$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ZS3mTowuFFHyfkvZVR-xBQ6uaMs.roa File: ZS3mTowuFFHyfkvZVR-xBQ6uaMs.roa (raw, json) Hash identifier: Y4euGHUaLx59NWNNe0ue9RayM6jXioK7vytjsYVOuWI= Subject key identifier: 65:2D:E6:4E:8C:2E:14:51:F2:7E:4B:D9:55:1F:B1:05:0E:AE:68:CB Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 12EF Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ZS3mTowuFFHyfkvZVR-xBQ6uaMs.roa Signing time: Sat 29 Jun 2024 19:44:17 +0000 ROA not before: Sat 29 Jun 2024 19:44:17 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4847 (0x12ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jun 29 19:44:17 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=652DE64E8C2E1451F27E4BD9551FB1050EAE68CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ef:65:f2:a4:41:0e:65:fb:3c:1d:66:14:81: 70:47:c6:8d:b4:c7:ce:91:fb:8d:e1:35:c5:ac:4e: a6:6b:60:6f:36:96:3b:07:3c:ac:0a:e5:40:16:8f: 93:2a:32:62:54:fc:e2:e1:d9:95:d8:10:20:c0:26: 99:8a:46:aa:e5:f6:07:77:c1:4a:2c:48:ab:f6:04: 28:c0:04:6b:66:4e:a3:a6:7e:b0:80:dc:44:6b:20: 51:c3:ea:e0:98:9e:5d:27:be:08:79:84:57:83:2b: f8:8b:7e:63:15:ae:f8:69:51:92:aa:a4:ce:cf:80: 55:c8:62:81:52:ee:cb:19:94:d2:e5:9f:aa:f1:0d: a7:53:a4:aa:24:e2:79:eb:03:d0:8f:53:10:70:bf: e0:3b:45:f3:03:e8:74:e1:b3:f8:a1:35:c0:33:a6: e5:2e:f4:39:28:5c:4d:0b:d4:c6:d8:eb:0c:9c:92: ee:6a:9d:58:c5:ba:b7:54:40:fd:0c:e0:33:23:76: b6:c0:bb:86:c8:34:ba:46:89:1c:5f:81:33:19:c4: d1:dd:04:94:79:6a:67:bb:a3:c4:22:f1:70:ca:87: 72:a3:e9:02:d1:44:69:63:f3:8a:f4:6c:8b:79:57: cb:67:c2:1d:cc:83:75:d7:55:15:6a:f3:8b:62:bc: 05:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2D:E6:4E:8C:2E:14:51:F2:7E:4B:D9:55:1F:B1:05:0E:AE:68:CB X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ZS3mTowuFFHyfkvZVR-xBQ6uaMs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.92.0/22 Signature Algorithm: sha256WithRSAEncryption 72:ab:c5:72:24:b7:18:69:9c:a2:5b:f7:99:7d:71:e3:d5:ce: 55:03:72:70:24:97:96:2e:87:21:b4:f6:98:a9:ac:93:d3:f2: d9:21:92:8b:9b:bf:92:3b:08:af:ca:ae:17:48:04:64:a5:62: f5:9d:8b:21:a3:dd:69:7f:4d:88:ad:91:ea:4a:c4:b0:cb:7d: 97:cc:a3:bb:88:92:25:12:bd:da:33:be:d9:44:62:5b:e9:42: de:42:da:f4:dc:f6:74:74:3f:34:e3:b3:96:a9:a8:a6:5b:47: 66:5c:a8:a5:01:9a:5f:b8:6f:6e:05:a9:d3:c7:7c:ec:6b:7c: 0d:27:16:26:5b:2b:b3:58:e0:98:6c:20:4d:71:69:1c:34:fa: b4:98:72:49:07:f3:e3:d7:45:70:01:56:2d:b9:9d:0e:86:59: 7e:dc:0c:4e:31:d7:ec:c5:7d:65:9a:31:16:d6:d9:76:fb:56: 7f:84:97:9d:82:26:86:0e:8e:0f:8e:35:7f:95:10:dd:f4:87: 92:b1:93:09:1c:ed:f8:4b:d8:ff:db:de:e0:4c:a3:17:f9:70: 3d:46:59:ad:16:a0:07:ab:f9:83:14:3e:c5:96:b3:ca:f8:9d: 6b:2a:06:0d:5e:13:57:94:42:02:fb:92:b2:90:86:54:fb:d6: c5:e8:bd:1e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEu8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA2Mjkx OTQ0MTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY1MkRFNjRFOEMyRTE0 NTFGMjdFNEJEOTU1MUZCMTA1MEVBRTY4Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE72XypEEOZfs8HWYUgXBHxo20x86R+43hNcWsTqZrYG82ljsH PKwK5UAWj5MqMmJU/OLh2ZXYECDAJpmKRqrl9gd3wUosSKv2BCjABGtmTqOmfrCA 3ERrIFHD6uCYnl0nvgh5hFeDK/iLfmMVrvhpUZKqpM7PgFXIYoFS7ssZlNLln6rx DadTpKok4nnrA9CPUxBwv+A7RfMD6HThs/ihNcAzpuUu9DkoXE0L1MbY6wycku5q nVjFurdUQP0M4DMjdrbAu4bINLpGiRxfgTMZxNHdBJR5ame7o8Qi8XDKh3Kj6QLR RGlj84r0bIt5V8tnwh3Mg3XXVRVq84tivAWDAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUZS3mTowuFFHyfkvZVR+xBQ6uaMswHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1pTM21Ub3d1RkZIeWZr dlpWUi14QlE2dWFNcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3VwwDQYJKoZIhvcNAQELBQADggEBAHKrxXIktxhpnKJb95l9cePVzlUDcnAk l5YuhyG09piprJPT8tkhkoubv5I7CK/KrhdIBGSlYvWdiyGj3Wl/TYitkepKxLDL fZfMo7uIkiUSvdozvtlEYlvpQt5C2vTc9nR0PzTjs5apqKZbR2ZcqKUBml+4b24F qdPHfOxrfA0nFiZbK7NY4JhsIE1xaRw0+rSYckkH8+PXRXABVi25nQ6GWX7cDE4x 1+zFfWWaMRbW2Xb7Vn+El52CJoYOjg+ONX+VEN30h5Kxkwkc7fhL2P/b3uBMoxf5 cD1GWa0WoAer+YMUPsWWs8r4nWsqBg1eE1eUQgL7krKQhlT71sXovR4= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:47 2024 by rpki-client on console-ams.rpki-client.org