$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Ia_-4Gbdr6NJRpk-Wg6l4_lD65Q.roa File: Ia_-4Gbdr6NJRpk-Wg6l4_lD65Q.roa (raw, json) Hash identifier: bx/ey5eGQDaqSoiDd2K23gd04+DzjWukvhisIptkLKo= Subject key identifier: 21:AF:FE:E0:66:DD:AF:A3:49:46:99:3E:5A:0E:A5:E3:F9:43:EB:94 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 150C Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Ia_-4Gbdr6NJRpk-Wg6l4_lD65Q.roa Signing time: Wed 11 Sep 2024 02:27:34 +0000 ROA not before: Wed 11 Sep 2024 02:27:34 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5388 (0x150c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:27:34 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=21AFFEE066DDAFA34946993E5A0EA5E3F943EB94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:3f:45:50:65:df:2b:53:8f:d3:08:d5:5f: 6e:fd:91:d2:de:f0:22:ed:cd:c9:07:5e:7b:23:cc: 34:a0:98:73:20:61:0e:54:bc:47:09:dd:d9:33:af: 35:c3:1c:fc:e9:dd:65:02:84:35:03:f1:f9:4a:6c: c6:e4:ef:52:c9:fd:94:ea:cc:0b:e5:3c:58:a2:ac: 68:30:49:fc:fd:f1:8b:9d:99:6e:e8:1e:88:1d:da: 08:57:11:e1:da:f7:47:5f:79:a5:87:79:d3:e8:41: 70:9f:21:4f:68:8e:fb:e9:25:e1:9a:e8:93:12:4e: 32:68:f2:77:ff:5a:62:a9:8a:23:af:08:6a:d4:06: e2:cb:39:ab:ba:7a:84:91:0a:77:94:aa:85:26:e5: c9:18:29:bd:58:6b:b9:a6:00:02:de:69:e1:b5:8c: a5:c5:d9:d6:a6:db:b8:bc:2b:4e:86:e3:60:c7:96: 6e:99:16:15:c8:97:e6:91:e9:79:46:35:59:b3:fe: 32:6b:85:31:70:ba:69:1a:d0:0d:69:60:e1:e9:78: 5f:cc:0f:a8:f1:a0:eb:0f:ae:81:14:25:89:c6:ed: 00:f3:21:00:13:7b:9c:24:ac:9c:8c:fc:de:ec:c6: e0:52:7e:4d:3b:28:63:31:56:90:ee:3f:30:22:bb: 3a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AF:FE:E0:66:DD:AF:A3:49:46:99:3E:5A:0E:A5:E3:F9:43:EB:94 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Ia_-4Gbdr6NJRpk-Wg6l4_lD65Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.23.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:39:46:e2:f9:22:c9:64:46:a9:ed:84:f9:2d:b2:bb:75:5e: ed:6f:c9:cb:c9:fd:35:e7:5f:6f:96:7e:e8:4c:3d:70:e2:98: b2:05:6b:c0:c1:43:06:fe:c7:53:60:a3:69:78:b6:83:75:04: 6d:b8:2e:ef:de:c7:e8:0b:72:ce:2e:8d:fd:8d:7e:06:b2:c5: 30:e5:10:3d:83:60:fc:bc:53:c6:38:13:b1:58:f7:90:e8:51: a9:49:b6:f9:dc:e4:ca:ff:b2:3c:06:cb:da:44:f5:fa:d1:81: 43:36:99:14:ce:74:86:dd:34:49:fb:1c:fe:94:7a:21:74:55: fd:77:9f:e8:34:e3:03:94:c5:16:55:e0:4b:3a:89:0f:54:5c: ec:8e:03:c9:3a:9c:83:e8:b5:23:94:8e:02:4d:4c:d7:aa:1e: fa:ca:3d:29:bb:42:e3:a7:f3:ab:93:8b:a5:c8:a5:f4:21:ed: 1c:13:b0:fc:8b:92:00:a1:51:c0:9d:3b:5f:9e:d0:59:b1:11: b2:9b:c1:7a:11:d1:08:56:12:c2:4f:e2:51:b1:58:93:8b:49: ec:ae:7e:99:89:0b:eb:cc:a3:30:31:24:c9:72:c1:10:8c:9b: 0a:da:d2:6d:86:0e:be:dc:46:a2:70:6f:73:cd:10:61:8a:c3: 37:11:9a:15 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjI3MzRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDIxQUZGRUUwNjZEREFG QTM0OTQ2OTkzRTVBMEVBNUUzRjk0M0VCOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1ez9FUGXfK1OP0wjVX279kdLe8CLtzckHXnsjzDSgmHMgYQ5U vEcJ3dkzrzXDHPzp3WUChDUD8flKbMbk71LJ/ZTqzAvlPFiirGgwSfz98YudmW7o Hogd2ghXEeHa90dfeaWHedPoQXCfIU9ojvvpJeGa6JMSTjJo8nf/WmKpiiOvCGrU BuLLOau6eoSRCneUqoUm5ckYKb1Ya7mmAALeaeG1jKXF2dam27i8K06G42DHlm6Z FhXIl+aR6XlGNVmz/jJrhTFwumka0A1pYOHpeF/MD6jxoOsProEUJYnG7QDzIQAT e5wkrJyM/N7sxuBSfk07KGMxVpDuPzAiuzpRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUIa/+4Gbdr6NJRpk+Wg6l4/lD65QwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0lhXy00R2JkcjZOSlJw ay1XZzZsNF9sRDY1US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RcwDQYJKoZIhvcNAQELBQADggEBADs5RuL5IslkRqnthPktsrt1Xu1vycvJ /TXnX2+WfuhMPXDimLIFa8DBQwb+x1Ngo2l4toN1BG24Lu/ex+gLcs4ujf2Nfgay xTDlED2DYPy8U8Y4E7FY95DoUalJtvnc5Mr/sjwGy9pE9frRgUM2mRTOdIbdNEn7 HP6UeiF0Vf13n+g04wOUxRZV4Es6iQ9UXOyOA8k6nIPotSOUjgJNTNeqHvrKPSm7 QuOn86uTi6XIpfQh7RwTsPyLkgChUcCdO1+e0FmxEbKbwXoR0QhWEsJP4lGxWJOL SeyufpmJC+vMozAxJMlywRCMmwra0m2GDr7cRqJwb3PNEGGKwzcRmhU= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:42 2024 by rpki-client on console-fra.rpki-client.org