$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2048/zdruxVncnu8sEkhrajuvXfa833c.roa File: zdruxVncnu8sEkhrajuvXfa833c.roa (raw, json) Hash identifier: 18w1Pxtpdmcfs55ZzucgPOeLrrNOEkkFH5LUL2Ht4kk= Subject key identifier: CD:DA:EE:C5:59:DC:9E:EF:2C:12:48:6B:6A:3B:AF:5D:F6:BC:DF:77 Certificate issuer: /CN=4E25934FE8D89959425D1018EB121981DA250985 Certificate serial: 18 Authority key identifier: 4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/zdruxVncnu8sEkhrajuvXfa833c.roa Signing time: Sat 02 Mar 2024 02:45:00 +0000 ROA not before: Sat 02 Mar 2024 02:45:00 +0000 ROA not after: Sun 02 Mar 2025 02:27:12 +0000 asID: 151296 IP address blocks: 2406:8880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E25934FE8D89959425D1018EB121981DA250985 Validity Not Before: Mar 2 02:45:00 2024 GMT Not After : Mar 2 02:27:12 2025 GMT Subject: CN=CDDAEEC559DC9EEF2C12486B6A3BAF5DF6BCDF77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:35:e0:2e:cf:0d:10:b8:16:d0:05:cf:21: 9a:7f:1c:f8:95:88:0e:f8:88:8c:ec:4b:aa:f5:c6: e3:13:fd:7a:db:10:6c:6a:a5:d5:c3:1a:38:40:cf: e6:17:6d:80:a7:19:5d:ac:60:93:2b:80:d5:70:07: 6d:c8:8a:ad:ab:71:23:ae:b0:f4:3c:3a:0e:60:fd: 94:fe:0f:b3:60:e0:fe:df:16:8b:d8:ad:ad:59:09: b7:37:5c:4a:b7:1a:8e:62:fb:89:a5:2d:1f:68:52: 1e:86:9b:1a:60:80:88:9a:38:03:5b:db:00:1e:e5: 75:10:92:f8:85:29:9f:b4:a4:fd:01:bb:d5:3e:1a: 41:a8:42:b3:ea:b1:45:e0:0d:78:d2:30:3e:a7:51: 66:c7:bc:84:64:a4:56:bc:6f:60:8d:18:d4:4e:ce: 04:d0:72:94:a1:fe:11:bb:0c:3c:86:a0:3f:aa:d9: 7f:d7:76:05:a6:12:d2:b4:d4:78:21:ae:54:fb:57: ad:87:09:31:68:da:8f:0f:88:5b:b2:55:06:27:78: 28:65:93:d2:fd:e4:b3:0b:1f:f8:77:1f:26:4a:39: e0:45:39:00:1c:5f:bf:f6:e1:5f:fb:eb:c1:14:97: 08:42:a2:67:3e:71:4f:59:36:05:cc:60:fc:9b:8e: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DA:EE:C5:59:DC:9E:EF:2C:12:48:6B:6A:3B:AF:5D:F6:BC:DF:77 X509v3 Authority Key Identifier: keyid:4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/zdruxVncnu8sEkhrajuvXfa833c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:8880::/32 Signature Algorithm: sha256WithRSAEncryption 68:f1:14:ab:cc:7a:3d:f3:7e:fe:57:ed:49:30:ce:2e:c6:39: 97:6a:30:35:9e:09:2d:f3:81:fb:ba:a6:3e:f4:92:dd:ea:8b: 31:e5:7c:6d:8a:7a:c6:78:2b:75:e7:0b:52:f9:44:d0:4b:ba: 92:b6:d5:ad:92:01:bf:fb:ec:39:e2:9a:e3:fc:be:7c:d9:b2: c5:3b:4e:2e:01:96:d9:99:2b:cb:0f:07:5f:e4:e1:90:21:6d: 07:8c:8e:53:fb:7d:d6:44:c7:cb:88:03:25:b8:73:49:d2:ca: de:9d:c8:d9:24:85:df:ba:3f:a7:a3:0d:70:8d:58:f7:64:e0: 3d:e9:49:96:61:25:ef:b1:ab:b3:55:d9:7b:89:8e:f9:61:df: 5a:99:60:61:1b:c7:10:ef:38:3c:00:68:5d:e9:39:59:e7:85: 4b:ff:93:94:27:d0:e8:87:98:33:16:44:62:0b:66:bd:6d:7d: ad:91:16:c0:21:2e:ac:e6:79:42:69:ae:ed:e0:3b:50:f2:13: 80:ab:9c:e4:c0:b6:8b:64:78:2c:4d:41:1c:a4:af:0c:b2:35: ae:44:31:38:8a:31:96:c4:4f:e7:99:44:cb:f3:6d:67:dc:21: ff:8c:67:e6:e9:4f:f8:1e:b3:86:33:18:be:ba:81:65:f9:4e: f6:03:b2:d1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RTI1 OTM0RkU4RDg5OTU5NDI1RDEwMThFQjEyMTk4MURBMjUwOTg1MB4XDTI0MDMwMjAy NDUwMFoXDTI1MDMwMjAyMjcxMlowMzExMC8GA1UEAxMoQ0REQUVFQzU1OURDOUVF RjJDMTI0ODZCNkEzQkFGNURGNkJDREY3NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMRXNeAuzw0QuBbQBc8hmn8c+JWIDviIjOxLqvXG4xP9etsQbGql 1cMaOEDP5hdtgKcZXaxgkyuA1XAHbciKratxI66w9Dw6DmD9lP4Ps2Dg/t8Wi9it rVkJtzdcSrcajmL7iaUtH2hSHoabGmCAiJo4A1vbAB7ldRCS+IUpn7Sk/QG71T4a QahCs+qxReANeNIwPqdRZse8hGSkVrxvYI0Y1E7OBNBylKH+EbsMPIagP6rZf9d2 BaYS0rTUeCGuVPtXrYcJMWjajw+IW7JVBid4KGWT0v3kswsf+HcfJko54EU5ABxf v/bhX/vrwRSXCEKiZz5xT1k2Bcxg/JuOGBcCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBTN2u7FWdye7ywSSGtqO69d9rzfdzAfBgNVHSMEGDAWgBROJZNP6NiZWUJdEBjr EhmB2iUJhTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMDQ4 L1RpV1RULWpZbVZsQ1hSQVk2eElaZ2RvbENZVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVGlXVFQtalltVmxDWFJBWTZ4SVpnZG9sQ1lVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA0OC96ZHJ1eFZuY251OHNF a2hyYWp1dlhmYTgzM2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAaIgDANBgkqhkiG9w0BAQsFAAOCAQEAaPEUq8x6PfN+/lftSTDOLsY5l2ow NZ4JLfOB+7qmPvSS3eqLMeV8bYp6xngrdecLUvlE0Eu6krbVrZIBv/vsOeKa4/y+ fNmyxTtOLgGW2Zkryw8HX+ThkCFtB4yOU/t91kTHy4gDJbhzSdLK3p3I2SSF37o/ p6MNcI1Y92TgPelJlmEl77Grs1XZe4mO+WHfWplgYRvHEO84PABoXek5WeeFS/+T lCfQ6IeYMxZEYgtmvW19rZEWwCEurOZ5Qmmu7eA7UPITgKuc5MC2i2R4LE1BHKSv DLI1rkQxOIoxlsRP55lEy/NtZ9wh/4xn5ulP+B6zhjMYvrqBZflO9gOy0Q== -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:09 2024 by rpki-client on console-fra.rpki-client.org