$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/UlsKJh8-l61nmNPUTqcKlx-u-KA.roa File: UlsKJh8-l61nmNPUTqcKlx-u-KA.roa (raw, json) Hash identifier: nMYdC8CD5EojoEU6mob51RVBkuWa89PrSC3r5J3rwV8= Subject key identifier: 52:5B:0A:26:1F:3E:97:AD:67:98:D3:D4:4E:A7:0A:97:1F:AE:F8:A0 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14F8 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UlsKJh8-l61nmNPUTqcKlx-u-KA.roa Signing time: Wed 11 Sep 2024 02:26:13 +0000 ROA not before: Wed 11 Sep 2024 02:26:13 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5368 (0x14f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:26:13 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=525B0A261F3E97AD6798D3D44EA70A971FAEF8A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:5b:da:1f:e8:1a:a4:23:5f:ce:7f:2d:d8: 29:56:06:93:da:79:59:66:76:e8:09:e3:52:5e:83: a1:c9:4e:7e:21:2b:a4:bf:35:d1:eb:20:6d:4a:b8: 57:9c:9d:34:08:63:8d:bc:c1:3a:f4:de:1d:3b:70: 23:86:ef:9c:07:a4:db:06:2b:43:c7:87:3d:86:d2: ac:50:13:a2:a4:f6:77:53:fb:30:6c:4e:a5:f2:e3: b8:86:a4:42:5f:1f:24:08:90:43:76:69:56:8f:9c: 39:25:d2:78:33:0a:16:49:94:b9:01:39:74:b6:22: a3:67:c7:b6:a9:ed:1f:96:c0:35:8d:03:b8:fb:32: 95:28:14:2c:f2:97:f0:0a:7d:52:f8:a4:f0:96:9e: e0:8f:bb:d2:4c:d4:20:8d:4a:6b:70:31:1f:8b:fb: ae:d2:3d:b9:32:1c:8b:07:9b:64:52:dd:91:09:13: 78:55:a2:0d:17:00:34:65:27:83:5a:c8:40:99:33: dc:08:60:48:37:23:83:67:55:0e:61:9c:91:0d:ef: 9e:7a:6e:ab:d1:18:42:dd:9a:a4:73:16:fa:0e:ea: ef:bf:22:10:a3:8a:14:c0:4a:bf:3e:cd:81:4b:97: 08:5f:43:64:6b:a4:6c:19:56:c2:f8:13:6e:5b:59: 7f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5B:0A:26:1F:3E:97:AD:67:98:D3:D4:4E:A7:0A:97:1F:AE:F8:A0 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UlsKJh8-l61nmNPUTqcKlx-u-KA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.11.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:66:02:a5:f5:5d:fd:d1:35:9d:d1:d7:f9:b6:e3:f1:74:ac: e9:a8:96:92:f0:77:2a:ee:61:44:5e:11:d4:fc:b5:c1:ed:a3: 3a:62:04:de:5a:a3:49:8b:1e:f3:be:f3:84:6d:aa:ea:71:04: d3:7d:f8:31:6b:63:69:54:36:08:13:b3:81:e9:00:ad:c2:40: 0f:69:42:71:f8:d7:eb:ac:ae:47:1b:25:5a:f7:b4:7d:61:b4: eb:55:c0:29:49:24:36:f0:6a:46:89:c2:ed:6e:f7:ec:ba:fa: 29:fc:40:f7:ff:38:9d:14:a7:f2:c2:be:af:ff:9e:91:0d:d4: a9:e0:71:8f:78:53:70:3b:7f:05:50:c9:22:4c:a9:6a:ef:84: 7d:3e:ac:4a:d0:a2:6f:2f:f3:31:81:df:25:5a:46:25:dc:09: 46:5d:a8:e8:f6:96:e2:5f:0a:cb:4a:0a:87:95:0b:a9:3b:e1: 94:0e:06:1b:f6:b3:15:57:eb:7b:f3:b6:a1:69:9b:78:ec:d4: 86:c0:42:bd:55:8e:29:f6:07:9b:3d:56:2d:0a:cc:e5:cd:d4: 5d:89:d6:34:32:8e:15:c0:f8:82:11:4d:8a:0d:62:98:e5:7a: f3:50:dd:56:38:5c:51:b8:7c:b4:73:b7:e7:eb:87:f0:7b:7a: 90:b5:75:d3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjI2MTNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDUyNUIwQTI2MUYzRTk3 QUQ2Nzk4RDNENDRFQTcwQTk3MUZBRUY4QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvbFvaH+gapCNfzn8t2ClWBpPaeVlmdugJ41Jeg6HJTn4hK6S/ NdHrIG1KuFecnTQIY428wTr03h07cCOG75wHpNsGK0PHhz2G0qxQE6Kk9ndT+zBs TqXy47iGpEJfHyQIkEN2aVaPnDkl0ngzChZJlLkBOXS2IqNnx7ap7R+WwDWNA7j7 MpUoFCzyl/AKfVL4pPCWnuCPu9JM1CCNSmtwMR+L+67SPbkyHIsHm2RS3ZEJE3hV og0XADRlJ4NayECZM9wIYEg3I4NnVQ5hnJEN7556bqvRGELdmqRzFvoO6u+/IhCj ihTASr8+zYFLlwhfQ2RrpGwZVsL4E25bWX/jAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUUlsKJh8+l61nmNPUTqcKlx+u+KAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1Vsc0tKaDgtbDYxbm1O UFVUcWNLbHgtdS1LQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QswDQYJKoZIhvcNAQELBQADggEBAJ5mAqX1Xf3RNZ3R1/m24/F0rOmolpLw dyruYUReEdT8tcHtozpiBN5ao0mLHvO+84RtqupxBNN9+DFrY2lUNggTs4HpAK3C QA9pQnH41+usrkcbJVr3tH1htOtVwClJJDbwakaJwu1u9+y6+in8QPf/OJ0Up/LC vq//npEN1KngcY94U3A7fwVQySJMqWrvhH0+rErQom8v8zGB3yVaRiXcCUZdqOj2 luJfCstKCoeVC6k74ZQOBhv2sxVX63vztqFpm3js1IbAQr1Vjin2B5s9Vi0KzOXN 1F2J1jQyjhXA+IIRTYoNYpjlevNQ3VY4XFG4fLRzt+frh/B7epC1ddM= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:42 2024 by rpki-client on console-fra.rpki-client.org