$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3205/wi3AQ2SnB-nCPTkeEuii7qAqqvk.roa File: wi3AQ2SnB-nCPTkeEuii7qAqqvk.roa (raw, json) Hash identifier: U8S66fek+o2nZcWY/AF8SOMd1b3sFKiZmdaAmbXeoXc= Subject key identifier: C2:2D:C0:43:64:A7:07:E9:C2:3D:39:1E:12:E8:A2:EE:A0:2A:AA:F9 Certificate issuer: /CN=581041F42679F5E17F19C37E490A7794863B2BEB Certificate serial: 03 Authority key identifier: 58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/wi3AQ2SnB-nCPTkeEuii7qAqqvk.roa Signing time: Mon 10 Jul 2023 09:44:54 +0000 ROA not before: Mon 10 Jul 2023 09:44:54 +0000 ROA not after: Tue 09 Jul 2024 09:42:15 +0000 asID: 4812 IP address blocks: 103.96.224.0/23 maxlen: 24 103.96.224.0/24 maxlen: 24 103.96.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581041F42679F5E17F19C37E490A7794863B2BEB Validity Not Before: Jul 10 09:44:54 2023 GMT Not After : Jul 9 09:42:15 2024 GMT Subject: CN=C22DC04364A707E9C23D391E12E8A2EEA02AAAF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3a:bc:be:69:a4:01:f5:34:cf:00:2a:2c:f3: c1:b7:00:d8:42:b1:be:f6:4e:b0:02:1d:4a:44:74: 28:e0:f1:65:03:f5:c2:76:c3:8a:a8:d9:77:d6:6e: 0f:8e:6f:b9:b0:d9:1c:e7:32:a7:e6:04:7f:5c:b0: f2:d7:33:fd:ee:6c:1d:e7:a9:37:db:15:e0:37:86: 8c:91:11:fe:c2:7b:e7:a1:bf:76:27:66:9c:52:ae: c2:b5:29:41:d5:d4:3a:49:8d:d0:41:84:40:12:c1: 2f:49:5e:13:18:0f:d2:45:68:5b:63:25:61:0e:cc: 74:0f:e5:9e:cb:99:b2:59:32:32:8e:55:57:f3:9c: 3a:5b:b0:5f:cd:1d:ff:8e:4c:16:f7:b6:af:ad:e2: d1:70:da:96:6c:72:9e:3c:14:03:ac:b9:93:16:e4: 44:01:b8:ba:50:bb:d7:bf:bd:3f:3d:82:74:73:7c: 41:b5:34:44:99:d5:11:e5:2a:71:48:6b:8d:e5:aa: 00:00:58:1e:e5:d5:54:4e:0c:51:c0:cb:4f:ea:e9: 0e:96:e8:d8:fc:02:8d:51:87:83:7d:f3:c5:4e:b8: 80:cc:9e:d2:77:bf:2a:3a:8e:ac:96:4f:5f:fe:24: 83:cd:45:4d:bb:63:40:cf:0f:93:da:81:d0:f9:58: 06:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2D:C0:43:64:A7:07:E9:C2:3D:39:1E:12:E8:A2:EE:A0:2A:AA:F9 X509v3 Authority Key Identifier: keyid:58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/wi3AQ2SnB-nCPTkeEuii7qAqqvk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.96.224.0/23 Signature Algorithm: sha256WithRSAEncryption 43:f4:03:b3:15:d6:d6:c2:5e:37:21:fd:78:4b:65:8e:9a:b9: 5c:2e:d2:ad:c5:e6:19:bd:9f:b9:04:49:56:b8:0e:63:cb:c1: