$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/anJ2TQaJGlFN7K9vsoI-_rhQr_E.roa File: anJ2TQaJGlFN7K9vsoI-_rhQr_E.roa (raw, json) Hash identifier: 95htxuIj/no0toAgu1mhJE2JnI8VWfV/coINSWfOHcA= Subject key identifier: 6A:72:76:4D:06:89:1A:51:4D:EC:AF:6F:B2:82:3E:FE:B8:50:AF:F1 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1514 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/anJ2TQaJGlFN7K9vsoI-_rhQr_E.roa Signing time: Wed 11 Sep 2024 02:30:07 +0000 ROA not before: Wed 11 Sep 2024 02:30:07 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.6.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5396 (0x1514) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:30:07 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=6A72764D06891A514DECAF6FB2823EFEB850AFF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:55:b1:47:00:16:21:d3:a8:52:f6:9c:68:7b: 4e:e0:4f:bb:3b:8d:3b:2c:9f:bf:75:29:e9:0e:99: 08:12:2f:96:b6:ae:63:1b:8d:c8:82:c4:73:61:eb: 9f:42:6e:bb:39:ed:e4:6a:22:16:11:d8:10:36:ea: 16:3e:34:a2:23:fc:24:0c:13:b5:1a:70:d5:77:58: 66:a9:97:77:86:1b:8e:68:2e:ff:c1:20:0a:0b:a6: c8:62:b8:09:fa:ca:38:ae:ca:08:19:f8:be:0f:1c: 6a:6b:d9:62:cf:58:98:04:bb:2d:c3:d5:64:bc:c9: 1d:67:39:79:3d:16:24:5a:17:3e:a6:37:9a:57:e1: bd:e9:c0:4e:86:d3:ec:62:71:03:d8:cd:de:c1:39: a1:a7:d4:3b:2e:0f:d0:1b:64:19:bf:3b:02:01:06: 88:ac:5d:8e:1e:63:6c:fc:39:fb:dc:07:c2:04:ed: 7e:d8:c8:e6:88:bc:68:60:4d:48:a3:b8:29:0e:a7: 87:5f:9b:4e:f8:60:ef:b6:fc:9a:60:09:7e:65:15: ef:5d:b2:bd:f6:39:42:4a:53:61:03:74:d1:f0:dd: 5c:8b:26:bb:20:e2:8c:53:6a:83:c4:dc:fa:92:6c: 87:8a:2c:ff:3a:4e:a2:8a:90:45:ae:8f:7d:b6:39: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:72:76:4D:06:89:1A:51:4D:EC:AF:6F:B2:82:3E:FE:B8:50:AF:F1 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/anJ2TQaJGlFN7K9vsoI-_rhQr_E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.108.0/24 Signature Algorithm: sha256WithRSAEncryption 92:67:a0:59:5a:a1:60:8e:c3:1d:80:5d:ab:1c:88:93:22:4f: 01:46:70:92:11:ae:d8:e8:78:bf:e1:a2:f0:c6:a9:b7:ce:57: 64:c8:62:3f:ee:03:a4:fc:32:15:99:77:8e:ad:0e:2e:13:8f: 2c:9b:c2:30:ec:76:af:3c:0f:74:b4:c1:6f:36:07:30:eb:d2: e0:e0:ad:88:1a:85:2b:5c:fa:35:51:76:53:05:e4:cb:91:9f: e8:39:18:02:9c:e6:af:2b:29:28:71:ff:62:25:66:eb:a1:b2: e7:ec:59:b9:30:25:ab:d5:be:d0:4d:79:75:d5:a8:0d:93:17: 50:bf:6f:af:b7:09:24:70:f1:53:1f:43:df:34:cf:97:46:64: 26:46:35:e1:02:32:a7:b2:44:a8:15:25:54:b9:13:0f:a8:69: 41:32:16:f2:cb:7b:c2:e3:6f:28:90:6e:ff:c9:96:38:cb:6d: 15:9b:24:fc:1f:3c:50:74:9a:a7:4a:f1:91:9b:13:bc:14:c5: 23:b4:28:ce:4c:83:6c:bd:47:86:72:01:24:a6:0d:2e:37:45: ff:9e:09:03:f9:0e:5f:ba:eb:e0:42:1d:12:76:a6:ea:36:fd: 4d:21:c6:34:3c:af:5e:f9:9f:1c:32:fe:9d:56:76:07:00:2b: 71:d5:43:c6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFRQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjMwMDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZBNzI3NjREMDY4OTFB NTE0REVDQUY2RkIyODIzRUZFQjg1MEFGRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLVbFHABYh06hS9pxoe07gT7s7jTssn791KekOmQgSL5a2rmMb jciCxHNh659Cbrs57eRqIhYR2BA26hY+NKIj/CQME7UacNV3WGapl3eGG45oLv/B IAoLpshiuAn6yjiuyggZ+L4PHGpr2WLPWJgEuy3D1WS8yR1nOXk9FiRaFz6mN5pX 4b3pwE6G0+xicQPYzd7BOaGn1DsuD9AbZBm/OwIBBoisXY4eY2z8OfvcB8IE7X7Y yOaIvGhgTUijuCkOp4dfm074YO+2/JpgCX5lFe9dsr32OUJKU2EDdNHw3VyLJrsg 4oxTaoPE3PqSbIeKLP86TqKKkEWuj322ObjJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUanJ2TQaJGlFN7K9vsoI+/rhQr/EwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2FuSjJUUWFKR2xGTjdL OXZzb0ktX3JoUXJfRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBmwwDQYJKoZIhvcNAQELBQADggEBAJJnoFlaoWCOwx2AXasciJMiTwFGcJIR rtjoeL/hovDGqbfOV2TIYj/uA6T8MhWZd46tDi4TjyybwjDsdq88D3S0wW82BzDr 0uDgrYgahStc+jVRdlMF5MuRn+g5GAKc5q8rKShx/2IlZuuhsufsWbkwJavVvtBN eXXVqA2TF1C/b6+3CSRw8VMfQ980z5dGZCZGNeECMqeyRKgVJVS5Ew+oaUEyFvLL e8LjbyiQbv/JljjLbRWbJPwfPFB0mqdK8ZGbE7wUxSO0KM5Mg2y9R4ZyASSmDS43 Rf+eCQP5Dl+66+BCHRJ2puo2/U0hxjQ8r175nxwy/p1WdgcAK3HVQ8Y= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:40 2024 by rpki-client on console-fra.rpki-client.org