$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/RLo7ARNqYlUUtdymM-z-SFsjqLs.roa File: RLo7ARNqYlUUtdymM-z-SFsjqLs.roa (raw, json) Hash identifier: IBApx+rJqYCoDeBwWriFHLkUfGsqOr/hIxct6osSkvM= Subject key identifier: 44:BA:3B:01:13:6A:62:55:14:B5:DC:A6:33:EC:FE:48:5B:23:A8:BB Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14E4 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/RLo7ARNqYlUUtdymM-z-SFsjqLs.roa Signing time: Wed 11 Sep 2024 02:23:57 +0000 ROA not before: Wed 11 Sep 2024 02:23:57 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59083 IP address blocks: 103.10.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5348 (0x14e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:57 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=44BA3B01136A625514B5DCA633ECFE485B23A8BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:b3:61:bb:26:93:27:6b:e6:f1:d3:e9:13: c2:78:3c:7f:fc:ba:cb:c4:32:26:ec:ad:83:00:ff: c8:cd:3a:60:8f:87:c8:ef:51:04:b3:1e:c0:4a:e6: fa:55:84:0c:1d:63:8a:27:03:30:86:a4:36:a0:2b: 9e:53:c2:d3:dc:b0:f7:26:70:81:e2:d9:9a:e0:6f: 7a:f2:15:33:37:00:6e:bd:b1:82:d1:03:7b:f3:85: 71:f7:61:6a:b8:fe:b2:c3:ba:fe:d3:6a:a7:0b:67: 96:87:f1:d5:33:55:17:81:f7:ba:95:97:62:6f:87: 7f:3b:a2:80:e0:bc:fb:7d:2e:ff:79:59:08:c1:78: 7c:89:2e:2f:a9:e1:d3:b7:d2:33:0a:02:0a:fc:43: ab:bc:e7:c3:b7:b1:f7:25:16:a5:93:ed:95:7f:8d: 84:40:d4:1d:39:c6:6b:a0:5b:ae:9c:77:39:15:1d: 04:0a:d1:05:14:53:dd:c7:4f:dd:e9:1f:62:10:ba: fa:4f:2b:34:c1:7c:f9:7d:98:cb:9e:f2:17:5c:c5: c2:2c:72:f6:27:56:e2:5c:b5:d4:6e:67:19:38:9c: 82:f6:94:1d:bd:ad:09:76:5b:e7:f9:f7:7e:a8:37: 52:91:ed:ad:31:57:c4:93:07:1f:e5:bf:a2:de:02: 2a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BA:3B:01:13:6A:62:55:14:B5:DC:A6:33:EC:FE:48:5B:23:A8:BB X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/RLo7ARNqYlUUtdymM-z-SFsjqLs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.10.2.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:51:84:64:2d:12:88:37:29:55:53:12:6f:da:48:bb:d8:b7: ca:5f:84:03:e7:56:42:d4:d4:0c:2d:ac:13:53:41:1a:2f:99: 39:43:39:28:13:2a:40:d6:84:cf:1c:c5:b8:ca:d2:7a:55:25: 4f:46:46:b7:36:97:42:f3:dd:b6:ec:20:a3:a7:28:11:30:7f: e2:19:b1:a4:6e:01:eb:34:9a:d8:f4:55:e2:11:78:5f:6c:36: 73:30:5e:03:af:bb:1b:8f:00:dd:d2:52:55:12:11:74:5a:cf: 22:b3:8e:fa:ec:e8:9f:38:3e:c4:9b:82:fb:ad:9c:57:69:c6: 90:3b:58:8a:4a:35:b5:fa:98:3b:1d:65:6e:b6:ed:41:89:b8: 80:43:64:eb:5b:c8:95:25:54:77:1c:7c:89:25:0a:f6:f0:3a: 26:79:e4:87:aa:28:22:5f:2c:73:9a:17:6b:63:88:96:81:6c: 94:0a:d9:34:30:fc:89:28:71:24:aa:c1:ae:ce:0b:7e:05:db: f0:0a:66:37:f9:d1:e1:4a:da:98:4b:4d:f0:4c:72:48:6f:0c: 71:fb:ce:5b:fe:dd:2b:a1:bb:16:a0:b8:a1:36:34:30:c0:25: 9f:58:f4:6a:f2:49:b6:58:d1:da:43:89:83:8f:25:ca:ba:a8: fb:b9:06:a1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzNTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ0QkEzQjAxMTM2QTYy NTUxNEI1RENBNjMzRUNGRTQ4NUIyM0E4QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWjrNhuyaTJ2vm8dPpE8J4PH/8usvEMibsrYMA/8jNOmCPh8jv UQSzHsBK5vpVhAwdY4onAzCGpDagK55TwtPcsPcmcIHi2Zrgb3ryFTM3AG69sYLR A3vzhXH3YWq4/rLDuv7TaqcLZ5aH8dUzVReB97qVl2Jvh387ooDgvPt9Lv95WQjB eHyJLi+p4dO30jMKAgr8Q6u858O3sfclFqWT7ZV/jYRA1B05xmugW66cdzkVHQQK 0QUUU93HT93pH2IQuvpPKzTBfPl9mMue8hdcxcIscvYnVuJctdRuZxk4nIL2lB29 rQl2W+f5936oN1KR7a0xV8STBx/lv6LeAioLAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQURLo7ARNqYlUUtdymM+z+SFsjqLswHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1JMbzdBUk5xWWxVVXRk eW1NLXotU0ZzanFMcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnCgIwDQYJKoZIhvcNAQELBQADggEBAH1RhGQtEog3KVVTEm/aSLvYt8pfhAPn VkLU1AwtrBNTQRovmTlDOSgTKkDWhM8cxbjK0npVJU9GRrc2l0Lz3bbsIKOnKBEw f+IZsaRuAes0mtj0VeIReF9sNnMwXgOvuxuPAN3SUlUSEXRazyKzjvrs6J84PsSb gvutnFdpxpA7WIpKNbX6mDsdZW627UGJuIBDZOtbyJUlVHccfIklCvbwOiZ55Ieq KCJfLHOaF2tjiJaBbJQK2TQw/IkocSSqwa7OC34F2/AKZjf50eFK2phLTfBMckhv DHH7zlv+3SuhuxaguKE2NDDAJZ9Y9GrySbZY0dpDiYOPJcq6qPu5BqE= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org