$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/wHMmzLk4ap0b_weyXau40CfS5qE.roa File: wHMmzLk4ap0b_weyXau40CfS5qE.roa (raw, json) Hash identifier: 0c0z5g2xMvm0MjRx2zTsMrDyegL5UXC56Oeg19h5RkE= Subject key identifier: C0:73:26:CC:B9:38:6A:9D:1B:FF:07:B2:5D:AB:B8:D0:27:D2:E6:A1 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1540 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/wHMmzLk4ap0b_weyXau40CfS5qE.roa Signing time: Wed 11 Sep 2024 03:57:56 +0000 ROA not before: Wed 11 Sep 2024 03:57:56 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 103.221.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5440 (0x1540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 03:57:56 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=C07326CCB9386A9D1BFF07B25DABB8D027D2E6A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:9f:ad:11:34:4d:e7:e5:e7:d4:47:91:e8: b0:c1:f1:c9:3a:7f:14:8e:7a:89:a5:ae:d1:ac:39: 48:4e:c2:07:1d:50:5a:29:af:1b:f7:5f:58:fd:c4: a5:51:26:d4:74:28:ed:54:14:a7:d2:56:57:a0:d3: a2:38:1e:41:36:1e:5a:8f:39:23:10:35:a2:a9:4c: 8e:ed:5d:90:4d:c9:92:28:47:b7:50:ec:1b:d9:3c: 86:b7:b1:36:06:2d:67:e5:2d:34:aa:bc:63:39:f6: 11:aa:a5:c4:c7:df:4e:88:3b:c5:ea:06:33:55:26: 4c:7d:ee:e9:6f:e9:d6:00:47:7f:b3:d7:e9:9f:7b: 59:ff:74:1b:12:36:98:65:4d:61:62:80:b6:b4:66: fc:05:48:de:cb:c6:7e:16:21:28:db:68:06:fb:62: dc:d2:43:d8:1d:85:23:44:bd:00:eb:95:d2:0c:12: fb:a9:33:f4:8b:77:93:9d:49:6f:5d:e7:23:19:9a: 35:a1:06:32:75:7c:9d:ca:40:cb:0c:80:57:b2:b3: 29:86:c6:a3:55:26:57:6f:ac:7f:b8:93:4f:49:17: c5:53:61:d9:8d:34:55:54:55:4f:bc:dc:ab:db:56: 96:4b:84:38:89:06:4e:04:e5:ba:cc:02:14:ff:a6: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:73:26:CC:B9:38:6A:9D:1B:FF:07:B2:5D:AB:B8:D0:27:D2:E6:A1 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/wHMmzLk4ap0b_weyXau40CfS5qE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.3.0/24 Signature Algorithm: sha256WithRSAEncryption 17:89:3b:44:83:7a:8b:d3:1c:c9:b2:de:c1:35:5d:a2:a6:c7: 3f:bb:21:88:90:26:d3:4a:1d:41:e8:86:52:70:c0:88:6e:6e: 9b:95:77:82:99:45:80:8a:c3:e8:98:e3:cb:47:7b:f9:9d:f8: 15:db:82:44:ab:6d:05:04:1e:d3:6f:25:4a:d1:1c:f2:24:22: 29:c0:9c:d7:e6:88:44:67:f0:b6:84:02:ce:eb:38:df:2a:ba: 55:00:23:24:2b:ec:09:26:de:80:47:fe:8f:1e:f6:4b:68:a3: f9:d2:78:9a:4a:2a:2f:e8:cc:df:26:7a:b5:2f:9e:af:36:ae: f8:97:14:07:76:4f:d5:f0:98:08:88:1e:76:19:3c:7b:55:1d: e3:ff:4a:47:69:a8:cf:a0:1a:d0:4f:d4:bd:37:d1:95:88:8b: c1:a5:a3:aa:37:37:7a:b2:b0:92:03:66:4a:9c:9e:5d:58:15: 90:4d:91:0c:c2:dc:1a:2d:7e:4f:3d:47:a7:87:8d:9b:b1:5c: 38:70:b8:b6:59:43:fe:d4:d4:6f:f3:59:7b:f4:a6:45:33:97: fa:08:53:3f:76:1e:44:e0:a7:b6:c1:46:d4:d4:23:a8:67:5a: 65:2a:47:5d:d0:ed:8b:03:40:68:34:d0:05:c6:bb:ef:7e:1b: cc:66:37:0d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFUAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MzU3NTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEMwNzMyNkNDQjkzODZB OUQxQkZGMDdCMjVEQUJCOEQwMjdEMkU2QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLD5+tETRN5+Xn1EeR6LDB8ck6fxSOeomlrtGsOUhOwgcdUFop rxv3X1j9xKVRJtR0KO1UFKfSVleg06I4HkE2HlqPOSMQNaKpTI7tXZBNyZIoR7dQ 7BvZPIa3sTYGLWflLTSqvGM59hGqpcTH306IO8XqBjNVJkx97ulv6dYAR3+z1+mf e1n/dBsSNphlTWFigLa0ZvwFSN7Lxn4WISjbaAb7YtzSQ9gdhSNEvQDrldIMEvup M/SLd5OdSW9d5yMZmjWhBjJ1fJ3KQMsMgFeysymGxqNVJldvrH+4k09JF8VTYdmN NFVUVU+83KvbVpZLhDiJBk4E5brMAhT/ppV9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUwHMmzLk4ap0b/weyXau40CfS5qEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3dITW16TGs0YXAwYl93 ZXlYYXU0MENmUzVxRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QMwDQYJKoZIhvcNAQELBQADggEBABeJO0SDeovTHMmy3sE1XaKmxz+7IYiQ JtNKHUHohlJwwIhubpuVd4KZRYCKw+iY48tHe/md+BXbgkSrbQUEHtNvJUrRHPIk IinAnNfmiERn8LaEAs7rON8qulUAIyQr7Akm3oBH/o8e9ktoo/nSeJpKKi/ozN8m erUvnq82rviXFAd2T9XwmAiIHnYZPHtVHeP/SkdpqM+gGtBP1L030ZWIi8Glo6o3 N3qysJIDZkqcnl1YFZBNkQzC3Botfk89R6eHjZuxXDhwuLZZQ/7U1G/zWXv0pkUz l/oIUz92HkTgp7bBRtTUI6hnWmUqR13Q7YsDQGg00AXGu+9+G8xmNw0= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org