$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/4a60Us9dk-vzPmRg0rmQAr4Wlr4.roa File: 4a60Us9dk-vzPmRg0rmQAr4Wlr4.roa (raw, json) Hash identifier: BpRQ9YZoRAfv8XplZ33mBT6dJor1LIT2EfM3I8x+TjQ= Subject key identifier: E1:AE:B4:52:CF:5D:93:EB:F3:3E:64:60:D2:B9:90:02:BE:16:96:BE Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14A4 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/4a60Us9dk-vzPmRg0rmQAr4Wlr4.roa Signing time: Wed 11 Sep 2024 02:23:35 +0000 ROA not before: Wed 11 Sep 2024 02:23:35 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.220.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5284 (0x14a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:35 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=E1AEB452CF5D93EBF33E6460D2B99002BE1696BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:20:4a:a0:46:10:08:a6:b1:cf:4b:93:01: 47:0d:6c:3d:29:6a:be:8c:e2:2d:97:09:6a:4a:76: ab:c4:15:fb:23:48:9d:98:5b:dc:61:e4:ac:b2:5b: 16:7a:5c:aa:9f:24:4f:ce:39:88:34:32:b0:c0:cc: 24:8f:5a:8c:6b:21:77:e1:f9:8f:8a:9c:e9:a2:21: a0:ed:b1:ec:dc:98:83:02:a1:5a:a5:6c:df:70:a1: d9:10:a2:d9:d9:63:0e:b5:0b:0e:32:20:87:f5:67: 60:da:68:dd:be:b5:be:5e:b6:3f:c9:34:39:4a:10: 8d:b8:88:32:8c:47:aa:78:11:ba:af:17:75:3c:5d: 6a:5a:37:f3:f1:82:c5:0c:38:d4:80:e4:7d:65:f8: 39:09:61:ae:3b:27:f8:47:18:67:f0:e4:74:9c:29: e4:54:38:ea:58:1b:bf:e7:66:35:cc:59:7f:85:54: 28:a6:9a:2a:94:06:c3:28:39:16:60:18:2d:5c:6a: 6e:55:f4:79:af:ae:f8:2f:c2:7c:c5:63:a8:ec:3d: f7:a6:aa:22:39:df:ad:7b:d3:af:f6:3e:27:5a:14: ad:d6:0e:f8:d9:08:59:8a:85:56:0b:e9:82:67:81: 7f:7b:40:6b:0f:77:06:2d:3b:b9:f5:84:ef:9c:67: 65:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AE:B4:52:CF:5D:93:EB:F3:3E:64:60:D2:B9:90:02:BE:16:96:BE X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/4a60Us9dk-vzPmRg0rmQAr4Wlr4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.250.0/24 Signature Algorithm: sha256WithRSAEncryption 94:bf:87:24:2c:66:1d:0b:61:d5:f2:38:aa:c2:b6:5d:13:5f: 48:39:3a:99:99:cc:8c:a8:6e:ce:b6:1d:ad:a2:9b:b1:fc:11: fa:0f:de:10:95:de:9a:19:0d:ad:53:ea:05:82:a7:e4:c8:34: 9c:e2:0f:58:4f:d0:76:b3:71:56:32:d3:69:c7:fe:c7:57:5e: dd:ab:6c:03:81:c6:73:d9:40:59:db:e8:1e:6b:41:7c:cc:c3: 77:73:d2:24:8a:1b:b2:47:04:c1:b1:b1:af:0d:80:04:6a:b6: 90:3d:aa:d0:d1:af:d2:8a:de:5d:7c:c6:af:9f:16:ae:1d:44: df:20:1b:44:b7:a7:cb:95:a2:a0:7d:90:37:c0:7b:d5:a4:0e: f9:c4:c9:90:49:6c:58:8d:e0:9e:81:eb:78:3f:c0:0b:17:f5: db:14:85:90:09:9d:3e:a4:50:82:f1:e3:2c:53:e8:46:bf:24: 81:6c:dc:45:9a:15:73:b1:20:c5:93:e4:9f:f9:54:4a:d0:d6: 7a:c5:9a:21:56:61:6d:cb:82:e6:3f:b7:fb:3e:c7:6f:ca:10: e6:24:88:6e:f5:47:e8:f3:4b:f5:1f:63:a7:6f:da:6a:43:9e: 57:ca:ea:11:42:a0:db:d0:f9:52:9f:7e:aa:a2:ed:1a:6d:6b: 4e:10:c9:62 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEUxQUVCNDUyQ0Y1RDkz RUJGMzNFNjQ2MEQyQjk5MDAyQkUxNjk2QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCViBKoEYQCKaxz0uTAUcNbD0par6M4i2XCWpKdqvEFfsjSJ2Y W9xh5KyyWxZ6XKqfJE/OOYg0MrDAzCSPWoxrIXfh+Y+KnOmiIaDtsezcmIMCoVql bN9wodkQotnZYw61Cw4yIIf1Z2DaaN2+tb5etj/JNDlKEI24iDKMR6p4EbqvF3U8 XWpaN/PxgsUMONSA5H1l+DkJYa47J/hHGGfw5HScKeRUOOpYG7/nZjXMWX+FVCim miqUBsMoORZgGC1cam5V9HmvrvgvwnzFY6jsPfemqiI5361706/2PidaFK3WDvjZ CFmKhVYL6YJngX97QGsPdwYtO7n1hO+cZ2UZAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU4a60Us9dk+vzPmRg0rmQAr4Wlr4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzRhNjBVczlkay12elBt Umcwcm1RQXI0V2xyNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3PowDQYJKoZIhvcNAQELBQADggEBAJS/hyQsZh0LYdXyOKrCtl0TX0g5OpmZ zIyobs62Ha2im7H8EfoP3hCV3poZDa1T6gWCp+TINJziD1hP0HazcVYy02nH/sdX Xt2rbAOBxnPZQFnb6B5rQXzMw3dz0iSKG7JHBMGxsa8NgARqtpA9qtDRr9KK3l18 xq+fFq4dRN8gG0S3p8uVoqB9kDfAe9WkDvnEyZBJbFiN4J6B63g/wAsX9dsUhZAJ nT6kUILx4yxT6Ea/JIFs3EWaFXOxIMWT5J/5VErQ1nrFmiFWYW3LguY/t/s+x2/K EOYkiG71R+jzS/UfY6dv2mpDnlfK6hFCoNvQ+VKffqqi7Rpta04QyWI= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:47 2024 by rpki-client on console-ams.rpki-client.org