$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/QybdY1dd6JbH-28_teE00AUIZdc.roa File: QybdY1dd6JbH-28_teE00AUIZdc.roa (raw, json) Hash identifier: zCf7oL6Gqc5Pxyo2+pEDmryRvRl2qRyx/0bO/UWTZWg= Subject key identifier: 43:26:DD:63:57:5D:E8:96:C7:FB:6F:3F:B5:E1:34:D0:05:08:65:D7 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1565 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/QybdY1dd6JbH-28_teE00AUIZdc.roa Signing time: Wed 11 Sep 2024 04:01:47 +0000 ROA not before: Wed 11 Sep 2024 04:01:47 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 103.221.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5477 (0x1565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 04:01:47 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=4326DD63575DE896C7FB6F3FB5E134D0050865D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:0f:c2:a4:10:84:f3:ab:04:ed:78:4c:eb: fc:d4:b0:14:8a:51:75:a3:7f:c0:e4:b6:01:f7:39: 17:65:84:ab:8e:40:c7:56:ba:86:c3:e4:5f:aa:2c: 41:16:02:88:de:83:66:9f:1c:0d:84:e7:1b:b4:45: 16:b2:34:d7:02:49:02:52:9c:e9:aa:c5:f1:30:cd: e5:05:2c:95:a7:85:48:7e:3a:da:45:fd:8a:46:b9: 20:4b:1d:6c:0c:b5:cb:37:8d:1b:a8:6a:19:75:4a: 01:27:56:56:70:0a:3d:f2:ee:2c:4c:6b:4a:e7:c9: 69:b5:f3:82:7b:6a:02:87:54:5c:7e:6d:f1:9e:6d: 93:55:e8:e8:04:73:e6:2e:c1:33:cb:f9:fe:68:17: 4a:40:98:48:5e:66:7c:d3:76:ee:7c:2a:62:84:a9: 59:23:ab:71:04:7c:c6:21:c5:fe:d6:ee:70:28:bd: 34:7f:f7:39:ef:fd:66:92:ff:32:b0:b3:7c:18:d5: 32:28:36:78:9d:33:ef:74:2b:c5:0b:ec:91:81:2b: 84:11:a3:0d:f3:da:c5:d7:2a:cd:73:27:17:2d:15: d5:b4:d4:b8:db:86:ed:68:0c:df:35:cf:e2:5a:2b: 6d:8c:56:22:71:d9:0a:d3:50:bf:93:93:d0:fc:5a: ee:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:26:DD:63:57:5D:E8:96:C7:FB:6F:3F:B5:E1:34:D0:05:08:65:D7 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/QybdY1dd6JbH-28_teE00AUIZdc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.50.0/24 Signature Algorithm: sha256WithRSAEncryption 97:98:e6:c1:5e:dd:a4:7f:9a:6f:df:ef:f8:76:63:c9:0e:44: fd:8b:81:ae:3d:0c:9b:5a:b8:db:25:75:36:b6:a2:0f:d3:53: e8:08:d0:6e:91:a3:f1:46:5c:59:af:a7:79:ed:17:ff:4b:78: 4d:cd:97:eb:57:71:5a:8b:58:28:66:17:db:17:72:8c:f0:d1: b9:49:a9:f5:9f:2b:46:e6:ba:b4:39:01:c2:35:5b:4a:82:37: 1d:6c:75:33:62:f6:66:d8:dd:df:d7:4e:75:ad:db:d7:4e:33: 7d:e8:81:d8:9c:e3:aa:24:07:4d:ca:54:02:c0:a3:6f:ae:23: 39:31:65:1d:88:ab:f6:9c:ba:3a:ea:df:8a:7d:03:b1:28:82: 40:fe:3b:73:e4:58:e7:f9:da:98:51:a6:49:71:df:d5:52:7d: 9e:04:5a:85:c0:56:50:a4:74:f8:ee:0d:95:dc:c2:5b:f4:ac: 7e:45:10:bb:27:7c:99:d7:8b:c3:66:91:ff:26:50:f1:50:85: 8a:1e:22:65:a1:89:1c:b7:f1:bc:54:3d:28:b7:e0:07:98:14: b8:32:24:b8:58:9f:86:42:16:da:bc:58:11:c2:21:00:68:52: 84:27:97:ea:d7:b7:e2:be:46:4a:5d:ec:b1:0d:f8:6a:9e:14: 5f:12:5d:16 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFWUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw NDAxNDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQzMjZERDYzNTc1REU4 OTZDN0ZCNkYzRkI1RTEzNEQwMDUwODY1RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC92w/CpBCE86sE7XhM6/zUsBSKUXWjf8DktgH3ORdlhKuOQMdW uobD5F+qLEEWAojeg2afHA2E5xu0RRayNNcCSQJSnOmqxfEwzeUFLJWnhUh+OtpF /YpGuSBLHWwMtcs3jRuoahl1SgEnVlZwCj3y7ixMa0rnyWm184J7agKHVFx+bfGe bZNV6OgEc+YuwTPL+f5oF0pAmEheZnzTdu58KmKEqVkjq3EEfMYhxf7W7nAovTR/ 9znv/WaS/zKws3wY1TIoNnidM+90K8UL7JGBK4QRow3z2sXXKs1zJxctFdW01Ljb hu1oDN81z+JaK22MViJx2QrTUL+Tk9D8Wu6rAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUQybdY1dd6JbH+28/teE00AUIZdcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1F5YmRZMWRkNkpiSC0y OF90ZUUwMEFVSVpkYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3TIwDQYJKoZIhvcNAQELBQADggEBAJeY5sFe3aR/mm/f7/h2Y8kORP2Lga49 DJtauNsldTa2og/TU+gI0G6Ro/FGXFmvp3ntF/9LeE3Nl+tXcVqLWChmF9sXcozw 0blJqfWfK0bmurQ5AcI1W0qCNx1sdTNi9mbY3d/XTnWt29dOM33ogdic46okB03K VALAo2+uIzkxZR2Iq/acujrq34p9A7EogkD+O3PkWOf52phRpklx39VSfZ4EWoXA VlCkdPjuDZXcwlv0rH5FELsnfJnXi8Nmkf8mUPFQhYoeImWhiRy38bxUPSi34AeY FLgyJLhYn4ZCFtq8WBHCIQBoUoQnl+rXt+K+Rkpd7LEN+GqeFF8SXRY= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:46 2024 by rpki-client on console-ams.rpki-client.org