$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/t6XWe8_XHJ9HIQQ4qcKuBN3jB5E.roa File: t6XWe8_XHJ9HIQQ4qcKuBN3jB5E.roa (raw, json) Hash identifier: GSWnSy3ca3MWXkPvxnx7z3381jXkKGp4Wvc8ab9j6Gw= Subject key identifier: B7:A5:D6:7B:CF:D7:1C:9F:47:21:04:38:A9:C2:AE:04:DD:E3:07:91 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1531 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/t6XWe8_XHJ9HIQQ4qcKuBN3jB5E.roa Signing time: Wed 11 Sep 2024 03:57:51 +0000 ROA not before: Wed 11 Sep 2024 03:57:51 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 103.221.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5425 (0x1531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 03:57:51 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=B7A5D67BCFD71C9F47210438A9C2AE04DDE30791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:11:20:58:a9:8f:d8:62:58:0f:69:79:03: 4e:c9:1c:18:19:a5:d0:f7:f6:93:51:49:dd:c0:77: aa:ab:5d:df:25:01:b7:ee:41:62:74:1d:a7:c0:28: 19:77:7d:e1:65:45:03:52:41:d3:9a:0d:49:9b:fb: 46:0f:70:75:4b:d3:6f:89:80:68:cd:67:8d:cd:2b: 7c:9e:e9:d0:e9:64:03:a1:55:2e:c7:c4:65:6c:21: ca:cd:bc:0c:5a:4d:eb:61:11:d9:b6:7e:e7:55:62: 3b:20:2d:8b:8a:0a:04:f4:c9:a7:08:af:a7:8e:30: 1f:44:a7:e9:5c:27:d3:68:e3:86:6d:2b:78:7d:8a: cf:97:f7:fa:48:42:14:66:90:1d:89:0d:e1:ec:f2: b3:03:5d:1d:ff:45:95:fe:ec:f3:6a:3b:84:33:b7: fd:59:5f:01:5d:b9:50:1a:e3:a1:6d:8a:23:70:92: f4:e0:52:34:26:fe:27:8e:fa:89:a6:26:53:8b:29: 84:6c:78:e3:86:f1:3a:00:d2:b6:95:e0:51:1b:9d: 27:38:f8:63:d3:3a:f7:a6:87:f5:18:90:e1:72:58: 7d:d5:4b:b9:95:f0:ed:f9:df:3a:cf:a7:cf:3a:46: bd:25:bc:63:46:07:0a:5a:ef:f4:36:c8:26:8e:6b: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A5:D6:7B:CF:D7:1C:9F:47:21:04:38:A9:C2:AE:04:DD:E3:07:91 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/t6XWe8_XHJ9HIQQ4qcKuBN3jB5E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.8.0/24 Signature Algorithm: sha256WithRSAEncryption c3:4f:56:4f:21:74:b2:39:c3:e6:00:c7:85:92:4a:6b:12:11: 94:bd:98:48:2f:77:81:59:2d:c1:3f:a1:31:b3:28:0d:ea:ef: bc:d1:71:ad:c0:de:56:4e:a3:1f:db:ee:98:38:00:5c:36:6a: f4:3f:d9:37:ff:0f:65:ed:52:ee:a1:ed:7f:29:99:5f:02:8c: c8:a9:29:21:dc:89:ce:f2:8a:6b:dc:ac:4e:1a:a1:0e:82:d0: 81:1a:99:ce:33:bd:db:9d:ca:e6:eb:2d:28:a9:d1:c5:67:4e: d8:58:19:30:e8:d3:41:8b:6f:ff:71:3e:c9:e0:d4:ef:d0:99: 07:9a:08:37:a9:b4:5a:aa:8e:97:57:6d:a4:e8:e0:cc:be:4e: 8f:58:e1:79:68:c3:36:60:5d:7d:d4:f9:17:5f:8d:3f:d1:7f: 22:9f:76:a4:79:52:89:46:0f:ae:24:4e:8b:d0:b4:63:3d:78: 9a:a9:b6:91:11:aa:0d:76:ce:b1:63:b1:44:55:f4:7d:88:f9: fc:e5:ae:bd:34:a5:cc:49:09:29:0c:c0:ad:39:2a:bd:80:50: 2c:fd:0b:f6:37:c1:fd:e3:47:5d:ec:d8:25:03:fa:d8:08:03: 43:19:8b:3e:b9:c7:b0:24:26:52:a9:42:61:db:5c:b2:f5:bf: 43:b7:c0:cf -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFTEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MzU3NTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEI3QTVENjdCQ0ZENzFD OUY0NzIxMDQzOEE5QzJBRTA0RERFMzA3OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3MBEgWKmP2GJYD2l5A07JHBgZpdD39pNRSd3Ad6qrXd8lAbfu QWJ0HafAKBl3feFlRQNSQdOaDUmb+0YPcHVL02+JgGjNZ43NK3ye6dDpZAOhVS7H xGVsIcrNvAxaTethEdm2fudVYjsgLYuKCgT0yacIr6eOMB9Ep+lcJ9No44ZtK3h9 is+X9/pIQhRmkB2JDeHs8rMDXR3/RZX+7PNqO4Qzt/1ZXwFduVAa46FtiiNwkvTg UjQm/ieO+ommJlOLKYRseOOG8ToA0raV4FEbnSc4+GPTOvemh/UYkOFyWH3VS7mV 8O353zrPp886Rr0lvGNGBwpa7/Q2yCaOa8YjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUt6XWe8/XHJ9HIQQ4qcKuBN3jB5EwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3Q2WFdlOF9YSEo5SElR UTRxY0t1Qk4zakI1RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QgwDQYJKoZIhvcNAQELBQADggEBAMNPVk8hdLI5w+YAx4WSSmsSEZS9mEgv d4FZLcE/oTGzKA3q77zRca3A3lZOox/b7pg4AFw2avQ/2Tf/D2XtUu6h7X8pmV8C jMipKSHcic7yimvcrE4aoQ6C0IEamc4zvdudyubrLSip0cVnTthYGTDo00GLb/9x Psng1O/QmQeaCDeptFqqjpdXbaTo4My+To9Y4XlowzZgXX3U+RdfjT/RfyKfdqR5 UolGD64kTovQtGM9eJqptpERqg12zrFjsURV9H2I+fzlrr00pcxJCSkMwK05Kr2A UCz9C/Y3wf3jR13s2CUD+tgIA0MZiz65x7AkJlKpQmHbXLL1v0O3wM8= -----END CERTIFICATE-----Generated at Fri Nov 22 23:40:50 2024 by rpki-client on console-fra.rpki-client.org