$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/_FBFzZErc3Sb4m_WAbJ9J-a9TGA.roa File: _FBFzZErc3Sb4m_WAbJ9J-a9TGA.roa (raw, json) Hash identifier: 0oChuwUJEwYJ12QmgS/INE9IQlx/ca/N9K7fTNs7K08= Subject key identifier: FC:50:45:CD:91:2B:73:74:9B:E2:6F:D6:01:B2:7D:27:E6:BD:4C:60 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 19A6 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/_FBFzZErc3Sb4m_WAbJ9J-a9TGA.roa Signing time: Sat 27 Jul 2024 07:45:34 +0000 ROA not before: Sat 27 Jul 2024 07:45:34 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 4811 IP address blocks: 103.237.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6566 (0x19a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Jul 27 07:45:34 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=FC5045CD912B73749BE26FD601B27D27E6BD4C60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:84:fe:8d:37:58:bf:a8:0d:de:44:07:75: c8:2a:83:72:ff:45:1b:b8:10:7b:97:cd:b0:66:ae: 9b:92:06:76:a5:69:32:57:59:4f:0c:78:7a:8a:7f: b2:3a:ca:29:58:06:32:4c:e0:da:fc:9c:dc:b4:3d: 8e:fd:26:33:a9:d9:68:32:00:7a:8c:91:fd:55:42: 09:6a:90:5a:41:2c:16:52:3a:66:f8:b0:67:e4:d9: 17:48:83:da:7a:44:dd:a8:da:c3:30:8c:e6:27:3d: f4:8d:bc:b0:25:47:83:f5:d6:02:03:98:7f:82:0d: eb:ef:5e:6a:38:2c:b8:68:69:06:a7:d4:31:da:7c: cc:cd:a6:b4:16:10:cd:fd:51:eb:a7:49:05:84:f9: 4c:3b:51:b5:9d:48:97:37:80:65:5e:d1:56:e0:f2: d3:84:67:61:a4:e8:7e:26:68:cb:56:c4:2c:d5:8d: a3:b5:13:a5:e0:cb:83:4b:04:4e:51:92:60:c3:ee: 42:70:cb:00:7d:49:dd:19:52:b3:a6:77:da:64:93: 05:6e:ff:82:cd:9c:fb:43:04:fb:46:7d:29:0e:78: 5f:db:34:a4:dc:3a:a6:e5:19:f6:0e:4b:0e:38:31: d4:0b:8c:85:1d:1f:a5:d9:11:fd:67:12:3f:5b:fb: e6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:50:45:CD:91:2B:73:74:9B:E2:6F:D6:01:B2:7D:27:E6:BD:4C:60 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/_FBFzZErc3Sb4m_WAbJ9J-a9TGA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.237.28.0/23 Signature Algorithm: sha256WithRSAEncryption ad:68:25:8a:ad:00:af:10:46:0b:83:e6:94:5c:05:e9:ab:29: e0:39:22:99:d4:1e:a0:d3:c4:4b:c8:cc:c4:8d:39:dd:a7:f8: 90:c3:1c:06:34:ea:f7:d1:86:50:03:8f:d7:50:25:af:5e:20: 6f:cc:00:7c:2c:ed:10:c6:e0:49:c4:03:49:ab:5f:25:d2:9c: 53:64:7a:c8:37:3a:9a:67:3b:2c:c0:d5:48:1c:6c:67:d0:67: aa:99:03:9b:6b:33:22:37:5c:01:2b:f8:94:bb:98:4f:b5:ce: 7c:7c:49:1a:cf:2c:bd:07:55:57:38:b8:68:b9:48:aa:0e:02: d9:ea:ed:5c:a7:d9:39:41:dc:64:9d:bd:83:54:1b:1f:f8:16: 19:ad:9c:af:b6:a2:5b:cc:5f:bd:fa:8b:48:cb:be:81:e7:7e: f5:21:a8:5b:a7:be:07:f9:5f:05:0a:2b:a0:b3:59:59:07:8d: f0:15:98:d5:e0:77:74:33:d0:3c:b1:54:67:c8:f3:1b:de:66: 44:f6:28:e2:7b:c4:a9:6a:7d:0b:d7:7f:c6:61:ea:b4:59:0d: be:a7:a3:b0:e6:e9:e9:2e:49:3b:50:79:39:61:58:ce:4e:c3: 6f:82:18:7e:e8:91:fa:d7:cb:69:75:ff:3d:75:e9:22:f9:d8: 63:df:da:f5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNDA3Mjcw NzQ1MzRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZDNTA0NUNEOTEyQjcz NzQ5QkUyNkZENjAxQjI3RDI3RTZCRDRDNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG3YT+jTdYv6gN3kQHdcgqg3L/RRu4EHuXzbBmrpuSBnalaTJX WU8MeHqKf7I6yilYBjJM4Nr8nNy0PY79JjOp2WgyAHqMkf1VQglqkFpBLBZSOmb4 sGfk2RdIg9p6RN2o2sMwjOYnPfSNvLAlR4P11gIDmH+CDevvXmo4LLhoaQan1DHa fMzNprQWEM39UeunSQWE+Uw7UbWdSJc3gGVe0Vbg8tOEZ2Gk6H4maMtWxCzVjaO1 E6Xgy4NLBE5RkmDD7kJwywB9Sd0ZUrOmd9pkkwVu/4LNnPtDBPtGfSkOeF/bNKTc OqblGfYOSw44MdQLjIUdH6XZEf1nEj9b++brAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU/FBFzZErc3Sb4m/WAbJ9J+a9TGAwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L19GQkZ6WkVyYzNTYjRt X1dBYko5Si1hOVRHQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn7RwwDQYJKoZIhvcNAQELBQADggEBAK1oJYqtAK8QRguD5pRcBemrKeA5IpnU HqDTxEvIzMSNOd2n+JDDHAY06vfRhlADj9dQJa9eIG/MAHws7RDG4EnEA0mrXyXS nFNkesg3OppnOyzA1UgcbGfQZ6qZA5trMyI3XAEr+JS7mE+1znx8SRrPLL0HVVc4 uGi5SKoOAtnq7Vyn2TlB3GSdvYNUGx/4FhmtnK+2olvMX736i0jLvoHnfvUhqFun vgf5XwUKK6CzWVkHjfAVmNXgd3Qz0DyxVGfI8xveZkT2KOJ7xKlqfQvXf8Zh6rRZ Db6no7Dm6ekuSTtQeTlhWM5Ow2+CGH7okfrXy2l1/z116SL52GPf2vU= -----END CERTIFICATE-----Generated at Fri Nov 22 17:36:48 2024 by rpki-client on console-ams.rpki-client.org