$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/IE6dewnNAjAbCJYlU46m2HL44UE.roa File: IE6dewnNAjAbCJYlU46m2HL44UE.roa (raw, json) Hash identifier: i+AitNCJHJJr4czVGsSLJRKozCzDrc7HE5xfgvcZ15U= Subject key identifier: 20:4E:9D:7B:09:CD:02:30:1B:08:96:25:53:8E:A6:D8:72:F8:E1:41 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 153C Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/IE6dewnNAjAbCJYlU46m2HL44UE.roa Signing time: Wed 11 Sep 2024 03:57:55 +0000 ROA not before: Wed 11 Sep 2024 03:57:55 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 103.220.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5436 (0x153c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 03:57:55 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=204E9D7B09CD02301B089625538EA6D872F8E141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:2c:c5:63:d6:06:fb:56:fe:84:b6:bf:22: 11:55:72:81:dc:ba:a6:48:f4:c7:e8:b5:b7:6a:38: 7a:bd:16:da:7e:1f:07:73:fa:ba:04:a8:52:93:74: de:21:77:b0:f0:3c:f1:ff:1d:ae:82:72:90:9b:59: 6d:84:a2:c0:22:db:c5:3a:32:41:a8:cb:19:d8:98: 6c:3e:1f:51:fb:4f:5d:6e:4f:b3:0b:81:0a:37:40: ee:98:83:31:92:38:34:84:30:a4:7f:bb:0a:74:f6: 7d:bb:00:ca:39:87:6d:b5:7e:b8:61:1b:35:c6:fd: bf:d2:7f:ec:97:bc:cb:a3:86:a3:79:ce:b4:19:eb: 33:00:1d:97:8d:9d:77:04:4c:93:2a:62:e1:a1:c6: d1:24:e1:60:77:e0:4b:30:15:50:e0:15:bf:66:af: 88:16:c7:e6:42:ad:2b:85:f4:5a:7e:2a:5c:d3:b5: ee:73:7e:07:f0:13:a3:2d:17:94:9f:7b:d7:94:1f: fb:f1:da:36:3f:65:e9:3c:e1:84:21:86:60:c7:90: c7:53:24:a9:aa:d1:07:ba:d2:6d:44:6b:28:a9:f8: 66:fd:cd:8d:a6:45:f4:fb:4f:3e:58:c4:21:2d:20: 9b:f3:0d:e5:55:a6:85:b9:da:d6:51:99:16:c9:32: 80:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4E:9D:7B:09:CD:02:30:1B:08:96:25:53:8E:A6:D8:72:F8:E1:41 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/IE6dewnNAjAbCJYlU46m2HL44UE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.255.0/24 Signature Algorithm: sha256WithRSAEncryption b2:e6:a9:af:cb:70:4f:9d:bd:92:f5:2e:10:64:04:f6:a9:92: 05:b2:c6:e7:a1:68:64:f2:77:df:f6:c1:cd:fb:dd:b7:c1:6a: f1:9d:1e:35:58:36:d4:1f:ff:53:57:16:a7:af:7e:78:03:e2: cf:d4:fd:62:bd:f6:62:c4:60:b3:5d:bd:c8:90:07:2a:3d:29: c0:40:f5:32:a2:2f:89:80:9c:d6:83:81:5e:6c:2a:7a:b5:41: 9f:0a:db:7c:91:89:56:58:ab:b3:6f:1e:68:da:f5:fe:2a:a1: 26:c5:3f:5f:d4:eb:1c:a0:c8:f8:c7:98:5c:b0:5d:21:53:54: 28:c9:ec:f7:70:b4:c4:94:19:27:63:c9:9c:5e:04:da:c2:70: 7b:65:be:74:ac:37:0e:69:1c:12:cc:38:9b:23:f7:5b:22:de: 6f:f5:ab:25:81:44:e0:3f:c2:2b:fb:22:5c:15:52:24:ea:b3: ad:47:c6:c8:e7:28:f5:8f:d4:64:43:5b:bf:8f:71:0a:76:f9: ad:6c:09:ee:ab:fa:c0:bc:9c:dd:b2:c6:6d:f7:2b:50:de:64: c0:cf:05:1b:f6:83:5e:1e:de:fd:fe:76:71:db:55:9a:90:cd: 57:23:8b:79:67:b2:2e:dc:fc:2e:2e:d4:6c:c3:21:ed:f1:95: 03:3c:8f:7d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFTwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MzU3NTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDIwNEU5RDdCMDlDRDAy MzAxQjA4OTYyNTUzOEVBNkQ4NzJGOEUxNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDItSzFY9YG+1b+hLa/IhFVcoHcuqZI9MfotbdqOHq9Ftp+Hwdz +roEqFKTdN4hd7DwPPH/Ha6CcpCbWW2EosAi28U6MkGoyxnYmGw+H1H7T11uT7ML gQo3QO6YgzGSODSEMKR/uwp09n27AMo5h221frhhGzXG/b/Sf+yXvMujhqN5zrQZ 6zMAHZeNnXcETJMqYuGhxtEk4WB34EswFVDgFb9mr4gWx+ZCrSuF9Fp+KlzTte5z fgfwE6MtF5Sfe9eUH/vx2jY/Zek84YQhhmDHkMdTJKmq0Qe60m1Eayip+Gb9zY2m RfT7Tz5YxCEtIJvzDeVVpoW52tZRmRbJMoCJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUIE6dewnNAjAbCJYlU46m2HL44UEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0lFNmRld25OQWpBYkNK WWxVNDZtMkhMNDRVRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3P8wDQYJKoZIhvcNAQELBQADggEBALLmqa/LcE+dvZL1LhBkBPapkgWyxueh aGTyd9/2wc373bfBavGdHjVYNtQf/1NXFqevfngD4s/U/WK99mLEYLNdvciQByo9 KcBA9TKiL4mAnNaDgV5sKnq1QZ8K23yRiVZYq7NvHmja9f4qoSbFP1/U6xygyPjH mFywXSFTVCjJ7PdwtMSUGSdjyZxeBNrCcHtlvnSsNw5pHBLMOJsj91si3m/1qyWB ROA/wiv7IlwVUiTqs61HxsjnKPWP1GRDW7+PcQp2+a1sCe6r+sC8nN2yxm33K1De ZMDPBRv2g14e3v3+dnHbVZqQzVcji3lnsi7c/C4u1GzDIe3xlQM8j30= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org