$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/P6VXuCy_D3E9eP7AKVoaBWf78f0.roa File: P6VXuCy_D3E9eP7AKVoaBWf78f0.roa (raw, json) Hash identifier: d6PnjzaTTkPBcDUp/Z14BT9Nm1shrmxMg+k4Px1FcEw= Subject key identifier: 3F:A5:57:B8:2C:BF:0F:71:3D:78:FE:C0:29:5A:1A:05:67:FB:F1:FD Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1501 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/P6VXuCy_D3E9eP7AKVoaBWf78f0.roa Signing time: Wed 11 Sep 2024 02:27:31 +0000 ROA not before: Wed 11 Sep 2024 02:27:31 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5377 (0x1501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:27:31 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=3FA557B82CBF0F713D78FEC0295A1A0567FBF1FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:9e:a0:e3:de:ec:a2:fc:4c:fd:7e:85:e1: 52:46:db:71:e0:dc:a2:14:a7:e3:f0:f7:7e:b0:50: e3:02:8c:72:fd:0a:13:7f:71:cc:d6:cd:af:86:83: c8:3c:13:2c:a8:fa:11:29:62:3d:bc:7b:88:5a:55: fb:6b:8d:c4:a5:15:0f:84:58:5a:f2:42:2c:cb:80: 09:13:9e:53:06:e8:65:36:8f:75:65:af:96:3e:55: 33:bc:dc:ac:b9:20:00:84:6c:9d:11:23:dd:6f:ae: 33:40:66:af:b4:66:f9:d1:59:3b:b6:70:9c:e9:a7: a0:8b:b2:a9:3c:72:40:02:66:28:a2:e1:f7:d0:63: 24:93:78:90:97:a3:95:6e:00:cf:32:2f:c7:85:db: 8d:d4:db:41:c7:bb:90:c9:55:3b:c7:de:ba:5c:ed: 3a:71:a2:1c:7c:a5:c1:d2:b0:00:1f:1f:ce:11:8c: 97:a5:e7:2e:4d:c2:54:07:69:1c:46:4a:9a:ac:fd: 48:dd:f7:4f:d7:01:3b:d5:e1:ed:2b:45:a6:2c:86: f4:e0:20:5b:eb:61:b5:4e:fb:ab:29:bb:56:aa:80: bc:77:8f:0c:3a:00:87:59:1a:4f:90:80:9d:ba:78: a8:93:d1:d9:6d:86:38:ae:b4:b3:48:52:aa:8c:ac: 22:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A5:57:B8:2C:BF:0F:71:3D:78:FE:C0:29:5A:1A:05:67:FB:F1:FD X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/P6VXuCy_D3E9eP7AKVoaBWf78f0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.32.0/24 Signature Algorithm: sha256WithRSAEncryption 94:ce:4a:28:78:bb:80:6c:48:d4:92:3b:dd:c3:c9:ea:3b:15: 67:0e:ec:0e:73:f1:08:34:a8:42:f5:73:46:bc:7a:ed:65:a2: d0:65:bb:d7:04:91:c3:92:52:2f:0b:2a:7f:07:92:85:54:4c: 6d:6e:c6:9f:9d:95:98:d1:42:4c:20:02:4d:7d:af:f4:b8:5b: a8:e6:58:95:16:cb:43:83:05:cf:d8:9e:63:93:a2:5a:f4:bd: bd:70:54:37:72:70:2a:38:8c:b3:13:40:9d:1e:37:1e:6d:c7: 47:9d:ea:69:2c:07:49:09:25:57:99:f1:53:fb:e8:0d:c7:77: e0:19:f1:ff:ff:63:00:77:2d:54:40:e5:ce:e2:09:3f:73:0b: f6:cd:24:45:a1:c7:76:5a:e8:0d:b5:99:46:9f:0f:cf:3e:23: 13:34:f4:e9:74:e0:e1:eb:ec:db:1e:15:99:ec:73:da:f7:c1: b1:52:ab:65:b4:b2:6e:95:2a:bb:ac:fe:a9:2c:7e:66:83:22: b5:37:09:58:76:fe:8a:89:19:cc:d3:81:19:f6:42:bd:c7:78: 8b:65:01:1c:74:07:31:99:ab:b0:23:18:c9:e8:4a:9a:ca:b0: c5:c3:68:83:1e:59:a2:ed:15:9e:9d:ff:71:84:f0:88:2c:12: 7d:4a:51:0d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjI3MzFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNGQTU1N0I4MkNCRjBG NzEzRDc4RkVDMDI5NUExQTA1NjdGQkYxRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHQp6g497sovxM/X6F4VJG23Hg3KIUp+Pw936wUOMCjHL9ChN/ cczWza+Gg8g8Eyyo+hEpYj28e4haVftrjcSlFQ+EWFryQizLgAkTnlMG6GU2j3Vl r5Y+VTO83Ky5IACEbJ0RI91vrjNAZq+0ZvnRWTu2cJzpp6CLsqk8ckACZiii4ffQ YySTeJCXo5VuAM8yL8eF243U20HHu5DJVTvH3rpc7Tpxohx8pcHSsAAfH84RjJel 5y5NwlQHaRxGSpqs/Ujd90/XATvV4e0rRaYshvTgIFvrYbVO+6spu1aqgLx3jww6 AIdZGk+QgJ26eKiT0dlthjiutLNIUqqMrCItAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUP6VXuCy/D3E9eP7AKVoaBWf78f0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1A2Vlh1Q3lfRDNFOWVQ N0FLVm9hQldmNzhmMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SAwDQYJKoZIhvcNAQELBQADggEBAJTOSih4u4BsSNSSO93Dyeo7FWcO7A5z 8Qg0qEL1c0a8eu1lotBlu9cEkcOSUi8LKn8HkoVUTG1uxp+dlZjRQkwgAk19r/S4 W6jmWJUWy0ODBc/YnmOTolr0vb1wVDdycCo4jLMTQJ0eNx5tx0ed6mksB0kJJVeZ 8VP76A3Hd+AZ8f//YwB3LVRA5c7iCT9zC/bNJEWhx3Za6A21mUafD88+IxM09Ol0 4OHr7NseFZnsc9r3wbFSq2W0sm6VKrus/qksfmaDIrU3CVh2/oqJGczTgRn2Qr3H eItlARx0BzGZq7AjGMnoSprKsMXDaIMeWaLtFZ6d/3GE8IgsEn1KUQ0= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:40 2024 by rpki-client on console-fra.rpki-client.org