$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/_lQHWkm3kPBfjEhSnvm6ndvzMq8.roa File: _lQHWkm3kPBfjEhSnvm6ndvzMq8.roa (raw, json) Hash identifier: 5p3xvlc/5OtapKeAkR7HJ2Sz+7nd0tR8b29TLyMAonw= Subject key identifier: FE:54:07:5A:49:B7:90:F0:5F:8C:48:52:9E:F9:BA:9D:DB:F3:32:AF Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 150A Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_lQHWkm3kPBfjEhSnvm6ndvzMq8.roa Signing time: Wed 11 Sep 2024 02:27:34 +0000 ROA not before: Wed 11 Sep 2024 02:27:34 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5386 (0x150a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:27:34 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=FE54075A49B790F05F8C48529EF9BA9DDBF332AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:22:c2:38:d0:34:49:c6:10:77:9f:2f:a3:2f: 02:5b:cc:c3:fa:dc:33:52:98:c1:65:37:6d:dd:01: f0:05:fc:bd:ac:16:97:56:51:46:bb:fa:d6:bb:e2: 0c:29:c9:7a:b0:74:62:8e:47:23:6c:f6:8f:1a:2f: 75:d1:18:c0:c4:e4:bc:93:15:e1:6b:15:60:05:92: 52:13:19:a9:ea:a5:63:94:a9:0d:03:a5:22:36:b3: b2:91:e1:22:72:03:d2:cf:58:66:c9:19:7c:a8:2e: 20:f1:a2:0c:d3:89:c9:47:dd:5a:8f:be:cc:00:1f: 2b:ce:fa:e9:a6:8a:62:ab:7b:25:bc:b3:06:7b:8c: c9:ba:35:91:bf:c2:02:8f:6f:fa:df:93:18:19:69: 1c:bf:09:89:a7:b7:f5:8b:2f:c2:86:92:f7:1a:23: 85:b7:7b:4f:22:ac:3c:63:4c:13:78:d2:47:b1:63: a9:93:8d:28:2f:ff:b2:b4:65:ac:99:08:4d:f6:34: 48:ad:76:90:d1:a6:3b:aa:d8:b4:ee:79:fa:bd:67: 2a:f1:3a:7f:26:e1:8d:10:5a:d1:fa:84:aa:84:5a: e3:ad:ce:7d:dc:29:21:aa:e1:59:92:13:c4:87:db: 56:f2:81:7c:0b:c5:13:91:25:7f:48:4d:40:76:42: 68:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:54:07:5A:49:B7:90:F0:5F:8C:48:52:9E:F9:BA:9D:DB:F3:32:AF X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_lQHWkm3kPBfjEhSnvm6ndvzMq8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.35.0/24 Signature Algorithm: sha256WithRSAEncryption 07:25:76:a6:44:bf:5d:76:ce:a4:81:26:0a:89:40:f7:45:4b: 13:e9:4b:30:9a:c1:a1:f9:6e:76:8c:d5:28:c2:de:76:66:f1: a3:71:80:9e:80:6d:cf:a6:12:3b:18:e6:7a:39:9c:8d:5c:a7: 41:98:c6:20:99:3b:39:7f:dc:5a:95:15:e4:8e:d6:e9:d8:7e: 29:9a:c0:eb:07:ae:24:af:f8:2f:0f:01:74:72:08:25:ce:06: 72:27:34:cb:9d:ae:12:6a:8b:e8:5e:30:60:8f:93:7c:58:3b: 68:8b:44:a5:30:ef:ce:6c:7b:ba:b9:47:25:54:45:21:cb:89: ff:b5:43:20:1a:3a:d6:ae:ff:60:ae:7a:d9:31:ea:ee:d7:3c: 6a:7a:4c:36:c8:3a:0b:d7:37:44:65:d0:0f:b7:7a:54:08:ae: ed:db:0a:ff:97:1c:d0:2d:58:89:ee:df:ab:8c:0a:f5:a2:77: 81:9c:06:35:aa:bb:b1:f0:3a:5a:5d:92:b8:fc:44:06:4e:7c: 01:7f:9c:ea:e5:09:ff:12:ab:86:2b:13:02:d8:99:6b:d4:36: f0:2b:ab:7a:17:33:b2:63:f5:3f:81:cc:6b:e3:c9:1b:d1:1d: e1:14:de:8a:1e:cb:e8:83:88:71:98:ea:69:8c:b2:f3:ca:b9: 2b:c7:c8:c4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFQowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjI3MzRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZFNTQwNzVBNDlCNzkw RjA1RjhDNDg1MjlFRjlCQTlEREJGMzMyQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRIsI40DRJxhB3ny+jLwJbzMP63DNSmMFlN23dAfAF/L2sFpdW UUa7+ta74gwpyXqwdGKORyNs9o8aL3XRGMDE5LyTFeFrFWAFklITGanqpWOUqQ0D pSI2s7KR4SJyA9LPWGbJGXyoLiDxogzTiclH3VqPvswAHyvO+ummimKreyW8swZ7 jMm6NZG/wgKPb/rfkxgZaRy/CYmnt/WLL8KGkvcaI4W3e08irDxjTBN40kexY6mT jSgv/7K0ZayZCE32NEitdpDRpjuq2LTuefq9ZyrxOn8m4Y0QWtH6hKqEWuOtzn3c KSGq4VmSE8SH21bygXwLxRORJX9ITUB2Qmg/AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU/lQHWkm3kPBfjEhSnvm6ndvzMq8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L19sUUhXa20za1BCZmpF aFNudm02bmR2ek1xOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SMwDQYJKoZIhvcNAQELBQADggEBAAcldqZEv112zqSBJgqJQPdFSxPpSzCa waH5bnaM1SjC3nZm8aNxgJ6Abc+mEjsY5no5nI1cp0GYxiCZOzl/3FqVFeSO1unY fimawOsHriSv+C8PAXRyCCXOBnInNMudrhJqi+heMGCPk3xYO2iLRKUw785se7q5 RyVURSHLif+1QyAaOtau/2Cuetkx6u7XPGp6TDbIOgvXN0Rl0A+3elQIru3bCv+X HNAtWInu36uMCvWid4GcBjWqu7HwOlpdkrj8RAZOfAF/nOrlCf8Sq4YrEwLYmWvU NvArq3oXM7Jj9T+BzGvjyRvRHeEU3ooey+iDiHGY6mmMsvPKuSvHyMQ= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:47 2024 by rpki-client on console-ams.rpki-client.org