$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/27/vNjioWiQKWOYvKzvvRRsQO4AftA.roa File: vNjioWiQKWOYvKzvvRRsQO4AftA.roa (raw, json) Hash identifier: lRDdC4pBhtHMqAtHZOgxXsE0QLSzXvk/ir07rNAjaKI= Subject key identifier: BC:D8:E2:A1:68:90:29:63:98:BC:AC:EF:BD:14:6C:40:EE:00:7E:D0 Certificate issuer: /CN=39E47899249325DB499BFC6910919D2F36003E9A Certificate serial: 18BA Authority key identifier: 39:E4:78:99:24:93:25:DB:49:9B:FC:69:10:91:9D:2F:36:00:3E:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OeR4mSSTJdtJm_xpEJGdLzYAPpo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/vNjioWiQKWOYvKzvvRRsQO4AftA.roa Signing time: Fri 27 Sep 2024 02:57:43 +0000 ROA not before: Fri 27 Sep 2024 02:57:43 +0000 ROA not after: Sat 27 Sep 2025 02:42:48 +0000 asID: 4847 IP address blocks: 2403:8080:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OeR4mSSTJdtJm_xpEJGdLzYAPpo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6330 (0x18ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39E47899249325DB499BFC6910919D2F36003E9A Validity Not Before: Sep 27 02:57:43 2024 GMT Not After : Sep 27 02:42:48 2025 GMT Subject: CN=BCD8E2A16890296398BCACEFBD146C40EE007ED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:59:99:cd:c1:88:29:10:6c:4b:07:13:63:f2: 07:49:41:a1:e8:ea:01:83:f4:2c:3f:d1:4f:76:a8: 22:76:b7:2c:1f:c2:21:39:da:fe:d2:5f:ad:a4:c4: d4:bf:d3:99:be:2c:fd:53:ac:20:b8:2d:e1:fc:4d: 52:f9:a4:b6:b3:5a:5c:31:a7:64:a0:f6:2e:95:f8: 66:2b:31:87:c7:39:9e:a6:b9:71:ac:9b:ee:d7:e2: cd:c9:41:cb:a0:60:da:24:ee:e2:83:72:73:3d:d1: 53:c8:cf:da:21:44:06:c1:31:de:23:7a:f3:11:4b: d2:ed:ab:7f:48:6f:17:32:f9:ae:31:05:97:04:2c: c1:0b:8e:ae:f2:d0:a3:a5:46:65:78:22:cf:6d:f7: 05:da:2e:33:4e:40:b1:67:33:06:ec:63:7e:b1:fb: c1:e5:bb:4a:e6:34:f3:6a:7b:ed:65:ca:ca:1e:95: 6e:2c:9f:10:e8:02:56:06:15:cd:d3:c6:f3:b4:e1: aa:23:46:5b:2f:79:50:76:d7:d5:8f:96:a3:ee:03: e2:64:14:3e:0a:43:af:27:e8:bc:b8:a3:5d:b8:c5: 92:6a:cc:d1:da:16:dc:fb:2a:da:d5:6d:8b:2a:46: 16:8b:d0:59:40:c6:05:10:07:8a:42:0d:93:99:da: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D8:E2:A1:68:90:29:63:98:BC:AC:EF:BD:14:6C:40:EE:00:7E:D0 X509v3 Authority Key Identifier: keyid:39:E4:78:99:24:93:25:DB:49:9B:FC:69:10:91:9D:2F:36:00:3E:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OeR4mSSTJdtJm_xpEJGdLzYAPpo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/vNjioWiQKWOYvKzvvRRsQO4AftA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:8080:101::/48 