$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/IX7s-SiA7x1k_a4d3pr_IX9bshU.roa File: IX7s-SiA7x1k_a4d3pr_IX9bshU.roa (raw, json) Hash identifier: UfHuNm4plVkxRg5u4BemSfwbuMBmmJepub+y0sKQ0F4= Subject key identifier: 21:7E:EC:F9:28:80:EF:1D:64:FD:AE:1D:DE:9A:FF:21:7F:5B:B2:15 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14D1 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/IX7s-SiA7x1k_a4d3pr_IX9bshU.roa Signing time: Wed 11 Sep 2024 02:23:52 +0000 ROA not before: Wed 11 Sep 2024 02:23:52 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 138527 IP address blocks: 103.220.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5329 (0x14d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:52 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=217EECF92880EF1D64FDAE1DDE9AFF217F5BB215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:87:94:54:89:bd:14:07:52:ba:ee:a5:9b: 42:8f:8b:eb:4f:a6:f6:8c:e4:0e:a7:93:ce:00:01: db:b3:61:0c:c1:6b:77:1b:60:87:ca:a4:aa:3e:e9: c0:e1:8f:d2:4c:21:cc:35:5e:9d:7c:3f:6d:f8:39: c8:7a:ba:2e:cf:1d:96:c6:20:17:e8:d5:ac:e8:cf: 87:89:f5:14:91:cf:8d:99:3e:80:79:2e:0b:52:1e: 71:47:57:9f:a1:82:08:49:36:3a:63:51:dc:79:e6: fc:f9:9e:5f:1d:8e:50:00:6f:cb:05:f3:e1:f8:56: 39:bb:5e:96:b8:db:8f:6f:36:d4:b3:2a:03:e5:15: 42:c6:c6:b3:6a:b2:e3:9c:a0:cd:3f:d6:db:66:1f: ea:ef:be:0e:1f:ed:9f:86:92:7c:63:58:0f:e0:84: 97:dc:e8:4f:72:7d:80:aa:60:f0:3a:d1:b3:3f:46: 1b:3a:37:3b:06:27:2f:db:ab:7f:9e:4d:eb:09:6b: a2:93:16:dd:70:70:54:14:0e:d6:bd:73:94:14:08: 35:89:68:b8:1d:f9:47:cc:47:10:8f:77:0a:4f:71: 35:e6:1b:0f:b7:f5:0b:52:f3:9f:27:4a:11:16:47: c6:49:17:c3:3b:f8:d6:80:44:e4:4c:50:30:f9:a2: 11:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7E:EC:F9:28:80:EF:1D:64:FD:AE:1D:DE:9A:FF:21:7F:5B:B2:15 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/IX7s-SiA7x1k_a4d3pr_IX9bshU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.248.0/22 Signature Algorithm: sha256WithRSAEncryption d7:ba:f1:8b:d3:21:2d:0e:7a:8a:91:2c:45:75:4a:4a:c9:4b: d6:cc:1c:ef:70:20:64:95:ea:c0:03:9e:11:f9:59:db:44:5d: ef:84:54:de:86:34:32:85:3b:60:8a:d4:6c:09:32:d8:87:54: 2f:81:0c:b1:6f:30:2c:9d:fe:96:5c:6f:7c:be:e4:5a:aa:42: 1c:3b:61:30:98:f7:6a:31:25:85:93:8d:65:09:d9:83:1e:f0: af:73:bb:72:5f:53:92:e4:4c:52:26:fe:81:0d:2a:99:43:63: 5d:9b:8e:7c:49:b5:a9:8e:b8:3c:93:70:cf:a2:1b:e8:fc:c8: 5b:55:5b:1d:40:7d:39:b8:b0:07:74:9f:b6:bc:59:ed:dd:de: 5c:00:5b:02:52:7f:c5:98:87:c9:d8:0a:87:02:a8:24:07:34: 16:a4:f6:ec:a7:a3:a0:4e:b6:9b:94:e1:27:cc:44:a5:75:9c: fa:08:47:06:d4:1d:01:d1:52:a8:01:4d:cd:dc:a2:ab:15:8a: 80:58:5a:b1:ec:87:54:1e:fd:61:f0:1a:be:5a:f8:4f:84:74: f9:7a:94:08:86:2a:a9:a0:e9:a2:76:32:2c:f8:3f:58:45:ba: 4e:a4:b5:dd:25:64:a9:08:1a:84:f0:6d:35:8b:99:d7:f2:75: be:ec:c9:4f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFNEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzNTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDIxN0VFQ0Y5Mjg4MEVG MUQ2NEZEQUUxRERFOUFGRjIxN0Y1QkIyMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr1YeUVIm9FAdSuu6lm0KPi+tPpvaM5A6nk84AAduzYQzBa3cb YIfKpKo+6cDhj9JMIcw1Xp18P234Och6ui7PHZbGIBfo1azoz4eJ9RSRz42ZPoB5 LgtSHnFHV5+hgghJNjpjUdx55vz5nl8djlAAb8sF8+H4Vjm7Xpa4249vNtSzKgPl FULGxrNqsuOcoM0/1ttmH+rvvg4f7Z+GknxjWA/ghJfc6E9yfYCqYPA60bM/Rhs6 NzsGJy/bq3+eTesJa6KTFt1wcFQUDta9c5QUCDWJaLgd+UfMRxCPdwpPcTXmGw+3 9QtS858nShEWR8ZJF8M7+NaARORMUDD5ohEPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUIX7s+SiA7x1k/a4d3pr/IX9bshUwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0lYN3MtU2lBN3gxa19h NGQzcHJfSVg5YnNoVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3PgwDQYJKoZIhvcNAQELBQADggEBANe68YvTIS0OeoqRLEV1SkrJS9bMHO9w IGSV6sADnhH5WdtEXe+EVN6GNDKFO2CK1GwJMtiHVC+BDLFvMCyd/pZcb3y+5Fqq Qhw7YTCY92oxJYWTjWUJ2YMe8K9zu3JfU5LkTFIm/oENKplDY12bjnxJtamOuDyT cM+iG+j8yFtVWx1AfTm4sAd0n7a8We3d3lwAWwJSf8WYh8nYCocCqCQHNBak9uyn o6BOtpuU4SfMRKV1nPoIRwbUHQHRUqgBTc3coqsVioBYWrHsh1Qe/WHwGr5a+E+E dPl6lAiGKqmg6aJ2Miz4P1hFuk6ktd0lZKkIGoTwbTWLmdfydb7syU8= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:46 2024 by rpki-client on console-ams.rpki-client.org