$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/eiWbYEoIpsZkzIvI_MY4P-aN0Tc.roa File: eiWbYEoIpsZkzIvI_MY4P-aN0Tc.roa (raw, json) Hash identifier: oqreO2m4aN1Z58OFQ/JeCNvNeGhQc2qsbjjXtnZxMck= Subject key identifier: 7A:25:9B:60:4A:08:A6:C6:64:CC:8B:C8:FC:C6:38:3F:E6:8D:D1:37 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 152D Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/eiWbYEoIpsZkzIvI_MY4P-aN0Tc.roa Signing time: Wed 11 Sep 2024 03:57:50 +0000 ROA not before: Wed 11 Sep 2024 03:57:50 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 103.221.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5421 (0x152d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 03:57:50 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=7A259B604A08A6C664CC8BC8FCC6383FE68DD137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:24:9d:13:f6:ce:1c:a0:ae:3f:8a:cb:90: d9:80:cd:34:b9:4a:73:f3:5e:c5:e7:4f:81:90:c0: 6b:f9:da:15:bc:4b:fb:1e:c1:0e:52:21:57:af:5c: 87:b0:37:47:c9:be:20:3f:bb:21:5d:97:27:50:ab: 79:2a:92:f8:59:e0:87:24:0b:63:f0:be:30:7d:f9: 02:87:88:eb:03:dd:a6:75:a1:84:28:23:e5:53:6c: a1:e0:95:59:20:64:ea:71:68:b0:3c:1c:c1:88:7a: bf:05:77:b6:88:99:0a:e9:09:07:3e:87:c6:58:c2: a9:7a:ac:d9:9f:00:b8:bc:98:5a:86:f5:f3:fc:6c: 29:eb:e7:c2:3d:d3:4f:71:2e:c2:25:ae:3d:bd:d7: 3a:de:0d:7a:04:1e:f6:f3:de:ba:37:18:a7:9a:fb: 00:88:b8:90:3c:48:d1:dd:3a:3d:bf:fd:ce:a2:df: 15:6c:a8:1c:81:44:e1:3b:94:ab:21:21:f9:3e:7a: 49:08:91:49:89:a2:8f:f4:97:dc:4d:a8:ed:32:f4: 78:a6:89:53:cb:d4:2e:97:0d:44:54:1b:76:74:42: d3:8b:01:4b:1e:62:01:0c:43:7a:a4:4a:d9:b6:6f: af:8e:c4:af:5d:e9:ab:bb:04:5b:0e:80:78:80:c9: 35:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:25:9B:60:4A:08:A6:C6:64:CC:8B:C8:FC:C6:38:3F:E6:8D:D1:37 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/eiWbYEoIpsZkzIvI_MY4P-aN0Tc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.10.0/24 Signature Algorithm: sha256WithRSAEncryption 24:29:3f:28:d9:5c:f1:ae:3a:18:98:84:6d:f9:b7:2d:ae:0a: fb:92:c6:e3:a4:98:39:fe:fa:29:77:0e:43:91:5c:d1:8f:3d: 23:46:8d:c9:f8:f9:3a:c5:b9:db:b6:2c:19:1b:e0:d8:96:43: 53:dc:34:7c:59:27:a6:09:70:80:32:28:42:19:35:37:b4:d1: 14:e6:dc:2c:61:be:dd:64:36:04:c2:53:c0:3a:f9:2e:05:fa: 90:b6:d3:41:3c:30:b0:5f:a8:f7:07:0f:c7:95:c5:a3:04:f6: b3:82:39:16:69:f0:d9:10:09:7b:2e:72:38:68:64:1a:82:ef: 85:dd:8e:6c:01:24:08:aa:48:fb:e8:22:f3:84:d9:2f:0f:0e: 5f:64:e0:a6:0c:da:44:fd:3a:78:73:cd:aa:ce:69:8b:19:f2: 7d:db:f3:fe:76:d1:45:c1:ea:a4:ad:b3:7f:2a:25:d1:90:f2: d5:2a:ff:86:f7:0f:ec:b6:ad:f8:70:f2:f1:07:c9:08:74:83: a1:5d:cf:67:45:a6:ea:44:66:a8:39:16:c2:81:cf:ab:4e:dd: 3c:bc:c1:d1:f2:58:a5:55:ea:e1:01:bc:ac:7e:b2:21:6a:88: 89:5d:45:3f:4d:05:ae:9d:20:a7:1d:38:4c:b1:19:b2:5b:95: 19:dc:de:96 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFS0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MzU3NTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDdBMjU5QjYwNEEwOEE2 QzY2NENDOEJDOEZDQzYzODNGRTY4REQxMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuUySdE/bOHKCuP4rLkNmAzTS5SnPzXsXnT4GQwGv52hW8S/se wQ5SIVevXIewN0fJviA/uyFdlydQq3kqkvhZ4IckC2PwvjB9+QKHiOsD3aZ1oYQo I+VTbKHglVkgZOpxaLA8HMGIer8Fd7aImQrpCQc+h8ZYwql6rNmfALi8mFqG9fP8 bCnr58I9009xLsIlrj291zreDXoEHvbz3ro3GKea+wCIuJA8SNHdOj2//c6i3xVs qByBROE7lKshIfk+ekkIkUmJoo/0l9xNqO0y9HimiVPL1C6XDURUG3Z0QtOLAUse YgEMQ3qkStm2b6+OxK9d6au7BFsOgHiAyTWrAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUeiWbYEoIpsZkzIvI/MY4P+aN0TcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2VpV2JZRW9JcHNaa3pJ dklfTVk0UC1hTjBUYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QowDQYJKoZIhvcNAQELBQADggEBACQpPyjZXPGuOhiYhG35ty2uCvuSxuOk mDn++il3DkORXNGPPSNGjcn4+TrFudu2LBkb4NiWQ1PcNHxZJ6YJcIAyKEIZNTe0 0RTm3Cxhvt1kNgTCU8A6+S4F+pC200E8MLBfqPcHD8eVxaME9rOCORZp8NkQCXsu cjhoZBqC74XdjmwBJAiqSPvoIvOE2S8PDl9k4KYM2kT9OnhzzarOaYsZ8n3b8/52 0UXB6qSts38qJdGQ8tUq/4b3D+y2rfhw8vEHyQh0g6Fdz2dFpupEZqg5FsKBz6tO 3Ty8wdHyWKVV6uEBvKx+siFqiIldRT9NBa6dIKcdOEyxGbJblRnc3pY= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org