$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3027/HWy1KnvEfJtCKQZCqcGd0Uto1mM.roa File: HWy1KnvEfJtCKQZCqcGd0Uto1mM.roa (raw, json) Hash identifier: 6JNum4G9ULuPOjZM7wMF/q1r24Zyq0oeZdMNHxeN97c= Subject key identifier: 1D:6C:B5:2A:7B:C4:7C:9B:42:29:06:42:A9:C1:9D:D1:4B:68:D6:63 Certificate issuer: /CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B Certificate serial: 0F5E Authority key identifier: EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/HWy1KnvEfJtCKQZCqcGd0Uto1mM.roa Signing time: Sat 27 Jul 2024 07:45:43 +0000 ROA not before: Sat 27 Jul 2024 07:45:43 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 139119 IP address blocks: 2406:a7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3934 (0xf5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B Validity Not Before: Jul 27 07:45:43 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=1D6CB52A7BC47C9B42290642A9C19DD14B68D663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:c3:62:e4:03:a7:b0:60:57:61:9f:6c:a5: 16:e5:52:e2:33:41:37:78:5e:6c:59:89:97:e2:37: 07:a5:dc:03:49:4a:bf:0e:d2:d6:ff:44:40:cf:92: 95:46:3f:48:fb:2a:3e:0d:eb:80:ae:cc:63:b0:7d: 8d:5d:92:b8:ef:03:8c:a5:bb:f6:0e:fc:72:c0:1f: f9:9e:e5:c4:96:85:08:74:ab:67:86:b0:da:45:66: 74:75:ed:a6:8b:bd:db:43:0f:f4:ba:18:92:0d:d4: 64:8e:64:2d:6c:f5:68:36:dd:56:17:94:eb:cc:37: 40:07:00:69:1c:a6:a7:48:2c:cc:5d:68:10:13:94: 61:c3:02:1f:ae:33:91:cf:24:9c:00:0c:91:6d:ff: f5:8b:ff:fe:3f:ee:67:8c:80:c0:f9:dd:17:7f:96: 4a:24:90:1f:55:ce:42:22:ba:61:a9:79:ef:66:41: a4:99:f8:70:23:e6:b1:85:c4:e7:d3:99:46:50:86: fc:77:15:02:c9:5b:db:c0:8d:55:e8:3a:2a:ce:5f: 5c:a7:b1:e8:80:a0:bc:67:18:f1:cd:c3:d7:89:97: 30:9e:dd:7f:78:61:65:15:3a:fa:c7:59:c7:5d:b3: fc:59:12:20:c2:1b:87:99:a7:56:34:55:67:cf:13: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6C:B5:2A:7B:C4:7C:9B:42:29:06:42:A9:C1:9D:D1:4B:68:D6:63 X509v3 Authority Key Identifier: keyid:EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/HWy1KnvEfJtCKQZCqcGd0Uto1mM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:a7c0::/48 Signature Algorithm: sha256WithRSAEncryption 5c:ad:93:88:5c:75:5d:c3:d1:fc:4e:9e:f5:13:a1:4b:0d:68: d0:49:f8:db:56:e4:b6:07:88:b6:53:2f:fc:3a:cd:81:d8:1c: a4:4e:e5:35:92:66:b9:08:df:8e:c8:f5:74:8f:37:e9:b9:92: 7e:80:a1:ba:6b:cb:2b:fe:c0:f3:a0:a0:14:99:84:77:7e:2d: b8:61:39:bb:69:ab:25:25:26:88:d7:d2:59:cd:78:64:4d:ff: b5:cd:71:2d:96:41:dd:9e:85:c0:f1:36:eb:ac:0f:b9:07:7b: 86:e2:fc:1a:8f:72:e0:c1:55:98:40:fc:2e:e6:d9:ea:3a:ef: da:3f:6c:8a:c3:4f:f7:b5:21:69:5d:a9:9b:80:9e:a0:4a:02: 3c:d2:5e:30:f0:4a:9e:e9:06:1e:51:2f:cc:22:7f:85:47:61: 5a:1d:93:7e:1f:50:9a:7c:cb:f5:ab:da:95:9a:d0:f2:ea:9f: 84:81:82:98:6f:d6:ed:c3:d5:f3:83:17:9e:a5:70:d0:38:c0: 70:6c:92:bd:c7:ce:c9:a9:21:6a:e3:c3:05:48:eb:12:23:93: 4c:f2:44:f6:ed:a5:c1:1c:09:6e:8b:d4:a7:04:43:46:95:5f: bf:e9:a4:c2:01:0d:55:bc:0d:79:da:8e:6c:28:aa:4f:af:22: d5:63:e5:03 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICD14wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUVE MEU3NjY2NTI3MkZBRjk1QzMxMDRFQUUxODJCRDJENUEwODAwQjAeFw0yNDA3Mjcw NzQ1NDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDFENkNCNTJBN0JDNDdD OUI0MjI5MDY0MkE5QzE5REQxNEI2OEQ2NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxecNi5AOnsGBXYZ9spRblUuIzQTd4XmxZiZfiNwel3ANJSr8O 0tb/REDPkpVGP0j7Kj4N64CuzGOwfY1dkrjvA4ylu/YO/HLAH/me5cSWhQh0q2eG sNpFZnR17aaLvdtDD/S6GJIN1GSOZC1s9Wg23VYXlOvMN0AHAGkcpqdILMxdaBAT lGHDAh+uM5HPJJwADJFt//WL//4/7meMgMD53Rd/lkokkB9VzkIiumGpee9mQaSZ +HAj5rGFxOfTmUZQhvx3FQLJW9vAjVXoOirOX1ynseiAoLxnGPHNw9eJlzCe3X94 YWUVOvrHWcdds/xZEiDCG4eZp1Y0VWfPE0thAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUHWy1KnvEfJtCKQZCqcGd0Uto1mMwHwYDVR0jBBgwFoAU7tDnZmUnL6+VwxBO rhgr0tWggAswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAy Ny83dERuWm1Vbkw2LVZ3eEJPcmhncjB0V2dnQXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzd0RG5abVVuTDYtVnd4Qk9yaGdyMHRXZ2dBcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMjcvSFd5MUtudkVmSnRD S1FaQ3FjR2QwVXRvMW1NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQGp8AAADANBgkqhkiG9w0BAQsFAAOCAQEAXK2TiFx1XcPR/E6e9ROhSw1o 0En421bktgeItlMv/DrNgdgcpE7lNZJmuQjfjsj1dI836bmSfoChumvLK/7A86Cg FJmEd34tuGE5u2mrJSUmiNfSWc14ZE3/tc1xLZZB3Z6FwPE266wPuQd7huL8Go9y 4MFVmED8LubZ6jrv2j9sisNP97UhaV2pm4CeoEoCPNJeMPBKnukGHlEvzCJ/hUdh Wh2Tfh9QmnzL9avalZrQ8uqfhIGCmG/W7cPV84MXnqVw0DjAcGySvcfOyakhauPD BUjrEiOTTPJE9u2lwRwJbovUpwRDRpVfv+mkwgENVbwNedqObCiqT68i1WPlAw== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:44 2024 by rpki-client on console-ams.rpki-client.org