$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2154/TDl0_AU5PTw-rw-TymScnt56-og.roa File: TDl0_AU5PTw-rw-TymScnt56-og.roa (raw, json) Hash identifier: t0LG5e9nnJeC9jPCNRt178BO3tQQzn4jKli2mncZzyA= Subject key identifier: 4C:39:74:FC:05:39:3D:3C:3E:AF:0F:93:CA:64:9C:9E:DE:7A:FA:88 Certificate issuer: /CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2 Certificate serial: 0193 Authority key identifier: E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/TDl0_AU5PTw-rw-TymScnt56-og.roa Signing time: Tue 08 Oct 2024 10:02:34 +0000 ROA not before: Tue 08 Oct 2024 10:02:34 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63631 IP address blocks: 2407:9080::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2 Validity Not Before: Oct 8 10:02:34 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4C3974FC05393D3C3EAF0F93CA649C9EDE7AFA88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:28:b8:d1:7b:b2:97:63:8e:d9:f6:21:6e:f0: 10:4d:bf:c8:90:0f:6f:cf:87:28:7c:52:3c:39:fb: 27:f7:3e:aa:49:e2:79:ef:71:c5:19:95:6a:1a:28: 12:ea:69:13:ee:2e:1e:00:d0:16:b4:96:a3:88:d0: 6f:87:26:c6:cb:c5:6c:5f:ab:7e:59:90:04:d0:ee: 63:8b:86:1e:9f:68:a5:b4:f1:3b:e2:ad:27:7c:0d: 8c:56:f6:32:0c:c0:55:3f:56:c0:65:44:fb:ca:eb: 0e:62:64:46:f7:5a:f3:d4:4c:0c:3b:d3:79:bb:56: 06:36:b0:42:29:c1:17:d8:d8:53:06:83:54:c1:99: 83:20:02:9c:43:81:83:9b:6e:1c:b9:7e:dc:52:07: 15:1b:7f:0a:81:1c:bd:9a:0e:d9:76:3a:0b:da:ba: 96:49:6a:9c:3e:5f:46:78:26:88:9f:fc:e3:49:1e: 2b:bb:9c:ab:03:41:8d:d4:f0:fa:ee:61:76:e0:62: eb:9f:64:85:bf:55:d5:0f:46:ca:3a:09:44:6b:b1: 15:2a:03:04:30:32:f6:b5:c5:7a:42:6d:00:c8:f4: a5:af:cd:70:e0:2e:61:ef:24:2c:3c:45:a1:66:81: 5a:94:68:19:de:65:26:6b:81:ff:5f:33:e9:2f:8e: 09:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:39:74:FC:05:39:3D:3C:3E:AF:0F:93:CA:64:9C:9E:DE:7A:FA:88 X509v3 Authority Key Identifier: keyid:E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/TDl0_AU5PTw-rw-TymScnt56-og.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9080::/32 Signature Algorithm: sha256WithRSAEncryption 9e:6c:29:b4:49:00:69:d3:57:f7:e0:7b:b3:e0:d2:87:07:30: a3:ba:9e:76:e0:7f:51:02:6f:d0:e9:f6:25:82:f0:a3:67:1a: 5a:a5:44:e8:55:47:63:ed:2d:ff:4a:94:3e:41:5a:cd:5c:1b: cc:d5:f9:f4:b3:7b:3d:15:e0:63:07:d1:4c:81:26:a9:1e:53: f3:b9:06:97:52:48:8e:61:cf:05:ec:3b:39:64:c4:6c:26:f6: e2:77:92:51:bb:1e:36:c8:02:07:d9:99:92:4c:f7:3d:c8:69: b3:51:c6:32:e0:22:13:75:04:32:e8:51:56:de:76:20:c3:53: a1:f0:08:c5:c1:30:b1:10:ac:e8:c1:4b:71:08:5a:29:dd:ac: 23:2e:05:ea:22:a7:3f:50:c7:bc:36:d5:d7:9f:71:8f:f8:0e: 37:33:af:4a:8c:fb:d0:9e:00:bc:77:4d:c7:f8:63:21:56:8f: dc:af:91:d8:6e:a8:ff:8d:18:7d:73:a3:9c:c7:48:c6:22:cc: 3f:83:52:f4:7e:e6:97:56:ca:90:13:d3:e9:fd:4e:7d:b6:76: 72:a4:61:28:55:63:70:35:05:5c:f9:34:c9:71:27:15:1c:12: 56:17:eb:c4:62:9d:96:a1:10:a0:e0:cd:94:66:4b:74:c9:fe: 91:af:51:30 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTUw MkRFMkM2MDg2QTY2Mjg0QjgwQ0RCN0I1QUMwQzEyQ0MzRjNDMjAeFw0yNDEwMDgx MDAyMzRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRDMzk3NEZDMDUzOTNE M0MzRUFGMEY5M0NBNjQ5QzlFREU3QUZBODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFKLjRe7KXY47Z9iFu8BBNv8iQD2/Phyh8Ujw5+yf3PqpJ4nnv ccUZlWoaKBLqaRPuLh4A0Ba0lqOI0G+HJsbLxWxfq35ZkATQ7mOLhh6faKW08Tvi rSd8DYxW9jIMwFU/VsBlRPvK6w5iZEb3WvPUTAw703m7VgY2sEIpwRfY2FMGg1TB mYMgApxDgYObbhy5ftxSBxUbfwqBHL2aDtl2OgvaupZJapw+X0Z4Joif/ONJHiu7 nKsDQY3U8PruYXbgYuufZIW/VdUPRso6CURrsRUqAwQwMva1xXpCbQDI9KWvzXDg LmHvJCw8RaFmgVqUaBneZSZrgf9fM+kvjgmPAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUTDl0/AU5PTw+rw+TymScnt56+ogwHwYDVR0jBBgwFoAU5QLeLGCGpmKEuAzb e1rAwSzD88IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjE1 NC81UUxlTEdDR3BtS0V1QXpiZTFyQXdTekQ4OEkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzVRTGVMR0NHcG1LRXVBemJlMXJBd1N6RDg4SS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxNTQvVERsMF9BVTVQVHct cnctVHltU2NudDU2LW9nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHkIAwDQYJKoZIhvcNAQELBQADggEBAJ5sKbRJAGnTV/fge7Pg0ocHMKO6 nnbgf1ECb9Dp9iWC8KNnGlqlROhVR2PtLf9KlD5BWs1cG8zV+fSzez0V4GMH0UyB JqkeU/O5BpdSSI5hzwXsOzlkxGwm9uJ3klG7HjbIAgfZmZJM9z3IabNRxjLgIhN1 BDLoUVbediDDU6HwCMXBMLEQrOjBS3EIWindrCMuBeoipz9Qx7w21defcY/4Djcz r0qM+9CeALx3Tcf4YyFWj9yvkdhuqP+NGH1zo5zHSMYizD+DUvR+5pdWypAT0+n9 Tn22dnKkYShVY3A1BVz5NMlxJxUcElYX68RinZahEKDgzZRmS3TJ/pGvUTA= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:09 2024 by rpki-client on console-fra.rpki-client.org