$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/BiQ4I_jmViCKiWuYN8cQ3NuIuII.roa File: BiQ4I_jmViCKiWuYN8cQ3NuIuII.roa (raw, json) Hash identifier: gVx+t2UHghTHo9v+qRlT3FZOAChZszBjNK/Zf42snDY= Subject key identifier: 06:24:38:23:F8:E6:56:20:8A:89:6B:98:37:C7:10:DC:DB:88:B8:82 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 154C Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/BiQ4I_jmViCKiWuYN8cQ3NuIuII.roa Signing time: Wed 11 Sep 2024 03:59:21 +0000 ROA not before: Wed 11 Sep 2024 03:59:21 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 103.221.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5452 (0x154c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 03:59:21 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=06243823F8E656208A896B9837C710DCDB88B882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d5:be:ec:14:a3:72:d5:91:11:23:52:e5:77: bd:5b:90:fa:71:9f:fc:a6:22:19:dd:e1:10:6b:b4: bd:b7:f9:7b:7f:e1:fe:53:57:24:87:6f:af:d2:7d: 7d:e1:7d:db:40:c9:69:7e:70:48:c6:d3:2e:bb:17: 09:ad:df:f8:eb:79:2f:fe:b3:5f:d7:95:20:4c:93: 0e:28:63:99:3e:5a:e4:14:07:98:db:5d:49:ac:85: 1f:2a:5d:94:63:2b:79:6f:6e:f3:40:fe:20:fe:c4: 57:5b:cc:f3:9e:59:00:54:96:ce:f6:27:99:38:2b: c4:0c:ed:7c:00:a5:47:f8:1c:08:c2:7e:5e:4a:74: d6:c7:d2:36:88:02:5c:c5:b4:96:ce:23:ed:37:f6: 90:ea:02:d0:4b:33:e9:c3:f8:1f:ac:f2:bb:0b:35: 54:17:01:ab:40:35:3f:b7:d5:e9:87:fe:36:8c:9c: 98:6d:7e:80:21:0c:1e:41:88:08:b6:c6:55:96:e3: 2b:63:e5:34:df:5d:41:39:d2:a8:2d:23:dd:be:c0: 07:14:e7:92:92:fc:72:7c:84:67:49:71:41:dc:c6: e9:c4:d8:3f:3a:34:4a:ed:7a:66:92:c8:91:75:f9: f7:cf:8a:5c:72:bc:0b:5d:3c:9c:9c:ba:8d:81:48: 99:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:24:38:23:F8:E6:56:20:8A:89:6B:98:37:C7:10:DC:DB:88:B8:82 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/BiQ4I_jmViCKiWuYN8cQ3NuIuII.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.23.0/24 Signature Algorithm: sha256WithRSAEncryption 73:1f:19:c0:2d:1e:4c:63:95:c5:fd:43:1a:b3:ca:83:83:c4: 92:95:6e:c5:ba:79:1d:5a:8f:c9:41:ca:f8:86:65:dc:84:69: 1b:d6:16:47:0a:e4:e9:a5:f7:4e:3a:f2:32:4e:30:bd:9f:37: 91:ea:9a:16:e3:31:48:38:71:28:ff:49:43:08:20:05:6c:4f: 5e:df:d1:b1:ac:e4:9f:a8:1e:df:0b:77:01:da:b3:0a:d6:09: e4:c1:3f:66:df:d7:e6:6a:92:22:b9:65:07:92:d3:a9:9b:72: a2:1c:31:62:81:91:01:d5:c6:ab:99:3f:c4:7f:58:6f:cf:8d: 20:35:cf:d7:ea:09:78:bb:23:94:78:82:a0:f7:07:9a:fb:52: 2a:72:cb:00:69:d9:de:33:36:7d:4b:82:b6:98:bf:2e:90:ba: 42:06:d0:8e:b8:19:4e:59:85:54:de:6a:40:bc:2f:a5:c2:36: f5:af:8b:33:d4:f7:9c:bc:b8:fe:cb:7d:e8:92:73:e2:c8:a6: 98:9a:b5:a3:00:e3:5f:88:df:d8:df:e7:94:80:c1:88:e1:ee: 6b:45:6e:c2:57:aa:96:61:af:c4:50:19:58:dd:45:47:e8:ce: 4d:50:29:b3:86:67:55:11:7a:99:f1:fc:08:cc:0b:eb:0e:40: d3:e3:97:60 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFUwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MzU5MjFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDA2MjQzODIzRjhFNjU2 MjA4QTg5NkI5ODM3QzcxMERDREI4OEI4ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE1b7sFKNy1ZERI1Lld71bkPpxn/ymIhnd4RBrtL23+Xt/4f5T VySHb6/SfX3hfdtAyWl+cEjG0y67Fwmt3/jreS/+s1/XlSBMkw4oY5k+WuQUB5jb XUmshR8qXZRjK3lvbvNA/iD+xFdbzPOeWQBUls72J5k4K8QM7XwApUf4HAjCfl5K dNbH0jaIAlzFtJbOI+039pDqAtBLM+nD+B+s8rsLNVQXAatANT+31emH/jaMnJht foAhDB5BiAi2xlWW4ytj5TTfXUE50qgtI92+wAcU55KS/HJ8hGdJcUHcxunE2D86 NErtemaSyJF1+ffPilxyvAtdPJycuo2BSJkzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUBiQ4I/jmViCKiWuYN8cQ3NuIuIIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0JpUTRJX2ptVmlDS2lX dVlOOGNRM051SXVJSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RcwDQYJKoZIhvcNAQELBQADggEBAHMfGcAtHkxjlcX9QxqzyoODxJKVbsW6 eR1aj8lByviGZdyEaRvWFkcK5Oml90468jJOML2fN5HqmhbjMUg4cSj/SUMIIAVs T17f0bGs5J+oHt8LdwHaswrWCeTBP2bf1+ZqkiK5ZQeS06mbcqIcMWKBkQHVxquZ P8R/WG/PjSA1z9fqCXi7I5R4gqD3B5r7UipyywBp2d4zNn1LgraYvy6QukIG0I64 GU5ZhVTeakC8L6XCNvWvizPU95y8uP7LfeiSc+LIppiataMA41+I39jf55SAwYjh 7mtFbsJXqpZhr8RQGVjdRUfozk1QKbOGZ1URepnx/AjMC+sOQNPjl2A= -----END CERTIFICATE-----Generated at Fri Nov 22 23:40:49 2024 by rpki-client on console-fra.rpki-client.org