$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3205/WAhyv_u9T4jxKmZwhKBMIEqvmVk.roa File: WAhyv_u9T4jxKmZwhKBMIEqvmVk.roa (raw, json) Hash identifier: aJW/hSzLpmjXLjPmAn79jkg04V9fT7OXUVSdWOw8/yc= Subject key identifier: 58:08:72:BF:FB:BD:4F:88:F1:2A:66:70:84:A0:4C:20:4A:AF:99:59 Certificate issuer: /CN=581041F42679F5E17F19C37E490A7794863B2BEB Certificate serial: 04 Authority key identifier: 58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WAhyv_u9T4jxKmZwhKBMIEqvmVk.roa Signing time: Mon 10 Jul 2023 09:44:54 +0000 ROA not before: Mon 10 Jul 2023 09:44:54 +0000 ROA not after: Tue 09 Jul 2024 09:42:15 +0000 asID: 17621 IP address blocks: 103.96.224.0/23 maxlen: 24 103.96.224.0/24 maxlen: 24 103.96.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581041F42679F5E17F19C37E490A7794863B2BEB Validity Not Before: Jul 10 09:44:54 2023 GMT Not After : Jul 9 09:42:15 2024 GMT Subject: CN=580872BFFBBD4F88F12A667084A04C204AAF9959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:b2:3b:53:b3:f7:93:68:ee:d4:4e:98:65: dc:9a:dd:a7:69:39:8a:93:73:13:52:12:b0:2f:88: cc:a6:e1:11:70:29:ac:ff:3c:70:d1:6c:ac:02:a7: 83:0c:f0:c4:a4:89:7d:8a:0a:65:ea:f9:a0:df:84: d8:65:b0:d9:e0:d4:8c:75:59:ff:0b:b8:85:38:d5: af:28:32:85:72:c5:d2:dc:f2:b0:24:ad:ff:84:dd: 6e:85:74:94:e7:a3:4f:4b:82:ca:69:f6:0c:fc:79: df:91:c6:e3:de:57:be:0b:f9:f7:0c:02:b9:58:26: f2:54:ce:a6:8e:05:b2:3b:8f:2b:52:f9:23:bc:e2: a7:c5:a7:2b:06:94:62:69:e1:85:7e:3f:2e:7d:d7: ef:5f:c3:8e:5a:b4:de:90:fc:f3:b8:28:93:c6:d1: 16:bc:88:8b:bb:ab:79:17:95:09:6c:15:a9:8d:76: 0b:f4:fe:33:ce:60:e0:c3:41:c8:6e:56:96:a7:e9: b7:74:94:43:0d:2f:1e:df:d2:58:8f:26:34:05:31: 9f:aa:de:cc:7a:55:11:a4:fb:23:e1:09:33:27:7d: f3:0f:76:4c:2e:fd:ed:24:ac:5b:4a:18:c9:10:b4: 2b:28:98:89:09:9b:50:de:7c:55:51:1e:94:0a:31: d7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:08:72:BF:FB:BD:4F:88:F1:2A:66:70:84:A0:4C:20:4A:AF:99:59 X509v3 Authority Key Identifier: keyid:58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WAhyv_u9T4jxKmZwhKBMIEqvmVk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.96.224.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:be:41:5d:4a:36:b4:93:eb:ea:1e:7a:64:a0:66:6a:c8:02: c1:49:6b:6f:f6:36:35:eb:90:3b:25:e4:fb:de:cb:a2:57:ee: fc:71:20:5a:61:9b:83:b9:0b:a0:48:35:40:bd:53:7f:f4:db: cf:d4:6f:bf:cd:fc:b2:c1:76:d5:e6:7b:7c:2a:ff:ce:72:6d: 8f:de:62:5b:73:95:f7:5f:ad:72:32:7f:4c:d7:64:a8:40:57: 9b:d7:0d:50:68:b9:9e:76:36:21:91:fa:dd:6d:4b:46:39:c7: b3:06:a5:29:f8:6c:72:7e:e0:b2:08:26:d2:80:5b:4c:eb:37: db:a9:7e:7e:f7:c7:3f:fb:7f:c6:a0:2b:1f:bb:f6:d1:8e:69: 47:b3:c4:36:28:5f:11:eb:58:e0:57:a4:c1:6c:72:eb:96:91: 18:62:ac:80:4d:e2:97:23:51:85:54:ab:61:ee:67:b1:c5:69: 08:34:27:70:28:a3:0f:77:96:18:23:11:ea:ac:29:1d:51:ea: 63:b5:f9:91:2f:77:37:c9:43:d3:1c:48:ab:e2:91:b5:2f:bd: ad:ae:b0:6c:6e:31:06:7c:54:8a:a0:d3:6d:c1:42:a9:bc:dc: aa:4d:04:47:71:c0:2b:af:5f:a8:85:ea:85:31:d9:ea:29:a2: 62:d2:28:3a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1ODEw NDFGNDI2NzlGNUUxN0YxOUMzN0U0OTBBNzc5NDg2M0IyQkVCMB4XDTIzMDcxMDA5 NDQ1NFoXDTI0MDcwOTA5NDIxNVowMzExMC8GA1UEAxMoNTgwODcyQkZGQkJENEY4 OEYxMkE2NjcwODRBMDRDMjA0QUFGOTk1OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMXksjtTs/eTaO7UTphl3Jrdp2k5ipNzE1ISsC+IzKbhEXAprP88 cNFsrAKngwzwxKSJfYoKZer5oN+E2GWw2eDUjHVZ/wu4hTjVrygyhXLF0tzysCSt /4TdboV0lOejT0uCymn2DPx535HG495Xvgv59wwCuVgm8lTOpo4FsjuPK1L5I7zi p8WnKwaUYmnhhX4/Ln3X71/Djlq03pD887gok8bRFryIi7ureReVCWwVqY12C/T+ M85g4MNByG5Wlqfpt3SUQw0vHt/SWI8mNAUxn6rezHpVEaT7I+EJMyd98w92TC79 7SSsW0oYyRC0KyiYiQmbUN58VVEelAox1/sCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRYCHK/+71PiPEqZnCEoEwgSq+ZWTAfBgNVHSMEGDAWgBRYEEH0Jnn14X8Zw35J CneUhjsr6zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMjA1 L1dCQkI5Q1o1OWVGX0djTi1TUXAzbElZN0stcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0JCQjlDWjU5ZUZfR2NOLVNRcDNsSVk3Sy1zLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIwNS9XQWh5dl91OVQ0anhL bVp3aEtCTUlFcXZtVmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ2DgMA0GCSqGSIb3DQEBCwUAA4IBAQCOvkFdSja0k+vqHnpkoGZqyALBSWtv 9jY165A7JeT73suiV+78cSBaYZuDuQugSDVAvVN/9NvP1G+/zfyywXbV5nt8Kv/O cm2P3mJbc5X3X61yMn9M12SoQFeb1w1QaLmedjYhkfrdbUtGOcezBqUp+GxyfuCy CCbSgFtM6zfbqX5+98c/+3/GoCsfu/bRjmlHs8Q2KF8R61jgV6TBbHLrlpEYYqyA TeKXI1GFVKth7mexxWkINCdwKKMPd5YYIxHqrCkdUepjtfmRL3c3yUPTHEir4pG1 L72trrBsbjEGfFSKoNNtwUKpvNyqTQRHccArr1+oheqFMdnqKaJi0ig6 -----END CERTIFICATE-----Generated at Tue Jun 25 02:55:24 2024 by rpki-client on console.sobornost.net