$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/u8mb9xN6Vm3rouviCO2m30afqkI.roa File: u8mb9xN6Vm3rouviCO2m30afqkI.roa (raw, json) Hash identifier: YhipqW1Mvy6J2T8/LJ4FDYayL/Dxufv/wV6VNoAnwyg= Subject key identifier: BB:C9:9B:F7:13:7A:56:6D:EB:A2:EB:E2:08:ED:A6:DF:46:9F:AA:42 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14EB Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/u8mb9xN6Vm3rouviCO2m30afqkI.roa Signing time: Wed 11 Sep 2024 02:26:08 +0000 ROA not before: Wed 11 Sep 2024 02:26:08 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5355 (0x14eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:26:08 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=BBC99BF7137A566DEBA2EBE208EDA6DF469FAA42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:8e:65:4d:ef:b8:ee:6b:5c:da:ad:0b:10: 5a:f9:5c:c3:ae:00:09:dd:da:94:ae:f9:6f:65:ba: 9b:65:25:cd:fb:e1:61:7f:0c:db:2c:29:d7:bb:8a: 65:5d:57:56:66:56:44:c2:84:d8:11:1d:a4:2d:b1: 1c:2f:52:be:a2:52:22:96:64:dd:00:25:c3:2e:2f: bc:a3:b6:dd:bc:b4:7e:35:49:01:c3:25:a4:25:f2: d0:39:b4:f8:1e:7e:94:f2:14:19:af:d9:1e:e0:dc: 70:62:65:23:e7:70:10:69:5d:bd:a7:aa:09:c6:e7: c5:ac:c3:54:d3:d1:44:35:10:b8:bd:91:9a:f8:59: 39:36:e4:35:34:1a:4f:6a:85:a3:67:7e:ba:c0:7b: db:44:bb:91:ed:6c:b3:1e:bc:9d:97:0d:a9:6d:ca: 55:7e:30:7d:90:27:39:c9:75:4c:f1:12:40:8c:c2: 95:8b:17:25:0b:a2:2d:2a:fb:d4:21:c3:36:f1:93: 81:1d:e4:08:1b:b9:fc:30:f2:67:c4:72:a4:ec:16: 51:94:1c:c7:d6:79:89:30:ca:6e:4b:55:9c:08:bc: e7:45:ee:56:a4:bb:de:62:de:2f:6e:56:d8:a4:7b: 97:46:da:d1:d2:b6:24:96:4f:0d:10:ab:fb:ff:ed: ef:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C9:9B:F7:13:7A:56:6D:EB:A2:EB:E2:08:ED:A6:DF:46:9F:AA:42 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/u8mb9xN6Vm3rouviCO2m30afqkI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.7.0/24 Signature Algorithm: sha256WithRSAEncryption 63:9c:58:c4:2d:02:f2:01:6d:8a:89:cc:dc:fb:2d:f3:41:91: 42:22:1f:78:42:af:5b:62:07:fb:6e:dd:f7:b5:6c:73:2a:a1: 9e:99:aa:86:ef:90:7e:80:df:4a:21:f3:16:b6:ee:cf:bf:52: cf:2b:86:a9:00:45:3b:62:2b:30:9b:79:d7:a8:2b:f6:d1:03: fb:4c:a5:3b:bd:7e:67:1b:37:46:8a:11:bc:5e:c5:03:b2:54: 50:08:3d:a1:51:c6:1b:c0:b9:f0:7b:a2:2f:8d:a3:a5:61:73: 74:d2:fc:52:93:59:04:67:fe:58:bf:ca:1f:7c:16:7f:98:ff: 06:94:f6:50:f8:e3:9f:ce:be:f1:95:0b:79:46:8b:db:df:a4: 2d:bd:f9:8a:b9:5b:d2:1e:a1:df:d8:9a:c7:a2:73:0a:61:6f: 41:b0:6e:29:4f:c7:ff:26:dc:4a:65:75:6b:f3:91:5d:dd:56: a1:b4:ef:c4:41:ac:8b:e1:19:e7:20:b2:8a:58:7c:ac:89:1e: 80:86:e8:23:ff:23:ef:10:e0:7b:40:11:f3:a8:56:b3:02:a9: 23:d9:65:69:47:35:76:25:44:ce:70:18:8c:6b:5c:bd:99:c7: 37:b8:91:b6:fe:7b:fe:9f:7b:b8:97:07:81:5b:48:fb:25:c0: d4:34:13:35 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjI2MDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJCQzk5QkY3MTM3QTU2 NkRFQkEyRUJFMjA4RURBNkRGNDY5RkFBNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/oo5lTe+47mtc2q0LEFr5XMOuAAnd2pSu+W9luptlJc374WF/ DNssKde7imVdV1ZmVkTChNgRHaQtsRwvUr6iUiKWZN0AJcMuL7yjtt28tH41SQHD JaQl8tA5tPgefpTyFBmv2R7g3HBiZSPncBBpXb2nqgnG58Wsw1TT0UQ1ELi9kZr4 WTk25DU0Gk9qhaNnfrrAe9tEu5HtbLMevJ2XDaltylV+MH2QJznJdUzxEkCMwpWL FyULoi0q+9Qhwzbxk4Ed5Agbufww8mfEcqTsFlGUHMfWeYkwym5LVZwIvOdF7lak u95i3i9uVtike5dG2tHStiSWTw0Qq/v/7e8nAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUu8mb9xN6Vm3rouviCO2m30afqkIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3U4bWI5eE42Vm0zcm91 dmlDTzJtMzBhZnFrSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QcwDQYJKoZIhvcNAQELBQADggEBAGOcWMQtAvIBbYqJzNz7LfNBkUIiH3hC r1tiB/tu3fe1bHMqoZ6ZqobvkH6A30oh8xa27s+/Us8rhqkARTtiKzCbedeoK/bR A/tMpTu9fmcbN0aKEbxexQOyVFAIPaFRxhvAufB7oi+No6Vhc3TS/FKTWQRn/li/ yh98Fn+Y/waU9lD445/OvvGVC3lGi9vfpC29+Yq5W9Ieod/Ymseicwphb0GwbilP x/8m3EpldWvzkV3dVqG078RBrIvhGecgsopYfKyJHoCG6CP/I+8Q4HtAEfOoVrMC qSPZZWlHNXYlRM5wGIxrXL2Zxze4kbb+e/6fe7iXB4FbSPslwNQ0EzU= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:41 2024 by rpki-client on console-fra.rpki-client.org