$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/2/326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa File: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (raw, json) Hash identifier: nAQJIz3m4DL0ffcnjUVRZFFoDNAbg8/PAwJ2tYnoprw= Subject key identifier: 45:97:5B:5E:8F:19:D4:FC:86:FD:F7:04:68:49:BF:51:F4:22:48:86 Certificate issuer: /CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Certificate serial: 72B0E1F3CC0901B4F6AEFDCB4B96B1E0657161D7 Authority key identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/2/326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa Signing time: Sun 31 May 2026 17:34:30 +0000 ROA not before: Sun 31 May 2026 17:29:30 +0000 ROA not after: Sun 30 May 2027 17:34:30 +0000 asID: 151673 IP address blocks: 2a14:7586:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 21:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b0:e1:f3:cc:09:01:b4:f6:ae:fd:cb:4b:96:b1:e0:65:71:61:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Validity Not Before: May 31 17:29:30 2026 GMT Not After : May 30 17:34:30 2027 GMT Subject: CN=45975B5E8F19D4FC86FDF7046849BF51F4224886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c6:87:b8:32:fc:29:62:4f:8f:1a:f2:83:6d: 93:1a:13:3b:09:c9:01:a2:ac:f9:eb:f5:c9:a1:12: 66:10:bc:ae:94:c1:af:b2:97:c5:3a:d6:2d:4f:e5: 2c:1c:5c:e0:b8:1e:5f:c9:c6:8b:14:f0:0e:e5:d6: 15:0a:ac:50:cb:0e:43:61:37:f5:34:2d:eb:8b:85: e1:77:bc:e8:f2:c1:52:1a:87:cc:4d:54:11:bd:7c: 4e:c8:e1:b0:63:8a:72:5d:2b:ad:2f:f9:5f:de:48: 5a:db:bc:ae:87:cc:f5:a6:ef:6e:9a:7f:37:50:94: 95:2d:b9:99:60:d8:69:f5:6c:53:e5:93:23:4c:60: b0:04:ae:50:e2:2c:b4:a7:59:0c:98:36:27:11:cc: 9d:35:94:b7:a3:17:2f:49:6c:1a:21:fe:1c:34:a6: 06:d6:78:f3:fd:6b:c7:c0:31:a7:53:87:bf:8f:0f: 0f:2f:45:71:21:e0:c6:b5:c7:38:24:16:be:50:e1: 0a:85:52:4f:49:81:25:52:4e:f8:ef:01:e6:a9:59: f8:d5:a6:e5:e0:be:69:73:ad:1b:3a:77:2f:53:34: 1b:6f:d5:ce:85:4b:bf:d9:3b:9d:de:1d:3b:8d:07: 87:dd:89:4f:51:4b:b9:6a:67:82:ec:fa:f1:6c:71: 46:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:97:5B:5E:8F:19:D4:FC:86:FD:F7:04:68:49:BF:51:F4:22:48:86 X509v3 Authority Key Identifier: keyid:98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/2/326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6000::/40 Signature Algorithm: sha256WithRSAEncryption a2:c6:14:cb:cd:9a:9f:ca:75:af:e7:d2:58:c8:2b:81:6e:44: 57:a5:be:1e:26:0d:68:ba:da:9a:4c:16:e6:7a:ad:9f:20:a0: 75:37:ec:c0:36:cd:2e:40:fc:a1:34:6b:e5:e6:a3:97:69:83: 