$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/xyfY9yR7YSLmBWuBhOsFKZxU7WM.roa File: xyfY9yR7YSLmBWuBhOsFKZxU7WM.roa (raw, json) Hash identifier: YaZZmWAZiabSdrOfNLOwwARuYVgEmGH8Dev2RDPeXZg= Subject key identifier: C7:27:D8:F7:24:7B:61:22:E6:05:6B:81:84:EB:05:29:9C:54:ED:63 Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 134B Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/xyfY9yR7YSLmBWuBhOsFKZxU7WM.roa Signing time: Mon 11 Mar 2024 06:45:33 +0000 ROA not before: Mon 11 Mar 2024 06:45:33 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 16:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4939 (0x134b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Mar 11 06:45:33 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=C727D8F7247B6122E6056B8184EB05299C54ED63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:3f:dd:95:ad:6f:2f:af:44:9f:61:05:08: a0:26:4c:05:02:4c:10:ec:c4:ca:b0:88:9a:2a:3d: 8c:2d:aa:b3:7b:fc:4c:d4:01:11:09:26:4d:1c:7f: c2:35:1b:33:e3:29:1c:82:ef:46:5e:6e:ee:aa:cc: 34:de:29:75:30:45:15:cc:ce:fb:80:30:33:8f:73: 62:48:9b:4c:b8:5a:3f:71:b8:db:ba:a4:9c:c7:e1: e3:b1:48:62:1a:4d:9c:ab:e2:62:1a:c4:7d:99:f3: 5f:94:92:8f:ab:9b:d8:ee:06:d3:21:44:4d:fe:f8: 01:93:81:88:c0:bc:96:b0:e0:00:88:d3:3e:0b:d1: 1b:08:5a:d1:50:59:ad:94:ab:cf:f0:56:87:79:a5: b8:02:d7:42:ba:d1:1a:67:14:0e:56:1f:5b:f1:ff: b0:bc:bc:4b:e5:2f:19:a9:2b:28:82:65:eb:3f:c7: 6f:4e:93:2b:d5:fc:99:84:6b:a9:75:98:a0:f8:84: 8e:02:e8:12:95:39:4e:16:84:51:96:9e:72:d6:96: bb:d9:a8:38:21:dc:8f:d0:25:a9:6b:aa:1b:7f:e2: 5d:5d:3f:3c:43:de:03:c0:82:49:6b:79:ad:c2:b4: 8e:d9:f6:c3:70:0c:64:08:52:4f:31:51:f3:9a:c4: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:27:D8:F7:24:7B:61:22:E6:05:6B:81:84:EB:05:29:9C:54:ED:63 X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/xyfY9yR7YSLmBWuBhOsFKZxU7WM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 1f:cd:4e:b8:59:a2:c1:26:89:27:02:f8:25:ac:35:6f:04:60: 2c:43:cc:79:e0:da:9a:93:bd:73:89:c9:f0:f9:7c:00:d7:00: 57:46:a1:8a:25:9f:30:ec:57:c1:59:3c:c6:42:4a:aa:da:6a: dd:02:4b:4b:ee:07:15:59:72:30:10:c6:38:d8:68:44:ca:f1: e6:79:70:65:4b:83:da:cc:f7:26:4a:fd:32:23:49:85:63:52: 3b:f5:ae:b5:f4:bf:d3:c7:c6:85:d7:f1:75:64:f5:22:ab:6e: 4d:3f:d4:db:f2:c9:dd:1d:3c:e3:27:d8:8b:dc:d4:88:bf:1c: 9b:0e:b3:39:01:8e:46:25:ea:f7:8e:b1:bd:bc:60:4d:cc:99: ee:24:3a:a6:f4:d8:33:1c:3e:aa:0c:44:d6:77:8a:75:b4:53: ee:39:a9:eb:4f:c9:1a:fb:a1:7c:55:75:92:34:7e:cd:74:91: 51:8f:ee:65:c7:96:a3:66:5b:ef:b6:88:27:82:09:10:f1:78: 38:df:ed:6a:18:f4:c8:28:ae:8b:01:85:12:f9:65:bb:85:59: 4c:af:42:a7:67:07:53:3d:05:15:55:8c:35:90:b1:5f:14:58: 24:fe:fb:92:80:56:57:b5:b7:f8:b1:39:ca:6e:a5:e4:6b:57: 15:05:7f:17 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICE0swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNDAzMTEw NjQ1MzNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEM3MjdEOEY3MjQ3QjYx MjJFNjA1NkI4MTg0RUIwNTI5OUM1NEVENjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8Hj/dla1vL69En2EFCKAmTAUCTBDsxMqwiJoqPYwtqrN7/EzU AREJJk0cf8I1GzPjKRyC70Zebu6qzDTeKXUwRRXMzvuAMDOPc2JIm0y4Wj9xuNu6 pJzH4eOxSGIaTZyr4mIaxH2Z81+Uko+rm9juBtMhRE3++AGTgYjAvJaw4ACI0z4L 0RsIWtFQWa2Uq8/wVod5pbgC10K60RpnFA5WH1vx/7C8vEvlLxmpKyiCZes/x29O kyvV/JmEa6l1mKD4hI4C6BKVOU4WhFGWnnLWlrvZqDgh3I/QJalrqht/4l1dPzxD 3gPAgklrea3CtI7Z9sNwDGQIUk8xUfOaxAR3AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUxyfY9yR7YSLmBWuBhOsFKZxU7WMwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgveHlmWTl5UjdZU0xt Qld1QmhPc0ZLWnhVN1dNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAB/NTrhZosEmiScC+CWsNW8EYCxD zHng2pqTvXOJyfD5fADXAFdGoYolnzDsV8FZPMZCSqraat0CS0vuBxVZcjAQxjjY aETK8eZ5cGVLg9rM9yZK/TIjSYVjUjv1rrX0v9PHxoXX8XVk9SKrbk0/1Nvyyd0d POMn2Ivc1Ii/HJsOszkBjkYl6veOsb28YE3Mme4kOqb02DMcPqoMRNZ3inW0U+45 qetPyRr7oXxVdZI0fs10kVGP7mXHlqNmW++2iCeCCRDxeDjf7WoY9MgorosBhRL5 ZbuFWUyvQqdnB1M9BRVVjDWQsV8UWCT++5KAVle1t/ixOcpupeRrVxUFfxc= -----END CERTIFICATE-----Generated at Sun Jun 2 12:47:03 2024 by rpki-client on console-ams.rpki-client.org