$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/wDMVCYBsTi-H7TzpVqqaNnaT-U8.roa File: wDMVCYBsTi-H7TzpVqqaNnaT-U8.roa (raw, json) Hash identifier: aCqIRJyc+3BwxvglqHW/KaXOCMDVU2ElRHQfOy6as8M= Subject key identifier: C0:33:15:09:80:6C:4E:2F:87:ED:3C:E9:56:AA:9A:36:76:93:F9:4F Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE Certificate serial: 15C7 Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/wDMVCYBsTi-H7TzpVqqaNnaT-U8.roa Signing time: Wed 13 Mar 2024 01:23:39 +0000 ROA not before: Wed 13 Mar 2024 01:23:39 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24362 IP address blocks: 2400:b600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Sep 2024 23:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5575 (0x15c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE Validity Not Before: Mar 13 01:23:39 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=C0331509806C4E2F87ED3CE956AA9A367693F94F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:a2:e5:4b:89:4e:52:78:93:60:c4:7b:f9: d2:4f:00:06:ff:29:ab:ec:ed:f0:e0:88:ea:2e:54: 59:d3:b5:e2:65:5d:05:93:e1:7c:96:ae:5c:dc:93: 46:e5:ff:e9:8a:0f:49:85:9a:e1:67:95:8e:57:f8: f1:ee:63:ab:58:bf:2a:ee:96:87:16:4d:d5:66:7a: 6b:9d:60:1e:78:0e:b9:61:ec:13:d1:9a:8b:91:e3: 8a:51:ea:28:41:86:d2:40:45:5a:eb:db:15:cd:e5: e3:cd:e4:de:78:e3:2f:29:7b:f3:76:76:34:e6:4f: 19:79:02:28:53:f5:a9:63:e0:7e:e4:68:6f:13:b5: dd:83:c7:43:61:fc:c1:9c:0b:b1:ab:43:2f:45:5e: f9:11:5c:f4:82:7a:d6:c8:41:a7:7c:7a:12:47:86: 53:bf:95:9f:76:da:c1:7a:27:45:db:57:48:b7:92: d7:62:06:73:c0:aa:88:95:5c:14:c9:92:be:80:bb: 7f:a0:c6:ec:a8:04:ec:6c:9e:b4:a7:ff:b0:52:05: 2d:2e:e2:5b:3d:54:68:34:ca:3b:2c:1d:de:7a:25: f4:9a:2f:b5:24:ce:ce:f4:e3:94:31:ba:a9:c6:44: 1a:75:29:b8:3b:4b:4a:13:6c:a1:89:ef:b4:01:c2: 74:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:33:15:09:80:6C:4E:2F:87:ED:3C:E9:56:AA:9A:36:76:93:F9:4F X509v3 Authority Key Identifier: keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/wDMVCYBsTi-H7TzpVqqaNnaT-U8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:b600::/32 Signature Algorithm: sha256WithRSAEncryption 26:d7:04:64:db:84:7a:a8:82:04:0e:e2:56:5e:a8:e8:33:49: a0:e0:ff:ea:e6:b2:87:70:94:0c:26:26:55:e8:d4:7f:b8:23: 73:07:cb:28:6e:75:8b:f4:b4:49:b8:b7:e5:37:97:eb:25:29: 0b:c6:81:39:e2:6a:9a:b7:0c:1e:56:ea:26:73:61:d4:df:16: b2:1c:0a:e6:2a:b0:79:16:56:06:95:fe:62:f6:f5:22:79:1a: 31:70:0f:9f:97:ee:f3:bd:94:52:cb:a6:05:c2:62:3c:bd:51: c1:c2:64:a0:96:e9:5e:42:a3:63:36:4b:46:59:52:39:06:6d: f7:e8:fd:54:f7:14:4e:0e:c9:c6:12:a5:e7:fc:27:b7:45:8c: c9:ca:5b:18:d5:16:e3:79:92:aa:90:ea:08:15:3f:66:d8:d4: c8:71:45:a1:5e:e9:9e:73:af:ad:a0:18:34:75:4b:dc:52:95: 73:11:be:97:a6:4c:ab:2b:96:66:51:13:5f:3d:6e:b4:1b:ae: 1c:f8:d5:23:e9:72:0d:7b:c4:d6:8c:3d:6c:f4:77:d5:fb:27: 52:1a:5d:d1:ec:82:80:e6:f3:fc:64:01:da:70:6f:a5:91:6d: 21:d4:75:9a:46:83:c4:c0:12:94:a2:4b:4f:2a:a1:17:8f:cc: ac:df:cf:85 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjZE NUFGMjE5NTlCN0Y5QzFCMjMwRDcyNTg5OEYxMTFBQUEzRjlBRTAeFw0yNDAzMTMw MTIzMzlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEMwMzMxNTA5ODA2QzRF MkY4N0VEM0NFOTU2QUE5QTM2NzY5M0Y5NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmJqLlS4lOUniTYMR7+dJPAAb/Kavs7fDgiOouVFnTteJlXQWT 4XyWrlzck0bl/+mKD0mFmuFnlY5X+PHuY6tYvyrulocWTdVmemudYB54Drlh7BPR mouR44pR6ihBhtJARVrr2xXN5ePN5N544y8pe/N2djTmTxl5AihT9alj4H7kaG8T td2Dx0Nh/MGcC7GrQy9FXvkRXPSCetbIQad8ehJHhlO/lZ922sF6J0XbV0i3ktdi BnPAqoiVXBTJkr6Au3+gxuyoBOxsnrSn/7BSBS0u4ls9VGg0yjssHd56JfSaL7Uk zs7045QxuqnGRBp1Kbg7S0oTbKGJ77QBwnSfAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUwDMVCYBsTi+H7TzpVqqaNnaT+U8wHwYDVR0jBBgwFoAU9tWvIZWbf5wbIw1y WJjxEaqj+a4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTky Lzl0V3ZJWldiZjV3Ykl3MXlXSmp4RWFxai1hNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXRXdklaV2JmNXdiSXcxeVdKanhFYXFqLWE0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTkyL3dETVZDWUJzVGktSDdU enBWcXFhTm5hVC1VOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkALYAMA0GCSqGSIb3DQEBCwUAA4IBAQAm1wRk24R6qIIEDuJWXqjoM0mg4P/q 5rKHcJQMJiZV6NR/uCNzB8sobnWL9LRJuLflN5frJSkLxoE54mqatwweVuomc2HU 3xayHArmKrB5FlYGlf5i9vUieRoxcA+fl+7zvZRSy6YFwmI8vVHBwmSgluleQqNj NktGWVI5Bm336P1U9xRODsnGEqXn/Ce3RYzJylsY1RbjeZKqkOoIFT9m2NTIcUWh Xumec6+toBg0dUvcUpVzEb6XpkyrK5ZmURNfPW60G64c+NUj6XINe8TWjD1s9HfV +ydSGl3R7IKA5vP8ZAHacG+lkW0h1HWaRoPEwBKUoktPKqEXj8ys38+F -----END CERTIFICATE-----Generated at Fri Sep 27 19:09:27 2024 by rpki-client on console-ams.rpki-client.org