$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/WWHZ0guOrjEW24Iuka_YfsfAnmc.roa File: WWHZ0guOrjEW24Iuka_YfsfAnmc.roa (raw, json) Hash identifier: 3M3yy2tN39t5pM7B32htX2Ly/uAHWzrt6JxPrI3ugdc= Subject key identifier: 59:61:D9:D2:0B:8E:AE:31:16:DB:82:2E:91:AF:D8:7E:C7:C0:9E:67 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14AF Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WWHZ0guOrjEW24Iuka_YfsfAnmc.roa Signing time: Wed 11 Sep 2024 02:23:40 +0000 ROA not before: Wed 11 Sep 2024 02:23:40 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 4812 IP address blocks: 103.24.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5295 (0x14af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:40 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=5961D9D20B8EAE3116DB822E91AFD87EC7C09E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:ab:21:90:2c:5b:fc:d2:ca:e5:62:a2:97: 4c:50:19:a5:16:d8:3e:b7:76:42:14:8b:7f:25:14: b0:c5:82:9c:5e:ea:2c:14:16:41:8c:c8:90:30:86: 63:be:c3:17:f2:25:ec:2b:ea:13:73:da:e3:1e:5b: 50:56:cb:3e:3a:6c:89:42:c6:34:1a:19:c6:5d:99: eb:c5:5c:3b:87:c3:15:bc:bf:c1:e8:d9:ac:f3:a1: 97:8c:eb:eb:b6:9f:ec:9d:7f:96:5f:97:32:23:88: 34:6e:5e:4b:a2:99:cb:65:05:b3:67:28:ed:b3:e3: 1c:04:16:08:af:db:1d:da:9e:eb:9e:d0:a4:91:eb: 8b:89:fc:b5:b5:96:ce:8b:a6:99:c0:3d:bd:b5:d2: 4d:1c:8f:67:a3:c1:d3:4c:a1:64:04:b6:fd:cc:47: 6b:b6:fc:12:32:1e:c8:31:ef:07:6d:6e:bc:90:69: d2:90:d8:f2:c8:38:1f:08:42:e6:67:a2:13:a8:c5: 99:a3:10:cf:ef:aa:be:6e:c1:2e:e2:36:48:3b:7b: 8a:12:26:d4:8b:e1:5c:e4:a1:4f:48:1f:a7:df:ca: c5:ed:6c:9b:82:d7:a0:10:f4:33:ce:9c:9c:82:ef: 54:43:66:3d:10:99:80:8f:e9:98:ff:25:d6:54:87: 61:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:61:D9:D2:0B:8E:AE:31:16:DB:82:2E:91:AF:D8:7E:C7:C0:9E:67 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WWHZ0guOrjEW24Iuka_YfsfAnmc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.24.116.0/24 Signature Algorithm: sha256WithRSAEncryption 41:67:5f:56:82:12:ef:ee:d1:a9:20:b6:e5:6d:55:f5:36:5d: ac:2a:0b:8c:f3:e0:a8:82:b0:e5:f3:e0:fc:7b:ec:31:8f:de: a9:d9:de:f8:1e:7a:4b:e2:13:31:d1:c0:45:90:d1:48:b8:47: 53:23:03:e3:52:dc:23:39:d0:c2:16:e3:36:ca:0e:0e:6e:19: 56:2b:0b:3c:df:be:d4:7a:0d:95:d8:94:e0:31:15:13:19:7b: e6:18:9f:2a:b4:74:7c:59:71:11:e7:3c:cd:d1:96:5b:5a:af: 81:23:52:f1:ee:7e:bb:d1:d0:c1:aa:27:79:25:30:13:64:1a: 03:5b:32:cc:45:15:cf:91:65:fb:87:48:9c:6a:a3:b3:6d:fc: ea:bc:e7:02:13:12:d5:e6:3d:23:c8:f6:31:62:6d:1a:a2:bf: 50:7d:05:5f:30:78:ca:65:51:2b:31:75:31:2c:9c:bc:c8:b9: c5:7d:61:ec:70:63:b3:bc:c7:63:c2:95:e0:37:6d:a2:ec:b0: f2:59:72:f6:7d:b3:11:ff:5b:90:cb:94:3d:75:33:eb:c8:5b: a6:6f:a8:46:e5:72:57:24:b1:c5:83:43:3f:9f:de:9a:5b:18: 55:72:48:34:79:ab:8a:a6:23:62:2a:db:8b:b2:04:d6:96:d2: 3a:2b:d5:c5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzNDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDU5NjFEOUQyMEI4RUFF MzExNkRCODIyRTkxQUZEODdFQzdDMDlFNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLRKshkCxb/NLK5WKil0xQGaUW2D63dkIUi38lFLDFgpxe6iwU FkGMyJAwhmO+wxfyJewr6hNz2uMeW1BWyz46bIlCxjQaGcZdmevFXDuHwxW8v8Ho 2azzoZeM6+u2n+ydf5ZflzIjiDRuXkuimctlBbNnKO2z4xwEFgiv2x3anuue0KSR 64uJ/LW1ls6LppnAPb210k0cj2ejwdNMoWQEtv3MR2u2/BIyHsgx7wdtbryQadKQ 2PLIOB8IQuZnohOoxZmjEM/vqr5uwS7iNkg7e4oSJtSL4VzkoU9IH6ffysXtbJuC 16AQ9DPOnJyC71RDZj0QmYCP6Zj/JdZUh2FjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUWWHZ0guOrjEW24Iuka/YfsfAnmcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1dXSFowZ3VPcmpFVzI0 SXVrYV9ZZnNmQW5tYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnGHQwDQYJKoZIhvcNAQELBQADggEBAEFnX1aCEu/u0akgtuVtVfU2XawqC4zz 4KiCsOXz4Px77DGP3qnZ3vgeekviEzHRwEWQ0Ui4R1MjA+NS3CM50MIW4zbKDg5u GVYrCzzfvtR6DZXYlOAxFRMZe+YYnyq0dHxZcRHnPM3Rlltar4EjUvHufrvR0MGq J3klMBNkGgNbMsxFFc+RZfuHSJxqo7Nt/Oq85wITEtXmPSPI9jFibRqiv1B9BV8w eMplUSsxdTEsnLzIucV9YexwY7O8x2PCleA3baLssPJZcvZ9sxH/W5DLlD11M+vI W6ZvqEblclckscWDQz+f3ppbGFVySDR5q4qmI2Iq24uyBNaW0jor1cU= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org