$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/_B8K7SE6SPsF_m6wEaYjNebAjmE.roa File: _B8K7SE6SPsF_m6wEaYjNebAjmE.roa (raw, json) Hash identifier: qyLuBJ5j56SwypjDf5PWG1o3QUf+WF1J5H45CfodgCI= Subject key identifier: FC:1F:0A:ED:21:3A:48:FB:05:FE:6E:B0:11:A6:23:35:E6:C0:8E:61 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1534 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_B8K7SE6SPsF_m6wEaYjNebAjmE.roa Signing time: Wed 11 Sep 2024 03:57:52 +0000 ROA not before: Wed 11 Sep 2024 03:57:52 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 103.220.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5428 (0x1534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 03:57:52 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=FC1F0AED213A48FB05FE6EB011A62335E6C08E61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:8d:5f:74:77:2c:7c:a3:6e:fe:33:20:9c: 38:d4:ca:4e:d7:6f:c3:2c:a9:53:4e:ef:93:40:a4: 5b:9c:f0:f9:b6:d8:1b:63:47:8a:1c:c5:11:44:a1: f1:97:a5:95:b1:5e:65:9d:49:98:e2:84:d2:b1:a0: 47:e2:a6:ac:db:c3:2b:01:55:2b:bb:db:79:91:4d: 5c:7c:f0:82:ec:8c:cc:9b:ff:96:3f:4b:5b:61:23: b7:da:bb:98:6f:7b:48:54:ab:bf:d8:4f:03:f6:2d: 3e:af:0a:54:bd:2b:c4:60:49:51:50:d2:24:c1:f1: d2:3d:b4:19:d5:6c:ae:6f:95:c9:db:79:02:46:69: 6f:a1:1b:fb:3e:79:5b:07:2d:b7:7a:93:90:41:97: 98:8f:5a:4d:8f:ff:f6:d4:73:9d:d5:50:f4:37:d4: 23:4b:0d:b5:3e:9d:54:27:ad:d3:6b:fc:58:ba:12: b0:a5:0b:28:2a:4a:e6:13:90:35:ee:c3:7a:14:aa: ec:5c:47:8b:fe:0e:81:63:93:e1:57:42:3f:15:99: 15:1d:9c:f5:47:ed:87:f7:2f:d6:01:9a:5a:d2:1a: 90:4c:e7:5a:51:c8:ed:76:35:40:71:9f:9d:ed:55: c7:0e:d9:e7:44:3a:38:4e:14:2d:e6:4a:20:65:90: c6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1F:0A:ED:21:3A:48:FB:05:FE:6E:B0:11:A6:23:35:E6:C0:8E:61 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_B8K7SE6SPsF_m6wEaYjNebAjmE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.249.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:2d:f2:58:e2:a4:bc:0b:9c:06:f3:81:f1:ea:5c:9c:9f:d2: 6d:cb:8d:3b:5f:06:d2:0a:18:ff:ff:5f:1a:97:a7:94:e6:3b: e0:22:51:6d:2f:8a:2b:5b:82:5e:ec:7f:eb:0b:cd:2f:43:d5: 45:f1:79:95:02:01:5a:03:58:f2:00:46:4c:2a:16:4b:ae:09: a9:2e:d0:3f:68:89:37:04:a4:4d:7f:08:8f:ae:58:e2:4d:fc: b2:00:c8:f9:c1:de:7e:84:13:b4:7c:cd:d2:25:98:ab:31:b1: 0b:b1:88:a5:01:7d:b8:a6:d0:b1:b7:c7:23:2d:d4:d2:59:dd: 68:c7:50:73:79:46:24:9f:ab:19:c2:07:e4:a8:f2:4b:91:75: f8:1d:0e:a6:9e:f5:3c:63:de:01:8f:21:73:1b:ee:12:75:b5: 42:ce:5f:1f:be:24:6e:b3:f4:7f:c1:d6:a2:d9:0c:d2:ab:cc: 0f:4f:22:47:c5:8b:94:49:a7:7f:59:87:0a:db:60:bc:d0:8b: 90:06:57:50:59:e0:cc:7c:df:c4:3b:ab:e7:ef:42:d5:bc:0b: 6f:40:b5:02:fa:2d:4f:f3:97:f7:80:7b:42:cd:06:c9:49:b5: e7:ce:45:54:0c:8d:b5:8a:71:82:38:6c:a4:95:73:37:69:dc: 3d:fa:54:3e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFTQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MzU3NTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZDMUYwQUVEMjEzQTQ4 RkIwNUZFNkVCMDExQTYyMzM1RTZDMDhFNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDClI1fdHcsfKNu/jMgnDjUyk7Xb8MsqVNO75NApFuc8Pm22Btj R4ocxRFEofGXpZWxXmWdSZjihNKxoEfipqzbwysBVSu723mRTVx88ILsjMyb/5Y/ S1thI7fau5hve0hUq7/YTwP2LT6vClS9K8RgSVFQ0iTB8dI9tBnVbK5vlcnbeQJG aW+hG/s+eVsHLbd6k5BBl5iPWk2P//bUc53VUPQ31CNLDbU+nVQnrdNr/Fi6ErCl CygqSuYTkDXuw3oUquxcR4v+DoFjk+FXQj8VmRUdnPVH7Yf3L9YBmlrSGpBM51pR yO12NUBxn53tVccO2edEOjhOFC3mSiBlkMbBAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU/B8K7SE6SPsF/m6wEaYjNebAjmEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L19COEs3U0U2U1BzRl9t NndFYVlqTmViQWptRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3PkwDQYJKoZIhvcNAQELBQADggEBAIst8ljipLwLnAbzgfHqXJyf0m3LjTtf BtIKGP//XxqXp5TmO+AiUW0viitbgl7sf+sLzS9D1UXxeZUCAVoDWPIARkwqFkuu Caku0D9oiTcEpE1/CI+uWOJN/LIAyPnB3n6EE7R8zdIlmKsxsQuxiKUBfbim0LG3 xyMt1NJZ3WjHUHN5RiSfqxnCB+So8kuRdfgdDqae9Txj3gGPIXMb7hJ1tULOXx++ JG6z9H/B1qLZDNKrzA9PIkfFi5RJp39ZhwrbYLzQi5AGV1BZ4Mx838Q7q+fvQtW8 C29AtQL6LU/zl/eAe0LNBslJtefORVQMjbWKcYI4bKSVczdp3D36VD4= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org