$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/YJBTfTlw-fIDibHzMj-3KBCxzAY.roa File: YJBTfTlw-fIDibHzMj-3KBCxzAY.roa (raw, json) Hash identifier: ArKFXCxhMLygDtDwqNJAjFIfg78fWmgyjFfc2rB0NsI= Subject key identifier: 60:90:53:7D:39:70:F9:F2:03:89:B1:F3:32:3F:B7:28:10:B1:CC:06 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1524 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YJBTfTlw-fIDibHzMj-3KBCxzAY.roa Signing time: Wed 11 Sep 2024 02:30:12 +0000 ROA not before: Wed 11 Sep 2024 02:30:12 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.6.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5412 (0x1524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:30:12 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=6090537D3970F9F20389B1F3323FB72810B1CC06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:41:dc:bd:7e:40:df:d5:7c:11:39:ec:67: cc:af:bb:22:b9:98:19:12:77:f9:30:2a:c7:fe:4b: 08:e2:14:58:33:7c:83:53:fd:8b:02:26:ec:44:3d: f0:0b:b9:7d:6f:c7:aa:d9:7e:4e:d4:ca:43:3d:7a: cb:5a:43:d9:b6:ba:5a:b2:a8:e6:97:c4:bc:3f:55: 51:69:c9:ff:fd:5d:b3:c7:ac:e6:b4:92:80:bb:42: 9c:4a:a6:36:08:4b:98:eb:5c:07:a4:ac:90:49:8d: b9:55:55:36:25:a7:8b:c3:9c:54:96:1c:32:6f:f0: 9d:5c:ba:cc:e4:60:8d:52:09:94:e7:2a:b7:f2:8e: 07:89:e4:89:d2:2d:ab:a1:c4:02:2f:4a:2d:d0:fc: 7c:8c:70:24:76:a2:d7:88:b7:eb:45:3b:c2:21:63: f7:e2:65:30:03:a2:2e:f9:64:45:9a:e1:07:39:e9: 74:21:9b:2c:43:27:cc:0e:86:c6:30:7b:39:6a:9e: 5f:d2:fa:f8:27:5b:e7:5f:e1:9e:9a:07:f9:1f:73: 83:dd:88:7b:5d:48:cc:3a:43:cf:55:cb:6e:bb:de: 9d:b0:05:96:d8:11:19:ed:50:5b:95:42:63:b8:c1: fe:3f:3f:5b:1d:45:96:3c:2c:e7:3b:40:e1:f8:4e: 9c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:90:53:7D:39:70:F9:F2:03:89:B1:F3:32:3F:B7:28:10:B1:CC:06 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YJBTfTlw-fIDibHzMj-3KBCxzAY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.110.0/24 Signature Algorithm: sha256WithRSAEncryption 67:f5:e2:78:af:77:59:5d:be:ba:6e:b0:39:d3:6d:74:06:36: f5:2d:c6:c4:27:b4:c9:ab:79:4c:4d:12:6f:ad:2d:e5:17:f8: d2:11:87:c8:e2:1c:0b:20:1a:bf:f5:92:94:0e:1f:d6:d4:79: 9a:f0:7f:d6:05:aa:e4:00:26:a1:49:25:a2:de:27:7a:31:31: d2:cc:bd:7e:97:48:19:7e:90:f7:68:b6:6c:01:80:73:9e:d8: 97:5b:1b:2f:75:48:75:96:81:5f:6a:98:5d:23:70:0c:2c:ee: 6d:36:ca:94:d6:f6:e6:d5:bf:a9:da:79:b1:04:a8:8d:75:37: 09:c1:c6:16:ac:c0:64:3e:e1:55:5d:c8:e1:9b:63:20:4f:3d: 7c:e6:5e:58:6a:f2:d8:4b:6f:bd:b2:a2:a7:4d:48:99:3f:52: 11:15:39:d1:22:a9:12:ff:4a:50:51:2d:67:37:6d:16:52:d7: f4:db:01:1b:a4:2b:96:3b:41:af:b5:25:5e:52:bc:98:c7:02: 5b:90:c4:0f:c8:37:53:d4:3f:a7:50:b3:71:54:b0:3f:50:60: f9:2c:03:0a:fa:ea:6a:51:69:3f:b7:04:d4:1b:4d:5d:e4:7e: cc:f4:aa:69:3a:1d:46:e2:35:75:85:9b:8f:b0:b5:46:d5:55: 9a:cf:8c:d5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFSQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjMwMTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDYwOTA1MzdEMzk3MEY5 RjIwMzg5QjFGMzMyM0ZCNzI4MTBCMUNDMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJhEHcvX5A39V8ETnsZ8yvuyK5mBkSd/kwKsf+SwjiFFgzfINT /YsCJuxEPfALuX1vx6rZfk7UykM9estaQ9m2ulqyqOaXxLw/VVFpyf/9XbPHrOa0 koC7QpxKpjYIS5jrXAekrJBJjblVVTYlp4vDnFSWHDJv8J1cuszkYI1SCZTnKrfy jgeJ5InSLauhxAIvSi3Q/HyMcCR2oteIt+tFO8IhY/fiZTADoi75ZEWa4Qc56XQh myxDJ8wOhsYwezlqnl/S+vgnW+df4Z6aB/kfc4PdiHtdSMw6Q89Vy2673p2wBZbY ERntUFuVQmO4wf4/P1sdRZY8LOc7QOH4TpyZAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYJBTfTlw+fIDibHzMj+3KBCxzAYwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1lKQlRmVGx3LWZJRGli SHpNai0zS0JDeHpBWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBm4wDQYJKoZIhvcNAQELBQADggEBAGf14nivd1ldvrpusDnTbXQGNvUtxsQn tMmreUxNEm+tLeUX+NIRh8jiHAsgGr/1kpQOH9bUeZrwf9YFquQAJqFJJaLeJ3ox MdLMvX6XSBl+kPdotmwBgHOe2JdbGy91SHWWgV9qmF0jcAws7m02ypTW9ubVv6na ebEEqI11NwnBxhaswGQ+4VVdyOGbYyBPPXzmXlhq8thLb72yoqdNSJk/UhEVOdEi qRL/SlBRLWc3bRZS1/TbARukK5Y7Qa+1JV5SvJjHAluQxA/IN1PUP6dQs3FUsD9Q YPksAwr66mpRaT+3BNQbTV3kfsz0qmk6HUbiNXWFm4+wtUbVVZrPjNU= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:47 2024 by rpki-client on console-ams.rpki-client.org