$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/332/8risSRjrK30FUgkvOdFSrVZ_H1g.roa File: 8risSRjrK30FUgkvOdFSrVZ_H1g.roa (raw, json) Hash identifier: RxkUdvFQsVeTlTj8aZASBOgsTOvFp1FomEu8eNfE/xo= Subject key identifier: F2:B8:AC:49:18:EB:2B:7D:05:52:09:2F:39:D1:52:AD:56:7F:1F:58 Certificate issuer: /CN=8646EA74356E704AEDD163ECA94E5A442308DF78 Certificate serial: 1B16 Authority key identifier: 86:46:EA:74:35:6E:70:4A:ED:D1:63:EC:A9:4E:5A:44:23:08:DF:78 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hkbqdDVucErt0WPsqU5aRCMI33g.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/8risSRjrK30FUgkvOdFSrVZ_H1g.roa Signing time: Fri 24 May 2024 02:26:47 +0000 ROA not before: Fri 24 May 2024 02:26:47 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24424 IP address blocks: 2401:3800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/hkbqdDVucErt0WPsqU5aRCMI33g.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/hkbqdDVucErt0WPsqU5aRCMI33g.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hkbqdDVucErt0WPsqU5aRCMI33g.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 21:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6934 (0x1b16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8646EA74356E704AEDD163ECA94E5A442308DF78 Validity Not Before: May 24 02:26:47 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=F2B8AC4918EB2B7D0552092F39D152AD567F1F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:09:ff:44:f1:2c:14:d4:cb:6a:30:35:b7:91: 7c:6f:b4:8c:87:84:cf:5d:20:96:7f:64:b8:0b:83: d4:8f:ef:a3:d1:ed:ba:54:06:4e:e3:70:fe:e7:54: 27:3a:93:4c:37:63:5f:6e:0d:12:e2:eb:5e:c3:19: d1:a4:f9:fc:0f:cc:a8:f3:18:8c:92:53:bd:73:26: 0c:2b:74:cb:36:15:51:f1:9d:32:ef:30:09:ab:c0: db:a0:05:ad:22:a1:f5:42:8a:ef:c4:31:87:c4:a9: 73:fa:4c:ac:0b:41:34:b0:94:0d:f1:ed:24:51:bd: b0:bb:79:b3:7b:2b:23:06:78:6e:b3:c4:ba:7a:9b: 65:25:51:b3:06:5d:c7:b3:84:c1:84:1d:e3:8e:34: 6b:0c:fa:82:e6:6d:19:07:39:db:7b:b0:d1:2e:33: d9:20:30:58:a5:1c:ab:2f:ff:4c:09:e1:69:43:85: c7:05:f7:ff:86:09:b9:65:f4:8d:f4:1e:22:cc:71: d6:b9:00:57:2d:72:3c:5c:5f:e1:fb:37:f2:da:62: 26:02:cc:7a:7b:44:27:7d:d1:41:74:22:f6:10:b3: ef:db:48:db:8e:59:b4:90:85:5e:59:2e:da:ce:c1: 60:b0:a5:98:05:87:69:47:49:3d:21:b2:ed:24:d8: 37:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B8:AC:49:18:EB:2B:7D:05:52:09:2F:39:D1:52:AD:56:7F:1F:58 X509v3 Authority Key Identifier: keyid:86:46:EA:74:35:6E:70:4A:ED:D1:63:EC:A9:4E:5A:44:23:08:DF:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/hkbqdDVucErt0WPsqU5aRCMI33g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hkbqdDVucErt0WPsqU5aRCMI33g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/8risSRjrK30FUgkvOdFSrVZ_H1g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:3800::/32 