$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/Vfk6BniMr_w7s9H9yQ8mQz3CZ-4.roa File: Vfk6BniMr_w7s9H9yQ8mQz3CZ-4.roa (raw, json) Hash identifier: KurNer2/Y1xdUKV1KnEW6FuwjnsThg9QqLpOb7EJ0yM= Subject key identifier: 55:F9:3A:06:78:8C:AF:FC:3B:B3:D1:FD:C9:0F:26:43:3D:C2:67:EE Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Certificate serial: 0713 Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/Vfk6BniMr_w7s9H9yQ8mQz3CZ-4.roa Signing time: Tue 24 Sep 2024 00:17:54 +0000 ROA not before: Tue 24 Sep 2024 00:17:54 +0000 ROA not after: Sat 20 Sep 2025 07:41:26 +0000 asID: 135061 IP address blocks: 2407:8f40:2::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1811 (0x713) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Validity Not Before: Sep 24 00:17:54 2024 GMT Not After : Sep 20 07:41:26 2025 GMT Subject: CN=55F93A06788CAFFC3BB3D1FDC90F26433DC267EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b4:98:a2:50:bf:93:5e:83:e3:dd:09:7d:d4: 73:5f:05:4f:1c:25:24:8c:ad:b8:5c:34:87:de:14: 20:ff:23:08:40:05:df:1d:a6:f8:92:2c:2b:ee:a4: da:15:28:44:90:04:c5:b2:b2:17:f8:bd:58:a4:f2: e1:64:72:dd:34:a9:67:9b:a0:86:8a:ec:09:e8:a5: e0:22:eb:e4:7f:d5:f4:1d:4d:33:d5:08:db:8b:9f: c6:3d:79:4c:18:81:19:6c:75:04:68:41:8a:8e:96: eb:a3:d0:e8:d8:1b:9b:ad:4b:37:e0:60:46:9b:ad: 03:ae:70:06:d6:b9:6a:68:66:fb:49:70:2f:86:75: 66:6a:02:10:28:da:1e:0d:49:57:de:99:c1:0d:d6: b1:a1:d7:36:2f:c4:90:35:a5:0a:f2:76:d3:58:63: 0c:bc:b7:57:8f:31:5c:c8:78:10:2f:40:15:55:18: 2b:42:9f:83:8d:51:56:ee:ff:1e:f1:82:19:83:f5: ac:ce:1c:78:1e:1e:28:ad:d8:71:e9:3e:e8:e4:d5: 68:0c:5e:98:ce:db:41:a6:fd:d2:89:dc:66:d2:bb: e4:c5:91:70:8d:ac:38:23:4d:c7:6d:2a:c0:ff:79: 7d:3c:64:cf:96:95:3f:0a:e8:4d:d6:2f:80:c6:35: 29:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F9:3A:06:78:8C:AF:FC:3B:B3:D1:FD:C9:0F:26:43:3D:C2:67:EE X509v3 Authority Key Identifier: keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/Vfk6BniMr_w7s9H9yQ8mQz3CZ-4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:8f40:2::/48 Signature Algorithm: sha256WithRSAEncryption 77:b3:86:1e:0f:36:be:d6:54:00:42:17:f2:2f:d9:6f:46:bb: c3:a4:39:e6:3f:38:46:f1:28:7a:50:6c:c5:63:60:7b:c5:c6: 8c:6f:73:2a:f5:b8:89:30:b6:47:7f:e0:c5:7f:38:47:13:1b: 46:49:b1:27:c4:ef:10:20:34:22:47:f1:44:f4:86:38:61:64: d7:73:81:f7:cf:ad:e2:b2:5d:57:6a:cc:0a:b5:11:85:b1:3e: 1e:c1:2b:23:f6:1b:e4:f8:4f:eb:5a:ed:bb:8a:db:71:b9:7b: aa:c8:2f:89:a1:96:e2:7c:c2:c5:b8:79:a3:55:d7:d4:8d:5a: 8d:77:e4:78:99:9b:10:00:b4:27:4b:9b:0a:b2:75:ef:11:04: d0:df:37:a1:47:51:2c:fe:29:90:6a:c1:2e:f8:37:3d:7e:4b: 93:f3:9c:da:32:aa:1f:58:91:32:2d:80:34:8f:51:a1:75:90: 46:84:83:e8:39:da:55:97:1f:08:c1:39:66:98:b1:04:86:0e: 02:18:37:47:97:12:e4:9b:85:4e:ef:67:94:b7:c9:14:27:3e: 2d:63:73:ad:d8:24:d1:cc:01:bb:94:7e:56:3f:b5:c8:b9:04: 22:13:de:2c:03:82:ca:b9:70:25:52:3f:08:56:a7:2a:04:0c: f3:91:b9:38 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ix NjcwN0VBRjBCREZEMTMyNkFGRDlCREVDNkFGRkE2RTYzQkE5ODAeFw0yNDA5MjQw MDE3NTRaFw0yNTA5MjAwNzQxMjZaMDMxMTAvBgNVBAMTKDU1RjkzQTA2Nzg4Q0FG RkMzQkIzRDFGREM5MEYyNjQzM0RDMjY3RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDItJiiUL+TXoPj3Ql91HNfBU8cJSSMrbhcNIfeFCD/IwhABd8d pviSLCvupNoVKESQBMWyshf4vVik8uFkct00qWeboIaK7AnopeAi6+R/1fQdTTPV CNuLn8Y9eUwYgRlsdQRoQYqOluuj0OjYG5utSzfgYEabrQOucAbWuWpoZvtJcC+G dWZqAhAo2h4NSVfemcEN1rGh1zYvxJA1pQrydtNYYwy8t1ePMVzIeBAvQBVVGCtC n4ONUVbu/x7xghmD9azOHHgeHiit2HHpPujk1WgMXpjO20Gm/dKJ3GbSu+TFkXCN rDgjTcdtKsD/eX08ZM+WlT8K6E3WL4DGNSk5AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUVfk6BniMr/w7s9H9yQ8mQz3CZ+4wHwYDVR0jBBgwFoAUyxZwfq8L39Eyav2b 3sav+m5jupgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 NS95eFp3ZnE4TDM5RXlhdjJiM3Nhdi1tNWp1cGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3l4WndmcThMMzlFeWF2MmIzc2F2LW01anVwZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTUvVmZrNkJuaU1yX3c3 czlIOXlROG1RejNDWi00LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQHj0AAAjANBgkqhkiG9w0BAQsFAAOCAQEAd7OGHg82vtZUAEIX8i/Zb0a7 w6Q55j84RvEoelBsxWNge8XGjG9zKvW4iTC2R3/gxX84RxMbRkmxJ8TvECA0Ikfx RPSGOGFk13OB98+t4rJdV2rMCrURhbE+HsErI/Yb5PhP61rtu4rbcbl7qsgviaGW 4nzCxbh5o1XX1I1ajXfkeJmbEAC0J0ubCrJ17xEE0N83oUdRLP4pkGrBLvg3PX5L k/Oc2jKqH1iRMi2ANI9RoXWQRoSD6DnaVZcfCME5ZpixBIYOAhg3R5cS5JuFTu9n lLfJFCc+LWNzrdgk0cwBu5R+Vj+1yLkEIhPeLAOCyrlwJVI/CFanKgQM85G5OA== -----END CERTIFICATE-----Generated at Fri Nov 22 18:01:40 2024 by rpki-client on console-fra.rpki-client.org