$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/MkOluc5Do2XupdR5x_ftZ2Vp7pE.roa File: MkOluc5Do2XupdR5x_ftZ2Vp7pE.roa (raw, json) Hash identifier: 1x5FsHgXt/0pMShZaO9pss43AwvoBCNo70dLja2P32I= Subject key identifier: 32:43:A5:B9:CE:43:A3:65:EE:A5:D4:79:C7:F7:ED:67:65:69:EE:91 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14DB Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/MkOluc5Do2XupdR5x_ftZ2Vp7pE.roa Signing time: Wed 11 Sep 2024 02:23:55 +0000 ROA not before: Wed 11 Sep 2024 02:23:55 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24373 IP address blocks: 103.220.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5339 (0x14db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:55 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=3243A5B9CE43A365EEA5D479C7F7ED676569EE91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:69:0f:19:06:9a:3c:2f:35:ea:7d:66:73: 7c:18:95:3b:48:25:b7:d4:08:f4:fd:5f:4a:77:3c: a6:ad:bc:9d:c6:49:ff:b1:08:b6:34:13:ba:f2:a2: 03:99:b9:dd:93:90:61:d3:00:b6:c2:eb:13:0f:1a: e2:28:36:42:dc:42:c1:86:c8:f4:b1:64:49:b1:12: 81:14:8e:ea:f8:29:45:ed:73:fc:30:4e:3b:4e:d1: 62:06:4b:92:ad:75:dd:e6:bc:0d:37:75:cc:94:68: 58:37:b6:ed:b3:a7:04:9c:69:e7:4d:f0:04:2f:07: cd:d4:cb:95:67:e9:d6:1b:e9:e4:9e:b0:76:fb:18: 28:e5:e7:7f:8d:26:8a:7c:77:17:04:f9:32:98:19: 96:a3:5d:ba:48:c5:25:09:3f:69:47:5d:8c:d4:09: c8:b8:11:79:1f:be:33:b1:04:d1:a8:fe:16:81:bf: d9:26:d9:d8:2d:c2:a4:1a:cd:35:8b:a5:d9:c7:a8: 75:2e:b7:c0:b1:d3:8a:c7:52:c7:01:4d:c8:1c:07: 54:a9:c4:37:26:92:e0:f2:53:ca:82:b2:bb:07:52: 0f:e8:e1:60:68:1f:09:5b:ac:94:66:ad:3b:7e:92: 07:3e:3b:3d:7c:1a:bc:bb:bd:af:87:a5:b4:10:f2: 4d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:43:A5:B9:CE:43:A3:65:EE:A5:D4:79:C7:F7:ED:67:65:69:EE:91 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/MkOluc5Do2XupdR5x_ftZ2Vp7pE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.252.0/22 Signature Algorithm: sha256WithRSAEncryption dc:d7:ed:28:88:70:af:db:f6:8f:38:94:40:a7:f4:58:65:98: de:53:e0:87:c7:d0:e6:25:33:b5:e7:2b:3f:1d:64:a9:e6:d3: 74:28:7c:b7:7a:e3:7f:9c:6a:0c:70:96:cb:02:6f:2e:06:9d: 52:26:74:d2:5e:a5:2f:48:6a:e7:b0:b0:95:df:eb:3b:65:e6: cd:5f:4a:4c:b6:41:74:e9:e7:98:ba:c5:b2:d7:e7:a0:73:b1: dd:29:84:ad:cb:d1:85:95:7a:95:bb:4d:de:fb:95:89:5a:9a: e9:d8:41:31:aa:bd:9a:52:7e:c7:45:b3:c0:ec:4c:d2:35:25: 32:da:fa:a7:ea:4c:79:25:41:a5:1b:92:fe:af:07:41:38:14: ed:15:85:f8:59:0f:af:09:86:b6:9c:ae:b2:51:54:fc:02:92: 3f:fd:22:de:7d:70:1b:86:16:68:97:e2:de:a1:46:25:09:9f: 6c:4f:e7:b7:d7:95:0f:d9:f2:a0:7c:2d:fa:ea:84:3b:88:8d: a8:aa:f1:d2:1c:f8:9a:32:f9:42:d3:7b:71:0d:8b:9f:d1:48: a6:f0:00:31:9f:cb:ce:da:5f:31:97:35:2a:f4:82:96:ca:f3: d8:63:04:c6:8d:b8:d2:66:5c:ad:b3:19:40:27:5a:5a:2a:ef: 2e:fb:ef:76 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFNswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzNTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDMyNDNBNUI5Q0U0M0Ez NjVFRUE1RDQ3OUM3RjdFRDY3NjU2OUVFOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSZGkPGQaaPC816n1mc3wYlTtIJbfUCPT9X0p3PKatvJ3GSf+x CLY0E7ryogOZud2TkGHTALbC6xMPGuIoNkLcQsGGyPSxZEmxEoEUjur4KUXtc/ww TjtO0WIGS5Ktdd3mvA03dcyUaFg3tu2zpwScaedN8AQvB83Uy5Vn6dYb6eSesHb7 GCjl53+NJop8dxcE+TKYGZajXbpIxSUJP2lHXYzUCci4EXkfvjOxBNGo/haBv9km 2dgtwqQazTWLpdnHqHUut8Cx04rHUscBTcgcB1SpxDcmkuDyU8qCsrsHUg/o4WBo HwlbrJRmrTt+kgc+Oz18Gry7va+HpbQQ8k1tAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUMkOluc5Do2XupdR5x/ftZ2Vp7pEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L01rT2x1YzVEbzJYdXBk UjV4X2Z0WjJWcDdwRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3PwwDQYJKoZIhvcNAQELBQADggEBANzX7SiIcK/b9o84lECn9FhlmN5T4IfH 0OYlM7XnKz8dZKnm03QofLd643+cagxwlssCby4GnVImdNJepS9IauewsJXf6ztl 5s1fSky2QXTp55i6xbLX56Bzsd0phK3L0YWVepW7Td77lYlamunYQTGqvZpSfsdF s8DsTNI1JTLa+qfqTHklQaUbkv6vB0E4FO0VhfhZD68JhracrrJRVPwCkj/9It59 cBuGFmiX4t6hRiUJn2xP57fXlQ/Z8qB8LfrqhDuIjaiq8dIc+Joy+ULTe3ENi5/R SKbwADGfy87aXzGXNSr0gpbK89hjBMaNuNJmXK2zGUAnWloq7y7773Y= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:47 2024 by rpki-client on console-ams.rpki-client.org