$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/4oNs-NuuzkKINbxsUjtxakOnAig.roa File: 4oNs-NuuzkKINbxsUjtxakOnAig.roa (raw, json) Hash identifier: +7W0/Dz0jG3oFEE9mjJJlwPgevhfguxO9sh3wbeIuT0= Subject key identifier: E2:83:6C:F8:DB:AE:CE:42:88:35:BC:6C:52:3B:71:6A:43:A7:02:28 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14F0 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/4oNs-NuuzkKINbxsUjtxakOnAig.roa Signing time: Wed 11 Sep 2024 02:26:10 +0000 ROA not before: Wed 11 Sep 2024 02:26:10 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5360 (0x14f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:26:10 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=E2836CF8DBAECE428835BC6C523B716A43A70228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:14:6a:35:f1:dd:67:cb:f1:ca:16:e1:08:9f: 23:8f:05:23:e2:6a:b2:b1:e2:ac:cc:28:79:b3:47: 36:05:ae:f4:d2:0e:91:b2:2b:d6:5a:26:68:f2:73: 6b:bf:df:f8:30:28:37:25:81:62:6f:4d:f0:e8:a4: 78:8f:a5:2e:eb:42:79:70:f7:eb:fe:eb:da:7e:b8: a1:74:10:b1:49:b4:fb:7d:cf:9f:ca:9d:b0:3e:c3: 48:00:ec:27:cb:73:e4:e0:37:57:98:cb:f4:6c:7f: b5:d1:81:18:e1:1e:1f:34:24:a2:39:62:13:e9:a7: 93:18:9a:c6:2e:d6:53:2d:cc:72:1e:cd:a5:49:c7: b3:63:12:00:d0:53:26:9a:45:24:a8:ac:e1:1a:90: 9b:0c:40:e3:24:d1:5b:b4:96:dd:85:a8:c1:b2:bd: 89:46:3a:d0:b7:7c:53:a8:16:b7:93:90:92:1d:f9: f6:02:91:5c:5a:ba:85:be:20:08:d9:20:49:41:a7: bd:d5:ef:00:b4:d6:bd:90:16:a3:da:dc:fd:b7:5b: 13:d4:52:a5:a4:52:6a:10:28:77:7a:5e:81:20:f3: 46:ae:b8:51:4b:d9:c8:4d:30:9e:fd:dc:c2:82:28: 26:41:68:93:45:99:7a:b7:e8:b5:54:b9:f1:32:6b: 2d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:83:6C:F8:DB:AE:CE:42:88:35:BC:6C:52:3B:71:6A:43:A7:02:28 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/4oNs-NuuzkKINbxsUjtxakOnAig.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.17.0/24 Signature Algorithm: sha256WithRSAEncryption a3:3a:e9:67:b1:ed:04:46:9b:22:1a:ce:03:59:fc:5b:34:55: 41:a9:de:ca:4b:86:40:d2:d9:af:ba:7a:ca:9d:cd:7e:b7:ab: dd:98:ea:50:ef:46:7c:49:c1:86:d3:4c:56:dd:56:42:7d:a8: 13:c4:3b:12:69:0d:a0:2a:63:e4:43:ef:0f:e4:ff:e9:e8:28: 48:41:b8:9b:93:02:ee:e3:01:e4:50:88:cd:3c:89:f0:1b:17: 21:62:27:1e:56:d4:cf:b7:a2:7d:3b:77:4c:01:b3:29:69:0b: 51:be:a5:b1:8e:12:7f:18:3a:03:32:3c:78:6b:9b:94:3e:57: 1e:22:20:9e:ad:82:63:11:d7:99:f6:de:13:2b:b9:e9:45:72: 26:74:3a:3b:b8:cd:91:08:c5:e0:d1:8e:f7:8d:03:3d:fc:72: f3:5e:48:5b:43:61:21:6d:bd:64:d0:a5:80:60:cf:c2:c3:19: 00:8c:da:96:89:8a:22:f4:81:a7:b0:65:df:4f:9d:26:b9:ea: 40:e4:a9:df:ab:ff:e3:a9:26:63:ce:59:26:7c:c0:1b:34:09: 85:58:b8:eb:c7:24:d2:32:ca:3a:97:f7:d2:df:a8:89:f6:fc: 88:f6:20:01:58:0f:ae:f4:67:1a:c9:77:49:04:fb:0e:24:31: d1:52:cb:60 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjI2MTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEUyODM2Q0Y4REJBRUNF NDI4ODM1QkM2QzUyM0I3MTZBNDNBNzAyMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCFGo18d1ny/HKFuEInyOPBSPiarKx4qzMKHmzRzYFrvTSDpGy K9ZaJmjyc2u/3/gwKDclgWJvTfDopHiPpS7rQnlw9+v+69p+uKF0ELFJtPt9z5/K nbA+w0gA7CfLc+TgN1eYy/Rsf7XRgRjhHh80JKI5YhPpp5MYmsYu1lMtzHIezaVJ x7NjEgDQUyaaRSSorOEakJsMQOMk0Vu0lt2FqMGyvYlGOtC3fFOoFreTkJId+fYC kVxauoW+IAjZIElBp73V7wC01r2QFqPa3P23WxPUUqWkUmoQKHd6XoEg80auuFFL 2chNMJ793MKCKCZBaJNFmXq36LVUufEyay2RAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU4oNs+NuuzkKINbxsUjtxakOnAigwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzRvTnMtTnV1emtLSU5i eHNVanR4YWtPbkFpZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3REwDQYJKoZIhvcNAQELBQADggEBAKM66Wex7QRGmyIazgNZ/Fs0VUGp3spL hkDS2a+6esqdzX63q92Y6lDvRnxJwYbTTFbdVkJ9qBPEOxJpDaAqY+RD7w/k/+no KEhBuJuTAu7jAeRQiM08ifAbFyFiJx5W1M+3on07d0wBsylpC1G+pbGOEn8YOgMy PHhrm5Q+Vx4iIJ6tgmMR15n23hMruelFciZ0Oju4zZEIxeDRjveNAz38cvNeSFtD YSFtvWTQpYBgz8LDGQCM2paJiiL0gaewZd9PnSa56kDkqd+r/+OpJmPOWSZ8wBs0 CYVYuOvHJNIyyjqX99LfqIn2/Ij2IAFYD670ZxrJd0kE+w4kMdFSy2A= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:42 2024 by rpki-client on console-fra.rpki-client.org