$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/sEPcbRkF15o6_-bAnIKlrOWqT2I.roa File: sEPcbRkF15o6_-bAnIKlrOWqT2I.roa (raw, json) Hash identifier: utpRvyphw4u2hdpGHRCXaTFO5l3TRLCu0KTkLNA7ka4= Subject key identifier: B0:43:DC:6D:19:05:D7:9A:3A:FF:E6:C0:9C:82:A5:AC:E5:AA:4F:62 Certificate issuer: /CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6 Certificate serial: 1594 Authority key identifier: 65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/sEPcbRkF15o6_-bAnIKlrOWqT2I.roa Signing time: Wed 13 Mar 2024 01:22:04 +0000 ROA not before: Wed 13 Mar 2024 01:22:04 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 137797 IP address blocks: 2402:f9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5524 (0x1594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6 Validity Not Before: Mar 13 01:22:04 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=B043DC6D1905D79A3AFFE6C09C82A5ACE5AA4F62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:be:04:06:60:92:cf:3e:68:23:c1:3a:d9:ec: a1:49:7c:30:a6:90:4b:e1:b4:3e:95:34:f5:d3:d7: 92:98:a1:42:86:30:ca:d4:48:17:46:d3:ae:41:58: 60:69:a2:9d:68:6a:ac:55:d6:54:23:d1:a8:15:f4: 66:06:93:b0:56:7e:04:27:b8:01:84:65:0b:86:3e: 43:ba:e6:c1:e0:30:5a:21:03:be:52:cf:2a:1e:ac: cf:59:c2:e1:6c:ef:a0:c6:79:69:43:b1:17:e1:65: 7c:f4:20:dd:73:b1:d8:60:74:f7:c8:69:95:f7:2a: e9:3f:fa:85:50:d2:ca:c4:d8:ac:d9:da:d5:49:5d: c6:e2:95:51:3f:68:19:ea:bb:99:ad:24:4a:39:04: 76:18:cf:d3:75:a5:31:0f:15:01:f2:a3:b6:74:89: 93:a8:52:bb:17:6e:12:81:82:bf:ee:ae:c1:02:9d: 37:33:91:57:dc:57:c5:57:56:cf:a7:bf:3a:5e:7d: e2:93:3f:e8:43:2e:cd:4b:20:3f:ad:79:22:f0:04: e6:9b:b6:fd:20:a8:28:70:b0:d0:63:08:6d:62:f2: ef:30:df:fe:57:24:9a:a5:ae:eb:14:85:a0:1c:df: f9:39:81:60:41:d7:5f:4b:17:38:25:5a:17:16:96: be:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:43:DC:6D:19:05:D7:9A:3A:FF:E6:C0:9C:82:A5:AC:E5:AA:4F:62 X509v3 Authority Key Identifier: keyid:65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/sEPcbRkF15o6_-bAnIKlrOWqT2I.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:f9c0::/48 Signature Algorithm: sha256WithRSAEncryption 5b:a2:cc:de:b3:12:04:13:2e:25:9d:40:5c:91:3b:8c:be:79: 22:59:b1:4d:c1:2a:ce:2d:70:9c:ee:4d:20:16:73:0b:dc:b0: 57:79:1f:fa:a7:84:27:d3:43:ab:3f:2e:bc:dc:ec:58:cc:07: e3:79:59:bf:f9:76:84:d3:02:5f:db:a6:5f:3b:f0:0b:a4:68: f0:cd:75:41:48:53:cc:28:e0:78:f3:47:f9:a1:be:96:4a:25: ca:3f:6a:e0:5f:de:64:82:12:19:45:55:d1:85:18:08:68:2e: ec:2d:16:57:6d:98:c6:3d:29:9c:a0:6d:5c:bb:85:50:fc:c6: 44:f6:55:f1:d6:9b:05:9a:0d:2c:c6:84:69:b9:52:ac:72:ac: c1:69:5d:44:4d:f3:f7:18:e6:66:6c:03:0e:e4:99:a4:42:e4: f1:61:85:d0:e1:89:99:ea:88:c9:f9:f2:da:f1:1b:cf:6f:d4: 0c:89:ff:62:23:dd:7d:84:7f:47:b8:44:36:42:5b:53:75:11: 0e:f2:0d:b7:2c:27:7d:c6:3e:67:1c:84:97:05:f3:98:5b:1a: fb:39:a3:7d:5e:5f:d7:8f:e1:76:26:01:d3:58:6f:63:8b:33: b5:f0:98:7c:74:01:5d:50:2a:a1:3a:4e:a3:28:83:58:39:b1: 81:7e:9a:8c -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICFZQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjVE QTYxQkRDQTJDQzBGOENBOTVEMjREMzk0MkJDMDg3RDhDOTJBNjAeFw0yNDAzMTMw MTIyMDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEIwNDNEQzZEMTkwNUQ3 OUEzQUZGRTZDMDlDODJBNUFDRTVBQTRGNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjvgQGYJLPPmgjwTrZ7KFJfDCmkEvhtD6VNPXT15KYoUKGMMrU SBdG065BWGBpop1oaqxV1lQj0agV9GYGk7BWfgQnuAGEZQuGPkO65sHgMFohA75S zyoerM9ZwuFs76DGeWlDsRfhZXz0IN1zsdhgdPfIaZX3Kuk/+oVQ0srE2KzZ2tVJ XcbilVE/aBnqu5mtJEo5BHYYz9N1pTEPFQHyo7Z0iZOoUrsXbhKBgr/ursECnTcz kVfcV8VXVs+nvzpefeKTP+hDLs1LID+teSLwBOabtv0gqChwsNBjCG1i8u8w3/5X JJqlrusUhaAc3/k5gWBB119LFzglWhcWlr7LAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUsEPcbRkF15o6/+bAnIKlrOWqT2IwHwYDVR0jBBgwFoAUZdphvcoswPjKldJN OUK8CH2MkqYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcz OS9aZHBodmNvc3dQaktsZEpOT1VLOENIMk1rcVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1pkcGh2Y29zd1BqS2xkSk5PVUs4Q0gyTWtxWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3Mzkvc0VQY2JSa0YxNW82 Xy1iQW5JS2xyT1dxVDJJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQC+cAAADANBgkqhkiG9w0BAQsFAAOCAQEAW6LM3rMSBBMuJZ1AXJE7jL55 IlmxTcEqzi1wnO5NIBZzC9ywV3kf+qeEJ9NDqz8uvNzsWMwH43lZv/l2hNMCX9um XzvwC6Ro8M11QUhTzCjgePNH+aG+lkolyj9q4F/eZIISGUVV0YUYCGgu7C0WV22Y xj0pnKBtXLuFUPzGRPZV8dabBZoNLMaEablSrHKswWldRE3z9xjmZmwDDuSZpELk 8WGF0OGJmeqIyfny2vEbz2/UDIn/YiPdfYR/R7hENkJbU3URDvINtywnfcY+ZxyE lwXzmFsa+zmjfV5f14/hdiYB01hvY4sztfCYfHQBXVAqoTpOoyiDWDmxgX6ajA== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:44 2024 by rpki-client on console-ams.rpki-client.org