$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/EVFNKXOTSqEHRk2xFlWMKl60xs0.roa File: EVFNKXOTSqEHRk2xFlWMKl60xs0.roa (raw, json) Hash identifier: D0oos6UMapCxNvA9P/g7qwmNFIeohe5CdJGc1crolKI= Subject key identifier: 11:51:4D:29:73:93:4A:A1:07:46:4D:B1:16:55:8C:2A:5E:B4:C6:CD Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1546 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/EVFNKXOTSqEHRk2xFlWMKl60xs0.roa Signing time: Wed 11 Sep 2024 03:59:19 +0000 ROA not before: Wed 11 Sep 2024 03:59:19 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 103.221.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5446 (0x1546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 03:59:19 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=11514D2973934AA107464DB116558C2A5EB4C6CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ec:3b:8c:e6:ad:a8:78:ad:43:da:34:fd:09: e5:34:68:c0:2f:ef:47:39:b3:51:04:dc:e9:7f:6e: 75:56:fe:a6:a3:90:0f:f8:d3:74:a0:00:65:dd:d3: 6d:a2:7e:4b:8e:ae:39:ba:fa:33:09:eb:46:4e:4f: b3:dc:f4:d9:2e:fb:21:dc:fc:bd:86:78:69:1c:ca: 31:a9:63:2e:e0:44:31:ff:10:02:bf:64:ef:4c:2e: a9:d3:7e:32:97:25:9b:14:de:3b:32:30:94:ea:0f: bf:83:14:ce:99:88:b9:ea:14:ef:1f:c9:a9:16:24: a4:dd:d3:b0:38:fd:b8:f4:df:7b:79:98:96:7d:d4: 45:67:8e:32:86:3d:56:c4:9f:71:57:f9:13:93:83: b0:d7:0d:2a:5f:79:ef:df:bc:e2:fe:33:c7:2d:71: 50:a2:b6:f1:b1:27:83:58:5a:a6:86:d2:d0:5d:9f: 52:94:ec:77:f5:74:8b:c6:83:67:ab:dc:31:ce:31: 98:fb:4b:4a:a9:e0:33:b1:45:bd:62:74:f0:2b:6c: 32:4d:5d:32:8f:7e:5b:d9:41:f3:d3:e0:bc:89:50: 06:d7:48:10:3b:08:28:74:9d:a6:10:90:f8:dd:3f: 12:a0:52:64:6f:75:05:db:9c:39:a6:fa:c1:16:b1: 81:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:51:4D:29:73:93:4A:A1:07:46:4D:B1:16:55:8C:2A:5E:B4:C6:CD X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/EVFNKXOTSqEHRk2xFlWMKl60xs0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.31.0/24 Signature Algorithm: sha256WithRSAEncryption 84:c8:b2:7e:92:77:c2:93:ee:b8:1f:03:10:3a:2e:30:a3:2c: e4:51:81:9e:ea:25:2c:e6:aa:52:96:7f:59:8f:50:64:4a:66: f9:a2:c0:6e:c6:90:0f:df:43:66:3d:56:c5:27:b4:22:60:d6: 38:a0:17:41:9d:53:ab:21:e1:07:23:5c:7b:12:17:15:58:f0: 1a:55:4b:ea:e5:cd:8e:6a:ad:bc:fe:ef:cc:cd:61:40:ba:0c: 01:cb:f5:a5:56:7f:3a:3c:73:1f:4a:6c:b4:77:51:69:c2:b9: 4c:13:53:fd:78:c1:d6:1e:14:19:2c:8b:52:d7:61:0c:b9:3b: fa:36:55:67:0a:ae:70:9e:84:31:d9:13:69:a7:a3:02:8f:e7: 8c:f0:0b:ec:f0:31:dd:7b:9e:ad:a2:b1:19:01:1e:ad:1b:b3: 72:23:3f:c2:f7:9b:c2:c7:95:e7:76:7c:5b:8e:69:65:2c:b2: 0e:22:5b:8f:f1:13:2d:94:17:7c:c6:6d:9e:ad:4c:8b:61:ad: 9c:c6:f2:06:77:d5:70:17:b9:ad:af:70:96:5c:15:a4:ce:d2: 80:e1:75:5e:87:0d:ba:8f:70:b1:85:5f:f8:9d:d0:12:81:cf: 09:cb:9b:0a:17:2c:c1:dd:df:21:a7:45:c3:ee:ff:fd:2e:82: 0c:04:2a:09 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MzU5MTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDExNTE0RDI5NzM5MzRB QTEwNzQ2NERCMTE2NTU4QzJBNUVCNEM2Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO7DuM5q2oeK1D2jT9CeU0aMAv70c5s1EE3Ol/bnVW/qajkA/4 03SgAGXd022ifkuOrjm6+jMJ60ZOT7Pc9Nku+yHc/L2GeGkcyjGpYy7gRDH/EAK/ ZO9MLqnTfjKXJZsU3jsyMJTqD7+DFM6ZiLnqFO8fyakWJKTd07A4/bj033t5mJZ9 1EVnjjKGPVbEn3FX+ROTg7DXDSpfee/fvOL+M8ctcVCitvGxJ4NYWqaG0tBdn1KU 7Hf1dIvGg2er3DHOMZj7S0qp4DOxRb1idPArbDJNXTKPflvZQfPT4LyJUAbXSBA7 CCh0naYQkPjdPxKgUmRvdQXbnDmm+sEWsYGlAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUEVFNKXOTSqEHRk2xFlWMKl60xs0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0VWRk5LWE9UU3FFSFJr MnhGbFdNS2w2MHhzMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3R8wDQYJKoZIhvcNAQELBQADggEBAITIsn6Sd8KT7rgfAxA6LjCjLORRgZ7q JSzmqlKWf1mPUGRKZvmiwG7GkA/fQ2Y9VsUntCJg1jigF0GdU6sh4QcjXHsSFxVY 8BpVS+rlzY5qrbz+78zNYUC6DAHL9aVWfzo8cx9KbLR3UWnCuUwTU/14wdYeFBks i1LXYQy5O/o2VWcKrnCehDHZE2mnowKP54zwC+zwMd17nq2isRkBHq0bs3IjP8L3 m8LHled2fFuOaWUssg4iW4/xEy2UF3zGbZ6tTIthrZzG8gZ31XAXua2vcJZcFaTO 0oDhdV6HDbqPcLGFX/id0BKBzwnLmwoXLMHd3yGnRcPu//0uggwEKgk= -----END CERTIFICATE-----Generated at Fri Nov 22 23:40:49 2024 by rpki-client on console-fra.rpki-client.org