$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/6CGut6J3H3pJXeh7UWnH35CZz1w.roa File: 6CGut6J3H3pJXeh7UWnH35CZz1w.roa (raw, json) Hash identifier: x0bCVhg3X4v3CmiohNVzUEPPaPQP/LDJomoTxY+sjiA= Subject key identifier: E8:21:AE:B7:A2:77:1F:7A:49:5D:E8:7B:51:69:C7:DF:90:99:CF:5C Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1495 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/6CGut6J3H3pJXeh7UWnH35CZz1w.roa Signing time: Wed 11 Sep 2024 02:23:31 +0000 ROA not before: Wed 11 Sep 2024 02:23:31 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24373 IP address blocks: 103.221.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5269 (0x1495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:31 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=E821AEB7A2771F7A495DE87B5169C7DF9099CF5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:68:a3:b2:31:91:04:44:84:88:3e:75:ca:bd: 49:06:89:fe:0f:d6:b6:45:5c:d5:d7:bb:5a:01:48: 7e:90:35:03:48:24:cd:54:c5:9d:bd:e1:5d:9e:87: 61:9f:06:87:5c:20:e7:74:70:be:3e:19:4e:0c:ba: ff:65:22:6f:7b:a0:96:f9:66:47:fa:aa:1b:58:47: a0:8d:6b:9a:be:9a:ba:78:c8:e4:51:b2:d2:30:c0: 84:e9:ce:03:1f:19:d8:bb:82:e1:24:32:1e:1b:c5: 1f:2c:a9:0c:61:06:22:ec:11:72:00:f3:f2:22:db: 57:f0:9f:e7:3d:6d:55:8f:da:15:78:6c:dc:b1:bd: ab:41:7a:47:9d:73:fe:62:27:cb:1b:f2:84:08:f1: cc:5f:ec:47:7e:86:e6:06:e5:48:2d:d2:14:4d:c0: 69:24:25:a2:91:04:ec:40:7c:7b:a5:e6:8d:f2:85: 31:a6:88:9e:5a:da:9a:41:1f:5a:82:ab:ed:16:83: 5f:8e:58:74:87:a6:7f:62:02:51:07:8e:71:4f:dd: 63:74:3b:2f:28:d6:50:0a:0f:51:c3:d2:cb:b7:6a: 4b:8c:e4:a4:ec:a9:b8:25:dc:55:b1:92:eb:0f:38: e1:bf:3a:ba:8c:e0:4c:70:6b:8e:43:73:7a:da:e1: fe:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:21:AE:B7:A2:77:1F:7A:49:5D:E8:7B:51:69:C7:DF:90:99:CF:5C X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/6CGut6J3H3pJXeh7UWnH35CZz1w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.32.0/22 Signature Algorithm: sha256WithRSAEncryption b0:b9:3e:02:58:2e:bc:91:1d:f9:40:31:8f:dc:98:48:f9:58: a0:04:f6:50:e7:a7:ef:a4:46:a2:e0:fa:13:88:cd:03:d4:12: c2:8a:77:bc:cb:b5:26:64:b2:6a:c4:72:21:6f:19:a3:27:07: 71:dd:78:11:05:1d:87:e3:16:ce:bc:5d:15:eb:40:16:06:80: 78:0d:e4:3b:49:77:6a:3b:b0:d4:ed:f6:81:80:81:7a:59:93: b8:a9:e2:30:e7:70:73:4e:58:2e:3b:19:c7:f2:2e:80:6b:14: 83:eb:df:04:f8:9b:6c:ac:77:b7:f8:8e:78:87:17:dc:a5:af: 84:77:70:be:38:c9:35:31:3b:4e:94:81:74:c4:1f:2f:06:3d: 7f:0f:ed:b2:1a:b3:f6:e8:fe:ac:31:fd:b2:32:75:29:ab:ff: 21:8e:e7:b1:d1:86:1d:90:9a:ac:d4:7c:9e:2a:4b:f1:3a:c4: b8:1f:86:58:d6:d0:59:d2:1b:13:24:de:d7:60:4c:19:ca:0c: e9:44:b0:6e:20:99:32:a6:e5:9e:69:91:65:1f:59:0a:61:a5: a6:01:70:94:59:68:18:c1:89:6a:9f:68:3c:0f:7a:87:c1:f3: 6d:d6:bc:09:35:0d:c5:50:b5:7a:a1:f4:64:4c:c1:24:29:fe: f2:88:5a:10 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMzFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU4MjFBRUI3QTI3NzFG N0E0OTVERTg3QjUxNjlDN0RGOTA5OUNGNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMaKOyMZEERISIPnXKvUkGif4P1rZFXNXXu1oBSH6QNQNIJM1U xZ294V2eh2GfBodcIOd0cL4+GU4Muv9lIm97oJb5Zkf6qhtYR6CNa5q+mrp4yORR stIwwITpzgMfGdi7guEkMh4bxR8sqQxhBiLsEXIA8/Ii21fwn+c9bVWP2hV4bNyx vatBekedc/5iJ8sb8oQI8cxf7Ed+huYG5Ugt0hRNwGkkJaKRBOxAfHul5o3yhTGm iJ5a2ppBH1qCq+0Wg1+OWHSHpn9iAlEHjnFP3WN0Oy8o1lAKD1HD0su3akuM5KTs qbgl3FWxkusPOOG/OrqM4Exwa45Dc3ra4f5tAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU6CGut6J3H3pJXeh7UWnH35CZz1wwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzZDR3V0NkozSDNwSlhl aDdVV25IMzVDWnoxdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3SAwDQYJKoZIhvcNAQELBQADggEBALC5PgJYLryRHflAMY/cmEj5WKAE9lDn p++kRqLg+hOIzQPUEsKKd7zLtSZksmrEciFvGaMnB3HdeBEFHYfjFs68XRXrQBYG gHgN5DtJd2o7sNTt9oGAgXpZk7ip4jDncHNOWC47GcfyLoBrFIPr3wT4m2ysd7f4 jniHF9ylr4R3cL44yTUxO06UgXTEHy8GPX8P7bIas/bo/qwx/bIydSmr/yGO57HR hh2QmqzUfJ4qS/E6xLgfhljW0FnSGxMk3tdgTBnKDOlEsG4gmTKm5Z5pkWUfWQph paYBcJRZaBjBiWqfaDwPeofB823WvAk1DcVQtXqh9GRMwSQp/vKIWhA= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:40 2024 by rpki-client on console-fra.rpki-client.org