$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/yxe_3lN7r-qlNITGszP5j2oxcrQ.roa File: yxe_3lN7r-qlNITGszP5j2oxcrQ.roa (raw, json) Hash identifier: cGP5ba8hYBpCXOOZbfRn6EA5p32FcmE6TpARpFx+6fU= Subject key identifier: CB:17:BF:DE:53:7B:AF:EA:A5:34:84:C6:B3:33:F9:8F:6A:31:72:B4 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 153E Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/yxe_3lN7r-qlNITGszP5j2oxcrQ.roa Signing time: Wed 11 Sep 2024 03:57:56 +0000 ROA not before: Wed 11 Sep 2024 03:57:56 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139259 IP address blocks: 103.221.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5438 (0x153e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 03:57:56 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=CB17BFDE537BAFEAA53484C6B333F98F6A3172B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c9:2e:e0:72:36:d5:c5:01:9e:4a:07:61:1f: 9c:84:ca:f2:09:38:4b:d5:80:bf:74:b3:b7:b3:3b: dc:7b:5e:f9:81:34:59:b3:69:68:79:79:70:2a:1d: ba:67:45:57:e7:4d:4a:9e:7e:06:c4:a9:6a:17:eb: 0e:4b:17:45:05:c0:50:75:b4:ba:c5:83:ca:18:4c: c1:1e:5f:85:e5:2b:49:49:a0:e7:72:8e:02:d2:45: cf:1f:f1:b0:6a:73:12:f9:a4:4b:36:41:a3:10:c6: 4d:4f:57:24:d7:aa:e6:d6:26:f5:cb:5b:af:b9:94: 7c:37:54:c3:5a:29:5b:37:00:df:2b:3a:2e:4b:7b: 39:52:e4:89:94:e8:a3:63:37:7d:d3:e8:84:9b:52: aa:a4:b4:2e:6a:ea:ba:de:f7:a0:00:9e:e6:a4:e9: 8a:6b:e3:86:8c:ee:b8:15:0b:b2:04:8c:42:c1:57: ee:a0:9a:83:6a:a1:37:b1:9c:d5:50:44:ef:cc:a6: 48:53:25:d0:d5:c8:c8:4c:a1:26:41:14:97:e3:56: 45:d4:6f:ad:14:23:bc:f0:cb:33:9d:0e:74:b3:1c: 88:d4:24:99:f5:6a:89:a9:54:83:d6:43:ee:fe:20: 3f:ee:2e:0f:63:56:c1:c5:cd:f2:74:9b:a8:35:45: dc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:17:BF:DE:53:7B:AF:EA:A5:34:84:C6:B3:33:F9:8F:6A:31:72:B4 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/yxe_3lN7r-qlNITGszP5j2oxcrQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.4.0/24 Signature Algorithm: sha256WithRSAEncryption b0:76:15:6d:86:d0:94:a3:ea:67:58:9d:4e:23:1f:c6:b5:b4: f0:da:92:02:5d:83:cd:ca:17:78:c1:74:13:ab:82:be:c0:e7: b5:ee:7f:eb:8c:da:6e:12:58:a5:3e:8f:ea:0d:d7:d9:14:2f: ad:96:48:0a:74:5a:31:02:3a:f1:05:6b:73:16:f2:21:3f:75: 27:44:c7:0c:b1:0c:4a:a2:43:e5:1d:19:30:dd:dd:fd:37:0b: b7:06:b3:2d:42:cd:92:67:98:ed:69:5f:b5:56:fa:7f:39:af: c7:39:69:41:24:f7:6e:76:66:3e:ac:e5:61:3f:ac:3c:de:2b: 09:3b:95:d3:54:19:6d:5a:98:fd:85:41:33:ab:01:b0:44:2c: 92:7e:1b:df:75:b4:b0:eb:5d:51:2b:b9:ca:a7:54:9d:40:ff: 63:14:2f:ff:bf:c9:cf:0c:87:21:de:ad:4b:04:17:f3:b7:f2: 07:c8:68:b1:bb:e1:c6:c6:17:b4:27:c1:fe:15:18:ea:6c:5f: 13:be:80:ed:3a:a8:02:e2:42:7c:47:d0:47:26:6f:26:9c:40: 7a:93:33:4a:7e:fe:98:4c:17:d9:5e:2d:f3:e8:ed:6c:4c:e8: 84:f7:4d:cb:e1:10:40:43:ad:e4:65:f3:ff:4b:0c:03:97:4e: 4f:75:04:fe -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MzU3NTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENCMTdCRkRFNTM3QkFG RUFBNTM0ODRDNkIzMzNGOThGNkEzMTcyQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmyS7gcjbVxQGeSgdhH5yEyvIJOEvVgL90s7ezO9x7XvmBNFmz aWh5eXAqHbpnRVfnTUqefgbEqWoX6w5LF0UFwFB1tLrFg8oYTMEeX4XlK0lJoOdy jgLSRc8f8bBqcxL5pEs2QaMQxk1PVyTXqubWJvXLW6+5lHw3VMNaKVs3AN8rOi5L ezlS5ImU6KNjN33T6ISbUqqktC5q6rre96AAnuak6Ypr44aM7rgVC7IEjELBV+6g moNqoTexnNVQRO/MpkhTJdDVyMhMoSZBFJfjVkXUb60UI7zwyzOdDnSzHIjUJJn1 aompVIPWQ+7+ID/uLg9jVsHFzfJ0m6g1RdyXAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUyxe/3lN7r+qlNITGszP5j2oxcrQwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3l4ZV8zbE43ci1xbE5J VEdzelA1ajJveGNyUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QQwDQYJKoZIhvcNAQELBQADggEBALB2FW2G0JSj6mdYnU4jH8a1tPDakgJd g83KF3jBdBOrgr7A57Xuf+uM2m4SWKU+j+oN19kUL62WSAp0WjECOvEFa3MW8iE/ dSdExwyxDEqiQ+UdGTDd3f03C7cGsy1CzZJnmO1pX7VW+n85r8c5aUEk9252Zj6s 5WE/rDzeKwk7ldNUGW1amP2FQTOrAbBELJJ+G991tLDrXVErucqnVJ1A/2MUL/+/ yc8MhyHerUsEF/O38gfIaLG74cbGF7Qnwf4VGOpsXxO+gO06qALiQnxH0Ecmbyac QHqTM0p+/phMF9leLfPo7WxM6IT3TcvhEEBDreRl8/9LDAOXTk91BP4= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org