$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/fFGwjYqD6VcwXqAV8bCAY32SAQo.roa File: fFGwjYqD6VcwXqAV8bCAY32SAQo.roa (raw, json) Hash identifier: SVW/H4gOxjsvbelF3LgJNaWGVfevFEDI8zYLwmFeoR8= Subject key identifier: 7C:51:B0:8D:8A:83:E9:57:30:5E:A0:15:F1:B0:80:63:7D:92:01:0A Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14DD Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fFGwjYqD6VcwXqAV8bCAY32SAQo.roa Signing time: Wed 11 Sep 2024 02:23:56 +0000 ROA not before: Wed 11 Sep 2024 02:23:56 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 138527 IP address blocks: 103.221.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5341 (0x14dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:56 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=7C51B08D8A83E957305EA015F1B080637D92010A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:49:c8:42:7e:1a:bb:df:80:43:bf:1e:34:14: 7d:ab:e8:19:25:19:6a:e0:05:78:2e:7e:d3:fb:25: bd:7f:c1:c2:e3:6e:b5:4f:3c:0b:17:c0:e3:af:1f: 27:97:7c:15:5c:62:76:a0:81:58:ad:f4:8f:98:05: 33:78:f7:4a:98:e7:ac:f7:bd:6d:ea:b0:f2:02:1b: 17:30:0f:38:6d:6d:8d:cd:69:0f:d4:2f:85:43:27: a2:cc:3a:8c:fb:35:80:27:39:56:83:78:bc:ce:52: c2:48:b8:2f:64:44:26:a4:9d:a0:99:f0:dd:3f:5b: 6e:42:a3:41:32:5c:90:21:bc:db:db:3b:5b:37:ab: b5:a8:9e:fa:e9:8c:f5:59:90:dd:15:42:89:6a:c1: bd:22:fb:f4:96:e4:0c:8d:76:b6:74:5f:f1:da:3c: 95:f5:43:e9:1e:2d:02:d8:41:f8:fd:a5:84:1f:0e: 8a:9e:63:92:44:0b:6e:9a:a3:fa:c2:51:ff:36:a3: 93:03:59:be:20:b5:91:d9:66:a4:a2:04:03:ef:fe: db:f4:8d:be:4e:28:5b:92:39:b0:b9:8d:da:cd:e7: 7d:36:26:a3:3b:75:c3:09:11:52:f1:d8:a8:bf:d4: ad:0e:81:69:25:0c:bc:9e:da:47:42:d6:b5:b4:15: 54:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:51:B0:8D:8A:83:E9:57:30:5E:A0:15:F1:B0:80:63:7D:92:01:0A X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fFGwjYqD6VcwXqAV8bCAY32SAQo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.36.0/22 Signature Algorithm: sha256WithRSAEncryption a7:86:dd:a5:31:c1:c1:e3:99:86:4a:8c:00:f1:75:62:2e:bf: 97:fc:f7:3d:da:b9:ba:cb:f4:a6:fa:db:9c:31:7a:93:2e:0f: 30:1e:10:7a:5f:02:ed:f5:44:bd:36:c8:b0:3e:92:2d:4d:a8: 6b:ce:04:8b:ca:00:8c:2b:10:87:7c:06:55:40:69:96:24:65: 3a:75:98:74:05:f2:64:41:e7:f1:d6:42:46:7b:a6:a6:9e:73: 59:ff:67:ce:9c:26:76:6f:46:a5:38:45:e0:4a:ab:53:95:f6: ae:d9:40:3e:23:0c:29:c6:ca:e8:78:eb:7b:be:dc:61:22:21: 5c:ae:d7:7a:cf:46:e2:9b:54:f4:06:b8:20:f7:9d:84:98:1f: 86:17:ba:9a:44:65:41:4a:e8:e2:12:28:1e:4f:77:ae:53:b5: 1c:41:54:e1:2e:95:02:0a:a9:a4:02:76:c8:cd:8f:fc:cd:6a: 98:05:19:d5:8c:75:2c:f6:9c:1a:50:6f:63:cb:06:39:7e:af: e4:72:52:46:18:64:2c:b7:64:a9:49:1e:a8:d3:4f:f7:77:88: 24:8f:82:0e:8f:2a:06:86:33:b4:61:6f:8c:d7:83:8a:47:0f: f4:1f:2a:f1:4d:5c:45:65:6b:2c:41:e4:51:d2:c7:38:7a:4c: 26:71:00:4d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzNTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDdDNTFCMDhEOEE4M0U5 NTczMDVFQTAxNUYxQjA4MDYzN0Q5MjAxMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDASchCfhq734BDvx40FH2r6BklGWrgBXguftP7Jb1/wcLjbrVP PAsXwOOvHyeXfBVcYnaggVit9I+YBTN490qY56z3vW3qsPICGxcwDzhtbY3NaQ/U L4VDJ6LMOoz7NYAnOVaDeLzOUsJIuC9kRCaknaCZ8N0/W25Co0EyXJAhvNvbO1s3 q7WonvrpjPVZkN0VQolqwb0i+/SW5AyNdrZ0X/HaPJX1Q+keLQLYQfj9pYQfDoqe Y5JEC26ao/rCUf82o5MDWb4gtZHZZqSiBAPv/tv0jb5OKFuSObC5jdrN5302JqM7 dcMJEVLx2Ki/1K0OgWklDLye2kdC1rW0FVTZAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUfFGwjYqD6VcwXqAV8bCAY32SAQowHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2ZGR3dqWXFENlZjd1hx QVY4YkNBWTMyU0FRby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3SQwDQYJKoZIhvcNAQELBQADggEBAKeG3aUxwcHjmYZKjADxdWIuv5f89z3a ubrL9Kb625wxepMuDzAeEHpfAu31RL02yLA+ki1NqGvOBIvKAIwrEId8BlVAaZYk ZTp1mHQF8mRB5/HWQkZ7pqaec1n/Z86cJnZvRqU4ReBKq1OV9q7ZQD4jDCnGyuh4 63u+3GEiIVyu13rPRuKbVPQGuCD3nYSYH4YXuppEZUFK6OISKB5Pd65TtRxBVOEu lQIKqaQCdsjNj/zNapgFGdWMdSz2nBpQb2PLBjl+r+RyUkYYZCy3ZKlJHqjTT/d3 iCSPgg6PKgaGM7Rhb4zXg4pHD/QfKvFNXEVlayxB5FHSxzh6TCZxAE0= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org