$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/CsQzENarX6C71ZR62Vh621fzo6I.roa File: CsQzENarX6C71ZR62Vh621fzo6I.roa (raw, json) Hash identifier: 3ENFvSpir6wFNg8P8I9Db1vVc7CEQ3hRmIMwUh51EDI= Subject key identifier: 0A:C4:33:10:D6:AB:5F:A0:BB:D5:94:7A:D9:58:7A:DB:57:F3:A3:A2 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 155D Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/CsQzENarX6C71ZR62Vh621fzo6I.roa Signing time: Wed 11 Sep 2024 04:01:45 +0000 ROA not before: Wed 11 Sep 2024 04:01:45 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 103.221.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5469 (0x155d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 04:01:45 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=0AC43310D6AB5FA0BBD5947AD9587ADB57F3A3A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ac:5c:bc:92:01:e6:a4:58:db:de:62:08:41: c0:27:10:30:f2:26:b7:1a:42:3b:6d:8e:6c:12:35: 5f:be:db:c3:b8:ff:96:82:7d:2e:9b:3b:bf:52:de: a9:cd:52:e0:8a:36:b3:72:ec:bb:6b:d9:34:1c:a5: 71:fb:09:8e:24:69:31:8d:62:da:62:8d:27:3b:86: 2b:c6:5b:e1:65:04:9b:db:01:28:3a:fd:86:a9:5e: 05:71:84:07:04:3f:bb:40:c7:d3:39:1b:c9:34:f7: 7c:2b:b0:b2:3f:de:84:b9:d5:1a:10:0c:16:a7:b0: db:70:ad:f7:bb:55:de:86:65:2f:45:da:56:e8:e2: 7d:67:36:3c:2e:11:25:10:01:60:15:cc:c7:7e:f0: 54:b2:21:e4:dc:77:e4:6f:3e:ef:b0:ca:ed:b2:e0: dc:d4:ed:d6:32:c4:8b:c4:55:5f:2a:56:0a:1e:5b: e0:5d:d9:bf:e0:cd:5d:82:83:c9:9c:7c:69:f0:c0: 5b:ef:2d:09:ba:8f:9d:9b:6a:51:24:0c:01:b3:4e: e9:f5:26:41:3e:d2:52:3c:cb:db:cf:95:1a:66:72: e3:8a:1c:a6:01:f7:43:5d:78:26:05:87:8c:3e:93: 4c:97:0b:65:2d:cb:0d:24:03:6a:f4:8c:9f:29:2f: 25:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C4:33:10:D6:AB:5F:A0:BB:D5:94:7A:D9:58:7A:DB:57:F3:A3:A2 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/CsQzENarX6C71ZR62Vh621fzo6I.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.46.0/24 Signature Algorithm: sha256WithRSAEncryption d2:1d:88:d9:db:4a:75:9a:c9:4c:c8:aa:61:86:ca:99:76:29: 6a:10:d2:5c:33:53:fe:95:08:3d:99:de:ae:d0:4c:20:ff:af: 19:18:83:6d:ea:a6:6f:42:0d:b1:27:e3:46:c6:b8:8c:6d:fb: 95:f9:4e:ed:7a:d8:5d:58:ca:56:b7:86:c2:86:e3:5c:c6:22: 7d:51:29:94:ae:36:cf:c2:1c:05:0c:f4:0f:65:54:e8:4b:b3: e5:8d:18:b4:87:cf:9c:ca:72:c1:84:d3:e7:1b:b0:04:5f:85: 30:9b:3d:7e:b4:25:31:52:2e:20:e2:99:a5:3f:8a:b2:f2:35: 7a:f5:1f:24:ab:28:63:3a:e7:b7:4a:f2:74:69:27:96:8c:7e: e4:0c:0b:be:f7:ac:88:a5:0c:e4:49:0e:f8:2c:f7:5e:dc:4e: fe:4a:35:76:70:86:14:e8:2b:6e:61:fd:20:12:26:98:8e:db: 32:4d:33:a1:ca:32:62:dc:f6:06:2b:5d:56:f6:5c:63:f2:0f: d8:b1:fb:7b:f7:75:1e:78:f7:02:d2:48:08:d3:2d:35:df:4c: ab:67:90:c1:cf:1b:35:22:28:71:fd:ad:99:5d:c2:e1:7d:2b: a0:a2:ee:a5:82:cc:ba:07:51:c9:63:93:fc:b2:dc:59:8b:76: 10:67:17:36 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw NDAxNDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDBBQzQzMzEwRDZBQjVG QTBCQkQ1OTQ3QUQ5NTg3QURCNTdGM0EzQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXrFy8kgHmpFjb3mIIQcAnEDDyJrcaQjttjmwSNV++28O4/5aC fS6bO79S3qnNUuCKNrNy7Ltr2TQcpXH7CY4kaTGNYtpijSc7hivGW+FlBJvbASg6 /YapXgVxhAcEP7tAx9M5G8k093wrsLI/3oS51RoQDBansNtwrfe7Vd6GZS9F2lbo 4n1nNjwuESUQAWAVzMd+8FSyIeTcd+RvPu+wyu2y4NzU7dYyxIvEVV8qVgoeW+Bd 2b/gzV2Cg8mcfGnwwFvvLQm6j52balEkDAGzTun1JkE+0lI8y9vPlRpmcuOKHKYB 90NdeCYFh4w+k0yXC2Utyw0kA2r0jJ8pLyXvAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUCsQzENarX6C71ZR62Vh621fzo6IwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0NzUXpFTmFyWDZDNzFa UjYyVmg2MjFmem82SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3S4wDQYJKoZIhvcNAQELBQADggEBANIdiNnbSnWayUzIqmGGypl2KWoQ0lwz U/6VCD2Z3q7QTCD/rxkYg23qpm9CDbEn40bGuIxt+5X5Tu162F1Yyla3hsKG41zG In1RKZSuNs/CHAUM9A9lVOhLs+WNGLSHz5zKcsGE0+cbsARfhTCbPX60JTFSLiDi maU/irLyNXr1HySrKGM657dK8nRpJ5aMfuQMC773rIilDORJDvgs917cTv5KNXZw hhToK25h/SASJpiO2zJNM6HKMmLc9gYrXVb2XGPyD9ix+3v3dR549wLSSAjTLTXf TKtnkMHPGzUiKHH9rZldwuF9K6Ci7qWCzLoHUcljk/yy3FmLdhBnFzY= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:46 2024 by rpki-client on console-ams.rpki-client.org