$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/vEo_IaBs-m7S3npmdfQOAXWdMMw.roa File: vEo_IaBs-m7S3npmdfQOAXWdMMw.roa (raw, json) Hash identifier: Ka0AGrB0CDuDwWtPz3T6pgyLMkUmM16HSz61OXIBHqA= Subject key identifier: BC:4A:3F:21:A0:6C:FA:6E:D2:DE:7A:66:75:F4:0E:01:75:9D:30:CC Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Certificate serial: 0CAE Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/vEo_IaBs-m7S3npmdfQOAXWdMMw.roa Signing time: Wed 13 Mar 2024 01:21:25 +0000 ROA not before: Wed 13 Mar 2024 01:21:25 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 58593 IP address blocks: 2404:7940::/32 maxlen: 64 2406:e500::/33 maxlen: 64 2406:e500::/48 maxlen: 64 2406:e500:1::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 21:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3246 (0xcae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Validity Not Before: Mar 13 01:21:25 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=BC4A3F21A06CFA6ED2DE7A6675F40E01759D30CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6d:84:37:ab:ac:00:5f:36:18:3c:ad:43:8c: 6f:f9:e5:12:71:93:8b:54:09:c8:e7:6e:48:8d:3c: ae:cc:9d:10:eb:99:2a:d8:e8:ff:95:90:f8:fa:12: fb:34:d1:12:96:ff:5d:b7:17:76:24:18:34:27:a8: 4a:0b:d2:a2:14:ca:4b:12:05:aa:c1:cc:51:ae:16: b7:0b:1b:e3:3a:d9:c4:68:40:87:13:66:6a:b4:6a: b3:1a:aa:c8:fb:c5:91:e1:c8:21:d7:b6:53:37:cc: d4:1f:cf:4e:dc:0e:8e:cb:75:3f:63:ca:d8:39:df: 89:7c:73:17:1c:22:56:c9:be:b4:97:67:27:25:27: 37:75:a0:e3:c5:1a:2e:6d:62:14:95:2c:ac:86:6a: a0:f0:ad:bf:f6:78:4f:97:47:5e:80:7f:20:ce:e7: da:52:52:ed:2d:ee:11:52:0d:9a:34:cf:bb:a8:97: 73:76:34:d4:52:d9:9e:29:13:c6:26:45:fb:66:a4: b5:d7:8a:01:4a:99:26:c9:a2:28:85:8b:b3:c4:96: c2:0e:f6:94:39:af:82:2a:da:c0:c6:a4:7d:11:1a: 81:a4:6c:5b:12:fc:a1:d5:cc:29:2b:fc:b5:0e:92: 4e:fd:49:8c:21:90:eb:9f:ef:a9:a9:44:bd:15:9a: e2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4A:3F:21:A0:6C:FA:6E:D2:DE:7A:66:75:F4:0E:01:75:9D:30:CC X509v3 Authority Key Identifier: keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/vEo_IaBs-m7S3npmdfQOAXWdMMw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:7940::/32 2406:e500::/33 Signature Algorithm: sha256WithRSAEncryption 61:61:1a:7b:e4:2f:51:eb:86:ea:34:6e:c2:0b:80:e5:56:28: 6d:f7:34:e5:c4:14:8a:c1:97:84:50:91:ce:89:a9:a7:db:fe: df:e4:10:c6:2a:ed:cd:90:49:54:8c:5e:ce:fa:88:63:0d:de: 48:e6:d1:30:93:a8:ed:24:3c:13:1c:db:95:3a:73:31:92:c5: 28:a0:9e:78:13:63:de:5f:1a:dc:7c:98:fe:3f:90:1c:cd:10: c0:8b:42:09:f0:ae:ec:bf:75:83:e2:46:e9:58:64:67:96:5c: 45:1a:78:8a:87:ab:7c:3a:03:39:41:5f:ab:8c:90:bd:cb:bf: 6c:95:f6:d6:fc:a7:d0:e4:cb:74:30:b1:7c:54:6f:dc:a7:5b: 5e:34:72:09:5e:0e:53:84:e0:8f:b8:30:22:49:29:d4:98:24: 40:33:a7:15:71:a8:13:84:32:6d:f5:74:32:f7:72:58:af:f8: 7f:19:b2:03:c9:3a:30:d9:c1:19:1a:c0:42:fa:31:3d:8a:ac: b1:a6:f9:50:f7:50:97:8d:e3:8d:ed:54:c5:4a:d6:84:fc:af: 98:e3:56:ac:48:02:dc:87:2d:ff:64:77:20:93:39:6b:bc:13: d5:6e:62:07:b6:69:63:79:b9:7b:3b:d6:af:91:93:b7:77:7d: cd:f0:1e:8a -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RF RjcxMTFERTk4QkQ3NTZEOTJCMzREMzk0REEyRDM5RUZGOUI4RTAeFw0yNDAzMTMw MTIxMjVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJDNEEzRjIxQTA2Q0ZB NkVEMkRFN0E2Njc1RjQwRTAxNzU5RDMwQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQbYQ3q6wAXzYYPK1DjG/55RJxk4tUCcjnbkiNPK7MnRDrmSrY 6P+VkPj6Evs00RKW/123F3YkGDQnqEoL0qIUyksSBarBzFGuFrcLG+M62cRoQIcT Zmq0arMaqsj7xZHhyCHXtlM3zNQfz07cDo7LdT9jytg534l8cxccIlbJvrSXZycl Jzd1oOPFGi5tYhSVLKyGaqDwrb/2eE+XR16AfyDO59pSUu0t7hFSDZo0z7uol3N2 NNRS2Z4pE8YmRftmpLXXigFKmSbJoiiFi7PElsIO9pQ5r4Iq2sDGpH0RGoGkbFsS /KHVzCkr/LUOkk79SYwhkOuf76mpRL0VmuKdAgMBAAGjggH8MIIB+DAdBgNVHQ4E FgQUvEo/IaBs+m7S3npmdfQOAXWdMMwwHwYDVR0jBBgwFoAUze9xEd6YvXVtkrNN OU2i057/m44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy MC96ZTl4RWQ2WXZYVnRrck5OT1UyaTA1N19tNDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3plOXhFZDZZdlhWdGtyTk5PVTJpMDU3X200NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvdkVvX0lhQnMtbTdT M25wbWRmUU9BWFdkTU13LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAoBggrBgEFBQcBBwEB/wQZMBcwFQQCAAIw DwMFACQEeUADBgckBuUAADANBgkqhkiG9w0BAQsFAAOCAQEAYWEae+QvUeuG6jRu wguA5VYobfc05cQUisGXhFCRzompp9v+3+QQxirtzZBJVIxezvqIYw3eSObRMJOo 7SQ8ExzblTpzMZLFKKCeeBNj3l8a3HyY/j+QHM0QwItCCfCu7L91g+JG6VhkZ5Zc RRp4ioerfDoDOUFfq4yQvcu/bJX21vyn0OTLdDCxfFRv3KdbXjRyCV4OU4Tgj7gw Ikkp1JgkQDOnFXGoE4QybfV0MvdyWK/4fxmyA8k6MNnBGRrAQvoxPYqssab5UPdQ l43jje1UxUrWhPyvmONWrEgC3Ict/2R3IJM5a7wT1W5iB7ZpY3m5ezvWr5GTt3d9 zfAeig== -----END CERTIFICATE-----Generated at Fri Nov 22 19:57:40 2024 by rpki-client on console-ams.rpki-client.org