$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/WlZ5OoTfpIfJVuGMMT9qGkQ2yG4.roa File: WlZ5OoTfpIfJVuGMMT9qGkQ2yG4.roa (raw, json) Hash identifier: MNYGODiiMW2k5OUzp1LFN17cCYWE9/zJZykpCU2q5RE= Subject key identifier: 5A:56:79:3A:84:DF:A4:87:C9:56:E1:8C:31:3F:6A:1A:44:36:C8:6E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14EC Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WlZ5OoTfpIfJVuGMMT9qGkQ2yG4.roa Signing time: Wed 11 Sep 2024 02:26:08 +0000 ROA not before: Wed 11 Sep 2024 02:26:08 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5356 (0x14ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:26:08 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=5A56793A84DFA487C956E18C313F6A1A4436C86E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:f4:36:7c:3a:bb:6f:09:4f:5f:34:46:4b: d3:27:b7:2c:97:dc:5b:a6:9f:2f:3c:16:b8:d5:90: a5:12:be:e1:f3:90:7f:34:40:a4:ef:2b:07:ea:c7: e2:41:2c:e0:5b:9e:29:2f:31:10:68:60:0e:a3:5d: 84:d9:71:7f:cd:41:ac:61:eb:52:45:72:db:8a:73: e7:12:7d:5a:b3:e7:a7:d4:28:70:fa:58:5e:fd:88: 6a:8d:11:40:c1:27:21:0a:49:7f:a9:c0:26:63:61: 78:6e:a8:99:7b:89:df:57:cc:7a:b4:54:32:ed:28: c1:82:87:72:7b:f2:48:f2:bd:a2:6c:78:0d:13:68: d2:4f:f5:86:05:f2:1c:57:32:57:c5:72:66:67:cc: 64:bc:96:dd:81:b7:96:5b:dc:48:c8:83:03:23:82: de:76:70:2e:7f:a2:1d:d0:0a:2f:ed:25:e5:38:de: f6:18:3d:fe:77:b7:66:06:32:8f:64:fd:ed:50:c5: 4f:3c:0a:aa:2c:ec:bd:b8:4d:20:46:a2:ac:df:b4: 94:ed:c2:34:08:58:79:cb:b9:58:fe:cf:cd:1c:77: 70:db:e6:ec:7a:ce:f2:a2:f5:49:ac:ce:83:6a:3c: 24:94:05:0d:c8:97:c0:44:76:2d:6b:50:c1:7c:de: 75:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:56:79:3A:84:DF:A4:87:C9:56:E1:8C:31:3F:6A:1A:44:36:C8:6E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WlZ5OoTfpIfJVuGMMT9qGkQ2yG4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.9.0/24 Signature Algorithm: sha256WithRSAEncryption b2:31:5b:28:19:06:e0:83:4e:69:41:45:14:42:02:6a:7d:0f: b6:ad:31:5d:19:4f:f6:c4:8e:f4:1a:40:1d:e8:90:21:a1:34: 15:38:44:cf:cd:72:38:9a:b7:0a:60:b9:60:2f:14:69:b7:10: 37:43:b2:b6:fc:71:a7:91:e3:db:e7:00:92:c0:9d:b1:34:37: 21:4c:f2:43:d2:c9:34:9e:f2:a4:83:11:32:66:bc:fc:ba:29: 23:5c:5e:2c:60:97:7e:f1:ff:17:61:c2:85:71:7d:ee:72:04: 2f:71:67:f6:cd:27:ea:31:a3:d0:f5:e2:47:29:9e:db:73:dd: 11:75:84:96:9e:03:34:55:37:5f:ba:d6:f3:69:16:23:60:7c: c3:f9:74:bc:47:10:c5:32:e7:63:ea:2d:5b:f2:bc:16:82:b3: c1:54:6b:a3:3e:a5:2d:53:80:8a:52:e2:db:d8:49:ab:34:f4: 1f:d8:82:32:6a:8a:e9:f7:08:29:ab:42:f4:53:bc:7f:7a:e0: 45:71:b8:7e:36:fd:03:50:91:84:5e:42:36:2c:ef:3f:88:f4: cd:7e:12:23:3c:12:43:a5:61:8e:34:a9:16:5a:90:e6:21:8c: d1:54:e7:40:31:9e:39:3b:25:77:16:13:a4:b9:a6:51:7d:0b: 06:0c:a1:b2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjI2MDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVBNTY3OTNBODRERkE0 ODdDOTU2RTE4QzMxM0Y2QTFBNDQzNkM4NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr9PQ2fDq7bwlPXzRGS9MntyyX3Fumny88FrjVkKUSvuHzkH80 QKTvKwfqx+JBLOBbnikvMRBoYA6jXYTZcX/NQaxh61JFctuKc+cSfVqz56fUKHD6 WF79iGqNEUDBJyEKSX+pwCZjYXhuqJl7id9XzHq0VDLtKMGCh3J78kjyvaJseA0T aNJP9YYF8hxXMlfFcmZnzGS8lt2Bt5Zb3EjIgwMjgt52cC5/oh3QCi/tJeU43vYY Pf53t2YGMo9k/e1QxU88Cqos7L24TSBGoqzftJTtwjQIWHnLuVj+z80cd3Db5ux6 zvKi9UmszoNqPCSUBQ3Il8BEdi1rUMF83nVLAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUWlZ5OoTfpIfJVuGMMT9qGkQ2yG4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1dsWjVPb1RmcElmSlZ1 R01NVDlxR2tRMnlHNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QkwDQYJKoZIhvcNAQELBQADggEBALIxWygZBuCDTmlBRRRCAmp9D7atMV0Z T/bEjvQaQB3okCGhNBU4RM/NcjiatwpguWAvFGm3EDdDsrb8caeR49vnAJLAnbE0 NyFM8kPSyTSe8qSDETJmvPy6KSNcXixgl37x/xdhwoVxfe5yBC9xZ/bNJ+oxo9D1 4kcpnttz3RF1hJaeAzRVN1+61vNpFiNgfMP5dLxHEMUy52PqLVvyvBaCs8FUa6M+ pS1TgIpS4tvYSas09B/YgjJqiun3CCmrQvRTvH964EVxuH42/QNQkYReQjYs7z+I 9M1+EiM8EkOlYY40qRZakOYhjNFU50Axnjk7JXcWE6S5plF9CwYMobI= -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:42 2024 by rpki-client on console-fra.rpki-client.org