$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/0/326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa File: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (raw, json) Hash identifier: /ary5zP9OQDMFHRngTCodTLCsHVfTXFD9vmLwzXrQjo= Subject key identifier: 3D:1B:19:CE:19:EF:33:6F:5F:74:24:FB:65:5F:EE:D3:57:CD:43:B0 Certificate issuer: /CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Certificate serial: 55010924797898AC3EA7ABFC49FDEF6A7060D694 Authority key identifier: 5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/0/326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa Signing time: Sun 31 May 2026 17:34:30 +0000 ROA not before: Sun 31 May 2026 17:29:30 +0000 ROA not after: Sun 30 May 2027 17:34:30 +0000 asID: 151673 IP address blocks: 2a14:7581:3800::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 02:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:01:09:24:79:78:98:ac:3e:a7:ab:fc:49:fd:ef:6a:70:60:d6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Validity Not Before: May 31 17:29:30 2026 GMT Not After : May 30 17:34:30 2027 GMT Subject: CN=3D1B19CE19EF336F5F7424FB655FEED357CD43B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:cd:f4:46:84:d5:e0:9d:f7:9a:22:e7:44: 53:0d:68:5a:77:dc:a4:69:46:5f:3a:8a:5b:3d:a7: 65:a1:f0:a9:8a:9d:d0:9f:2a:5f:97:88:e0:e3:ae: f9:9a:6a:dc:db:cf:e5:e6:e9:8d:ef:e7:4d:01:20: 82:13:e8:aa:60:2e:7f:8a:ae:02:af:60:8e:57:d6: a1:87:00:2e:d7:b3:e0:5d:93:8c:e4:be:11:91:39: 41:c8:f8:51:84:b3:e7:06:28:1b:fa:f7:b4:a2:4a: 0b:b3:ee:52:33:0f:95:3b:6d:93:57:00:67:7e:7b: 1d:b8:33:d8:52:4a:f8:41:36:85:a8:36:34:ac:d1: c1:d7:76:b9:0a:00:16:c5:22:a7:08:67:b1:5f:4f: 0b:39:b9:11:f4:8b:11:04:36:ec:2b:23:ad:0d:e8: b5:78:df:3f:77:b1:07:53:1f:aa:d7:d0:59:53:7f: 7c:91:0b:bd:15:34:b8:49:4f:30:61:e0:de:14:fd: a9:4d:3b:4f:20:78:19:82:2e:35:89:64:63:6a:32: f6:57:d9:1e:c8:50:50:16:18:d5:3e:ed:d2:f1:29: f1:d4:51:12:5a:78:0b:30:54:65:bf:63:f5:82:65: eb:76:00:b2:cb:5e:55:1c:3d:6c:63:ff:6f:db:d4: 66:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1B:19:CE:19:EF:33:6F:5F:74:24:FB:65:5F:EE:D3:57:CD:43:B0 X509v3 Authority Key Identifier: keyid:5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/0/326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3800::/40 Signature Algorithm: sha256WithRSAEncryption 44:76:4c:49:14:ad:9a:4c:a4:0f:e0:0a:35:35:a6:12:ec:5a: 89:fc:7e:d9:77:96:28:e8:43:81:4f:5d:56:11:49:2f:80:0c: 12:18:cc:4d:38:1a:3d:c5:7c:89:41:d3:ee:d6:9f:88:a9:a4: 84:83:6a:17:37:ce:b9:6c:42:4d:e7:b9:0c:2f:e0:88:28:88: 46:ba:6e:c8:75:16:f2:9e:6f:8d:9f:0a:e9:47:ac:91:a9:68: b6:7a:a2:ab:b9:83:8f:05:6d:ac:02:6c:22:f3:51:59:5b:ec: ac:74:e3:89:8e:38:88:d0:4d:7d:d7:ef:58:29:9b:fc:ee:aa: 04:cf:78:ae:fc:4a:b0:58:7a:cb:66:87:bf:b3:35:af:40:f2: c0:32:1e:48:1d:ad:be:0b:e2:45:2e:e3:c5:9a:a5:9c:13:06: b8:88:7f:9f:ce:f1:15:c5:a4:b0:6f:f6:46:7e:63:17:34:1c: 21:54:9f:e3:c4:df:8b:42:cb:ae:99:f9:32:e7:92:df:3a:c0: 64:62:ce:5e:60:43:06:74:29:3a:07:2f:dc:f2:ba:d6:25:05: 70:2f:d7:6b:df:58:42:07:aa:1f:c0:ec:c0:19:9b:3b:ed:b1: c3:f1:25:84:31:97:bf:8e:b4:e8:e5:9b:fb:42:06:2a:75:3b: 55:2b:bf:a9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUVQEJJHl4mKw+p6v8Sf3vanBg1pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI5QzQ1OUZFRDVFMjg5MjFENkQ1N0EzNDJBODU1QTFC QTk2OTg5NzAeFw0yNjA1MzExNzI5MzBaFw0yNzA1MzAxNzM0MzBaMDMxMTAvBgNV BAMTKDNEMUIxOUNFMTlFRjMzNkY1Rjc0MjRGQjY1NUZFRUQzNTdDRDQzQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzBs30RoTV4J33miLnRFMNaFp3 3KRpRl86ils9p2Wh8KmKndCfKl+XiODjrvmaatzbz+Xm6Y3v500BIIIT6KpgLn+K rgKvYI5X1qGHAC7Xs+Bdk4zkvhGROUHI+FGEs+cGKBv697SiSguz7lIzD5U7bZNX AGd+ex24M9hSSvhBNoWoNjSs0cHXdrkKABbFIqcIZ7FfTws5uRH0ixEENuwrI60N 6LV43z93sQdTH6rX0FlTf3yRC70VNLhJTzBh4N4U/alNO08geBmCLjWJZGNqMvZX 2R7IUFAWGNU+7dLxKfHUURJaeAswVGW/Y/WCZet2ALLLXlUcPWxj/2/b1GaxAgMB AAGjggIYMIICFDAdBgNVHQ4EFgQUPRsZzhnvM29fdCT7ZV/u01fNQ7AwHwYDVR0j BBgwFoAUW5xFn+1eKJIdbVejQqhVobqWmJcwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMC81 QjlDNDU5RkVENUUyODkyMUQ2RDU3QTM0MkE4NTVBMUJBOTY5ODk3LmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZENTdBMzQyQTg1NUEx QkE5Njk4OTcuY2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuGZnJzeW5j Oi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMC8zMjYxMzEzNDNhMzczNTM4MzEz YTMzMzgzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzEzNTMxMzYzNzMzLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAKhR1gTgwDQYJKoZIhvcNAQELBQADggEBAER2TEkUrZpMpA/gCjU1 phLsWon8ftl3lijoQ4FPXVYRSS+ADBIYzE04Gj3FfIlB0+7Wn4ippISDahc3zrls Qk3nuQwv4IgoiEa6bsh1FvKeb42fCulHrJGpaLZ6oqu5g48FbawCbCLzUVlb7Kx0 44mOOIjQTX3X71gpm/zuqgTPeK78SrBYestmh7+zNa9A8sAyHkgdrb4L4kUu48Wa pZwTBriIf5/O8RXFpLBv9kZ+Yxc0HCFUn+PE34tCy66Z+TLnkt86wGRizl5gQwZ0 KToHL9zyutYlBXAv12vfWEIHqh/A7MAZmzvtscPxJYQxl7+OtOjlm/tCBip1O1Ur v6k= -----END CERTIFICATE-----Generated at Sat Jun 6 10:31:04 2026 by rpki-client