$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/axTTgv3lh6zLH3EW3T3vXnur2tU.roa File: axTTgv3lh6zLH3EW3T3vXnur2tU.roa (raw, json) Hash identifier: sIxA+A7W3aRQOrqmHhvZgoQpjT5HaAHM4SJvktrs57Y= Subject key identifier: 6B:14:D3:82:FD:E5:87:AC:CB:1F:71:16:DD:3D:EF:5E:7B:AB:DA:D5 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14CF Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/axTTgv3lh6zLH3EW3T3vXnur2tU.roa Signing time: Wed 11 Sep 2024 02:23:51 +0000 ROA not before: Wed 11 Sep 2024 02:23:51 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 138527 IP address blocks: 103.221.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5327 (0x14cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:51 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=6B14D382FDE587ACCB1F7116DD3DEF5E7BABDAD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ba:1f:58:e9:81:51:d8:b8:5c:97:81:ea:21: ef:94:c2:40:7e:39:30:43:48:b5:a2:15:5c:81:b8: 40:f6:fa:3a:8c:90:96:8c:24:57:42:a1:48:ed:d7: d5:29:94:67:55:63:2e:72:41:07:23:f3:84:bb:63: 27:39:be:af:f4:ff:7a:ff:ba:69:5a:cb:79:c2:73: d9:25:f8:7b:fa:51:67:e1:6d:e5:07:a6:7a:72:5a: 5d:c8:c6:c2:eb:85:ae:fa:8d:37:32:8d:a7:03:f4: 81:96:7a:4b:ff:20:ed:c8:37:8c:2a:55:28:1a:ff: 9c:50:5e:3f:2c:3f:ba:2a:9d:fd:e6:6c:fb:cd:e1: 6f:bf:e7:32:23:09:06:b1:a6:fe:45:5f:09:62:ca: 52:c4:91:6c:d1:bc:13:4b:23:b4:2a:7c:0d:ce:fa: a8:bf:20:82:bb:8e:c9:91:d6:9d:cb:4a:f8:72:0f: 8c:79:5c:b3:e5:c8:fa:dd:53:50:59:fc:1d:66:a3: 39:66:4f:a4:2c:35:84:0d:dc:49:54:b6:88:66:0f: 2f:2f:b4:e6:79:28:64:96:4d:97:da:bb:4b:c9:d2: ed:be:5c:53:bc:3c:e1:31:ca:e4:22:be:22:2c:a1: 38:9a:aa:59:03:a6:3e:63:da:1c:74:67:e5:0f:40: 8c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:14:D3:82:FD:E5:87:AC:CB:1F:71:16:DD:3D:EF:5E:7B:AB:DA:D5 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/axTTgv3lh6zLH3EW3T3vXnur2tU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.92.0/22 Signature Algorithm: sha256WithRSAEncryption b8:d2:d6:bf:30:5d:29:18:5e:2d:64:03:dd:6b:c9:18:81:64: 36:5e:c8:fc:27:18:2a:4a:cf:1b:0e:a4:b2:29:43:4d:fd:8d: 4b:07:47:ab:85:e8:0a:b0:38:0d:1b:fe:05:08:24:04:89:2c: 1f:3d:b0:ad:ab:a1:84:e3:7e:43:e7:73:5c:37:8e:f9:d8:bf: 03:ac:38:ea:7e:04:e1:84:81:bc:1b:6d:f6:5c:c2:91:77:15: 41:70:5e:b1:1c:7e:c5:60:47:98:e9:13:de:dc:b4:7b:5f:ee: 7f:0e:65:3a:54:60:79:7a:be:cd:31:ce:68:6f:ab:87:a7:cb: 54:e5:22:9f:50:84:c7:4a:15:f8:0f:4a:0c:75:21:21:ba:4f: 06:dd:53:5c:0d:86:37:36:7e:38:44:98:65:73:c9:08:d6:73: 68:f5:de:ad:81:67:23:09:c1:72:05:d1:6e:9c:b5:97:92:c6: 9e:ae:b7:2e:84:37:a0:9b:2b:e7:78:79:3e:a2:21:39:3c:f5: e4:c9:d0:f6:94:b3:71:0a:b6:06:6d:a8:fa:40:0c:5e:a9:53: 66:1a:12:a9:ae:0f:6d:1a:f3:7f:63:a9:1f:ab:c4:f4:00:c6: 8e:07:e5:ba:f9:f4:49:02:15:9b:0b:64:3e:91:16:0f:54:7b: 67:e1:b9:72 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFM8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzNTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZCMTREMzgyRkRFNTg3 QUNDQjFGNzExNkREM0RFRjVFN0JBQkRBRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpuh9Y6YFR2Lhcl4HqIe+UwkB+OTBDSLWiFVyBuED2+jqMkJaM JFdCoUjt19UplGdVYy5yQQcj84S7Yyc5vq/0/3r/umlay3nCc9kl+Hv6UWfhbeUH pnpyWl3IxsLrha76jTcyjacD9IGWekv/IO3IN4wqVSga/5xQXj8sP7oqnf3mbPvN 4W+/5zIjCQaxpv5FXwliylLEkWzRvBNLI7QqfA3O+qi/IIK7jsmR1p3LSvhyD4x5 XLPlyPrdU1BZ/B1mozlmT6QsNYQN3ElUtohmDy8vtOZ5KGSWTZfau0vJ0u2+XFO8 POExyuQiviIsoTiaqlkDpj5j2hx0Z+UPQIxZAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUaxTTgv3lh6zLH3EW3T3vXnur2tUwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2F4VFRndjNsaDZ6TEgz RVczVDN2WG51cjJ0VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3VwwDQYJKoZIhvcNAQELBQADggEBALjS1r8wXSkYXi1kA91ryRiBZDZeyPwn GCpKzxsOpLIpQ039jUsHR6uF6AqwOA0b/gUIJASJLB89sK2roYTjfkPnc1w3jvnY vwOsOOp+BOGEgbwbbfZcwpF3FUFwXrEcfsVgR5jpE97ctHtf7n8OZTpUYHl6vs0x zmhvq4eny1TlIp9QhMdKFfgPSgx1ISG6TwbdU1wNhjc2fjhEmGVzyQjWc2j13q2B ZyMJwXIF0W6ctZeSxp6uty6EN6CbK+d4eT6iITk89eTJ0PaUs3EKtgZtqPpADF6p U2YaEqmuD20a839jqR+rxPQAxo4H5br59EkCFZsLZD6RFg9Ue2fhuXI= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org