$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/d-YM1Oi3snO_a5_MMsy2MffhMAY.roa File: d-YM1Oi3snO_a5_MMsy2MffhMAY.roa (raw, json) Hash identifier: T0pjqDRJHyF5oP/xDBqywS0+QNlw467EiTmLkconLYI= Subject key identifier: 77:E6:0C:D4:E8:B7:B2:73:BF:6B:9F:CC:32:CC:B6:31:F7:E1:30:06 Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Certificate serial: 1813 Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/d-YM1Oi3snO_a5_MMsy2MffhMAY.roa Signing time: Tue 02 Jul 2024 02:16:46 +0000 ROA not before: Tue 02 Jul 2024 02:16:46 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 140293 IP address blocks: 2404:6380::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6163 (0x1813) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Validity Not Before: Jul 2 02:16:46 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=77E60CD4E8B7B273BF6B9FCC32CCB631F7E13006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:99:ab:46:f9:8b:cd:eb:c5:38:b8:ac:97: 38:56:d4:d1:ff:71:fb:77:ce:0c:72:5d:ea:3d:a9: 2c:4e:e9:c1:50:59:2c:8c:0c:6c:d1:28:c0:76:88: 59:6c:2e:8f:5b:8f:57:41:a8:fc:6e:e0:43:2b:0e: 6c:c6:14:e3:27:e3:0c:e1:ca:d5:00:b1:33:9f:aa: 6f:ec:1d:80:92:d4:f5:da:8f:57:ab:10:37:cf:62: c2:63:e9:1b:62:89:98:0d:11:fa:12:ac:87:7a:a3: 2e:85:a8:1c:6d:e2:1d:51:d6:ca:30:7c:0d:7b:65: 83:74:95:87:99:00:21:2e:e8:d1:08:4e:12:b0:da: 0b:aa:41:d0:97:0a:44:14:ec:c6:73:06:c9:01:ba: cf:48:a2:eb:9f:7d:fc:14:08:0b:c4:0f:67:73:3e: e5:c9:1f:83:4a:5d:68:ac:f0:67:08:1d:6b:1f:ad: ff:ef:11:20:c0:0f:02:2b:b3:f0:76:65:47:53:ac: da:f1:b8:dd:1b:bf:35:ae:e5:fa:3a:b9:9a:b1:32: 66:f2:e6:0b:89:01:19:8b:db:f0:58:17:d4:85:da: 68:5c:61:20:64:eb:f2:fa:04:01:71:e3:1e:3c:0a: 4f:5e:27:c2:b8:11:22:21:57:93:37:63:44:38:2f: 58:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E6:0C:D4:E8:B7:B2:73:BF:6B:9F:CC:32:CC:B6:31:F7:E1:30:06 X509v3 Authority Key Identifier: keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/d-YM1Oi3snO_a5_MMsy2MffhMAY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:6380::/32 Signature Algorithm: sha256WithRSAEncryption 8b:aa:f9:b2:07:6b:04:d3:2f:b6:15:1e:c9:47:5b:19:d5:1f: eb:d2:bc:47:33:c6:08:f6:f3:2e:dc:52:f6:d0:05:72:97:e9: 8d:ed:96:8d:c3:94:df:a6:b2:3c:f1:87:28:d8:d0:b1:aa:c2: 32:3a:cc:76:3e:c0:3a:46:df:5f:24:91:1a:59:92:83:18:63: 45:47:c9:12:17:cc:56:8e:9d:64:37:e6:5a:34:98:ec:d2:c0: b9:d5:34:eb:60:ba:4d:dc:90:c3:3c:f4:e7:a2:1c:ee:e6:10: 83:2c:15:65:d5:16:6d:3c:13:d7:aa:78:ff:a2:83:65:66:d3: 92:8c:f7:7d:fd:5e:91:b2:b8:d0:24:49:26:e8:de:6e:6f:c2: 07:81:5f:7a:8e:8d:1a:b2:32:79:71:b0:e2:57:28:fa:87:c2: 06:0a:8e:a5:e7:b6:5c:96:a2:8b:53:97:f0:a1:b6:92:e5:e2: 8e:0b:d1:37:d0:9f:4a:9b:d1:1a:7a:89:26:da:e8:96:48:a1: 58:3c:c8:78:c8:37:a4:66:a0:5d:31:f4:7d:c0:0b:f6:e1:17: 6d:3b:c8:61:9b:e0:39:91:d7:06:6b:a9:0e:01:83:ed:d0:bd: 0e:6c:db:d2:71:1c:ef:87:f8:d1:20:5a:c7:2b:62:90:b9:1a: 72:f3:94:fa -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICGBMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUMx MEM5MzQ1NTc1OUM2NTlEMkJCODE5RkIwN0ZGNzA2M0NFQ0MzMjAeFw0yNDA3MDIw MjE2NDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDc3RTYwQ0Q0RThCN0Iy NzNCRjZCOUZDQzMyQ0NCNjMxRjdFMTMwMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCv3pmrRvmLzevFOLislzhW1NH/cft3zgxyXeo9qSxO6cFQWSyM DGzRKMB2iFlsLo9bj1dBqPxu4EMrDmzGFOMn4wzhytUAsTOfqm/sHYCS1PXaj1er EDfPYsJj6RtiiZgNEfoSrId6oy6FqBxt4h1R1sowfA17ZYN0lYeZACEu6NEIThKw 2guqQdCXCkQU7MZzBskBus9IouufffwUCAvED2dzPuXJH4NKXWis8GcIHWsfrf/v ESDADwIrs/B2ZUdTrNrxuN0bvzWu5fo6uZqxMmby5guJARmL2/BYF9SF2mhcYSBk 6/L6BAFx4x48Ck9eJ8K4ESIhV5M3Y0Q4L1ifAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUd+YM1Oi3snO/a5/MMsy2MffhMAYwHwYDVR0jBBgwFoAU7BDJNFV1nGWdK7gZ +wf/cGPOzDIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMy OS83QkRKTkZWMW5HV2RLN2daLXdmX2NHUE96REkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzdCREpORlYxbkdXZEs3Z1otd2ZfY0dQT3pESS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMjkvZC1ZTTFPaTNzbk9f YTVfTU1zeTJNZmZoTUFZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQEY4AwDQYJKoZIhvcNAQELBQADggEBAIuq+bIHawTTL7YVHslHWxnVH+vS vEczxgj28y7cUvbQBXKX6Y3tlo3DlN+msjzxhyjY0LGqwjI6zHY+wDpG318kkRpZ koMYY0VHyRIXzFaOnWQ35lo0mOzSwLnVNOtguk3ckMM89OeiHO7mEIMsFWXVFm08 E9eqeP+ig2Vm05KM9339XpGyuNAkSSbo3m5vwgeBX3qOjRqyMnlxsOJXKPqHwgYK jqXntlyWootTl/ChtpLl4o4L0TfQn0qb0Rp6iSba6JZIoVg8yHjIN6RmoF0x9H3A C/bhF207yGGb4DmR1wZrqQ4Bg+3QvQ5s29JxHO+H+NEgWscrYpC5GnLzlPo= -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:44 2024 by rpki-client on console-ams.rpki-client.org