$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/XPYIUyDnLRSes7GeVyB94AB9O24.roa File: XPYIUyDnLRSes7GeVyB94AB9O24.roa (raw, json) Hash identifier: aLE36WnV0gfnPcj2f32ypWtr3rhDy3JSuGaju+VwkFk= Subject key identifier: 5C:F6:08:53:20:E7:2D:14:9E:B3:B1:9E:57:20:7D:E0:00:7D:3B:6E Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 1D87 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/XPYIUyDnLRSes7GeVyB94AB9O24.roa Signing time: Thu 12 Sep 2024 11:20:01 +0000 ROA not before: Thu 12 Sep 2024 11:20:01 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 212237 IP address blocks: 2403:6380:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7559 (0x1d87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Sep 12 11:20:01 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=5CF6085320E72D149EB3B19E57207DE0007D3B6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:70:c7:4f:ea:6e:22:ec:ff:80:f9:86:f4:ce: 46:89:36:12:b6:1a:91:35:e3:08:c7:70:8d:5e:85: d2:08:de:51:4e:73:96:9d:6a:dc:14:52:40:fd:ba: 98:fb:f8:37:82:8a:4d:d2:0a:c3:5f:fe:2e:6e:85: 47:b6:da:54:85:d6:9f:32:49:3e:fe:35:57:cd:37: 0c:3e:7b:a7:7a:96:c1:59:c9:2f:74:10:ed:83:5d: 0c:d3:c1:e6:89:07:89:01:15:9a:dc:48:91:b9:f7: d3:cd:c6:8a:33:6b:e3:08:3b:77:f6:38:ec:67:2f: bb:fc:d9:12:34:ab:55:c8:4e:fb:8f:c3:af:2f:89: fe:b1:91:aa:26:27:c6:7b:8f:52:28:38:2b:05:a9: 2b:87:25:6b:c2:d5:24:10:0b:0a:21:0f:05:8a:01: 45:75:96:5e:9c:90:d0:42:d3:24:b2:54:a6:93:b7: 9c:04:d1:0e:c1:7c:a5:a7:9e:81:68:0b:23:cd:91: 0a:0c:6a:a2:96:da:28:9e:92:c8:71:40:94:3f:31: 62:ac:53:9e:99:23:c8:f7:c9:1f:bd:dc:5c:30:0f: e8:78:1f:8b:5b:04:62:b8:3b:38:00:98:bb:97:1c: 6e:d6:e5:1f:0c:7b:0d:ea:95:5c:8f:ad:6d:08:44: 6a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F6:08:53:20:E7:2D:14:9E:B3:B1:9E:57:20:7D:E0:00:7D:3B:6E X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/XPYIUyDnLRSes7GeVyB94AB9O24.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:6380:11::/48 Signature Algorithm: sha256WithRSAEncryption d5:66:43:ac:c7:e6:1e:0e:1d:73:32:b4:1b:0f:76:08:a6:7f: f5:06:e3:97:ba:d9:9b:6d:7a:3d:53:5a:a5:5c:ec:9f:08:b6: df:d0:e4:f8:9a:9c:c0:3c:ea:9d:09:6b:d9:65:30:83:de:3c: fd:ce:f5:57:3d:08:48:6e:c1:9d:f5:17:da:16:8b:a3:90:cc: 15:bd:2e:44:7a:ed:c8:8d:a0:72:a1:0e:59:06:91:0d:df:13: 2f:49:80:ff:9b:6c:be:87:6e:cd:1a:c4:a9:ce:6e:a7:10:17: 00:d6:b2:83:97:ff:f9:7b:94:6d:7c:28:8b:05:0f:b2:ff:08: 2c:88:e5:28:ae:9d:ae:c8:da:79:f3:95:88:4d:fe:26:a8:04: d4:61:ef:6e:6e:c7:62:6a:f1:8d:82:6f:b8:13:a1:fe:e2:6c: 4c:a4:63:f9:42:28:65:d0:6a:da:45:2d:43:49:dd:47:43:04: a8:05:fa:f7:d2:9b:c4:37:73:69:70:05:e4:8e:22:47:18:d2: e2:1a:24:13:40:26:5d:b4:f3:8d:1d:a4:23:39:24:e9:a4:51: f0:40:be:62:48:e4:83:16:05:31:23:07:74:c8:6e:09:00:e9: 80:0c:73:36:63:59:48:81:75:68:2c:85:71:4d:cb:64:c6:85: 7f:14:8d:fd -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICHYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNDA5MTIx MTIwMDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVDRjYwODUzMjBFNzJE MTQ5RUIzQjE5RTU3MjA3REUwMDA3RDNCNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0cMdP6m4i7P+A+Yb0zkaJNhK2GpE14wjHcI1ehdII3lFOc5ad atwUUkD9upj7+DeCik3SCsNf/i5uhUe22lSF1p8yST7+NVfNNww+e6d6lsFZyS90 EO2DXQzTweaJB4kBFZrcSJG599PNxooza+MIO3f2OOxnL7v82RI0q1XITvuPw68v if6xkaomJ8Z7j1IoOCsFqSuHJWvC1SQQCwohDwWKAUV1ll6ckNBC0ySyVKaTt5wE 0Q7BfKWnnoFoCyPNkQoMaqKW2iiekshxQJQ/MWKsU56ZI8j3yR+93FwwD+h4H4tb BGK4OzgAmLuXHG7W5R8Mew3qlVyPrW0IRGrzAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUXPYIUyDnLRSes7GeVyB94AB9O24wHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvWFBZSVV5RG5MUlNl czdHZVZ5Qjk0QUI5TzI0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQDY4AAETANBgkqhkiG9w0BAQsFAAOCAQEA1WZDrMfmHg4dczK0Gw92CKZ/ 9Qbjl7rZm216PVNapVzsnwi239Dk+JqcwDzqnQlr2WUwg948/c71Vz0ISG7BnfUX 2haLo5DMFb0uRHrtyI2gcqEOWQaRDd8TL0mA/5tsvoduzRrEqc5upxAXANayg5f/ +XuUbXwoiwUPsv8ILIjlKK6drsjaefOViE3+JqgE1GHvbm7HYmrxjYJvuBOh/uJs TKRj+UIoZdBq2kUtQ0ndR0MEqAX699KbxDdzaXAF5I4iRxjS4hokE0AmXbTzjR2k Izkk6aRR8EC+YkjkgxYFMSMHdMhuCQDpgAxzNmNZSIF1aCyFcU3LZMaFfxSN/Q== -----END CERTIFICATE-----Generated at Fri Nov 22 13:38:12 2024 by rpki-client on console-fra.rpki-client.org