ce:e4:ad:77:38:47:ba:17:4b:d4:8e:9d:43:78:a8:4c:ac:58: fc:cb:f1:fa:c6:e1:2f:96:44:aa:e7:47:50:2f:4e:41:55:e5: ea:2c:a3:0f:f9:27:d2:04:d8:39:68:37:db:ec:a4:e7:79:c8: 09:74:8f:0e:0a:83:31:e8:54:63:53:76:05:c8:a5:28:ae:aa: 6d:56:00:3b:e3:ad:21:02:51:12:8a:d0:64:d5:25:76:ab:fa: 5e:99:8f:61:2e:79:f5:dd:a3:bd:02:ce:e3:74:b7:91:47:52: 69:37:6a:d8:2d:25:d1:d5:fe:b5:82:79:60:ac:af:ae:72:f4: 9b:3c:f4:3a:e1:6f:02:ec:15:42:49:f8:dc:02:24:ca:4d:52: 6c:e6:f7:6c:2b:fb:00:ca:8c:41:60:9b:98:fe:ef:88:5a:e4: 68:60:95:9d:a9:c3:0e:88:76:cf:c2:a2:a9:17:e1:c3:57:fb: 46:76:6a:93:61:0c:32:5d:8b:a9:13:17:e8:c6:ba:25:90:95: a6:01:60:9b:0c:51:38:35:b4:82:1a:38:4f:8b:fe:41:ee:40: 35:c7:90:0d -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1ODEw NDFGNDI2NzlGNUUxN0YxOUMzN0U0OTBBNzc5NDg2M0IyQkVCMB4XDTIzMDcxMDA5 NDQ1NFoXDTI0MDcwOTA5NDIxNVowMzExMC8GA1UEAxMoQzIyREMwNDM2NEE3MDdF OUMyM0QzOTFFMTJFOEEyRUVBMDJBQUFGOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPQ6vL5ppAH1NM8AKizzwbcA2EKxvvZOsAIdSkR0KODxZQP1wnbD iqjZd9ZuD45vubDZHOcyp+YEf1yw8tcz/e5sHeepN9sV4DeGjJER/sJ756G/didm nFKuwrUpQdXUOkmN0EGEQBLBL0leExgP0kVoW2MlYQ7MdA/lnsuZslkyMo5VV/Oc OluwX80d/45MFve2r63i0XDalmxynjwUA6y5kxbkRAG4ulC717+9Pz2CdHN8QbU0 RJnVEeUqcUhrjeWqAABYHuXVVE4MUcDLT+rpDpbo2PwCjVGHg33zxU64gMye0ne/ KjqOrJZPX/4kg81FTbtjQM8Pk9qB0PlYBncCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBTCLcBDZKcH6cI9OR4S6KLuoCqq+TAfBgNVHSMEGDAWgBRYEEH0Jnn14X8Zw35J CneUhjsr6zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMjA1 L1dCQkI5Q1o1OWVGX0djTi1TUXAzbElZN0stcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0JCQjlDWjU5ZUZfR2NOLVNRcDNsSVk3Sy1zLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIwNS93aTNBUTJTbkItbkNQ VGtlRXVpaTdxQXFxdmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ2DgMA0GCSqGSIb3DQEBCwUAA4IBAQBD9AOzFdbWwl43If14S2WOmrlcLtKt xeYZvZ+5BElWuA5jy8HO5K13OEe6F0vUjp1DeKhMrFj8y/H6xuEvlkSq50dQL05B VeXqLKMP+SfSBNg5aDfb7KTnecgJdI8OCoMx6FRjU3YFyKUorqptVgA7460hAlES itBk1SV2q/pemY9hLnn13aO9As7jdLeRR1JpN2rYLSXR1f61gnlgrK+ucvSbPPQ6 4W8C7BVCSfjcAiTKTVJs5vdsK/sAyoxBYJuY/u+IWuRoYJWdqcMOiHbPwqKpF+HD V/tGdmqTYQwyXYupExfoxrolkJWmAWCbDFE4NbSCGjhPi/5B7kA1x5AN -----END CERTIFICATE-----Generated at Tue Jun 25 02:55:24 2024 by rpki-client on console.sobornost.net