$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/861/kjJM0y2oMYDfjy3wXpWpnyuNviI.roa File: kjJM0y2oMYDfjy3wXpWpnyuNviI.roa (raw, json) Hash identifier: WeUoKU26x82u6neTsxe4JUSptPM1sxzrvySPulzAAjk= Subject key identifier: 92:32:4C:D3:2D:A8:31:80:DF:8F:2D:F0:5E:95:A9:9F:2B:8D:BE:22 Certificate issuer: /CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E Certificate serial: 0D91 Authority key identifier: 61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/kjJM0y2oMYDfjy3wXpWpnyuNviI.roa Signing time: Wed 13 Mar 2024 01:21:21 +0000 ROA not before: Wed 13 Mar 2024 01:21:21 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59043 IP address blocks: 103.56.184.0/24 maxlen: 24 103.56.185.0/24 maxlen: 24 103.56.186.0/24 maxlen: 24 103.56.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3473 (0xd91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E Validity Not Before: Mar 13 01:21:21 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=92324CD32DA83180DF8F2DF05E95A99F2B8DBE22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:99:ce:6c:12:68:8f:b2:70:10:d5:9b:d2: ae:17:89:49:cd:03:ba:0f:fa:dc:22:0a:67:22:ed: 44:14:04:7e:e4:1b:3c:be:35:72:83:7c:3a:1b:b2: 5a:4c:b3:52:de:fc:0a:0b:b1:3a:ff:f8:a9:69:53: e8:d0:27:38:2a:8e:37:3c:2b:9a:db:fb:f5:89:60: ee:c5:6c:13:6d:6d:e0:aa:78:d5:4f:59:22:a7:42: 53:8a:64:f3:be:79:b8:a6:e6:5c:53:c8:8b:63:dd: cd:ae:c6:65:42:22:54:5e:25:b5:5c:b7:46:66:71: a6:31:40:2a:3c:5a:9f:0d:c7:ca:42:47:cd:f1:5f: 20:b1:d3:05:d9:af:5e:09:55:b0:5a:e1:c9:b6:f6: ff:ae:49:f6:f7:f1:f2:5b:c0:94:c0:fc:2c:b7:c1: 45:8c:12:0c:4b:f1:29:a5:d6:66:07:b3:35:18:78: fe:39:66:c8:c1:85:b2:e4:15:04:79:5d:b6:73:cb: 2d:a6:c2:0e:aa:c2:bd:d3:ee:ff:00:70:01:11:19: 62:76:56:c8:21:36:b4:6f:40:aa:47:3f:78:86:52: 0e:af:fa:49:93:93:76:96:3b:90:d3:11:5a:e4:66: b5:ce:5c:e6:5b:45:07:27:8b:f4:a8:73:d9:7d:48: 33:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:32:4C:D3:2D:A8:31:80:DF:8F:2D:F0:5E:95:A9:9F:2B:8D:BE:22 X509v3 Authority Key Identifier: keyid:61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/kjJM0y2oMYDfjy3wXpWpnyuNviI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.56.184.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:c0:12:f3:5b:61:e9:cf:10:03:3d:a8:98:38:b2:69:5e:42: 77:d3:e2:b7:eb:39:79:a4:c0:26:c2:24:ce:4e:72:ae:75:6c: 43:d9:22:79:08:53:45:df:dd:4a:52:71:dc:b5:cf:03:0c:b0: ce:08:28:71:b3:5d:ae:93:8b:95:ab:75:fb:fb:19:14:25:b5: 6c:58:0a:db:94:76:80:a0:4d:8e:4c:bb:ef:aa:cc:95:81:46: 26:8f:a9:16:9a:d4:7e:36:b9:04:02:2a:56:c9:c5:11:88:ae: f5:ad:02:39:3b:f4:92:3d:86:61:65:6a:45:3f:55:e0:85:88: 40:fd:58:09:0a:36:02:35:e4:a9:bd:2d:a4:e0:72:c4:c0:02: bb:ff:d5:b5:82:e7:d4:98:9c:22:49:2a:98:51:6c:38:3c:84: 72:78:ef:87:3e:0f:d5:77:d0:01:3f:68:71:8a:87:99:6e:2b: 98:89:f3:58:44:05:de:55:ad:71:31:90:d3:34:69:73:c3:ed: 3f:47:b0:c6:c9:a2:40:f9:5f:a0:10:70:47:e5:44:b7:12:72: 03:ef:bf:97:5b:1e:30:f0:f7:14:4b:15:9a:44:5b:37:ed:78: 0f:56:cf:d5:d7:be:24:90:b9:07:1f:99:6a:d2:53:4e:b2:4b: 02:53:62:08 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICDZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1 QkNFOEY3RjhBODNEQjkzOUFFMEY0MkZBMDU0MTNCMjg1MTgxRTAeFw0yNDAzMTMw MTIxMjFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDkyMzI0Q0QzMkRBODMx ODBERjhGMkRGMDVFOTVBOTlGMkI4REJFMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwAJnObBJoj7JwENWb0q4XiUnNA7oP+twiCmci7UQUBH7kGzy+ NXKDfDobslpMs1Le/AoLsTr/+KlpU+jQJzgqjjc8K5rb+/WJYO7FbBNtbeCqeNVP WSKnQlOKZPO+ebim5lxTyItj3c2uxmVCIlReJbVct0ZmcaYxQCo8Wp8Nx8pCR83x XyCx0wXZr14JVbBa4cm29v+uSfb38fJbwJTA/Cy3wUWMEgxL8Sml1mYHszUYeP45 ZsjBhbLkFQR5XbZzyy2mwg6qwr3T7v8AcAERGWJ2VsghNrRvQKpHP3iGUg6v+kmT k3aWO5DTEVrkZrXOXOZbRQcni/Soc9l9SDMNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUkjJM0y2oMYDfjy3wXpWpnyuNviIwHwYDVR0jBBgwFoAUYVvOj3+Kg9uTmuD0 L6BUE7KFGB4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYx L1lWdk9qMy1LZzl1VG11RDBMNkJVRTdLRkdCNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWVZ2T2ozLUtnOXVUbXVEMEw2QlVFN0tGR0I0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYxL2tqSk0weTJvTVlEZmp5 M3dYcFdwbnl1TnZpSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnOLgwDQYJKoZIhvcNAQELBQADggEBAErAEvNbYenPEAM9qJg4smleQnfT4rfr OXmkwCbCJM5Ocq51bEPZInkIU0Xf3UpScdy1zwMMsM4IKHGzXa6Ti5Wrdfv7GRQl tWxYCtuUdoCgTY5Mu++qzJWBRiaPqRaa1H42uQQCKlbJxRGIrvWtAjk79JI9hmFl akU/VeCFiED9WAkKNgI15Km9LaTgcsTAArv/1bWC59SYnCJJKphRbDg8hHJ474c+ D9V30AE/aHGKh5luK5iJ81hEBd5VrXExkNM0aXPD7T9HsMbJokD5X6AQcEflRLcS cgPvv5dbHjDw9xRLFZpEWzfteA9Wz9XXviSQuQcfmWrSU06ySwJTYgg= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:14 2024 by rpki-client on console-fra.rpki-client.org