$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/XFjLpfbZhziw9qMrguCi2jQt3gc.roa File: XFjLpfbZhziw9qMrguCi2jQt3gc.roa (raw, json) Hash identifier: WM1z4+hOZV4wlbAzkT5BhDoe0muD02gmdI2g10e45yw= Subject key identifier: 5C:58:CB:A5:F6:D9:87:38:B0:F6:A3:2B:82:E0:A2:DA:34:2D:DE:07 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1507 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XFjLpfbZhziw9qMrguCi2jQt3gc.roa Signing time: Wed 11 Sep 2024 02:27:33 +0000 ROA not before: Wed 11 Sep 2024 02:27:33 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5383 (0x1507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:27:33 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=5C58CBA5F6D98738B0F6A32B82E0A2DA342DDE07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:09:c3:b5:a6:b8:9b:9d:06:29:95:39:95: 5d:05:4f:cd:2e:46:50:1d:37:17:1e:ec:3f:a5:f4: 99:13:8f:43:2f:3e:3a:51:90:63:98:41:73:c3:0c: c0:80:3d:9a:44:9f:ad:36:7d:8e:63:1c:12:27:26: 21:6c:e7:71:6f:d3:21:36:a5:34:0a:32:14:68:ed: 7e:f3:e8:2b:61:5a:d0:cc:09:af:6c:92:18:4b:0a: cc:62:41:dd:89:13:17:17:d7:a1:81:d2:0c:33:ac: 05:d3:35:6e:70:f0:a8:3c:6e:d4:8e:ce:12:ac:6d: 6f:24:6e:b7:55:cf:1d:36:3d:f4:3b:31:61:31:0e: f6:ff:f3:69:42:f0:23:91:de:63:33:01:ab:23:d9: 07:6e:1c:f9:cf:e7:d5:8d:da:d7:c5:ca:fc:4a:e5: c2:49:68:cf:dc:92:c9:10:41:df:d8:61:7b:5c:b2: 4e:f8:e9:35:79:96:51:4e:d7:87:ab:66:53:05:cf: c9:a7:eb:b6:32:6b:68:7c:ad:87:7a:2b:c4:c2:52: f3:65:be:b6:84:f5:68:97:83:5b:06:71:2c:39:8d: db:bc:c9:fb:14:36:fa:47:03:2c:d9:86:bc:84:9f: a8:22:e2:da:ab:c0:82:8a:6a:71:b0:05:3d:e4:18: 73:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:58:CB:A5:F6:D9:87:38:B0:F6:A3:2B:82:E0:A2:DA:34:2D:DE:07 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XFjLpfbZhziw9qMrguCi2jQt3gc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.33.0/24 Signature Algorithm: sha256WithRSAEncryption c8:f7:5a:7f:e9:a6:4a:4d:dc:5b:a0:73:35:ef:eb:8f:33:0d: 1e:5e:13:75:0c:62:9e:c5:9b:9c:d8:d7:b4:4c:32:43:fb:2d: 14:a4:62:ca:29:20:a1:33:e8:b2:f1:3d:8e:f0:01:45:6f:56: 5d:c0:f9:6d:dd:72:cc:88:26:33:d6:ef:8b:2f:bf:84:21:24: fb:32:8b:2d:e8:e9:ec:81:d0:6e:40:dd:75:7c:8d:0d:6a:a2: 6d:b0:6e:cf:0d:7f:f6:db:1e:06:a3:ae:18:71:cc:96:40:8a: f7:90:f0:83:6e:e7:5a:ba:84:50:50:b9:43:f3:0b:65:80:99: aa:9f:8b:b1:69:9c:c1:5e:b9:bf:36:a2:42:c9:57:d1:16:8b: 8a:09:fb:db:1e:64:a2:b0:6d:cc:e2:13:b0:c4:e1:70:30:6d: 3c:28:69:a1:55:52:27:ec:1a:ef:76:b2:1c:dd:85:5d:c3:15: 1e:68:f4:e7:6e:bf:b3:2d:03:49:49:83:61:5b:92:fe:a6:da: 68:77:3f:46:b6:14:d8:d6:d8:a7:05:41:7e:b1:44:c3:eb:2d: 82:bd:ad:5f:09:4d:00:1e:fc:e8:80:cf:c0:28:34:bc:60:3e: 20:fd:c2:ab:bf:41:ee:d8:c5:4d:20:96:a4:8b:78:4c:91:27: d4:01:19:19 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjI3MzNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVDNThDQkE1RjZEOTg3 MzhCMEY2QTMyQjgyRTBBMkRBMzQyRERFMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPEgnDtaa4m50GKZU5lV0FT80uRlAdNxce7D+l9JkTj0MvPjpR kGOYQXPDDMCAPZpEn602fY5jHBInJiFs53Fv0yE2pTQKMhRo7X7z6CthWtDMCa9s khhLCsxiQd2JExcX16GB0gwzrAXTNW5w8Kg8btSOzhKsbW8kbrdVzx02PfQ7MWEx Dvb/82lC8COR3mMzAasj2QduHPnP59WN2tfFyvxK5cJJaM/ckskQQd/YYXtcsk74 6TV5llFO14erZlMFz8mn67Yya2h8rYd6K8TCUvNlvraE9WiXg1sGcSw5jdu8yfsU NvpHAyzZhryEn6gi4tqrwIKKanGwBT3kGHMvAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUXFjLpfbZhziw9qMrguCi2jQt3gcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1hGakxwZmJaaHppdzlx TXJndUNpMmpRdDNnYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SEwDQYJKoZIhvcNAQELBQADggEBAMj3Wn/ppkpN3FugczXv648zDR5eE3UM Yp7Fm5zY17RMMkP7LRSkYsopIKEz6LLxPY7wAUVvVl3A+W3dcsyIJjPW74svv4Qh JPsyiy3o6eyB0G5A3XV8jQ1qom2wbs8Nf/bbHgajrhhxzJZAiveQ8INu51q6hFBQ uUPzC2WAmaqfi7FpnMFeub82okLJV9EWi4oJ+9seZKKwbcziE7DE4XAwbTwoaaFV UifsGu92shzdhV3DFR5o9Oduv7MtA0lJg2Fbkv6m2mh3P0a2FNjW2KcFQX6xRMPr LYK9rV8JTQAe/OiAz8AoNLxgPiD9wqu/Qe7YxU0glqSLeEyRJ9QBGRk= -----END CERTIFICATE-----Generated at Fri Nov 22 14:30:56 2024 by rpki-client on console-ams.rpki-client.org