$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ZnU9xaGAMO_tFWx7HPZahLOcPJ8.roa File: ZnU9xaGAMO_tFWx7HPZahLOcPJ8.roa (raw, json) Hash identifier: 10TH31G0PRARpd9zXW/Z4vlKJCK4hqPV2lg1eMqWLbQ= Subject key identifier: 66:75:3D:C5:A1:80:30:EF:ED:15:6C:7B:1C:F6:5A:84:B3:9C:3C:9F Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14FE Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ZnU9xaGAMO_tFWx7HPZahLOcPJ8.roa Signing time: Wed 11 Sep 2024 02:27:30 +0000 ROA not before: Wed 11 Sep 2024 02:27:30 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5374 (0x14fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:27:30 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=66753DC5A18030EFED156C7B1CF65A84B39C3C9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:14:4d:58:1a:9b:53:4e:db:5b:fc:19:b3: 0f:e1:ae:7f:75:0c:59:7e:17:b9:0c:cf:76:61:d3: 11:08:56:6c:6c:3b:49:c7:b3:eb:fd:12:2a:90:de: 38:8c:a3:25:d8:f2:c9:6b:b3:50:ba:7f:8b:b2:c2: 71:c8:38:ce:99:bc:67:23:27:ea:02:61:34:61:5a: b0:58:48:a5:cd:c9:74:e2:8a:0d:99:e5:35:bb:99: 32:b8:55:ea:73:90:2e:fe:07:28:a1:57:59:6f:e3: 92:c5:63:f6:4a:53:29:f9:1f:a1:4e:a1:96:12:db: e4:9f:0e:17:b4:a0:27:1a:a0:21:31:9c:93:cd:52: 66:bd:5b:b3:22:e4:97:3f:62:9b:94:97:90:25:d0: 33:29:75:01:e0:b9:20:7c:2b:3b:ec:83:90:72:6e: 3f:bd:bc:5d:41:9e:f6:3c:93:39:94:bd:a2:ea:69: b0:48:29:92:48:84:89:5a:5b:61:c3:fa:41:d7:0a: f0:db:77:c4:e3:6e:93:32:6e:d3:8d:a1:54:63:3c: 42:05:7f:46:4f:13:e7:36:90:6f:75:77:c9:2b:a3: e0:a0:9d:43:f9:de:14:75:97:8a:6e:c5:17:0c:b3: b0:9d:cd:c8:c7:fc:83:14:bf:76:a1:d5:d2:c2:ba: 9c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:75:3D:C5:A1:80:30:EF:ED:15:6C:7B:1C:F6:5A:84:B3:9C:3C:9F X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ZnU9xaGAMO_tFWx7HPZahLOcPJ8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.24.0/24 Signature Algorithm: sha256WithRSAEncryption 70:b6:13:ab:83:0e:86:8c:4a:97:e8:db:3f:95:7c:73:69:08: 14:6e:83:60:5e:88:85:a7:f0:c2:70:51:94:b6:6f:1e:14:55: 2e:50:5a:c4:b6:63:3a:de:75:0a:45:c4:83:ea:2e:7f:a5:34: 03:8b:be:03:2f:b2:84:7a:2b:d2:55:b0:18:e1:17:f4:ec:17: 7c:56:64:76:a4:fa:01:1f:7f:9c:c8:74:d5:05:8f:6f:ca:12: 3f:4a:86:71:be:01:ce:a5:5a:92:91:36:35:c3:a4:7f:95:9e: 64:2e:cb:03:1d:34:ba:4c:82:28:b1:4e:38:c0:fb:a6:92:5b: 01:ea:e5:af:9f:56:ea:6c:f4:b0:38:a5:50:57:93:02:b4:9d: 72:1f:67:3d:36:51:17:68:0a:aa:bf:a2:98:55:c5:a4:c4:d0: 57:80:21:50:41:0d:a5:ea:32:80:ef:3f:67:9d:6c:71:f0:c3: 9e:5c:66:68:f2:51:67:dc:f9:d9:e0:d4:9b:c3:8b:72:18:85: ed:aa:15:67:17:61:a3:02:cc:16:7e:ea:5b:0c:5e:93:a1:10: 80:ae:08:91:b5:d0:06:76:3b:b4:48:a8:0b:f0:05:bf:b3:12: db:36:4e:46:2f:28:bd:47:46:e0:93:8f:41:57:13:81:af:08: 01:b0:60:1d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjI3MzBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY2NzUzREM1QTE4MDMw RUZFRDE1NkM3QjFDRjY1QTg0QjM5QzNDOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKHxRNWBqbU07bW/wZsw/hrn91DFl+F7kMz3Zh0xEIVmxsO0nH s+v9EiqQ3jiMoyXY8slrs1C6f4uywnHIOM6ZvGcjJ+oCYTRhWrBYSKXNyXTiig2Z 5TW7mTK4VepzkC7+ByihV1lv45LFY/ZKUyn5H6FOoZYS2+SfDhe0oCcaoCExnJPN Uma9W7Mi5Jc/YpuUl5Al0DMpdQHguSB8Kzvsg5Bybj+9vF1BnvY8kzmUvaLqabBI KZJIhIlaW2HD+kHXCvDbd8TjbpMybtONoVRjPEIFf0ZPE+c2kG91d8kro+CgnUP5 3hR1l4puxRcMs7CdzcjH/IMUv3ah1dLCupwjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUZnU9xaGAMO/tFWx7HPZahLOcPJ8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1puVTl4YUdBTU9fdEZX eDdIUFphaExPY1BKOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RgwDQYJKoZIhvcNAQELBQADggEBAHC2E6uDDoaMSpfo2z+VfHNpCBRug2Be iIWn8MJwUZS2bx4UVS5QWsS2YzredQpFxIPqLn+lNAOLvgMvsoR6K9JVsBjhF/Ts F3xWZHak+gEff5zIdNUFj2/KEj9KhnG+Ac6lWpKRNjXDpH+VnmQuywMdNLpMgiix TjjA+6aSWwHq5a+fVups9LA4pVBXkwK0nXIfZz02URdoCqq/ophVxaTE0FeAIVBB DaXqMoDvP2edbHHww55cZmjyUWfc+dng1JvDi3IYhe2qFWcXYaMCzBZ+6lsMXpOh EICuCJG10AZ2O7RIqAvwBb+zEts2TkYvKL1HRuCTj0FXE4GvCAGwYB0= -----END CERTIFICATE-----Generated at Fri Nov 22 14:30:56 2024 by rpki-client on console-ams.rpki-client.org