQivqeaWU/+POLJ1eySwV02k8Tmn5XA1HQROOhBQB6NOD0i2QL 8Phdz1INXj+rh+6nlpHnopNd00SU+xphe1p0DLTH2RxOq7uaXvj6Ykz35w/EQMWD y7kMdADpGmp+L9XSL4Y87cGuMbmyanMmPi2LPu5snuRTncbMhFBtjJA/xcK2X9AW GFWUYY1FtEPoTtzSKwmaxjTMDj3TlL4nIC6RXHFUC35DduOkDIgSEOg= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:42 2024 by rpki-client on console-fra.rpki-client.org