$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/glzgp6KHUyq7NKJg0FSXXkdkT9w.roa File: glzgp6KHUyq7NKJg0FSXXkdkT9w.roa (raw, json) Hash identifier: 8oN+HKz/riZnaspNAl9zZpcm0Bfkahy6aep4KhhEUv4= Subject key identifier: 82:5C:E0:A7:A2:87:53:2A:BB:34:A2:60:D0:54:97:5E:47:64:4F:DC Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14C1 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/glzgp6KHUyq7NKJg0FSXXkdkT9w.roa Signing time: Wed 11 Sep 2024 02:23:46 +0000 ROA not before: Wed 11 Sep 2024 02:23:46 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 138527 IP address blocks: 103.221.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5313 (0x14c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:46 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=825CE0A7A287532ABB34A260D054975E47644FDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:30:97:ff:e0:53:39:eb:ba:73:0f:5f:f3:27: 77:24:5f:94:67:fa:79:70:f1:0c:30:42:9d:86:b0: f2:f0:b8:98:73:82:d0:9c:3c:40:2a:3c:02:c2:76: 84:55:2e:48:60:61:62:70:7b:97:ab:df:78:b1:b4: 32:fd:4d:9e:5c:57:fb:67:81:1a:e9:39:40:20:bb: e6:0f:ad:28:03:1b:5a:cc:83:f2:33:c5:c9:2f:d2: 6a:d2:5d:c4:f9:1b:c7:f4:53:17:9c:37:83:bc:f5: c9:68:a9:33:58:9f:5d:80:af:45:0a:1e:64:1e:63: 99:91:99:99:2b:84:a7:0f:e6:44:0e:71:61:93:62: eb:61:c1:ad:5b:a8:28:e6:6e:0c:56:93:23:57:12: d6:1d:8f:c7:8e:60:27:6f:b0:29:a2:f5:59:fc:c1: dd:86:77:0d:8e:a3:32:35:20:db:16:c7:89:6b:e9: 71:a8:40:65:af:e0:b3:1d:b2:c9:5c:dc:43:bc:69: 9a:c6:1d:f8:e8:ac:df:30:19:e1:8d:61:58:9e:7d: 6e:52:d7:dc:bc:cd:c2:c4:b1:33:a3:e2:7d:88:b7: c9:62:92:22:17:3a:f8:55:30:ee:b6:50:84:fe:cf: 33:be:d3:c1:65:83:39:16:7c:dd:87:cc:d9:c1:25: 2e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5C:E0:A7:A2:87:53:2A:BB:34:A2:60:D0:54:97:5E:47:64:4F:DC X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/glzgp6KHUyq7NKJg0FSXXkdkT9w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.48.0/22 Signature Algorithm: sha256WithRSAEncryption c3:13:a2:79:89:72:98:d4:9a:d3:ea:a7:77:3f:cf:33:82:96: 18:b4:c3:05:c0:94:9c:6f:27:b8:1e:e9:32:13:9c:32:f5:c4: d8:e5:9b:71:a5:85:d8:bb:2c:77:61:3e:8f:e9:64:2d:d2:c1: eb:77:7b:54:5b:fd:b5:8a:c3:90:cf:44:af:56:bd:f5:66:0e: 32:19:3a:31:bb:d5:3e:37:0a:ab:43:46:09:8c:d4:f0:f4:92: f6:87:8c:7a:1f:e6:a6:5f:62:37:3a:ff:fb:ca:70:9c:6e:21: 99:15:44:24:e2:52:36:36:df:67:72:0d:03:50:72:64:b7:21: 79:9e:da:8e:25:92:38:eb:fb:6a:95:a1:0b:78:82:46:0a:77: bc:b6:1a:0d:9b:47:03:b6:0b:46:62:a5:8b:22:30:1f:d6:68: 85:21:12:a3:57:47:84:a4:4b:40:3a:7b:0e:c2:a9:6a:75:31: 01:3c:4b:85:88:e4:2a:6e:fb:1e:fa:b1:f9:a9:aa:e7:eb:5b: 5b:96:3f:4a:94:fb:57:bb:bd:87:50:bb:13:79:56:1b:c4:58: 09:86:51:37:ce:a5:70:81:c0:9c:84:5b:0d:fd:6c:ca:a9:7a: e9:4a:33:4d:1d:bd:62:a4:62:8b:64:f5:05:eb:91:7d:4a:ff: 36:c3:5d:04 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzNDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDgyNUNFMEE3QTI4NzUz MkFCQjM0QTI2MEQwNTQ5NzVFNDc2NDRGREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDMJf/4FM567pzD1/zJ3ckX5Rn+nlw8QwwQp2GsPLwuJhzgtCc PEAqPALCdoRVLkhgYWJwe5er33ixtDL9TZ5cV/tngRrpOUAgu+YPrSgDG1rMg/Iz xckv0mrSXcT5G8f0UxecN4O89cloqTNYn12Ar0UKHmQeY5mRmZkrhKcP5kQOcWGT Yuthwa1bqCjmbgxWkyNXEtYdj8eOYCdvsCmi9Vn8wd2Gdw2OozI1INsWx4lr6XGo QGWv4LMdsslc3EO8aZrGHfjorN8wGeGNYViefW5S19y8zcLEsTOj4n2It8likiIX OvhVMO62UIT+zzO+08FlgzkWfN2HzNnBJS5vAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUglzgp6KHUyq7NKJg0FSXXkdkT9wwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2dsemdwNktIVXlxN05L SmcwRlNYWGtka1Q5dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3TAwDQYJKoZIhvcNAQELBQADggEBAMMTonmJcpjUmtPqp3c/zzOClhi0wwXA lJxvJ7ge6TITnDL1xNjlm3Glhdi7LHdhPo/pZC3Swet3e1Rb/bWKw5DPRK9WvfVm DjIZOjG71T43CqtDRgmM1PD0kvaHjHof5qZfYjc6//vKcJxuIZkVRCTiUjY232dy DQNQcmS3IXme2o4lkjjr+2qVoQt4gkYKd7y2Gg2bRwO2C0ZipYsiMB/WaIUhEqNX R4SkS0A6ew7CqWp1MQE8S4WI5Cpu+x76sfmpqufrW1uWP0qU+1e7vYdQuxN5VhvE WAmGUTfOpXCBwJyEWw39bMqpeulKM00dvWKkYotk9QXrkX1K/zbDXQQ= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org