$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/mYzaMvVbTi5iWbZ6HsV6bhAOV50.roa File: mYzaMvVbTi5iWbZ6HsV6bhAOV50.roa (raw, json) Hash identifier: ZJOdac6fL711XleGCigIs6lcy63Bin6iInB7UalgfhE= Subject key identifier: 99:8C:DA:32:F5:5B:4E:2E:62:59:B6:7A:1E:C5:7A:6E:10:0E:57:9D Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 0CDB Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/mYzaMvVbTi5iWbZ6HsV6bhAOV50.roa Signing time: Wed 13 Mar 2024 01:21:57 +0000 ROA not before: Wed 13 Mar 2024 01:21:57 +0000 ROA not after: Fri 07 Jun 2024 02:16:11 +0000 asID: 139076 IP address blocks: 103.221.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3291 (0xcdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Mar 13 01:21:57 2024 GMT Not After : Jun 7 02:16:11 2024 GMT Subject: CN=998CDA32F55B4E2E6259B67A1EC57A6E100E579D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d9:b3:7d:99:4f:4f:54:02:72:21:da:1a:3b: f3:f4:c8:18:98:44:db:2e:ec:26:a5:59:7b:c7:36: 5e:71:e8:f1:88:44:f1:ae:d3:2c:de:b2:64:b7:52: e8:6d:b9:3c:3b:dd:8e:42:a4:8a:c4:86:a7:40:1b: 30:c3:51:42:80:b2:e5:cc:a6:97:58:2b:93:25:0b: a2:4a:a7:a5:97:62:82:68:1a:93:3f:f9:7c:85:c8: 44:fb:14:36:4e:0e:a2:fc:80:31:44:6f:3b:e8:86: 77:fd:da:e0:ca:70:9b:90:e2:b5:1b:dc:0d:58:06: a4:27:dd:ef:44:41:fa:e1:22:d5:ca:49:9c:a4:39: 8a:5d:57:23:92:70:8b:4b:b0:5a:fd:d7:d7:6e:92: d8:ea:f1:36:be:ae:c7:7b:c3:ff:f2:92:5d:3c:c1: 4b:5f:9f:32:2a:e8:da:c9:c6:c0:f7:a6:a3:0e:07: d5:a2:4d:b7:46:01:5f:33:aa:f7:e6:1c:ad:4f:f9: a9:3d:5f:28:d9:d8:45:d5:ab:0d:33:11:cd:f8:b3: 44:bf:e4:e7:10:11:be:7c:46:bb:3c:88:26:eb:7d: 47:92:01:fe:52:b7:ca:c0:03:2b:97:db:0f:16:f5: e0:87:e7:9d:3c:b8:e5:f3:b3:30:fe:6e:84:cd:cc: a5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8C:DA:32:F5:5B:4E:2E:62:59:B6:7A:1E:C5:7A:6E:10:0E:57:9D X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/mYzaMvVbTi5iWbZ6HsV6bhAOV50.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.48.0/24 Signature Algorithm: sha256WithRSAEncryption 47:23:22:be:b6:e1:99:23:3c:8f:56:55:54:e8:1a:34:bf:f1: 78:92:c3:92:d9:68:67:5e:3b:f9:17:77:96:80:e9:1a:09:41: 7a:1b:eb:ae:ff:20:b4:3c:6f:5f:b8:6e:9d:34:3d:89:d6:e1: ca:98:13:60:cc:dc:af:d3:f7:23:9a:91:f3:76:98:f6:00:98: de:0c:9b:91:a4:31:76:4a:eb:df:f5:ec:d1:29:84:ec:85:3e: 28:7d:4a:ff:e7:d2:e1:b5:ec:1c:d0:32:c3:03:b5:e0:1f:b9: e7:34:82:14:cd:fb:64:69:bc:ee:27:ef:e0:6d:bc:42:c9:8d: 80:e7:36:67:c0:03:ca:ca:5b:1f:36:71:62:19:c2:d7:32:d6: 59:7f:21:19:b1:cd:0b:2d:18:65:10:9c:bf:0a:b3:4c:ce:f3: ea:7b:ff:58:59:74:ea:a9:48:58:f8:5d:bf:99:60:55:72:98: 70:87:f6:60:fc:bf:ed:24:a0:6f:bd:fb:53:e2:97:d6:b5:a4: 26:b4:7a:2b:d1:bf:4b:52:a4:8d:a8:7c:68:de:ba:31:39:ef: 63:67:3a:a0:03:2a:83:61:f9:59:50:d1:c1:9e:b9:8a:84:70: 72:78:63:f4:45:6d:57:2d:1c:90:ae:d3:bf:7f:bb:ec:54:42: 33:6e:39:4e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICDNswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDAzMTMw MTIxNTdaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDk5OENEQTMyRjU1QjRF MkU2MjU5QjY3QTFFQzU3QTZFMTAwRTU3OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/2bN9mU9PVAJyIdoaO/P0yBiYRNsu7CalWXvHNl5x6PGIRPGu 0yzesmS3UuhtuTw73Y5CpIrEhqdAGzDDUUKAsuXMppdYK5MlC6JKp6WXYoJoGpM/ +XyFyET7FDZODqL8gDFEbzvohnf92uDKcJuQ4rUb3A1YBqQn3e9EQfrhItXKSZyk OYpdVyOScItLsFr919duktjq8Ta+rsd7w//ykl08wUtfnzIq6NrJxsD3pqMOB9Wi TbdGAV8zqvfmHK1P+ak9XyjZ2EXVqw0zEc34s0S/5OcQEb58Rrs8iCbrfUeSAf5S t8rAAyuX2w8W9eCH5508uOXzszD+boTNzKWDAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUmYzaMvVbTi5iWbZ6HsV6bhAOV50wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L21ZemFNdlZiVGk1aVdi WjZIc1Y2YmhBT1Y1MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3TAwDQYJKoZIhvcNAQELBQADggEBAEcjIr624ZkjPI9WVVToGjS/8XiSw5LZ aGdeO/kXd5aA6RoJQXob667/ILQ8b1+4bp00PYnW4cqYE2DM3K/T9yOakfN2mPYA mN4Mm5GkMXZK69/17NEphOyFPih9Sv/n0uG17BzQMsMDteAfuec0ghTN+2RpvO4n 7+BtvELJjYDnNmfAA8rKWx82cWIZwtcy1ll/IRmxzQstGGUQnL8Ks0zO8+p7/1hZ dOqpSFj4Xb+ZYFVymHCH9mD8v+0koG+9+1Pil9a1pCa0eivRv0tSpI2ofGjeujE5 72NnOqADKoNh+VlQ0cGeuYqEcHJ4Y/RFbVctHJCu079/u+xUQjNuOU4= -----END CERTIFICATE-----Generated at Sat Jun 1 11:37:20 2024 by rpki-client on console-fra.rpki-client.org