$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/N_ewYraz0UL3jM1mP8J6NYog2-0.roa File: N_ewYraz0UL3jM1mP8J6NYog2-0.roa (raw, json) Hash identifier: 225+naSJoMjG58SP0lfREajU+H98CUL7E6jJpNVmVek= Subject key identifier: 37:F7:B0:62:B6:B3:D1:42:F7:8C:CD:66:3F:C2:7A:35:8A:20:DB:ED Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 152F Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/N_ewYraz0UL3jM1mP8J6NYog2-0.roa Signing time: Wed 11 Sep 2024 03:57:51 +0000 ROA not before: Wed 11 Sep 2024 03:57:51 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 103.220.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5423 (0x152f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 03:57:51 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=37F7B062B6B3D142F78CCD663FC27A358A20DBED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:a2:ae:c0:67:c1:5e:90:4c:a0:a7:84:08: f4:2e:69:12:a7:56:16:0e:95:e8:34:77:36:af:d1: 85:78:89:30:55:62:99:9b:de:00:90:c3:47:66:f8: bd:5d:a9:bc:cb:21:6b:e5:86:e1:23:79:36:fa:81: ef:de:71:28:4a:5a:7f:29:3f:05:30:e4:21:7b:15: a5:30:a0:4f:89:27:aa:2a:f7:52:24:13:5c:f7:31: 63:e8:bf:50:f0:21:cb:6d:d7:73:95:d7:23:34:3d: 49:7b:3b:b8:6a:f6:89:bd:30:85:26:0b:3d:1e:e0: 41:df:3b:d6:92:67:ba:84:d7:c7:67:d4:64:f5:b2: 81:b3:e2:85:87:2c:37:36:19:33:ce:87:11:d8:2a: 10:59:3c:e6:b5:4d:fd:fa:6c:91:30:33:d9:79:d5: 94:be:e2:f1:97:56:e8:6f:51:50:bc:ba:72:24:e4: 80:d6:8d:5c:5e:31:e8:3f:fb:de:59:4d:b4:31:3e: a5:08:5a:33:e6:91:c3:b4:00:e3:20:57:db:f6:f0: d5:d5:c0:1a:39:6e:e4:3d:12:9a:b0:27:7c:28:bd: 77:c3:18:ee:34:26:22:ff:64:5d:4d:e8:45:99:5f: 84:7d:48:14:63:6a:0d:d4:89:b9:ff:cc:64:25:c5: e1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F7:B0:62:B6:B3:D1:42:F7:8C:CD:66:3F:C2:7A:35:8A:20:DB:ED X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/N_ewYraz0UL3jM1mP8J6NYog2-0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.254.0/24 Signature Algorithm: sha256WithRSAEncryption 24:93:e4:00:93:8a:4a:4c:05:22:e6:29:33:25:10:9e:52:69: 19:01:d4:5c:fc:bc:ae:29:36:19:b5:53:2d:7a:63:a1:ba:c3: 17:a1:0f:c6:80:6e:59:83:e4:55:91:94:2c:96:30:7e:32:60: 45:b5:e9:fa:ee:b9:6d:b9:ea:d3:07:02:19:9a:3c:6c:6f:e1: 58:ae:7d:53:d5:83:8c:28:d6:1a:cb:91:62:50:c4:40:c2:9b: 54:99:00:a5:54:d1:6d:1a:11:23:8a:d0:82:f4:7c:30:ba:ae: 05:75:55:da:c5:82:57:bb:6a:66:80:f4:d3:d7:93:d3:01:c9: cb:cd:e8:6a:ca:da:46:c5:15:62:48:18:f3:2a:05:18:95:fd: 85:93:84:26:b9:5c:b6:4f:d1:23:d0:ec:6f:fc:3c:90:b3:58: 2c:f5:13:4e:18:6e:69:51:ef:b5:91:e9:17:9e:e2:c5:e8:0a: 32:82:74:d5:ca:05:d9:bd:06:84:95:4c:a6:9a:c6:b7:b2:b0: 1e:0f:74:67:36:3a:1e:00:6f:f0:88:5a:22:5c:4f:1f:ae:89: b1:1d:58:d1:83:45:49:b9:c6:b9:f4:34:c5:27:e7:0d:94:e5: 85:a6:37:f1:1d:07:88:dd:a0:4e:7d:ef:05:96:60:6c:94:c3: 7c:81:0b:f4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFS8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MzU3NTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDM3RjdCMDYyQjZCM0Qx NDJGNzhDQ0Q2NjNGQzI3QTM1OEEyMERCRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2f6KuwGfBXpBMoKeECPQuaRKnVhYOleg0dzav0YV4iTBVYpmb 3gCQw0dm+L1dqbzLIWvlhuEjeTb6ge/ecShKWn8pPwUw5CF7FaUwoE+JJ6oq91Ik E1z3MWPov1DwIctt13OV1yM0PUl7O7hq9om9MIUmCz0e4EHfO9aSZ7qE18dn1GT1 soGz4oWHLDc2GTPOhxHYKhBZPOa1Tf36bJEwM9l51ZS+4vGXVuhvUVC8unIk5IDW jVxeMeg/+95ZTbQxPqUIWjPmkcO0AOMgV9v28NXVwBo5buQ9EpqwJ3wovXfDGO40 JiL/ZF1N6EWZX4R9SBRjag3Uibn/zGQlxeERAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUN/ewYraz0UL3jM1mP8J6NYog2+0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L05fZXdZcmF6MFVMM2pN MW1QOEo2TllvZzItMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3P4wDQYJKoZIhvcNAQELBQADggEBACST5ACTikpMBSLmKTMlEJ5SaRkB1Fz8 vK4pNhm1Uy16Y6G6wxehD8aAblmD5FWRlCyWMH4yYEW16fruuW256tMHAhmaPGxv 4ViufVPVg4wo1hrLkWJQxEDCm1SZAKVU0W0aESOK0IL0fDC6rgV1VdrFgle7amaA 9NPXk9MBycvN6GrK2kbFFWJIGPMqBRiV/YWThCa5XLZP0SPQ7G/8PJCzWCz1E04Y bmlR77WR6Ree4sXoCjKCdNXKBdm9BoSVTKaaxreysB4PdGc2Oh4Ab/CIWiJcTx+u ibEdWNGDRUm5xrn0NMUn5w2U5YWmN/EdB4jdoE597wWWYGyUw3yBC/Q= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:46 2024 by rpki-client on console-ams.rpki-client.org