$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/621/1D59rPB2sVkzIVnsOIYWiCZYYD8.roa File: 1D59rPB2sVkzIVnsOIYWiCZYYD8.roa (raw, json) Hash identifier: +2vtvk4t+lS1Lpp6or5p7mVpj2/aZ1jENHWh7Vc8zwI= Subject key identifier: D4:3E:7D:AC:F0:76:B1:59:33:21:59:EC:38:86:16:88:26:58:60:3F Certificate issuer: /CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D Certificate serial: 1C89 Authority key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/1D59rPB2sVkzIVnsOIYWiCZYYD8.roa Signing time: Fri 30 Aug 2024 19:49:01 +0000 ROA not before: Fri 30 Aug 2024 19:49:01 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 58854 IP address blocks: 103.27.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7305 (0x1c89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D Validity Not Before: Aug 30 19:49:01 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=D43E7DACF076B159332159EC388616882658603F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:a9:05:ca:a4:fd:66:96:ed:e7:bd:04:91: 57:44:e2:56:2d:da:94:8d:4b:48:b5:9f:e6:77:2c: 73:93:04:04:ee:5a:a7:06:5c:c8:f7:46:e4:c0:d9: bb:0e:17:7c:16:55:3b:f3:1a:17:3d:57:6e:80:85: ae:69:16:0b:fa:58:18:29:dd:83:28:2c:2d:7b:fe: 6c:d7:84:a2:e4:9c:52:a1:40:d4:a0:66:b7:d2:6a: 22:37:db:e4:2c:e3:c2:92:e8:7c:b5:14:36:ad:04: 62:18:a1:95:f9:2e:dc:dd:a7:69:42:ff:3b:46:3e: 39:58:84:0e:21:e3:ae:b8:30:ac:a9:9d:7c:6b:da: 22:73:af:38:c4:d9:79:ef:91:5e:a0:5d:05:7c:63: 99:d3:e0:06:0b:cf:5a:79:92:68:4b:40:8f:8c:63: b3:a4:77:d1:a3:fa:a9:d4:42:d8:c8:2c:7a:8a:e3: 01:91:da:52:95:08:c0:56:c2:23:a1:57:a1:41:b3: 55:30:32:83:05:1a:73:e8:f2:aa:6f:9e:df:80:c0: 6f:0d:4c:7f:f3:b3:68:62:80:a3:70:6b:ff:e8:41: 0b:26:a9:18:b1:a9:0e:44:d1:6a:f4:b2:72:5f:bc: 17:34:bd:8a:83:7a:c4:fd:cb:12:5d:b0:bc:1b:85: 45:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3E:7D:AC:F0:76:B1:59:33:21:59:EC:38:86:16:88:26:58:60:3F X509v3 Authority Key Identifier: keyid:E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/1D59rPB2sVkzIVnsOIYWiCZYYD8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.27.4.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:a4:f9:30:f9:c4:f5:86:57:25:a9:62:99:ae:bb:bc:68:48: d4:e4:4f:7b:32:fc:b3:8e:eb:82:f2:86:dd:63:48:de:bc:05: 49:2a:40:22:86:d5:be:66:d5:7b:61:74:9d:32:ed:83:8c:ce: a9:ce:93:47:0d:68:31:d8:1e:c1:a2:96:3d:d6:70:22:a7:86: e1:ea:ec:e3:a3:1c:cc:18:db:9a:89:0c:3d:7b:14:01:d9:05: 43:c3:90:c8:cc:d9:b0:2d:6c:53:c7:4a:68:3f:de:c6:33:62: b2:8c:e6:18:bd:e5:0a:73:d8:be:e8:a0:0d:d9:77:ae:0b:13: 40:50:62:c3:16:da:2c:8d:1c:6b:e6:bb:c6:cb:30:ee:8e:e2: 71:13:a0:75:70:c9:e9:39:7b:13:56:97:82:74:b7:ed:5f:ee: c7:0a:d4:7f:9d:01:ea:45:a3:6d:2b:27:50:1c:b6:ce:e8:bc: d5:25:e9:65:80:b5:6f:f0:24:57:69:a9:9b:4a:59:54:1d:c7: 9a:7d:1b:f4:a1:02:5a:4d:31:4e:f7:84:a7:0b:b0:a3:b5:38: 28:1d:1b:85:ad:08:f8:45:e2:b0:b0:5d:3c:53:fb:03:b5:f2: 24:24:66:53:b6:10:67:51:67:ad:00:69:f8:7a:01:fb:06:b3: 9a:c7:97:41 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTU2 REE0QzI3NUYzQ0NDOTJEMDg2MjAyQTFFREE3NzgzRjBDM0QwRDAeFw0yNDA4MzAx OTQ5MDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQ0M0U3REFDRjA3NkIx NTkzMzIxNTlFQzM4ODYxNjg4MjY1ODYwM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkWKkFyqT9Zpbt570EkVdE4lYt2pSNS0i1n+Z3LHOTBATuWqcG XMj3RuTA2bsOF3wWVTvzGhc9V26Aha5pFgv6WBgp3YMoLC17/mzXhKLknFKhQNSg ZrfSaiI32+Qs48KS6Hy1FDatBGIYoZX5Ltzdp2lC/ztGPjlYhA4h4664MKypnXxr 2iJzrzjE2XnvkV6gXQV8Y5nT4AYLz1p5kmhLQI+MY7Okd9Gj+qnUQtjILHqK4wGR 2lKVCMBWwiOhV6FBs1UwMoMFGnPo8qpvnt+AwG8NTH/zs2higKNwa//oQQsmqRix qQ5E0Wr0snJfvBc0vYqDesT9yxJdsLwbhUUtAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU1D59rPB2sVkzIVnsOIYWiCZYYD8wHwYDVR0jBBgwFoAU5W2kwnXzzMktCGIC oe2neD8MPQ0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIx LzVXMmt3blh6ek1rdENHSUNvZTJuZUQ4TVBRMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNVcya3duWHp6TWt0Q0dJQ29lMm5lRDhNUFEwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIxLzFENTlyUEIyc1ZreklW bnNPSVlXaUNaWVlEOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnGwQwDQYJKoZIhvcNAQELBQADggEBAEyk+TD5xPWGVyWpYpmuu7xoSNTkT3sy /LOO64Lyht1jSN68BUkqQCKG1b5m1XthdJ0y7YOMzqnOk0cNaDHYHsGilj3WcCKn huHq7OOjHMwY25qJDD17FAHZBUPDkMjM2bAtbFPHSmg/3sYzYrKM5hi95Qpz2L7o oA3Zd64LE0BQYsMW2iyNHGvmu8bLMO6O4nEToHVwyek5exNWl4J0t+1f7scK1H+d AepFo20rJ1Acts7ovNUl6WWAtW/wJFdpqZtKWVQdx5p9G/ShAlpNMU73hKcLsKO1 OCgdG4WtCPhF4rCwXTxT+wO18iQkZlO2EGdRZ60Aafh6AfsGs5rHl0E= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:14 2024 by rpki-client on console-fra.rpki-client.org