$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/dhcvU0han3r34kQaEJLjIObE3TM.roa File: dhcvU0han3r34kQaEJLjIObE3TM.roa (raw, json) Hash identifier: HAYq6Qezh4MKR8aNZfV1f0jolq28fCsE6OUcCMFUWkY= Subject key identifier: 76:17:2F:53:48:5A:9F:7A:F7:E2:44:1A:10:92:E3:20:E6:C4:DD:33 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14ED Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dhcvU0han3r34kQaEJLjIObE3TM.roa Signing time: Wed 11 Sep 2024 02:26:09 +0000 ROA not before: Wed 11 Sep 2024 02:26:09 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5357 (0x14ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:26:09 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=76172F53485A9F7AF7E2441A1092E320E6C4DD33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:61:29:ab:ca:e9:93:c7:b4:75:34:c6:31:6d: db:01:ab:2b:b4:3e:55:d9:2d:aa:e5:69:2c:1e:d6: d6:4e:15:08:e6:ce:34:c4:39:00:b2:b3:ef:52:cb: 6f:d2:e5:38:84:d7:32:e5:7a:5b:05:37:79:1c:20: 28:92:3f:94:23:01:a7:db:75:d3:7c:1d:67:56:e9: 8e:1a:b3:86:8b:3c:18:fb:1b:39:b2:28:07:3d:dd: 6c:c1:40:63:f6:1d:d4:a9:85:54:15:ed:41:03:31: bb:07:b2:0b:c7:df:a4:4b:65:11:22:f7:f2:c7:e5: c8:bc:5b:9f:29:d4:53:60:31:9d:17:14:5c:c6:2f: 30:81:c9:d6:e3:24:92:a4:b2:d7:fc:e4:16:a1:db: 0a:53:09:c8:0f:74:ec:a2:26:68:b6:e3:67:d3:4b: 9e:d9:f6:4c:7f:6d:5b:08:e6:e8:9f:a3:5e:4b:24: dc:da:26:fc:16:6f:19:0d:03:79:31:7c:7c:a2:c2: 98:a9:94:9b:a3:2f:a1:cd:d7:6a:52:79:02:50:d1: 8e:7c:b6:4c:03:87:ca:99:47:59:f5:49:85:9e:ef: b7:06:f6:f1:39:3b:52:3b:9a:24:52:7b:ba:98:3b: c6:9d:4d:6a:f2:b3:89:93:1d:94:f7:1d:b3:2f:df: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:17:2F:53:48:5A:9F:7A:F7:E2:44:1A:10:92:E3:20:E6:C4:DD:33 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dhcvU0han3r34kQaEJLjIObE3TM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.13.0/24 Signature Algorithm: sha256WithRSAEncryption c3:cc:29:09:1b:d2:cf:31:bb:3d:54:b2:59:8f:e2:12:e3:bf: 93:aa:d9:92:28:8b:d4:17:8f:30:c4:fe:b3:21:de:21:75:f9: b1:8e:e0:dd:e2:8a:35:e9:c2:a2:c5:5a:35:0d:a4:f5:dc:0f: 6e:7e:a2:17:81:89:fb:a5:31:ae:42:69:88:0a:e4:35:32:99: 11:30:03:5b:0e:c7:f0:79:c5:cc:ab:67:7d:e1:83:f6:d1:b4: 36:2e:46:7c:96:ed:f7:5f:18:37:24:94:c5:a8:68:3d:da:1d: f8:0c:b8:a4:53:ca:0f:c5:32:74:9b:af:29:f6:80:d9:ef:e6: 7e:de:11:ab:33:33:4a:d7:1d:e6:bf:52:74:db:6f:0a:d1:07: 9b:b8:28:54:9a:a0:6d:12:6c:ac:11:85:e1:3e:7e:ac:e7:b1: 77:d3:f0:ff:30:bc:3b:b9:a5:b7:14:a1:b1:05:77:b1:32:04: 40:45:0d:73:b1:64:14:51:85:d6:b9:84:86:34:96:33:c9:f2: 3a:ed:69:eb:ef:6c:ec:98:4f:9c:aa:10:40:24:ae:27:86:fc: 59:96:4c:ed:7d:0d:da:ba:16:76:57:0d:5d:29:f8:63:32:84: e4:7c:f4:34:d1:44:f9:4c:2e:70:91:f9:34:66:c6:d7:e5:f2: 0f:15:5d:0b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjI2MDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDc2MTcyRjUzNDg1QTlG N0FGN0UyNDQxQTEwOTJFMzIwRTZDNEREMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsYSmryumTx7R1NMYxbdsBqyu0PlXZLarlaSwe1tZOFQjmzjTE OQCys+9Sy2/S5TiE1zLlelsFN3kcICiSP5QjAafbddN8HWdW6Y4as4aLPBj7Gzmy KAc93WzBQGP2HdSphVQV7UEDMbsHsgvH36RLZREi9/LH5ci8W58p1FNgMZ0XFFzG LzCBydbjJJKkstf85Bah2wpTCcgPdOyiJmi242fTS57Z9kx/bVsI5uifo15LJNza JvwWbxkNA3kxfHyiwpiplJujL6HN12pSeQJQ0Y58tkwDh8qZR1n1SYWe77cG9vE5 O1I7miRSe7qYO8adTWrys4mTHZT3HbMv327TAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUdhcvU0han3r34kQaEJLjIObE3TMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2RoY3ZVMGhhbjNyMzRr UWFFSkxqSU9iRTNUTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3Q0wDQYJKoZIhvcNAQELBQADggEBAMPMKQkb0s8xuz1UslmP4hLjv5Oq2ZIo i9QXjzDE/rMh3iF1+bGO4N3iijXpwqLFWjUNpPXcD25+oheBifulMa5CaYgK5DUy mREwA1sOx/B5xcyrZ33hg/bRtDYuRnyW7fdfGDcklMWoaD3aHfgMuKRTyg/FMnSb ryn2gNnv5n7eEaszM0rXHea/UnTbbwrRB5u4KFSaoG0SbKwRheE+fqznsXfT8P8w vDu5pbcUobEFd7EyBEBFDXOxZBRRhda5hIY0ljPJ8jrtaevvbOyYT5yqEEAkrieG /FmWTO19Ddq6FnZXDV0p+GMyhOR89DTRRPlMLnCR+TRmxtfl8g8VXQs= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:40 2024 by rpki-client on console-fra.rpki-client.org