$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/TXVZGEpSB9Vc_cMzHXTkblpuHE0.roa File: TXVZGEpSB9Vc_cMzHXTkblpuHE0.roa (raw, json) Hash identifier: cyWR4/ySjIgNrSS/1PicwcRpMIIr9d2m47C4b4Rdqbc= Subject key identifier: 4D:75:59:18:4A:52:07:D5:5C:FD:C3:33:1D:74:E4:6E:5A:6E:1C:4D Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14E0 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TXVZGEpSB9Vc_cMzHXTkblpuHE0.roa Signing time: Wed 11 Sep 2024 02:23:56 +0000 ROA not before: Wed 11 Sep 2024 02:23:56 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24373 IP address blocks: 103.221.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5344 (0x14e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:56 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=4D7559184A5207D55CFDC3331D74E46E5A6E1C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2e:51:b4:72:15:e5:51:85:38:67:fb:53:e1: e2:b9:a6:4c:c7:41:6f:b7:8f:cb:3f:a8:30:cb:1f: 3f:5e:61:9c:13:28:21:07:a7:fe:4c:73:2c:59:7f: ec:a1:1a:87:49:de:66:46:e7:31:97:aa:4b:00:f0: 75:56:c9:c6:cb:c5:0a:d8:fa:c6:f5:90:01:ef:4a: 37:88:7b:3e:64:2c:eb:5a:9a:d9:6d:a1:e6:53:17: 47:5e:5c:71:90:43:46:9d:4f:bf:cc:c7:5f:f5:0d: 15:4f:d6:46:04:d5:6d:7e:8b:c4:48:3e:fb:6e:3d: ef:e8:47:1b:00:11:23:be:6d:77:a6:b1:ad:ee:8b: 48:2c:c2:e4:6e:3f:92:ee:dd:2e:8c:8e:9e:77:93: 94:e5:d5:f5:17:a9:ae:7c:59:84:d2:e6:76:44:ce: 40:fa:2f:f3:aa:68:dc:0d:cb:6a:3b:0d:b5:1a:23: 8f:88:b8:0a:c9:ef:a1:fa:e6:df:a2:b3:dc:b0:2a: f8:b4:85:53:2c:46:ff:47:6e:7f:4b:29:9c:5f:fc: 05:c5:ca:d1:38:ac:78:ca:4b:d9:5a:8b:cf:5b:0f: 1f:d2:ca:60:2d:92:17:41:cd:68:65:71:b0:db:74: 60:35:d0:f9:8d:ee:d6:e7:b3:81:16:9a:72:b7:41: c2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:75:59:18:4A:52:07:D5:5C:FD:C3:33:1D:74:E4:6E:5A:6E:1C:4D X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TXVZGEpSB9Vc_cMzHXTkblpuHE0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.16.0/22 Signature Algorithm: sha256WithRSAEncryption 43:7d:a1:67:f9:77:36:63:d5:ac:f9:e7:5a:fd:d8:af:8f:69: 57:22:8b:6f:a3:b6:d0:a1:d8:25:36:a1:6f:ed:43:37:e6:42: 4a:63:40:a0:1b:53:af:90:22:55:1a:9e:82:1c:b4:50:14:4b: 2f:16:f3:f2:da:24:48:9b:97:9f:13:4c:33:b4:ee:39:16:e0: 8b:da:b6:2c:68:ed:73:79:5d:52:87:3c:eb:38:ae:a0:90:18: 8e:3e:28:50:0a:b9:7b:3c:1b:bd:4d:ee:b0:d7:52:7c:df:2f: c5:31:54:fe:fe:fd:27:e0:c6:bc:96:a1:25:b5:a4:4e:30:75: 35:d4:8a:d8:84:04:5b:38:07:84:42:16:ad:5c:7c:3c:91:d1: 2e:c9:a9:6d:a3:53:d5:be:ed:db:47:f4:cc:0e:c9:f8:99:de: 8b:3c:b8:fe:67:f2:e0:78:f8:26:75:2c:6b:fa:ac:be:63:49: 1d:62:f6:ee:91:db:55:d0:ff:13:62:ba:bc:f0:36:77:8e:f3: f4:91:3a:d8:fa:ec:0b:d9:33:01:89:cd:41:8d:16:b4:de:14: 89:d0:47:e0:5e:03:1c:09:70:e7:81:0a:98:3e:42:8d:6f:e1: 7b:7f:b4:58:bd:84:5b:5e:29:f0:9a:95:a5:c3:e0:9d:c5:bf: bb:8d:62:39 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzNTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDRENzU1OTE4NEE1MjA3 RDU1Q0ZEQzMzMzFENzRFNDZFNUE2RTFDNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqLlG0chXlUYU4Z/tT4eK5pkzHQW+3j8s/qDDLHz9eYZwTKCEH p/5McyxZf+yhGodJ3mZG5zGXqksA8HVWycbLxQrY+sb1kAHvSjeIez5kLOtamtlt oeZTF0deXHGQQ0adT7/Mx1/1DRVP1kYE1W1+i8RIPvtuPe/oRxsAESO+bXemsa3u i0gswuRuP5Lu3S6Mjp53k5Tl1fUXqa58WYTS5nZEzkD6L/OqaNwNy2o7DbUaI4+I uArJ76H65t+is9ywKvi0hVMsRv9Hbn9LKZxf/AXFytE4rHjKS9lai89bDx/SymAt khdBzWhlcbDbdGA10PmN7tbns4EWmnK3QcI7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUTXVZGEpSB9Vc/cMzHXTkblpuHE0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1RYVlpHRXBTQjlWY19j TXpIWFRrYmxwdUhFMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3RAwDQYJKoZIhvcNAQELBQADggEBAEN9oWf5dzZj1az551r92K+PaVcii2+j ttCh2CU2oW/tQzfmQkpjQKAbU6+QIlUanoIctFAUSy8W8/LaJEibl58TTDO07jkW 4Ivatixo7XN5XVKHPOs4rqCQGI4+KFAKuXs8G71N7rDXUnzfL8UxVP7+/SfgxryW oSW1pE4wdTXUitiEBFs4B4RCFq1cfDyR0S7JqW2jU9W+7dtH9MwOyfiZ3os8uP5n 8uB4+CZ1LGv6rL5jSR1i9u6R21XQ/xNiurzwNneO8/SROtj67AvZMwGJzUGNFrTe FInQR+BeAxwJcOeBCpg+Qo1v4Xt/tFi9hFteKfCalaXD4J3Fv7uNYjk= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:42 2024 by rpki-client on console-fra.rpki-client.org