$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/cohc_oEq_1z1TuKFWlJVBLLObNk.roa File: cohc_oEq_1z1TuKFWlJVBLLObNk.roa (raw, json) Hash identifier: 8w5apVpmxnXuhEYdFQu6gGv6SbFvaZBNrE/KwezofBY= Subject key identifier: 72:88:5C:FE:81:2A:FF:5C:F5:4E:E2:85:5A:52:55:04:B2:CE:6C:D9 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 147A Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/cohc_oEq_1z1TuKFWlJVBLLObNk.roa Signing time: Wed 11 Sep 2024 02:23:21 +0000 ROA not before: Wed 11 Sep 2024 02:23:21 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.220.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5242 (0x147a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:21 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=72885CFE812AFF5CF54EE2855A525504B2CE6CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:74:4a:8e:85:8a:d1:5d:ce:d8:02:48:ed: 3b:d3:b5:92:b0:7c:84:87:f3:c4:fc:0a:43:13:52: a6:83:f6:d8:9b:bf:d3:6e:dd:52:14:7c:aa:84:9a: 8b:71:78:51:b2:27:47:62:b7:9c:c3:86:c3:a0:4c: af:38:ee:77:ee:04:57:41:54:5d:b9:0c:0a:c9:a6: 76:9e:06:77:a8:74:9f:87:82:da:1d:80:12:72:d3: 6d:f5:06:a1:97:3c:f9:d0:54:83:e1:79:a9:20:9b: 90:9b:7a:ba:7b:a0:59:fa:46:4f:7a:d2:58:a9:83: 14:73:e6:0c:13:50:81:d3:32:e2:a7:25:8e:bf:0e: 90:fb:3f:86:f6:e3:ab:56:74:18:0b:12:7c:53:d4: a8:98:34:a3:45:e8:2e:2a:43:22:ca:9c:29:dc:4a: 09:fa:df:e2:c9:4e:78:f6:1d:f0:79:e9:a1:2f:c4: 99:94:cd:34:e2:e5:00:05:e8:c0:61:48:3f:93:1a: b2:6e:be:ee:05:72:b0:b1:31:bc:9a:a9:9d:62:9d: c5:06:b3:6a:69:d0:78:b0:62:03:4c:fc:67:5b:09: 2b:2b:1c:1c:4f:95:5b:b9:f3:99:98:31:4f:eb:1c: 30:de:99:bc:af:92:67:cd:e1:81:85:88:ce:99:fe: 0e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:88:5C:FE:81:2A:FF:5C:F5:4E:E2:85:5A:52:55:04:B2:CE:6C:D9 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/cohc_oEq_1z1TuKFWlJVBLLObNk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.249.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:21:ad:81:dc:d8:a1:26:10:0b:c6:2e:d5:cc:26:c4:8d:43: ba:9a:05:79:4d:f2:fc:85:14:88:73:0c:c3:b5:fc:5a:43:ad: d4:3f:e2:9f:dd:1c:d8:fb:f4:2f:6d:df:2e:eb:da:5c:26:e9: 9b:e9:9a:c2:0a:f4:30:ae:dd:59:8b:0e:f2:18:de:9c:d0:33: 61:0f:cd:7b:54:66:0f:3d:2e:27:4d:7c:fc:7f:29:67:dc:50: 6f:d8:e5:78:3a:4f:49:87:ea:05:61:3a:df:9e:7f:4e:2c:c3: f0:ee:ab:7e:a5:05:d6:51:bc:a2:77:52:39:78:a9:df:47:48: dc:4d:50:ab:30:af:e3:d0:47:69:a7:07:da:ff:d6:ec:cb:d0: 1f:6d:7c:76:b3:e4:7a:87:76:5e:3c:26:78:9f:e5:21:c3:d0: e8:d8:cd:eb:b2:04:1c:03:34:95:ff:25:78:fe:1a:b2:02:cf: 91:73:97:16:c7:bc:ec:72:8f:22:8f:f6:e3:b5:8c:35:1f:80: 38:e6:e3:b2:eb:a3:5b:1c:90:4c:ee:39:1b:14:7a:a1:e0:e7: 25:fc:5a:e2:1e:84:0c:35:fa:ae:92:26:9b:7f:1a:f7:3b:2f: 0a:25:f6:63:5a:10:4f:bf:c1:de:d1:e1:1e:80:ea:78:de:d0: 97:55:ca:50 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFHowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMjFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDcyODg1Q0ZFODEyQUZG NUNGNTRFRTI4NTVBNTI1NTA0QjJDRTZDRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuqHRKjoWK0V3O2AJI7TvTtZKwfISH88T8CkMTUqaD9tibv9Nu 3VIUfKqEmotxeFGyJ0dit5zDhsOgTK847nfuBFdBVF25DArJpnaeBneodJ+Hgtod gBJy0231BqGXPPnQVIPheakgm5Cberp7oFn6Rk960lipgxRz5gwTUIHTMuKnJY6/ DpD7P4b246tWdBgLEnxT1KiYNKNF6C4qQyLKnCncSgn63+LJTnj2HfB56aEvxJmU zTTi5QAF6MBhSD+TGrJuvu4FcrCxMbyaqZ1incUGs2pp0HiwYgNM/GdbCSsrHBxP lVu585mYMU/rHDDembyvkmfN4YGFiM6Z/g5TAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUcohc/oEq/1z1TuKFWlJVBLLObNkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2NvaGNfb0VxXzF6MVR1 S0ZXbEpWQkxMT2JOay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3PkwDQYJKoZIhvcNAQELBQADggEBAAwhrYHc2KEmEAvGLtXMJsSNQ7qaBXlN 8vyFFIhzDMO1/FpDrdQ/4p/dHNj79C9t3y7r2lwm6ZvpmsIK9DCu3VmLDvIY3pzQ M2EPzXtUZg89LidNfPx/KWfcUG/Y5Xg6T0mH6gVhOt+ef04sw/Duq36lBdZRvKJ3 Ujl4qd9HSNxNUKswr+PQR2mnB9r/1uzL0B9tfHaz5HqHdl48Jnif5SHD0OjYzeuy BBwDNJX/JXj+GrICz5FzlxbHvOxyjyKP9uO1jDUfgDjm47Lro1sckEzuORsUeqHg 5yX8WuIehAw1+q6SJpt/Gvc7Lwol9mNaEE+/wd7R4R6A6nje0JdVylA= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:47 2024 by rpki-client on console-ams.rpki-client.org