$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/xJ2PWo9JBaIwWmsyh3_5aAOZNcM.roa File: xJ2PWo9JBaIwWmsyh3_5aAOZNcM.roa (raw, json) Hash identifier: fqIYTm8Mte0F6UVDSgEnSH9aNCfXUG4YblBWw8/V+4k= Subject key identifier: C4:9D:8F:5A:8F:49:05:A2:30:5A:6B:32:87:7F:F9:68:03:99:35:C3 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14F4 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xJ2PWo9JBaIwWmsyh3_5aAOZNcM.roa Signing time: Wed 11 Sep 2024 02:26:11 +0000 ROA not before: Wed 11 Sep 2024 02:26:11 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 13444 IP address blocks: 103.221.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 18:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5364 (0x14f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:26:11 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=C49D8F5A8F4905A2305A6B32877FF968039935C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:67:14:87:49:35:b4:d5:e0:e9:6c:9a:b1: a6:24:02:b5:10:19:23:bc:7c:61:c6:6b:92:43:48: 4e:ad:51:cd:9c:3a:5b:8b:bc:8b:eb:b6:88:8c:19: 9a:fa:3b:4b:f0:32:db:3c:2e:ee:59:64:53:47:3e: 72:fc:1a:b5:b1:dc:9e:1d:34:91:03:ea:5e:02:19: 1d:c3:f6:51:36:e1:32:3e:fe:f7:a8:85:65:b7:dc: e3:d5:a2:13:7d:22:a3:89:70:5c:9a:26:67:6e:85: b4:11:1d:42:6b:f6:e1:87:cc:dd:f4:45:cc:17:6c: 5a:c2:c8:40:c1:27:4e:35:53:f0:e3:27:32:43:ce: fb:30:12:61:3c:5a:33:ef:ed:97:aa:30:12:29:97: 15:9b:a8:25:80:b9:ec:90:4f:79:eb:eb:3c:d5:1a: 3e:5b:d0:87:e7:77:ee:61:3f:41:a2:14:dc:7a:03: d1:b4:b3:14:e5:52:9f:48:0f:4c:a7:f3:97:eb:9b: 76:28:35:e4:c9:0c:67:15:b9:43:c4:5a:53:b3:1c: 7b:24:c3:5b:4c:23:15:34:1b:74:e5:43:93:55:e7: fb:5d:8a:8c:b5:c8:b9:5f:92:04:f7:17:9c:bc:26: c2:cd:2f:f2:a5:53:90:fc:ef:87:16:23:76:20:ef: ba:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9D:8F:5A:8F:49:05:A2:30:5A:6B:32:87:7F:F9:68:03:99:35:C3 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xJ2PWo9JBaIwWmsyh3_5aAOZNcM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.15.0/24 Signature Algorithm: sha256WithRSAEncryption 95:c8:0f:ac:ad:d7:ab:ea:d5:6a:b7:15:9e:57:66:f2:5b:ba: 72:75:c8:16:89:60:49:c5:b0:04:de:77:da:c9:8f:cc:37:dc: d3:83:5d:c2:60:ef:a1:26:4f:e3:36:e5:4e:7e:3a:10:e2:ad: 9d:7b:51:8d:68:5a:86:b9:e7:34:1f:dd:85:78:51:72:82:f5: ce:31:88:59:e0:a6:85:32:4f:87:80:4f:b4:fc:26:57:c8:ef: 2a:9a:3f:60:4c:7e:ae:8b:e3:3d:ae:bb:9c:75:83:58:c4:88: ea:59:cf:cd:1b:67:2c:e6:85:b5:e0:6e:ad:6a:3a:63:ad:22: f3:f5:ee:9a:8d:f2:7b:d4:c0:85:f5:b2:ac:10:7f:c1:9c:ab: 04:c8:d6:d7:e9:0b:ce:77:11:1f:26:50:66:c6:e5:82:ae:9a: c4:71:65:c2:eb:fb:4d:31:55:b6:e7:04:36:d5:53:cf:8c:f5: fa:47:d6:2b:1f:ca:af:79:4e:79:1a:88:f7:90:17:e9:ec:85: da:75:f7:79:e1:da:a4:dd:f6:9e:f2:a3:60:92:66:38:ba:d3: 9f:74:0e:92:27:3a:a2:81:71:1c:4d:3c:15:c3:e2:73:21:1b: 9c:f1:c1:57:9c:02:05:c2:3d:1f:1f:21:f3:7d:bf:e9:0f:34: 73:59:03:b4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjI2MTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEM0OUQ4RjVBOEY0OTA1 QTIzMDVBNkIzMjg3N0ZGOTY4MDM5OTM1QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9cWcUh0k1tNXg6WyasaYkArUQGSO8fGHGa5JDSE6tUc2cOluL vIvrtoiMGZr6O0vwMts8Lu5ZZFNHPnL8GrWx3J4dNJED6l4CGR3D9lE24TI+/veo hWW33OPVohN9IqOJcFyaJmduhbQRHUJr9uGHzN30RcwXbFrCyEDBJ041U/DjJzJD zvswEmE8WjPv7ZeqMBIplxWbqCWAueyQT3nr6zzVGj5b0Ifnd+5hP0GiFNx6A9G0 sxTlUp9ID0yn85frm3YoNeTJDGcVuUPEWlOzHHskw1tMIxU0G3TlQ5NV5/tdioy1 yLlfkgT3F5y8JsLNL/KlU5D874cWI3Yg77rRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUxJ2PWo9JBaIwWmsyh3/5aAOZNcMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3hKMlBXbzlKQmFJd1dt c3loM181YUFPWk5jTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3Q8wDQYJKoZIhvcNAQELBQADggEBAJXID6yt16vq1Wq3FZ5XZvJbunJ1yBaJ YEnFsATed9rJj8w33NODXcJg76EmT+M25U5+OhDirZ17UY1oWoa55zQf3YV4UXKC 9c4xiFngpoUyT4eAT7T8JlfI7yqaP2BMfq6L4z2uu5x1g1jEiOpZz80bZyzmhbXg bq1qOmOtIvP17pqN8nvUwIX1sqwQf8GcqwTI1tfpC853ER8mUGbG5YKumsRxZcLr +00xVbbnBDbVU8+M9fpH1isfyq95TnkaiPeQF+nshdp193nh2qTd9p7yo2CSZji6 0590DpInOqKBcRxNPBXD4nMhG5zxwVecAgXCPR8fIfN9v+kPNHNZA7Q= -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:41 2024 by rpki-client on console-fra.rpki-client.org