Signature Algorithm: sha256WithRSAEncryption 63:15:3e:df:a0:39:e8:a4:91:c9:f1:3e:14:08:51:60:34:97: ac:7d:c2:46:be:3c:9f:97:54:e3:36:7f:f2:ea:81:b2:73:9f: 9c:f8:36:67:81:03:4a:76:92:31:a4:b6:a6:5f:96:22:11:e8: bb:2e:df:96:2d:2c:18:e9:eb:9c:b9:4a:6c:94:36:a6:db:5a: 40:ce:af:30:7a:82:9b:b9:1e:60:12:51:33:47:8f:6b:48:9d: 05:2b:42:7a:58:e8:b9:75:74:5d:0c:ea:db:fd:63:2d:8e:c3: d2:d5:62:62:06:26:28:14:ad:e5:ba:da:67:6d:09:b7:ef:73: c6:f6:c2:c1:c3:47:09:ec:ca:f8:52:d8:83:04:bd:77:a9:9d: 92:20:1b:32:bc:d9:a6:54:3e:60:b1:54:d4:68:ed:a9:21:d1: 3d:3f:f9:99:9b:a6:a9:49:71:33:0f:68:c6:0e:3a:c6:c4:50: cd:3e:d6:85:28:43:90:d4:1a:e8:3c:2a:76:2b:7f:82:c0:66: 20:74:56:5c:67:36:d0:52:5c:61:9c:0a:a2:6c:9e:54:c0:e5: 28:c1:ee:63:da:55:27:33:12:17:c7:6d:bc:ba:f1:1b:65:44: 1d:16:a6:17:12:59:da:d7:b5:83:92:b8:15:cc:d4:52:cf:3f: 3b:13:02:c6 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICGxYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODY0 NkVBNzQzNTZFNzA0QUVERDE2M0VDQTk0RTVBNDQyMzA4REY3ODAeFw0yNDA1MjQw MjI2NDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYyQjhBQzQ5MThFQjJC N0QwNTUyMDkyRjM5RDE1MkFENTY3RjFGNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJCf9E8SwU1MtqMDW3kXxvtIyHhM9dIJZ/ZLgLg9SP76PR7bpU Bk7jcP7nVCc6k0w3Y19uDRLi617DGdGk+fwPzKjzGIySU71zJgwrdMs2FVHxnTLv MAmrwNugBa0iofVCiu/EMYfEqXP6TKwLQTSwlA3x7SRRvbC7ebN7KyMGeG6zxLp6 m2UlUbMGXcezhMGEHeOONGsM+oLmbRkHOdt7sNEuM9kgMFilHKsv/0wJ4WlDhccF 9/+GCbll9I30HiLMcda5AFctcjxcX+H7N/LaYiYCzHp7RCd90UF0IvYQs+/bSNuO WbSQhV5ZLtrOwWCwpZgFh2lHST0hsu0k2DebAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU8risSRjrK30FUgkvOdFSrVZ/H1gwHwYDVR0jBBgwFoAUhkbqdDVucErt0WPs qU5aRCMI33gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy L2hrYnFkRFZ1Y0VydDBXUHNxVTVhUkNNSTMzZy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaGticWREVnVjRXJ0MFdQc3FVNWFSQ01JMzNnLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMyLzhyaXNTUmpySzMwRlVn a3ZPZEZTclZaX0gxZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkATgAMA0GCSqGSIb3DQEBCwUAA4IBAQBjFT7foDnopJHJ8T4UCFFgNJesfcJG vjyfl1TjNn/y6oGyc5+c+DZngQNKdpIxpLamX5YiEei7Lt+WLSwY6eucuUpslDam 21pAzq8weoKbuR5gElEzR49rSJ0FK0J6WOi5dXRdDOrb/WMtjsPS1WJiBiYoFK3l utpnbQm373PG9sLBw0cJ7Mr4UtiDBL13qZ2SIBsyvNmmVD5gsVTUaO2pIdE9P/mZ m6apSXEzD2jGDjrGxFDNPtaFKEOQ1BroPCp2K3+CwGYgdFZcZzbQUlxhnAqibJ5U wOUowe5j2lUnMxIXx228uvEbZUQdFqYXElna17WDkrgVzNRSzz87EwLG -----END CERTIFICATE-----Generated at Fri Nov 22 19:57:43 2024 by rpki-client on console-ams.rpki-client.org