$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/tFeNvNkNCkl7bAADcOwzXAS9NUg.roa File: tFeNvNkNCkl7bAADcOwzXAS9NUg.roa (raw, json) Hash identifier: 4kqyBsgeFZBoW06fyrQum/1N1vTM+ZkIoLx6qwCPpYs= Subject key identifier: B4:57:8D:BC:D9:0D:0A:49:7B:6C:00:03:70:EC:33:5C:04:BD:35:48 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1523 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tFeNvNkNCkl7bAADcOwzXAS9NUg.roa Signing time: Wed 11 Sep 2024 02:30:12 +0000 ROA not before: Wed 11 Sep 2024 02:30:12 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5411 (0x1523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:30:12 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=B4578DBCD90D0A497B6C000370EC335C04BD3548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:90:67:d9:ba:8b:22:53:73:56:be:58:5c:aa: 75:8d:24:18:1c:a7:a7:84:fc:41:02:e0:e7:7f:85: 63:b0:a2:40:69:ef:42:f3:ad:81:f6:3a:2d:7f:9a: 59:b8:79:cf:16:ae:ed:62:f9:c6:66:f9:48:73:4a: b1:88:d2:8b:5a:32:fe:68:20:97:b7:55:39:a4:d9: 10:f1:a3:08:d3:f4:d1:8a:e5:91:02:b7:d0:23:f7: 18:18:22:61:e5:a1:ae:62:43:62:3c:c1:c8:8c:2a: 4f:a4:1d:96:a9:29:85:50:ee:b8:4a:5a:7f:1f:1c: 61:54:98:e9:3f:3e:f0:9d:50:e9:35:95:67:55:e1: 05:15:bb:d3:95:fd:6e:d9:1e:3d:35:7d:53:b6:91: b8:21:05:ac:bd:bc:aa:7b:29:76:78:0b:a2:3e:01: c7:20:a9:6d:8b:e4:e3:66:9d:bf:70:05:cf:82:32: 7d:3e:8c:52:e1:1c:10:f6:13:3e:4f:a0:32:c4:03: ee:cc:cc:d8:4e:cb:39:6c:e0:ca:c4:e7:4e:b3:db: 82:2e:84:6c:bb:c3:44:df:5d:fa:33:6a:85:ea:2f: 8d:57:e9:52:ca:f3:60:69:5e:d1:8e:51:95:b0:23: e3:33:05:17:92:00:be:15:99:c0:11:50:43:ff:8a: 8b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:57:8D:BC:D9:0D:0A:49:7B:6C:00:03:70:EC:33:5C:04:BD:35:48 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tFeNvNkNCkl7bAADcOwzXAS9NUg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.50.0/24 Signature Algorithm: sha256WithRSAEncryption 96:59:03:b9:07:80:af:a1:d2:a6:8d:72:14:0e:80:09:91:ec: 0b:89:4d:be:83:62:ea:d8:47:08:60:05:c4:36:62:56:29:94: ca:73:eb:5c:67:13:dd:bc:fe:f8:34:40:c0:96:cb:c8:ff:5f: 96:b9:9d:12:39:58:b9:f6:72:94:2a:60:c7:6b:89:c5:f6:12: b0:0d:77:53:da:14:81:08:1b:0d:8c:0a:65:09:80:62:b3:b4: 41:c0:ce:18:18:c0:14:12:54:80:db:f0:ce:f0:0b:20:dc:0b: cb:15:cd:69:0d:a1:3e:97:5b:c4:27:cc:bf:e7:33:e8:d6:20: 3d:a4:00:c5:fa:ea:7c:df:36:11:a7:18:c6:ab:71:31:e2:f4: a4:d5:24:f6:52:d9:84:be:82:0b:1c:1f:48:57:73:fd:4c:c9: 8f:bd:e7:21:99:9d:46:20:dc:73:73:5a:d3:74:30:cc:8e:44: 2f:21:08:4c:b1:3f:f5:0e:af:8b:3d:ff:0a:e9:db:7d:d1:53: 99:43:5d:45:be:3d:54:0d:d9:1d:c8:3c:51:62:1c:d7:6f:f7: 44:68:2e:b3:df:31:02:f6:f5:69:e0:e7:0a:ec:d3:01:e6:51: c4:86:d1:d4:99:68:b4:2e:99:95:78:6a:a9:ce:2c:35:a5:fa: 5c:49:b1:a8 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFSMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjMwMTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEI0NTc4REJDRDkwRDBB NDk3QjZDMDAwMzcwRUMzMzVDMDRCRDM1NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXkGfZuosiU3NWvlhcqnWNJBgcp6eE/EEC4Od/hWOwokBp70Lz rYH2Oi1/mlm4ec8Wru1i+cZm+UhzSrGI0otaMv5oIJe3VTmk2RDxowjT9NGK5ZEC t9Aj9xgYImHloa5iQ2I8wciMKk+kHZapKYVQ7rhKWn8fHGFUmOk/PvCdUOk1lWdV 4QUVu9OV/W7ZHj01fVO2kbghBay9vKp7KXZ4C6I+AccgqW2L5ONmnb9wBc+CMn0+ jFLhHBD2Ez5PoDLEA+7MzNhOyzls4MrE506z24IuhGy7w0TfXfozaoXqL41X6VLK 82BpXtGOUZWwI+MzBReSAL4VmcARUEP/iosFAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUtFeNvNkNCkl7bAADcOwzXAS9NUgwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3RGZU52TmtOQ2tsN2JB QURjT3d6WEFTOU5VZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3TIwDQYJKoZIhvcNAQELBQADggEBAJZZA7kHgK+h0qaNchQOgAmR7AuJTb6D YurYRwhgBcQ2YlYplMpz61xnE928/vg0QMCWy8j/X5a5nRI5WLn2cpQqYMdricX2 ErANd1PaFIEIGw2MCmUJgGKztEHAzhgYwBQSVIDb8M7wCyDcC8sVzWkNoT6XW8Qn zL/nM+jWID2kAMX66nzfNhGnGMarcTHi9KTVJPZS2YS+ggscH0hXc/1MyY+95yGZ nUYg3HNzWtN0MMyORC8hCEyxP/UOr4s9/wrp233RU5lDXUW+PVQN2R3IPFFiHNdv 90RoLrPfMQL29Wng5wrs0wHmUcSG0dSZaLQumZV4aqnOLDWl+lxJsag= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:41 2024 by rpki-client on console-fra.rpki-client.org