Signature Algorithm: sha256WithRSAEncryption b4:52:ef:4c:ce:ba:0a:66:66:a8:95:55:f6:69:6a:86:8e:d4: 2b:53:8e:07:ae:08:6b:97:dc:c8:5d:a4:e6:5f:19:f5:c7:da: 01:60:1b:40:ef:aa:56:e7:40:45:57:b9:a9:99:63:bf:e8:fb: 7e:cc:0c:5b:d7:7b:cd:5d:70:2e:5d:00:5c:43:57:1a:51:23: 33:9a:9e:5a:27:93:ed:9f:14:42:f9:44:9d:cb:a2:87:7c:33: 95:56:60:07:02:4b:ed:ae:1e:be:f6:d3:df:41:48:02:7a:1f: 86:3b:8b:f4:64:08:ec:b4:05:e6:14:e4:49:be:b5:60:59:42: a7:9b:34:6e:7b:4e:c8:4e:5a:c1:cc:07:88:e0:c4:75:f2:87: 27:50:19:42:66:19:be:07:79:a6:5a:1b:61:da:fc:33:dd:fc: 00:0f:a7:79:85:db:4b:ea:10:d0:f2:ef:ca:2c:8a:5c:32:b9: 41:fb:ee:cc:72:fd:f3:0e:b6:52:ed:4b:99:44:84:78:9f:a8: 56:35:c7:5c:41:15:2d:44:74:c2:5c:a8:fe:70:ee:86:f0:32: f7:d3:51:4c:46:b3:91:02:09:f6:7b:3a:53:ec:31:75:38:f2: 67:dd:f7:62:e3:e8:57:16:f8:f4:2d:9b:3f:a2:54:c2:f6:40: 3d:07:49:3a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICGLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzlF NDc4OTkyNDkzMjVEQjQ5OUJGQzY5MTA5MTlEMkYzNjAwM0U5QTAeFw0yNDA5Mjcw MjU3NDNaFw0yNTA5MjcwMjQyNDhaMDMxMTAvBgNVBAMTKEJDRDhFMkExNjg5MDI5 NjM5OEJDQUNFRkJEMTQ2QzQwRUUwMDdFRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7WZnNwYgpEGxLBxNj8gdJQaHo6gGD9Cw/0U92qCJ2tywfwiE5 2v7SX62kxNS/05m+LP1TrCC4LeH8TVL5pLazWlwxp2Sg9i6V+GYrMYfHOZ6muXGs m+7X4s3JQcugYNok7uKDcnM90VPIz9ohRAbBMd4jevMRS9Ltq39Ibxcy+a4xBZcE LMELjq7y0KOlRmV4Is9t9wXaLjNOQLFnMwbsY36x+8Hlu0rmNPNqe+1lysoelW4s nxDoAlYGFc3TxvO04aojRlsveVB219WPlqPuA+JkFD4KQ68n6Ly4o124xZJqzNHa Ftz7KtrVbYsqRhaL0FlAxgUQB4pCDZOZ2n4HAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUvNjioWiQKWOYvKzvvRRsQO4AftAwHwYDVR0jBBgwFoAUOeR4mSSTJdtJm/xp EJGdLzYAPpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcv T2VSNG1TU1RKZHRKbV94cEVKR2RMellBUHBvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9PZVI0bVNTVEpkdEptX3hwRUpHZEx6WUFQcG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNy92Tmppb1dpUUtXT1l2S3p2 dlJSc1FPNEFmdEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA JAOAgAEBMA0GCSqGSIb3DQEBCwUAA4IBAQC0Uu9MzroKZmaolVX2aWqGjtQrU44H rghrl9zIXaTmXxn1x9oBYBtA76pW50BFV7mpmWO/6Pt+zAxb13vNXXAuXQBcQ1ca USMzmp5aJ5PtnxRC+USdy6KHfDOVVmAHAkvtrh6+9tPfQUgCeh+GO4v0ZAjstAXm FORJvrVgWUKnmzRue07ITlrBzAeI4MR18ocnUBlCZhm+B3mmWhth2vwz3fwAD6d5 hdtL6hDQ8u/KLIpcMrlB++7Mcv3zDrZS7UuZRIR4n6hWNcdcQRUtRHTCXKj+cO6G 8DL301FMRrORAgn2ezpT7DF1OPJn3fdi4+hXFvj0LZs/olTC9kA9B0k6 -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:10 2024 by rpki-client on console-fra.rpki-client.org