6a:be:c2:d9:15:e8:c0:de:79:a8:20:b7:cb:fa:29:0a:2c:cf: bf:3a:b7:4c:0e:e9:a0:36:91:89:5a:bf:81:c1:1e:66:1a:b8: 9f:11:05:ca:ed:69:4d:6f:24:0c:bd:b7:31:83:69:35:ed:31: 72:36:48:15:e1:e9:4d:7f:d2:b3:65:1e:65:71:28:fc:03:e1: be:cd:2b:93:51:c4:e0:b4:e9:05:dc:2c:5a:2d:1b:d1:e1:88: 13:14:e4:98:bd:35:52:37:f3:f7:78:67:0c:7d:33:33:d0:14: 24:61:17:b1:a1:18:fb:08:35:dd:92:f9:41:81:d1:f9:f1:71: 8d:64:bc:1a:2f:9e:35:95:9a:99:ec:be:50:7c:ca:d2:fa:ea: 9b:b1:31:5e:eb:da:05:4b:4a:c3:a6:11:0b:0d:2e:ce:d5:b8: fc:56:28:50:3e:44:0f:a3:fd:e3:ec:d8:0f:01:9b:b6:80:1a: 79:41:02:bf:b1:62:a7:de:ae:1a:9e:fb:59:55:26:ab:f5:92: 77:d4:d8:d9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUcrDh88wJAbT2rv3LS5ax4GVxYdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2OEI4QTAxOEQ0MUU5RDQxOEQ5M0I1MkMwQTMxMTc0 RjQwRjExRTAeFw0yNjA1MzExNzI5MzBaFw0yNzA1MzAxNzM0MzBaMDMxMTAvBgNV BAMTKDQ1OTc1QjVFOEYxOUQ0RkM4NkZERjcwNDY4NDlCRjUxRjQyMjQ4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYxoe4MvwpYk+PGvKDbZMaEzsJ yQGirPnr9cmhEmYQvK6Uwa+yl8U61i1P5SwcXOC4Hl/JxosU8A7l1hUKrFDLDkNh N/U0LeuLheF3vOjywVIah8xNVBG9fE7I4bBjinJdK60v+V/eSFrbvK6HzPWm726a fzdQlJUtuZlg2Gn1bFPlkyNMYLAErlDiLLSnWQyYNicRzJ01lLejFy9JbBoh/hw0 pgbWePP9a8fAMadTh7+PDw8vRXEh4Ma1xzgkFr5Q4QqFUk9JgSVSTvjvAeapWfjV puXgvmlzrRs6dy9TNBtv1c6FS7/ZO53eHTuNB4fdiU9RS7lqZ4Ls+vFscUabAgMB AAGjggIYMIICFDAdBgNVHQ4EFgQURZdbXo8Z1PyG/fcEaEm/UfQiSIYwHwYDVR0j BBgwFoAUmGi4oBjUHp1BjZO1LAoxF09A8R4wDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMi85 ODY4QjhBMDE4RDQxRTlENDE4RDkzQjUyQzBBMzExNzRGNDBGMTFFLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y1MzJiOWViLTJmYWUtNDhhOC05Nzkz LTMzZWVjMDY3Y2UzOS8zLzk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3 NEY0MEYxMUUuY2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuGZnJzeW5j Oi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMi8zMjYxMzEzNDNhMzczNTM4MzYz YTM2MzAzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzEzNTMxMzYzNzMzLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAKhR1hmAwDQYJKoZIhvcNAQELBQADggEBAKLGFMvNmp/Kda/n0ljI K4FuRFelvh4mDWi62ppMFuZ6rZ8goHU37MA2zS5A/KE0a+Xmo5dpg2q+wtkV6MDe eaggt8v6KQosz786t0wO6aA2kYlav4HBHmYauJ8RBcrtaU1vJAy9tzGDaTXtMXI2 SBXh6U1/0rNlHmVxKPwD4b7NK5NRxOC06QXcLFotG9HhiBMU5Ji9NVI38/d4Zwx9 MzPQFCRhF7GhGPsINd2S+UGB0fnxcY1kvBovnjWVmpnsvlB8ytL66puxMV7r2gVL SsOmEQsNLs7VuPxWKFA+RA+j/ePs2A8Bm7aAGnlBAr+xYqferhqe+1lVJqv1knfU 2Nk= -----END CERTIFICATE-----Generated at Sat Jun 6 08:14:22 2026 by rpki-client