$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/xg4c1yQ5kaCs3rmjL_0B9b0Yr-8.roa File: xg4c1yQ5kaCs3rmjL_0B9b0Yr-8.roa (raw, json) Hash identifier: ejlId56y4W8RT6JZ0Qz2ivV2l8zR9YtG5NTtpG2yn1g= Subject key identifier: C6:0E:1C:D7:24:39:91:A0:AC:DE:B9:A3:2F:FD:01:F5:BD:18:AF:EF Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1542 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xg4c1yQ5kaCs3rmjL_0B9b0Yr-8.roa Signing time: Wed 11 Sep 2024 03:59:18 +0000 ROA not before: Wed 11 Sep 2024 03:59:18 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 103.221.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5442 (0x1542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 03:59:18 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=C60E1CD7243991A0ACDEB9A32FFD01F5BD18AFEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3e:c1:0e:b4:ff:d5:ee:e4:21:10:eb:99:d5: 38:ea:8c:40:74:e4:67:ef:93:0e:18:36:93:49:9f: 42:06:02:79:9e:86:e6:24:08:1b:f1:9c:44:83:65: 90:d0:da:58:db:7e:c9:ba:5d:f5:07:86:2a:02:40: ab:4c:52:a4:ba:f5:dc:70:bd:f6:ea:ea:66:b1:20: 33:8f:fa:32:c1:e3:05:31:a1:d5:f6:10:18:58:66: b8:84:d0:bd:97:48:1f:8a:b4:48:21:2d:26:5f:c4: cd:cc:7d:f3:98:a7:d6:35:c6:b6:53:f9:d8:00:75: 89:ab:69:41:7f:86:13:da:8e:0c:97:f4:29:e5:c1: 94:24:38:94:7e:5f:d4:9b:51:4c:20:c3:8f:f1:4c: f4:c9:94:38:2c:a4:9e:89:44:56:02:6a:6a:20:67: 5a:2a:13:4e:4d:dc:9c:6f:c3:b4:70:ba:25:6f:da: 34:11:8b:b0:75:95:bf:d6:27:2c:84:e8:00:d9:b7: 5c:81:c7:99:ba:e8:b2:4e:01:ae:2d:0d:da:b8:8d: 38:30:02:18:8f:fc:09:2e:f3:2b:3b:45:28:62:2c: 49:69:c6:0e:90:6b:a8:bb:f2:6e:f2:8a:ef:94:2f: 27:12:e0:e4:81:4d:30:45:93:d9:5c:c9:2c:f1:56: 3a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0E:1C:D7:24:39:91:A0:AC:DE:B9:A3:2F:FD:01:F5:BD:18:AF:EF X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xg4c1yQ5kaCs3rmjL_0B9b0Yr-8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.26.0/24 Signature Algorithm: sha256WithRSAEncryption aa:76:32:26:9e:9d:6a:cc:94:4f:a0:2e:b4:fc:5e:8d:ed:d7: 5b:05:2f:56:39:80:0d:ac:17:e9:21:82:a9:81:59:a7:ed:ec: 5f:0b:45:5b:db:f4:ef:e0:5d:f3:25:c0:42:6d:c4:c9:f2:12: 80:3b:0f:d9:9e:22:f8:b6:b5:a8:c5:7a:15:ee:ac:a6:e5:4f: 34:e6:87:3a:0a:2a:11:93:c4:e1:c2:c6:0c:57:ec:4b:2e:46: 77:73:c8:d6:f4:00:73:97:0d:3a:e0:3d:76:8e:49:16:d6:69: d8:cf:35:8f:fd:78:a6:50:32:d7:ba:d0:f2:63:f2:c7:62:18: d9:83:11:d5:3b:be:5a:af:44:97:e3:3b:52:d6:29:61:c7:02: f7:8b:c2:34:03:06:43:3f:09:10:97:00:be:a6:31:27:5a:a6: 80:ee:1c:5d:a3:43:9a:ad:ee:b5:1c:65:91:55:b7:6f:26:dc: f9:ca:52:1d:f6:fb:4c:bf:ea:07:f8:2d:11:e4:67:d7:a8:af: 49:8a:4e:6c:79:dd:96:1c:1a:ea:73:00:36:33:1a:c5:93:68: 08:82:45:c2:9b:d9:33:d8:82:e6:01:1c:b3:15:47:af:49:5b: d2:cc:d8:f6:2d:3d:e7:e1:af:e4:d7:6f:b2:6f:64:0a:75:75: f8:2c:56:d5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFUIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MzU5MThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEM2MEUxQ0Q3MjQzOTkx QTBBQ0RFQjlBMzJGRkQwMUY1QkQxOEFGRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWPsEOtP/V7uQhEOuZ1TjqjEB05Gfvkw4YNpNJn0IGAnmehuYk CBvxnESDZZDQ2ljbfsm6XfUHhioCQKtMUqS69dxwvfbq6maxIDOP+jLB4wUxodX2 EBhYZriE0L2XSB+KtEghLSZfxM3MffOYp9Y1xrZT+dgAdYmraUF/hhPajgyX9Cnl wZQkOJR+X9SbUUwgw4/xTPTJlDgspJ6JRFYCamogZ1oqE05N3Jxvw7RwuiVv2jQR i7B1lb/WJyyE6ADZt1yBx5m66LJOAa4tDdq4jTgwAhiP/Aku8ys7RShiLElpxg6Q a6i78m7yiu+ULycS4OSBTTBFk9lcySzxVjqRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUxg4c1yQ5kaCs3rmjL/0B9b0Yr+8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3hnNGMxeVE1a2FDczNy bWpMXzBCOWIwWXItOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RowDQYJKoZIhvcNAQELBQADggEBAKp2MiaenWrMlE+gLrT8Xo3t11sFL1Y5 gA2sF+khgqmBWaft7F8LRVvb9O/gXfMlwEJtxMnyEoA7D9meIvi2tajFehXurKbl TzTmhzoKKhGTxOHCxgxX7EsuRndzyNb0AHOXDTrgPXaOSRbWadjPNY/9eKZQMte6 0PJj8sdiGNmDEdU7vlqvRJfjO1LWKWHHAveLwjQDBkM/CRCXAL6mMSdapoDuHF2j Q5qt7rUcZZFVt28m3PnKUh32+0y/6gf4LRHkZ9eor0mKTmx53ZYcGupzADYzGsWT aAiCRcKb2TPYguYBHLMVR69JW9LM2PYtPefhr+TXb7JvZAp1dfgsVtU= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org