$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/RfvNYXuWVYIkkTwsGLPN4gzEeds.roa File: RfvNYXuWVYIkkTwsGLPN4gzEeds.roa (raw, json) Hash identifier: 3USGiLpyRUzr1oL+EtL1TJpXrtlPV/gpV2ZM+YVKvK0= Subject key identifier: 45:FB:CD:61:7B:96:55:82:24:91:3C:2C:18:B3:CD:E2:0C:C4:79:DB Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14BF Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/RfvNYXuWVYIkkTwsGLPN4gzEeds.roa Signing time: Wed 11 Sep 2024 02:23:46 +0000 ROA not before: Wed 11 Sep 2024 02:23:46 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.220.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5311 (0x14bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:46 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=45FBCD617B96558224913C2C18B3CDE20CC479DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7e:0d:d2:79:ea:e0:3a:d3:e3:e3:ce:bf:23: 62:23:b9:37:c5:49:71:a7:6e:ec:72:00:84:06:c9: 05:c9:17:a5:e0:df:ff:1b:3f:fa:b3:c0:27:b0:29: 32:81:bc:fe:75:2f:ec:7b:87:95:d5:2e:1a:9a:c6: df:c6:59:95:93:d5:99:94:dc:24:25:8b:0a:1a:63: 7d:65:97:18:8d:1d:0e:6f:8e:bf:6f:1d:36:33:c8: db:01:ae:ff:46:19:bb:0b:95:27:7f:45:29:1b:f6: f3:04:fb:20:ab:57:44:35:8a:40:2a:e8:a6:4f:e9: a9:a2:c6:bf:8e:f2:2c:94:38:59:3f:f4:34:8d:88: 9b:c1:13:65:e5:2c:25:9b:0e:68:dd:e3:32:bd:2a: 7d:43:ce:6c:59:66:3d:f1:ce:a7:0a:6d:85:83:53: b4:a8:c8:0e:3a:b1:54:35:dc:fa:05:2c:4d:f1:4c: ed:37:00:ec:54:5e:2c:42:c9:4b:e9:2f:2b:12:c4: 39:98:c7:4a:eb:08:de:23:f7:50:bd:9c:bd:0f:61: c9:6f:69:42:be:18:4b:62:55:05:07:af:3c:54:1a: 8f:39:7c:21:85:8d:61:ec:09:45:cd:3e:d7:6d:ea: 3b:7b:df:b5:7a:3d:de:62:f0:82:9c:4b:eb:06:42: e5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FB:CD:61:7B:96:55:82:24:91:3C:2C:18:B3:CD:E2:0C:C4:79:DB X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/RfvNYXuWVYIkkTwsGLPN4gzEeds.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.254.0/24 Signature Algorithm: sha256WithRSAEncryption 26:e2:bc:fb:63:88:ba:94:b1:74:60:55:63:8c:76:09:66:70: 96:cd:06:c7:37:08:c1:97:61:32:fc:95:64:7f:d8:c0:6b:7a: 19:0a:af:d0:5c:80:4a:aa:27:78:37:c8:e4:77:56:77:7f:95: 88:61:55:9f:84:27:c4:80:8d:bd:96:0f:6c:7d:e3:1a:56:90: f3:26:47:bf:af:4c:6d:e0:c0:f6:d4:45:e4:34:64:65:31:9d: 4c:14:9f:74:00:68:01:dc:e6:d7:82:2b:f2:c1:e1:cb:21:1f: 51:49:46:19:ee:fe:99:c2:54:07:d3:76:0c:5b:d3:e0:9b:3d: c5:7a:88:5b:ef:73:a6:dc:3b:d9:5e:9f:f8:a3:6a:90:44:73: 23:e6:67:9a:16:53:e1:bb:53:a8:64:8a:47:10:8f:c8:6f:96: 32:eb:ca:e9:0a:21:60:fa:be:ae:a9:3e:c4:2e:31:2d:5b:34: e5:c4:eb:13:7e:b5:1f:52:cd:0d:d9:1c:ff:e6:7b:8e:cf:f0: c1:f5:48:a6:f6:4b:cc:53:3b:f0:4a:8a:4d:03:51:c3:94:dd: c8:6a:cd:a9:e8:8f:26:b9:f4:08:6d:8e:a8:28:c9:ba:46:41: e7:df:5c:84:60:4c:b4:b3:8d:b3:72:a1:16:7a:00:cb:b8:95: d1:c8:e6:1e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFL8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzNDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ1RkJDRDYxN0I5NjU1 ODIyNDkxM0MyQzE4QjNDREUyMENDNDc5REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDifg3SeergOtPj486/I2IjuTfFSXGnbuxyAIQGyQXJF6Xg3/8b P/qzwCewKTKBvP51L+x7h5XVLhqaxt/GWZWT1ZmU3CQliwoaY31llxiNHQ5vjr9v HTYzyNsBrv9GGbsLlSd/RSkb9vME+yCrV0Q1ikAq6KZP6amixr+O8iyUOFk/9DSN iJvBE2XlLCWbDmjd4zK9Kn1DzmxZZj3xzqcKbYWDU7SoyA46sVQ13PoFLE3xTO03 AOxUXixCyUvpLysSxDmYx0rrCN4j91C9nL0PYclvaUK+GEtiVQUHrzxUGo85fCGF jWHsCUXNPtdt6jt737V6Pd5i8IKcS+sGQuVtAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQURfvNYXuWVYIkkTwsGLPN4gzEedswHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1Jmdk5ZWHVXVllJa2tU d3NHTFBONGd6RWVkcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3P4wDQYJKoZIhvcNAQELBQADggEBACbivPtjiLqUsXRgVWOMdglmcJbNBsc3 CMGXYTL8lWR/2MBrehkKr9BcgEqqJ3g3yOR3Vnd/lYhhVZ+EJ8SAjb2WD2x94xpW kPMmR7+vTG3gwPbUReQ0ZGUxnUwUn3QAaAHc5teCK/LB4cshH1FJRhnu/pnCVAfT dgxb0+CbPcV6iFvvc6bcO9len/ijapBEcyPmZ5oWU+G7U6hkikcQj8hvljLryukK IWD6vq6pPsQuMS1bNOXE6xN+tR9SzQ3ZHP/me47P8MH1SKb2S8xTO/BKik0DUcOU 3chqzanojya59AhtjqgoybpGQeffXIRgTLSzjbNyoRZ6AMu4ldHI5h4= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:47 2024 by rpki-client on console-ams.rpki-client.org