$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/lx251duXNvCDA47oIomz3fg3tdM.roa File: lx251duXNvCDA47oIomz3fg3tdM.roa (raw, json) Hash identifier: c6NEG1TkZ2fMSF1tv02Rbf/hRnnuHao5cSK/s5w1A44= Subject key identifier: 97:1D:B9:D5:DB:97:36:F0:83:03:8E:E8:22:89:B3:DD:F8:37:B5:D3 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 153B Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lx251duXNvCDA47oIomz3fg3tdM.roa Signing time: Wed 11 Sep 2024 03:57:55 +0000 ROA not before: Wed 11 Sep 2024 03:57:55 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 103.220.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5435 (0x153b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 03:57:55 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=971DB9D5DB9736F083038EE82289B3DDF837B5D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:43:40:a7:8c:9e:b7:54:25:17:8b:84:41: 59:2f:36:9e:32:b3:fc:20:48:b8:d8:41:50:83:2b: 32:6c:6e:7f:2c:34:0b:33:27:2d:67:f3:29:91:7b: 70:01:00:d6:fc:47:3a:8f:dc:b4:10:c4:a4:27:c8: d0:3f:db:a1:e1:7b:da:07:8c:0c:97:8d:f3:89:aa: c1:49:e5:ab:77:73:a2:81:65:ba:a5:5d:e1:87:d7: fd:86:11:7c:ec:2b:8a:ef:3a:a9:5b:ee:de:78:62: c5:3e:ac:b1:cf:78:7a:36:22:43:46:70:30:f3:96: c7:42:c8:a1:22:85:09:c3:c6:6a:ec:b8:b6:db:4c: ae:90:1b:50:db:f3:63:df:29:76:62:1f:b1:9e:f8: 63:d0:3f:a6:ad:ea:15:7d:b7:77:7f:c7:53:e0:db: c2:53:e0:86:5d:b0:68:60:d1:cd:82:b2:bb:32:7d: cc:be:3a:6c:fc:e3:bf:56:4f:91:8c:72:a9:a0:9a: 65:56:2e:95:e1:de:54:96:e6:37:8c:23:a6:17:49: 5b:0b:1f:ca:0b:f3:7e:6b:d7:64:f4:8e:e6:2c:9c: e1:17:5d:bf:b7:65:67:30:d9:b1:7e:66:09:64:b1: d9:33:cf:97:9a:8b:1c:a1:27:98:5b:65:4a:bf:24: e8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1D:B9:D5:DB:97:36:F0:83:03:8E:E8:22:89:B3:DD:F8:37:B5:D3 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lx251duXNvCDA47oIomz3fg3tdM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.251.0/24 Signature Algorithm: sha256WithRSAEncryption a6:f4:b5:39:eb:e2:68:16:ee:61:77:2a:1e:ca:d8:27:e5:19: b9:37:3a:db:b4:d2:8a:0b:58:db:e7:a3:b2:f6:aa:19:6f:46: 55:ef:12:09:58:13:69:dd:1c:cd:38:ea:38:07:6f:c9:bb:9b: 45:40:ba:0e:70:ff:d3:50:ed:e5:33:d5:24:e3:3d:78:3f:f6: 62:f5:07:fc:bb:27:b7:40:b5:c5:18:19:25:4c:f4:9c:d8:ac: d9:71:43:2a:b7:62:31:e7:6e:0b:f7:97:33:7a:b8:2e:90:35: 06:d1:5b:1b:a4:ca:a1:7d:22:61:17:2d:d5:85:37:a7:cf:04: 4f:0e:72:bc:27:b5:7b:24:ef:4d:5c:ed:80:41:ff:43:67:67: 1f:1e:78:36:0a:23:cb:0f:1a:3f:b6:2b:1e:d0:b1:96:4f:89: 5f:f6:cb:67:ce:da:87:d2:1d:d8:dc:60:6f:22:fe:65:95:a6: bf:36:60:55:db:8b:e0:e7:b5:73:a4:2d:37:7e:a3:d8:b9:46: 9b:03:6b:0c:a5:e5:5a:07:4f:00:70:02:6d:ff:24:e3:0a:53: 39:18:e9:b4:6f:43:c8:ac:49:63:91:98:ea:75:e4:2d:07:bb: 52:d1:43:d3:82:47:ef:ec:3f:22:b4:45:de:11:bc:e6:f0:e2: 6f:26:e7:e0 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFTswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MzU3NTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDk3MURCOUQ1REI5NzM2 RjA4MzAzOEVFODIyODlCM0RERjgzN0I1RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/xENAp4yet1QlF4uEQVkvNp4ys/wgSLjYQVCDKzJsbn8sNAsz Jy1n8ymRe3ABANb8RzqP3LQQxKQnyNA/26Hhe9oHjAyXjfOJqsFJ5at3c6KBZbql XeGH1/2GEXzsK4rvOqlb7t54YsU+rLHPeHo2IkNGcDDzlsdCyKEihQnDxmrsuLbb TK6QG1Db82PfKXZiH7Ge+GPQP6at6hV9t3d/x1Pg28JT4IZdsGhg0c2Csrsyfcy+ Omz8479WT5GMcqmgmmVWLpXh3lSW5jeMI6YXSVsLH8oL835r12T0juYsnOEXXb+3 ZWcw2bF+Zglksdkzz5eaixyhJ5hbZUq/JOgXAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUlx251duXNvCDA47oIomz3fg3tdMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2x4MjUxZHVYTnZDREE0 N29Jb216M2ZnM3RkTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3PswDQYJKoZIhvcNAQELBQADggEBAKb0tTnr4mgW7mF3Kh7K2CflGbk3Otu0 0ooLWNvno7L2qhlvRlXvEglYE2ndHM046jgHb8m7m0VAug5w/9NQ7eUz1STjPXg/ 9mL1B/y7J7dAtcUYGSVM9JzYrNlxQyq3YjHnbgv3lzN6uC6QNQbRWxukyqF9ImEX LdWFN6fPBE8OcrwntXsk701c7YBB/0NnZx8eeDYKI8sPGj+2Kx7QsZZPiV/2y2fO 2ofSHdjcYG8i/mWVpr82YFXbi+DntXOkLTd+o9i5RpsDawyl5VoHTwBwAm3/JOMK UzkY6bRvQ8isSWORmOp15C0Hu1LRQ9OCR+/sPyK0Rd4RvObw4m8m5+A= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org