$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/8ydJi1QUqxl6eGHCnTGQovvtro4.roa File: 8ydJi1QUqxl6eGHCnTGQovvtro4.roa (raw, json) Hash identifier: onppIKuNMghTyqjOkyrfL8AM4buLvfzpX5YmNNPBc2s= Subject key identifier: F3:27:49:8B:54:14:AB:19:7A:78:61:C2:9D:31:90:A2:FB:ED:AE:8E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1475 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8ydJi1QUqxl6eGHCnTGQovvtro4.roa Signing time: Wed 11 Sep 2024 02:23:19 +0000 ROA not before: Wed 11 Sep 2024 02:23:19 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 4812 IP address blocks: 103.24.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5237 (0x1475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:19 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=F327498B5414AB197A7861C29D3190A2FBEDAE8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:ea:09:b3:d8:b7:df:55:e7:1f:f9:4d:23: 59:95:54:67:d5:84:c7:5d:85:c5:f6:28:92:5f:28: 04:38:0e:57:5a:a6:85:e3:47:a2:8c:eb:93:35:b7: 2b:5b:d1:14:3c:e4:7e:28:c0:a6:d9:23:fa:05:94: 8f:9a:78:10:66:85:63:25:98:e7:9e:f9:76:bf:d4: 7b:63:67:87:94:82:a3:82:fd:56:72:c4:ad:40:af: 99:35:f5:a7:04:94:62:38:c1:a1:78:84:f6:4d:34: 3b:6d:48:f8:f4:69:32:e9:6c:42:9e:a2:a9:b4:90: f2:07:7c:d7:c6:4e:66:1f:d6:78:ae:34:8b:04:6b: 13:06:3b:34:9e:c4:de:2c:63:8b:9a:64:1d:60:17: 06:f5:d5:7a:a9:47:d0:14:f7:92:45:e0:78:b8:a6: 34:e2:10:a9:c0:cf:a3:93:9c:d9:99:94:64:75:bd: 8b:54:fa:cd:f3:a1:80:f2:c4:15:f8:1d:0f:41:f4: b9:3a:51:ac:7e:68:3e:cd:4a:13:a0:0f:32:b9:d9: d1:42:dc:9e:6d:72:8a:9f:05:19:cb:ec:f4:d6:22: 02:17:46:63:29:26:cd:ca:65:f7:f3:0e:00:cc:ac: 5a:f2:1c:60:5b:f6:c7:a1:cd:32:3d:7a:d4:3b:c7: 8b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:27:49:8B:54:14:AB:19:7A:78:61:C2:9D:31:90:A2:FB:ED:AE:8E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8ydJi1QUqxl6eGHCnTGQovvtro4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.24.118.0/23 Signature Algorithm: sha256WithRSAEncryption ba:a7:17:64:fc:c5:e9:61:be:94:21:f4:8f:24:c1:7f:d5:80: d0:ab:5d:37:a1:ea:0c:30:84:53:89:e7:7a:63:b0:dc:13:ca: 15:67:47:21:00:91:62:58:50:fc:f5:6c:3d:7b:18:77:74:c2: ba:22:48:89:9b:77:29:0e:af:a6:37:eb:83:f2:29:84:21:8f: 82:27:c7:21:b5:ad:c1:5b:ff:c9:f4:f9:8a:f3:48:30:e6:fe: 3a:78:33:45:4d:50:fc:94:d7:f7:5f:c6:d3:a6:4b:22:2b:76: b2:74:96:7f:47:5a:0f:71:36:65:4b:f8:98:e9:b2:2c:46:d7: 31:a2:5f:69:72:77:8e:ec:19:4c:34:9d:e9:92:b4:f3:6e:26: 30:74:19:75:e0:ee:ef:e1:8c:93:67:b6:27:52:16:a8:f7:1f: f6:a3:11:55:0e:3c:b0:da:24:9d:f1:70:69:27:9e:c2:77:25: f1:8c:2a:a2:c1:da:f0:92:69:66:69:f8:16:23:b0:79:2e:8d: 36:65:e8:65:18:44:4d:f4:39:df:72:1f:29:b2:f8:94:66:4f: 00:73:f6:60:66:fc:b8:49:60:20:6a:0c:b1:b9:fe:4a:a5:45: e6:fb:1b:bf:5b:3e:0b:c1:25:78:9d:35:ab:f6:b7:88:87:8b: ac:92:63:cf -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYzMjc0OThCNTQxNEFC MTk3QTc4NjFDMjlEMzE5MEEyRkJFREFFOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClpuoJs9i331XnH/lNI1mVVGfVhMddhcX2KJJfKAQ4DldapoXj R6KM65M1tytb0RQ85H4owKbZI/oFlI+aeBBmhWMlmOee+Xa/1HtjZ4eUgqOC/VZy xK1Ar5k19acElGI4waF4hPZNNDttSPj0aTLpbEKeoqm0kPIHfNfGTmYf1niuNIsE axMGOzSexN4sY4uaZB1gFwb11XqpR9AU95JF4Hi4pjTiEKnAz6OTnNmZlGR1vYtU +s3zoYDyxBX4HQ9B9Lk6Uax+aD7NShOgDzK52dFC3J5tcoqfBRnL7PTWIgIXRmMp Js3KZffzDgDMrFryHGBb9sehzTI9etQ7x4vbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU8ydJi1QUqxl6eGHCnTGQovvtro4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3Lzh5ZEppMVFVcXhsNmVH SENuVEdRb3Z2dHJvNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnGHYwDQYJKoZIhvcNAQELBQADggEBALqnF2T8xelhvpQh9I8kwX/VgNCrXTeh 6gwwhFOJ53pjsNwTyhVnRyEAkWJYUPz1bD17GHd0wroiSImbdykOr6Y364PyKYQh j4InxyG1rcFb/8n0+YrzSDDm/jp4M0VNUPyU1/dfxtOmSyIrdrJ0ln9HWg9xNmVL +JjpsixG1zGiX2lyd47sGUw0nemStPNuJjB0GXXg7u/hjJNntidSFqj3H/ajEVUO PLDaJJ3xcGknnsJ3JfGMKqLB2vCSaWZp+BYjsHkujTZl6GUYRE30Od9yHymy+JRm TwBz9mBm/LhJYCBqDLG5/kqlReb7G79bPgvBJXidNav2t4iHi6ySY88= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:46 2024 by rpki-client on console-ams.rpki-client.org