$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Bdsd58aW5LuqRmhOhxnpDcihf5E.roa File: Bdsd58aW5LuqRmhOhxnpDcihf5E.roa (raw, json) Hash identifier: tTBAjFmL2VfNcKqmPtF4KqQFt/I4GbNPVrhvEg4+5G0= Subject key identifier: 05:DB:1D:E7:C6:96:E4:BB:AA:46:68:4E:87:19:E9:0D:C8:A1:7F:91 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 155E Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Bdsd58aW5LuqRmhOhxnpDcihf5E.roa Signing time: Wed 11 Sep 2024 04:01:46 +0000 ROA not before: Wed 11 Sep 2024 04:01:46 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 103.221.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5470 (0x155e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 04:01:46 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=05DB1DE7C696E4BBAA46684E8719E90DC8A17F91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:95:e5:12:83:15:2d:8a:a8:c4:91:6d:3f:e6: a5:c3:af:6b:3a:ba:f8:6b:e8:0e:59:5d:8c:01:15: e2:bd:70:b9:26:ad:31:c0:b9:58:b2:44:57:f0:88: 6e:2f:08:65:35:53:7a:d3:9a:bf:ca:14:77:4a:d3: 26:95:21:5d:e1:42:b0:4a:44:7c:93:92:1d:b9:d1: 4a:26:43:90:34:77:58:8f:11:f8:92:be:05:26:6f: 81:76:d7:12:f0:55:17:05:7f:28:db:83:8a:e4:50: 2a:b0:2f:82:da:98:09:fe:c5:f0:5d:10:cc:1b:d8: 91:e0:d9:0a:98:fd:1d:fa:93:55:e8:49:cc:64:e5: 44:a1:a2:36:05:8b:7c:82:fd:91:c5:a7:79:db:9e: fe:91:74:d8:eb:02:ea:6f:45:48:9a:8b:e0:e8:b1: 09:ac:dc:18:4c:e2:a9:b5:53:22:00:9c:40:ce:aa: 1c:40:53:a3:d1:cc:b3:4c:1a:8b:e4:e5:45:65:39: 46:ba:bc:57:a1:3c:c6:10:c0:71:f7:11:c0:a0:c2: d8:8e:8c:83:4e:9c:f0:ab:fc:7b:94:14:86:59:96: f2:6a:44:77:d9:d3:9b:18:76:dd:c8:30:43:97:32: 28:ba:12:f0:de:86:5b:9e:b3:87:65:f6:fe:96:94: 1d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DB:1D:E7:C6:96:E4:BB:AA:46:68:4E:87:19:E9:0D:C8:A1:7F:91 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Bdsd58aW5LuqRmhOhxnpDcihf5E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.47.0/24 Signature Algorithm: sha256WithRSAEncryption 51:31:27:50:fa:fe:01:ce:1e:38:63:d7:a5:f4:4b:88:f2:dd: 97:83:0f:da:1b:b0:31:2c:a5:9c:65:7d:3e:cb:f8:60:57:6b: de:a0:40:1b:73:88:86:77:c7:fb:e1:ca:6c:bb:90:1d:d2:3e: bd:2d:d1:5e:38:32:8d:38:d0:f3:00:16:e5:a2:8b:30:c0:a0: 2f:f9:c5:31:24:05:15:00:df:11:35:ea:cc:47:09:fe:c3:26: 21:82:72:b3:06:5f:f0:bd:3a:e0:cf:f2:63:64:5b:71:5c:63: 34:1f:30:e3:7c:fd:ce:8e:a5:c2:57:1e:47:7f:85:db:6f:0d: 10:f9:93:3c:76:70:0a:08:e9:af:21:59:de:b3:6a:96:fa:fd: f6:85:64:f0:71:f0:f2:bd:ac:ae:da:e8:36:4d:b6:60:43:b7: 07:2b:68:b9:1f:a5:c1:c8:fc:c2:bc:36:d2:13:7f:91:53:3d: e3:74:d6:84:b0:bc:6b:a7:ca:68:a6:57:69:18:3f:8d:68:5f: 8d:e4:71:04:55:1d:ff:f0:9e:22:97:58:25:f9:ad:a8:5c:b8: 16:6b:ba:e0:54:74:f7:1f:a0:c8:07:99:b5:46:bc:0b:d7:3c: e2:e2:4d:51:81:39:ea:63:f4:67:14:8e:63:6a:8d:09:30:ad: 34:df:b1:8d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFV4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw NDAxNDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDA1REIxREU3QzY5NkU0 QkJBQTQ2Njg0RTg3MTlFOTBEQzhBMTdGOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYleUSgxUtiqjEkW0/5qXDr2s6uvhr6A5ZXYwBFeK9cLkmrTHA uViyRFfwiG4vCGU1U3rTmr/KFHdK0yaVIV3hQrBKRHyTkh250UomQ5A0d1iPEfiS vgUmb4F21xLwVRcFfyjbg4rkUCqwL4LamAn+xfBdEMwb2JHg2QqY/R36k1XoScxk 5UShojYFi3yC/ZHFp3nbnv6RdNjrAupvRUiai+DosQms3BhM4qm1UyIAnEDOqhxA U6PRzLNMGovk5UVlOUa6vFehPMYQwHH3EcCgwtiOjINOnPCr/HuUFIZZlvJqRHfZ 05sYdt3IMEOXMii6EvDehlues4dl9v6WlB25AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUBdsd58aW5LuqRmhOhxnpDcihf5EwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0Jkc2Q1OGFXNUx1cVJt aE9oeG5wRGNpaGY1RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3S8wDQYJKoZIhvcNAQELBQADggEBAFExJ1D6/gHOHjhj16X0S4jy3ZeDD9ob sDEspZxlfT7L+GBXa96gQBtziIZ3x/vhymy7kB3SPr0t0V44Mo040PMAFuWiizDA oC/5xTEkBRUA3xE16sxHCf7DJiGCcrMGX/C9OuDP8mNkW3FcYzQfMON8/c6OpcJX Hkd/hdtvDRD5kzx2cAoI6a8hWd6zapb6/faFZPBx8PK9rK7a6DZNtmBDtwcraLkf pcHI/MK8NtITf5FTPeN01oSwvGunymimV2kYP41oX43kcQRVHf/wniKXWCX5rahc uBZruuBUdPcfoMgHmbVGvAvXPOLiTVGBOepj9GcUjmNqjQkwrTTfsY0= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org