$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/m3RXfNEYF0WniAEpXcldpqhOREM.roa File: m3RXfNEYF0WniAEpXcldpqhOREM.roa (raw, json) Hash identifier: V3IVp+tih+ZGn/ZoH37n+2NQSOTtlAhzJIvjSbJ5ZGI= Subject key identifier: 9B:74:57:7C:D1:18:17:45:A7:88:01:29:5D:C9:5D:A6:A8:4E:44:43 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 146A Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/m3RXfNEYF0WniAEpXcldpqhOREM.roa Signing time: Wed 11 Sep 2024 02:23:16 +0000 ROA not before: Wed 11 Sep 2024 02:23:16 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24373 IP address blocks: 103.221.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5226 (0x146a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:16 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=9B74577CD1181745A78801295DC95DA6A84E4443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:52:a3:53:48:75:87:b5:e4:c0:96:ad:22:66: 26:f7:31:e8:92:fd:fb:56:ad:92:3f:b8:23:a5:ae: 98:31:2e:05:3d:ea:70:b7:6d:4e:e1:80:f1:8b:20: a5:cc:e6:9a:a5:41:1f:ce:37:f7:17:ad:3d:66:98: b3:a6:4e:c9:24:07:fb:2d:ff:7f:69:61:ff:60:af: 5c:d4:8a:8a:b9:9c:74:e6:10:84:24:f2:7d:33:eb: 0e:aa:cc:6e:d5:85:90:4f:77:35:67:7c:fd:a9:d1: 28:77:32:34:75:6b:8e:2b:c6:b4:6d:25:a6:8d:57: 66:ce:90:23:27:17:b3:32:d9:a5:98:53:12:2c:42: ea:a5:8b:ea:b0:3e:eb:94:11:2c:33:91:e8:5d:58: ce:4d:d1:bb:00:25:49:dd:27:c6:f7:f7:84:fa:2c: 11:de:70:89:77:7e:f7:7f:96:57:14:70:a3:e7:14: 37:14:02:5f:60:91:b5:13:f7:85:7c:01:e5:20:14: ed:14:56:d0:12:2b:f0:75:ca:51:39:68:26:7b:8c: ad:78:53:4a:1d:ae:e9:aa:c4:65:9f:a4:12:ad:fd: 81:3c:e9:73:bf:16:31:ff:e2:21:f4:e6:c6:06:8b: 5d:38:ab:43:b9:29:cc:4e:ac:10:ed:b7:0e:87:be: a1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:74:57:7C:D1:18:17:45:A7:88:01:29:5D:C9:5D:A6:A8:4E:44:43 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/m3RXfNEYF0WniAEpXcldpqhOREM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.0.0/22 Signature Algorithm: sha256WithRSAEncryption 40:5e:ce:7b:ba:d6:48:be:13:ab:a7:ae:5e:36:d8:de:19:36: fa:12:34:cc:5c:5e:df:33:78:bb:64:70:93:5a:79:07:aa:e3: e7:2d:77:75:62:86:56:a9:c4:9c:25:7e:8f:73:de:d4:b6:39: 71:c3:e5:48:5a:c0:30:36:29:91:56:0a:cc:e0:3e:5f:4b:90: 39:fc:56:35:a9:d0:a7:79:40:c8:08:f2:32:86:c6:89:49:bd: 99:e3:55:2d:45:65:26:5a:bf:f3:a9:ed:1a:d9:53:c0:fa:26: 65:c6:6e:e0:72:bc:b6:ce:a7:44:80:71:15:2b:da:f1:f7:e9: 38:f8:cd:25:fb:60:f3:26:a0:e7:00:90:cb:f3:9a:41:5b:ba: e0:01:62:81:fb:05:c9:f0:17:72:1f:57:cc:36:1b:a8:65:bd: 8f:72:70:c2:36:68:ba:26:44:35:18:14:e0:1c:e7:82:b1:d5: c0:73:9b:5b:d9:79:13:0c:ee:8c:32:c7:9e:67:12:49:52:02: 06:90:16:65:f7:93:09:2e:ed:dc:11:a9:74:e9:f2:fe:8b:b7: f6:21:73:45:ef:e1:6a:51:99:a6:0d:6a:d4:70:b0:0e:03:6b: 25:71:1f:21:c9:3a:54:62:4d:b4:c5:ae:e7:cc:ff:e8:4b:c2: 9a:06:a5:ec -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFGowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDlCNzQ1NzdDRDExODE3 NDVBNzg4MDEyOTVEQzk1REE2QTg0RTQ0NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjUqNTSHWHteTAlq0iZib3MeiS/ftWrZI/uCOlrpgxLgU96nC3 bU7hgPGLIKXM5pqlQR/ON/cXrT1mmLOmTskkB/st/39pYf9gr1zUioq5nHTmEIQk 8n0z6w6qzG7VhZBPdzVnfP2p0Sh3MjR1a44rxrRtJaaNV2bOkCMnF7My2aWYUxIs Quqli+qwPuuUESwzkehdWM5N0bsAJUndJ8b394T6LBHecIl3fvd/llcUcKPnFDcU Al9gkbUT94V8AeUgFO0UVtASK/B1ylE5aCZ7jK14U0odrumqxGWfpBKt/YE86XO/ FjH/4iH05sYGi104q0O5KcxOrBDttw6HvqE7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUm3RXfNEYF0WniAEpXcldpqhOREMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L20zUlhmTkVZRjBXbmlB RXBYY2xkcHFoT1JFTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QAwDQYJKoZIhvcNAQELBQADggEBAEBeznu61ki+E6unrl422N4ZNvoSNMxc Xt8zeLtkcJNaeQeq4+ctd3VihlapxJwlfo9z3tS2OXHD5UhawDA2KZFWCszgPl9L kDn8VjWp0Kd5QMgI8jKGxolJvZnjVS1FZSZav/Op7RrZU8D6JmXGbuByvLbOp0SA cRUr2vH36Tj4zSX7YPMmoOcAkMvzmkFbuuABYoH7BcnwF3IfV8w2G6hlvY9ycMI2 aLomRDUYFOAc54Kx1cBzm1vZeRMM7owyx55nEklSAgaQFmX3kwku7dwRqXTp8v6L t/Yhc0Xv4WpRmaYNatRwsA4DayVxHyHJOlRiTbTFrufM/+hLwpoGpew= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:48 2024 by rpki-client on console-ams.rpki-client.org