$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/mu-l5wnSrGgnD7FEJDRlOY_W0Fs.roa File: mu-l5wnSrGgnD7FEJDRlOY_W0Fs.roa (raw, json) Hash identifier: ATj4V6CH/7UVkTnD8qS52lWPPZW8wbUAx2XkoDYr2d4= Subject key identifier: 9A:EF:A5:E7:09:D2:AC:68:27:0F:B1:44:24:34:65:39:8F:D6:D0:5B Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Certificate serial: 0CB9 Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/mu-l5wnSrGgnD7FEJDRlOY_W0Fs.roa Signing time: Wed 13 Mar 2024 01:20:52 +0000 ROA not before: Wed 13 Mar 2024 01:20:52 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 398704 IP address blocks: 103.232.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 09:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Validity Not Before: Mar 13 01:20:52 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=9AEFA5E709D2AC68270FB144243465398FD6D05B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:e4:59:07:a1:df:7a:c5:90:cf:e9:e2:84: 3d:2a:e4:38:77:b5:b8:e5:35:7c:aa:c4:c3:3c:3c: ae:f0:07:e9:8b:a6:4b:e3:be:6d:ae:24:5c:5b:0a: c7:00:ba:45:8b:da:97:e9:34:e3:3e:6d:ea:78:eb: ba:35:27:8d:60:8c:11:91:3e:8e:4a:c0:87:85:3c: 32:63:59:74:12:07:1c:24:6a:f9:4e:82:5b:91:b4: 34:d8:36:19:ce:85:c0:3c:ea:ab:77:26:0f:f3:23: d8:fa:c6:8c:19:e0:17:1d:4e:94:7f:9f:6f:b3:2f: 5f:0b:5e:4a:b6:52:37:9e:29:90:a8:c7:6e:5b:4f: 0d:de:3c:ad:64:67:ef:7c:b8:6b:c9:7a:c8:f2:3d: be:ab:72:8d:ca:dc:cc:89:c9:42:5d:a7:db:58:b8: 2e:38:00:3d:bd:39:17:5d:24:b0:ef:cc:a8:ea:d5: 65:65:92:d9:a4:99:00:ce:73:4a:db:13:9d:92:4d: ed:26:b0:ea:17:8a:f4:91:52:72:f0:30:9e:cf:24: 86:b4:e8:c2:bb:18:47:35:42:78:cf:2e:03:d2:7e: 43:6c:4d:ab:a8:e2:fc:05:4a:57:20:bc:fd:ea:6d: 00:a8:6e:64:98:58:ed:b2:cf:4a:00:25:23:df:6d: 05:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EF:A5:E7:09:D2:AC:68:27:0F:B1:44:24:34:65:39:8F:D6:D0:5B X509v3 Authority Key Identifier: keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/mu-l5wnSrGgnD7FEJDRlOY_W0Fs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.232.144.0/22 Signature Algorithm: sha256WithRSAEncryption 09:7e:e7:51:06:03:29:3b:c6:6b:ef:c1:09:d6:e7:2d:89:37: fc:8a:08:6a:de:b6:f0:28:56:dc:b2:54:3a:95:63:13:9a:87: ac:d3:c0:52:fd:8a:43:5d:31:61:be:36:22:0e:26:be:29:08: 29:01:dd:01:71:e2:ed:87:52:de:88:fb:90:7d:e9:ee:40:6a: 90:f1:14:f9:b2:cb:ed:30:63:eb:a6:f5:c3:60:17:d1:92:44: b1:b9:cb:a1:72:0c:48:e6:b9:f6:42:17:2e:32:85:02:97:a5: d0:ce:f1:05:86:ee:a4:83:8b:a8:16:25:ec:af:89:9e:d5:30: 5b:e0:89:65:70:37:f2:5f:a4:31:73:10:3c:b2:fa:0d:71:43: 97:b0:b5:97:cf:ac:62:fa:ec:6d:4a:3a:93:1e:10:8a:4b:1d: 25:27:be:f9:2a:1b:ee:61:ae:7c:0e:1f:b3:b1:05:a8:1f:a4: 4a:4d:45:21:70:02:29:98:fc:e7:9e:33:a6:3e:6d:af:b0:04: fd:67:80:ec:71:68:42:03:4e:e5:24:b2:6a:3b:ab:80:7e:0e: b7:2f:74:e8:3d:19:d3:0d:78:95:38:ba:cf:fb:85:e1:72:36: 01:7b:5e:cd:70:7c:b5:df:11:85:ff:b2:96:5a:22:96:2b:b2: 6a:ba:82:8c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkx QzVCMDNDOTdDRTBGRTNFQzc4RTIzQzY4NTZGNzkyQzIwRDQwNDAeFw0yNDAzMTMw MTIwNTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDlBRUZBNUU3MDlEMkFD NjgyNzBGQjE0NDI0MzQ2NTM5OEZENkQwNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6RuRZB6HfesWQz+nihD0q5Dh3tbjlNXyqxMM8PK7wB+mLpkvj vm2uJFxbCscAukWL2pfpNOM+bep467o1J41gjBGRPo5KwIeFPDJjWXQSBxwkavlO gluRtDTYNhnOhcA86qt3Jg/zI9j6xowZ4BcdTpR/n2+zL18LXkq2UjeeKZCox25b Tw3ePK1kZ+98uGvJesjyPb6rco3K3MyJyUJdp9tYuC44AD29ORddJLDvzKjq1WVl ktmkmQDOc0rbE52STe0msOoXivSRUnLwMJ7PJIa06MK7GEc1QnjPLgPSfkNsTauo 4vwFSlcgvP3qbQCobmSYWO2yz0oAJSPfbQULAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUmu+l5wnSrGgnD7FEJDRlOY/W0FswHwYDVR0jBBgwFoAUWRxbA8l84P4+x44j xoVveSwg1AQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2 L1dSeGJBOGw4NFA0LXg0NGp4b1Z2ZVN3ZzFBUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV1J4YkE4bDg0UDQteDQ0anhvVnZlU3dnMUFRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2L211LWw1d25TckdnbkQ3 RkVKRFJsT1lfVzBGcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn6JAwDQYJKoZIhvcNAQELBQADggEBAAl+51EGAyk7xmvvwQnW5y2JN/yKCGre tvAoVtyyVDqVYxOah6zTwFL9ikNdMWG+NiIOJr4pCCkB3QFx4u2HUt6I+5B96e5A apDxFPmyy+0wY+um9cNgF9GSRLG5y6FyDEjmufZCFy4yhQKXpdDO8QWG7qSDi6gW JeyviZ7VMFvgiWVwN/JfpDFzEDyy+g1xQ5ewtZfPrGL67G1KOpMeEIpLHSUnvvkq G+5hrnwOH7OxBagfpEpNRSFwAimY/OeeM6Y+ba+wBP1ngOxxaEIDTuUksmo7q4B+ DrcvdOg9GdMNeJU4us/7heFyNgF7Xs1wfLXfEYX/spZaIpYrsmq6gow= -----END CERTIFICATE-----Generated at Sun May 5 06:13:40 2024 by rpki-client on console-ams.rpki-client.org