$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/tle1k-olmVEhxghQMszJb9d8K1U.roa File: tle1k-olmVEhxghQMszJb9d8K1U.roa (raw, json) Hash identifier: aLHnffhDPYrV3K1Y5FK0aLsdnIiSDs270+X2BmJ4+7Y= Subject key identifier: B6:57:B5:93:EA:25:99:51:21:C6:08:50:32:CC:C9:6F:D7:7C:2B:55 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 150B Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tle1k-olmVEhxghQMszJb9d8K1U.roa Signing time: Wed 11 Sep 2024 02:27:34 +0000 ROA not before: Wed 11 Sep 2024 02:27:34 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5387 (0x150b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:27:34 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=B657B593EA25995121C6085032CCC96FD77C2B55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:83:1b:d3:b3:15:b6:14:c4:b7:86:56:5e:ff: a6:c7:33:96:ca:7d:21:27:3d:a8:93:46:b4:6d:6e: ca:14:58:95:d0:24:82:25:43:90:84:32:96:b5:02: 67:70:4d:d7:4c:7f:d6:c7:35:c7:02:c7:a3:6b:81: 33:e5:3c:15:a8:90:d4:2e:60:a7:94:05:87:d2:b8: c3:d8:54:23:14:5e:3f:18:01:14:1f:8b:ac:d0:03: 50:25:5f:a0:1f:ba:c9:30:1d:3c:1a:65:e7:14:4a: b9:19:73:2c:c0:f3:f7:73:84:35:f7:bc:d1:61:72: 5e:d3:2d:44:d8:cd:ef:67:fb:c7:d6:f4:c6:f5:69: bb:c8:c3:d5:d4:14:e8:38:7d:4d:de:34:17:cd:93: 5b:9f:8d:cb:4a:80:3d:07:14:f8:ce:9b:db:30:81: ed:34:88:d9:85:da:bd:50:30:c8:86:33:eb:80:bd: b4:dd:4d:08:17:34:e5:9c:7c:9c:93:6f:fe:42:1f: 86:02:2e:59:92:67:c2:b7:77:99:0e:60:7f:e8:5b: 7d:27:a8:ca:7a:83:68:03:6b:f4:54:18:ab:f4:c6: da:23:04:94:54:fb:c0:90:55:77:2b:44:a4:4a:84: 31:12:09:08:b3:04:88:2e:5b:e4:46:58:9c:da:dd: 4c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:57:B5:93:EA:25:99:51:21:C6:08:50:32:CC:C9:6F:D7:7C:2B:55 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tle1k-olmVEhxghQMszJb9d8K1U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.28.0/24 Signature Algorithm: sha256WithRSAEncryption 17:45:15:7f:2a:c4:71:b2:16:d3:59:be:62:8d:03:4c:71:29: 5c:32:86:3a:c8:16:b8:c5:94:1a:aa:35:77:e4:96:54:a2:23: b7:89:96:44:2c:b9:7d:f3:5a:1b:b5:6f:da:5a:5a:0c:37:c4: dd:59:0f:87:1a:72:ad:67:c4:cc:33:68:32:66:ef:bf:4c:ac: 67:56:f6:0a:79:fc:89:c3:75:73:03:59:9f:24:10:e1:fc:e0: db:2c:03:c0:44:5c:06:66:ed:4a:c1:f3:ac:7f:d7:92:50:75: 41:c8:c1:b6:25:8f:d7:f9:00:a4:5f:ce:c8:8a:06:0c:26:9b: 82:62:c6:7b:bd:d0:29:5d:ac:98:69:56:a4:8c:8c:e6:7a:77: 42:44:86:5d:4f:59:fb:11:37:f2:36:d4:4d:d0:3c:a8:c1:b7: db:68:99:a6:bf:28:c6:ff:da:dc:13:74:50:c8:6d:34:46:c7: d0:eb:b6:ff:eb:49:6f:64:46:5a:6b:e2:d9:e8:67:9e:4c:28: b7:9e:9e:d0:a0:b4:27:01:47:1c:a6:8e:eb:75:8c:af:ef:45: f3:19:31:b1:9e:67:2f:e9:15:2a:17:ac:10:c7:5f:25:87:20: 9d:a1:13:44:c2:56:94:b8:42:ff:b0:ee:05:18:60:22:0b:d5: e3:85:14:9c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjI3MzRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEI2NTdCNTkzRUEyNTk5 NTEyMUM2MDg1MDMyQ0NDOTZGRDc3QzJCNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDegxvTsxW2FMS3hlZe/6bHM5bKfSEnPaiTRrRtbsoUWJXQJIIl Q5CEMpa1AmdwTddMf9bHNccCx6NrgTPlPBWokNQuYKeUBYfSuMPYVCMUXj8YARQf i6zQA1AlX6AfuskwHTwaZecUSrkZcyzA8/dzhDX3vNFhcl7TLUTYze9n+8fW9Mb1 abvIw9XUFOg4fU3eNBfNk1ufjctKgD0HFPjOm9swge00iNmF2r1QMMiGM+uAvbTd TQgXNOWcfJyTb/5CH4YCLlmSZ8K3d5kOYH/oW30nqMp6g2gDa/RUGKv0xtojBJRU +8CQVXcrRKRKhDESCQizBIguW+RGWJza3UzzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUtle1k+olmVEhxghQMszJb9d8K1UwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3RsZTFrLW9sbVZFaHhn aFFNc3pKYjlkOEsxVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RwwDQYJKoZIhvcNAQELBQADggEBABdFFX8qxHGyFtNZvmKNA0xxKVwyhjrI FrjFlBqqNXfkllSiI7eJlkQsuX3zWhu1b9paWgw3xN1ZD4cacq1nxMwzaDJm779M rGdW9gp5/InDdXMDWZ8kEOH84NssA8BEXAZm7UrB86x/15JQdUHIwbYlj9f5AKRf zsiKBgwmm4Jixnu90CldrJhpVqSMjOZ6d0JEhl1PWfsRN/I21E3QPKjBt9tomaa/ KMb/2twTdFDIbTRGx9Drtv/rSW9kRlpr4tnoZ55MKLeentCgtCcBRxymjut1jK/v RfMZMbGeZy/pFSoXrBDHXyWHIJ2hE0TCVpS4Qv+w7gUYYCIL1eOFFJw= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:48 2024 by rpki-client on console-ams.rpki-client.org