$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/8T-D56tz-CHmhvvh8WUQIsuzX5g.roa File: 8T-D56tz-CHmhvvh8WUQIsuzX5g.roa (raw, json) Hash identifier: hHB9hKPxPox98RKdTXGxa2fo5oXLDzMrDNpEiZsTvXM= Subject key identifier: F1:3F:83:E7:AB:73:F8:21:E6:86:FB:E1:F1:65:10:22:CB:B3:5F:98 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14A1 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8T-D56tz-CHmhvvh8WUQIsuzX5g.roa Signing time: Wed 11 Sep 2024 02:23:34 +0000 ROA not before: Wed 11 Sep 2024 02:23:34 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.220.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5281 (0x14a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:34 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=F13F83E7AB73F821E686FBE1F1651022CBB35F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4e:84:50:b1:ae:a7:c9:5c:21:de:1e:02:87: b2:cf:32:88:66:a8:1b:dc:3b:76:53:81:07:e8:97: c6:cb:81:7d:e7:96:8a:56:ce:7f:c1:58:4d:74:16: 53:89:49:cb:21:83:c8:68:4b:f0:81:01:89:11:d6: bc:f3:e5:65:4f:99:8d:61:8f:5e:16:3a:95:fc:4f: a0:12:71:b3:1c:d1:ec:0e:7c:bb:f4:ce:06:f9:f3: e9:27:55:e7:09:19:c7:72:eb:f8:d5:7e:26:47:40: 9a:45:34:e2:b7:43:a0:ab:5b:bc:fc:34:7b:0b:c0: 49:75:f7:ee:19:3b:1b:12:5c:75:18:64:fc:a2:a0: 01:c6:c3:97:12:29:3a:b9:ce:d1:aa:2a:50:6f:84: c8:b4:3f:75:50:c8:9f:5d:e8:cb:a2:53:50:80:44: 88:ac:fb:b5:40:23:d8:88:7c:1e:3b:2e:e1:79:2e: fe:65:ac:4b:9f:49:a5:9d:f4:e4:b8:3c:77:a7:74: c9:99:6f:3a:87:6d:76:a2:6e:74:1b:47:cc:72:f1: f0:ac:ce:6a:ff:4e:2f:6c:67:7d:88:98:4d:46:b8: a2:1f:e4:07:d9:46:63:db:6f:57:e3:47:de:7e:7e: 12:f6:01:9e:f3:63:fd:6e:5c:b8:41:95:b8:57:e3: 3a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3F:83:E7:AB:73:F8:21:E6:86:FB:E1:F1:65:10:22:CB:B3:5F:98 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8T-D56tz-CHmhvvh8WUQIsuzX5g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.252.0/24 Signature Algorithm: sha256WithRSAEncryption bc:13:16:aa:f4:7e:f1:73:0e:59:d5:b3:a2:fb:a5:c3:1f:0a: 87:47:6a:6e:32:b3:dc:1a:a4:40:5b:0c:43:a4:29:89:51:ff: 3d:fd:17:a9:66:0b:ef:ca:29:5c:68:49:1a:9c:d1:ff:6f:2a: df:7c:2b:12:a0:2d:b0:fd:b8:56:26:ee:3d:a2:24:7e:7b:7d: 68:e0:a3:92:c8:95:3c:35:1f:6d:9a:47:d6:65:34:c4:ac:d6: 7f:5d:10:27:5b:b1:5c:f7:0f:3e:aa:17:76:b4:3a:10:3e:f7: d2:84:3f:e2:4b:17:6c:0c:aa:3a:3e:28:c6:c2:e4:82:4b:5e: 38:4c:9e:d7:2b:a1:9c:2a:ef:98:94:81:d7:6a:0a:73:d8:62: 60:04:a5:dc:ba:22:6b:ec:8d:35:fc:0c:ec:94:a8:04:51:3e: 4f:93:ba:05:c0:0c:18:4f:33:28:3b:df:24:07:88:44:8b:d3: c8:ef:01:36:0a:36:0e:d2:16:9c:c7:8b:87:9c:db:fe:da:22: d4:ba:11:47:41:12:ff:36:42:78:c4:dc:0f:54:9b:c5:e0:e8: ca:1f:99:6e:37:90:a0:23:b3:b8:9e:8b:62:ee:22:9a:e3:0c: 82:9c:c9:65:0d:0d:ce:ba:f4:09:f4:e2:b2:f4:ce:bc:d5:24: d1:7e:a8:9a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFKEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMzRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYxM0Y4M0U3QUI3M0Y4 MjFFNjg2RkJFMUYxNjUxMDIyQ0JCMzVGOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkToRQsa6nyVwh3h4Ch7LPMohmqBvcO3ZTgQfol8bLgX3nlopW zn/BWE10FlOJScshg8hoS/CBAYkR1rzz5WVPmY1hj14WOpX8T6AScbMc0ewOfLv0 zgb58+knVecJGcdy6/jVfiZHQJpFNOK3Q6CrW7z8NHsLwEl19+4ZOxsSXHUYZPyi oAHGw5cSKTq5ztGqKlBvhMi0P3VQyJ9d6MuiU1CARIis+7VAI9iIfB47LuF5Lv5l rEufSaWd9OS4PHendMmZbzqHbXaibnQbR8xy8fCszmr/Ti9sZ32ImE1GuKIf5AfZ RmPbb1fjR95+fhL2AZ7zY/1uXLhBlbhX4zrDAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU8T+D56tz+CHmhvvh8WUQIsuzX5gwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzhULUQ1NnR6LUNIbWh2 dmg4V1VRSXN1elg1Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3PwwDQYJKoZIhvcNAQELBQADggEBALwTFqr0fvFzDlnVs6L7pcMfCodHam4y s9wapEBbDEOkKYlR/z39F6lmC+/KKVxoSRqc0f9vKt98KxKgLbD9uFYm7j2iJH57 fWjgo5LIlTw1H22aR9ZlNMSs1n9dECdbsVz3Dz6qF3a0OhA+99KEP+JLF2wMqjo+ KMbC5IJLXjhMntcroZwq75iUgddqCnPYYmAEpdy6ImvsjTX8DOyUqARRPk+TugXA DBhPMyg73yQHiESL08jvATYKNg7SFpzHi4ec2/7aItS6EUdBEv82QnjE3A9Um8Xg 6MofmW43kKAjs7iei2LuIprjDIKcyWUNDc669An04rL0zrzVJNF+qJo= -----END CERTIFICATE-----Generated at Fri Nov 22 14:30:56 2024 by rpki-client on console-ams.rpki-client.org