$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ajg_nrTS93fUqfWH3omg-TS75l4.roa File: ajg_nrTS93fUqfWH3omg-TS75l4.roa (raw, json) Hash identifier: +lEbSAQufKM3523oFZNUz98zaKarDgMdutGJiCQqjVE= Subject key identifier: 6A:38:3F:9E:B4:D2:F7:77:D4:A9:F5:87:DE:89:A0:F9:34:BB:E6:5E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 12F0 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ajg_nrTS93fUqfWH3omg-TS75l4.roa Signing time: Sat 29 Jun 2024 19:44:17 +0000 ROA not before: Sat 29 Jun 2024 19:44:17 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 136897 IP address blocks: 103.198.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4848 (0x12f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jun 29 19:44:17 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=6A383F9EB4D2F777D4A9F587DE89A0F934BBE65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:a7:c8:b5:4f:46:77:71:1f:37:0e:4d:66: c7:05:e6:17:4c:dd:c4:fa:e5:8a:d8:19:83:91:33: 35:c3:52:16:64:f1:eb:19:8a:34:1a:51:4d:6c:72: 01:66:bd:65:47:f1:8d:7b:cc:af:c0:eb:cb:94:a6: 90:32:50:88:de:13:24:5c:ea:61:bb:0c:0f:ae:c4: b6:36:91:c9:de:b2:31:1a:0b:9b:7a:25:b3:73:8a: a4:7e:99:5d:c0:31:83:da:22:42:1c:e4:89:e3:24: 2b:d9:34:03:ab:8d:d4:54:c8:4a:4e:c9:eb:14:93: 3e:c7:be:19:73:8d:e1:33:33:47:6f:1a:4c:bb:2e: 93:ca:bf:10:0d:ea:b0:88:99:6c:6f:a2:81:16:a1: 35:16:89:1f:a3:13:a6:5f:24:5f:7f:51:c8:a5:24: 28:5c:3c:77:5a:89:25:22:9a:ca:ae:89:0d:47:40: 98:a1:71:b4:3c:f7:c0:dd:13:b0:41:b2:99:f1:ff: d1:6d:cd:82:7a:94:7d:84:5c:cd:14:99:c0:28:d6: 26:d6:4a:17:68:69:07:26:d7:97:ac:99:62:21:f1: 7f:aa:81:96:95:0e:39:80:75:22:63:8c:38:a2:c7: ea:22:ed:b3:63:66:d7:a4:7e:fb:fb:9e:32:25:d5: 98:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:38:3F:9E:B4:D2:F7:77:D4:A9:F5:87:DE:89:A0:F9:34:BB:E6:5E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ajg_nrTS93fUqfWH3omg-TS75l4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.198.240.0/22 Signature Algorithm: sha256WithRSAEncryption c6:e4:b4:d5:12:db:59:ea:22:e0:66:84:66:04:7d:7b:62:6f: c8:2a:dd:fe:aa:f9:dc:66:12:11:69:b1:2c:86:5a:5b:ac:08: d0:14:f4:8d:d7:af:56:36:f8:d4:b0:7b:5b:e6:9d:cd:bb:ff: 2b:36:85:2a:91:02:7d:ba:0f:57:0d:76:7e:9e:05:44:0c:fe: 70:6c:60:c7:08:3e:f2:14:fe:89:69:85:71:26:23:59:72:e4: e6:b5:7b:f0:ed:40:a5:57:85:77:e5:8e:d0:31:01:2a:32:e4: 7a:64:71:37:f6:34:a2:de:5c:b9:96:e3:e4:f3:74:55:11:70: ff:82:d0:85:2e:ef:ac:f1:64:a4:5d:fd:e2:d8:3d:10:97:a3: 27:4a:fd:46:46:eb:4d:c9:61:7d:76:97:3f:c9:db:d5:69:e9: 5f:13:46:a1:a7:a4:13:d6:b3:95:c0:a5:9d:4c:6c:41:b2:f7: 4e:36:1a:4c:41:22:56:6b:96:bb:7a:7d:9f:8e:7f:7a:92:cf: bb:1e:cb:2a:0d:d8:de:c2:7e:8d:a1:89:e7:b8:de:90:77:97: f9:14:c5:16:56:b5:d5:13:58:17:5b:0c:5e:61:57:55:b3:f3: c1:5b:22:1a:8e:15:17:4b:51:a0:f7:0d:12:7e:b5:d2:3c:cf: 62:27:66:e0 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEvAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA2Mjkx OTQ0MTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZBMzgzRjlFQjREMkY3 NzdENEE5RjU4N0RFODlBMEY5MzRCQkU2NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHX6fItU9Gd3EfNw5NZscF5hdM3cT65YrYGYORMzXDUhZk8esZ ijQaUU1scgFmvWVH8Y17zK/A68uUppAyUIjeEyRc6mG7DA+uxLY2kcnesjEaC5t6 JbNziqR+mV3AMYPaIkIc5InjJCvZNAOrjdRUyEpOyesUkz7HvhlzjeEzM0dvGky7 LpPKvxAN6rCImWxvooEWoTUWiR+jE6ZfJF9/UcilJChcPHdaiSUimsquiQ1HQJih cbQ898DdE7BBspnx/9FtzYJ6lH2EXM0UmcAo1ibWShdoaQcm15esmWIh8X+qgZaV DjmAdSJjjDiix+oi7bNjZtekfvv7njIl1ZgpAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUajg/nrTS93fUqfWH3omg+TS75l4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2FqZ19uclRTOTNmVXFm V0gzb21nLVRTNzVsNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnxvAwDQYJKoZIhvcNAQELBQADggEBAMbktNUS21nqIuBmhGYEfXtib8gq3f6q +dxmEhFpsSyGWlusCNAU9I3Xr1Y2+NSwe1vmnc27/ys2hSqRAn26D1cNdn6eBUQM /nBsYMcIPvIU/olphXEmI1ly5Oa1e/DtQKVXhXfljtAxASoy5HpkcTf2NKLeXLmW 4+TzdFURcP+C0IUu76zxZKRd/eLYPRCXoydK/UZG603JYX12lz/J29Vp6V8TRqGn pBPWs5XApZ1MbEGy9042GkxBIlZrlrt6fZ+Of3qSz7seyyoN2N7Cfo2hiee43pB3 l/kUxRZWtdUTWBdbDF5hV1Wz88FbIhqOFRdLUaD3DRJ+tdI8z2InZuA= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org