$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/40/REY2RjyEOfuzp4xNTxpBAQySoWY.roa File: REY2RjyEOfuzp4xNTxpBAQySoWY.roa (raw, json) Hash identifier: KOgzKERyCZXuz36k9kTTTd6GWEKLv6vlaOHVXoivP7E= Subject key identifier: 44:46:36:46:3C:84:39:FB:B3:A7:8C:4D:4F:1A:41:01:0C:92:A1:66 Certificate issuer: /CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847 Certificate serial: 1376 Authority key identifier: AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/REY2RjyEOfuzp4xNTxpBAQySoWY.roa Signing time: Sat 11 May 2024 07:48:49 +0000 ROA not before: Sat 11 May 2024 07:48:49 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 17429 IP address blocks: 2403:4300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4982 (0x1376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847 Validity Not Before: May 11 07:48:49 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=444636463C8439FBB3A78C4D4F1A41010C92A166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:06:98:cf:6e:6f:d4:6f:13:1f:61:78:ef: 91:ed:77:da:1a:93:aa:89:b1:d5:6c:d2:26:73:5f: 44:04:1e:5c:9d:c9:c0:5b:a2:ce:24:b0:8c:ab:65: a4:8c:50:2f:16:ae:d1:43:ca:fa:2d:eb:f3:4d:b8: 1d:bb:c1:c2:d3:2e:90:8e:de:2f:3a:b6:09:62:ad: 31:60:5a:da:fd:b8:22:74:32:76:16:46:d2:4f:7a: c7:bf:4a:b8:73:1e:bd:c9:b1:76:f8:97:fa:3e:d6: 70:dc:31:49:8d:8c:0c:db:37:9d:81:66:28:00:74: 91:01:4e:13:80:6d:55:ee:c3:6a:0b:10:f2:f3:3f: bd:24:35:12:fc:f6:0c:c3:be:15:30:ca:a1:ee:14: 82:96:6a:b0:14:12:c6:cd:37:8e:c8:ad:eb:4f:66: 6d:b4:c2:2d:97:88:e7:48:81:a6:06:3e:f0:fd:5e: 5f:4c:9f:7a:a8:d0:8e:bd:14:d6:f7:03:cd:aa:1e: cb:72:d0:ad:69:78:36:5c:05:0c:1c:fa:44:78:83: 48:f5:5d:08:46:e3:34:4d:20:24:59:08:25:90:00: 8c:d3:f2:f2:de:75:6c:9a:27:d5:46:fa:f3:b8:e7: 04:0c:bd:7b:8a:78:0f:40:f9:04:01:8e:ba:62:ac: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:46:36:46:3C:84:39:FB:B3:A7:8C:4D:4F:1A:41:01:0C:92:A1:66 X509v3 Authority Key Identifier: keyid:AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/REY2RjyEOfuzp4xNTxpBAQySoWY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:4300::/32 Signature Algorithm: sha256WithRSAEncryption 83:00:7b:bc:8a:b0:c5:0b:cd:ca:0b:d7:48:c5:98:4d:ef:82: 5b:1e:2a:a5:cc:dd:a9:66:c5:fd:6f:d4:c9:51:54:2c:85:75: 26:3f:b1:fa:5b:b0:38:ea:5d:90:e1:46:51:42:33:37:f5:f3: 41:c6:ed:25:9a:86:97:e3:cb:36:1d:5c:f9:60:87:7e:7e:7a: 55:56:f1:31:a7:2d:c8:59:a7:34:76:69:78:ff:97:59:99:74: 30:66:76:9d:00:4a:3c:74:35:55:39:4e:d5:29:a8:c9:5c:82: 93:b7:a3:d0:a8:69:59:6f:71:e2:0e:6f:bd:4f:1a:52:22:51: 0d:e2:4f:eb:63:16:fd:d2:a3:3b:a4:fd:8e:67:51:db:ca:83: 74:7c:18:e4:09:55:13:fd:d9:0b:22:c6:8d:0c:12:13:b9:47: 93:12:db:19:72:ee:c9:a8:5f:22:40:df:e6:14:b2:10:21:07: f6:05:d9:42:a0:3d:e8:44:05:c7:79:cb:a8:e1:bb:10:13:b2: 42:52:9b:c3:ca:96:42:46:09:c6:0e:69:fc:6e:2a:d3:30:1a: a8:76:85:c0:ef:ae:9c:51:57:1f:0b:c7:f3:37:d4:2e:45:56: d0:d9:2f:33:b1:0c:3d:3f:2d:3c:93:df:a2:b4:0c:55:fc:71: 9b:fa:cc:11 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICE3YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUVD Q0NDQjc5REZFNkM0NjZDQ0FEQjM5ODk2NzEwRUNBQzM3Qjg0NzAeFw0yNDA1MTEw NzQ4NDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ0NDYzNjQ2M0M4NDM5 RkJCM0E3OEM0RDRGMUE0MTAxMEM5MkExNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2hAaYz25v1G8TH2F475Htd9oak6qJsdVs0iZzX0QEHlydycBb os4ksIyrZaSMUC8WrtFDyvot6/NNuB27wcLTLpCO3i86tglirTFgWtr9uCJ0MnYW RtJPese/SrhzHr3JsXb4l/o+1nDcMUmNjAzbN52BZigAdJEBThOAbVXuw2oLEPLz P70kNRL89gzDvhUwyqHuFIKWarAUEsbNN47IretPZm20wi2XiOdIgaYGPvD9Xl9M n3qo0I69FNb3A82qHsty0K1peDZcBQwc+kR4g0j1XQhG4zRNICRZCCWQAIzT8vLe dWyaJ9VG+vO45wQMvXuKeA9A+QQBjrpirC2BAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUREY2RjyEOfuzp4xNTxpBAQySoWYwHwYDVR0jBBgwFoAUrszMt53+bEZsyts5 iWcQ7Kw3uEcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDAv cnN6TXQ1My1iRVpzeXRzNWlXY1E3S3czdUVjLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9yc3pNdDUzLWJFWnN5dHM1aVdjUTdLdzN1RWMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC80MC9SRVkyUmp5RU9mdXpwNHhO VHhwQkFReVNvV1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA JANDADANBgkqhkiG9w0BAQsFAAOCAQEAgwB7vIqwxQvNygvXSMWYTe+CWx4qpczd qWbF/W/UyVFULIV1Jj+x+luwOOpdkOFGUUIzN/XzQcbtJZqGl+PLNh1c+WCHfn56 VVbxMactyFmnNHZpeP+XWZl0MGZ2nQBKPHQ1VTlO1SmoyVyCk7ej0KhpWW9x4g5v vU8aUiJRDeJP62MW/dKjO6T9jmdR28qDdHwY5AlVE/3ZCyLGjQwSE7lHkxLbGXLu yahfIkDf5hSyECEH9gXZQqA96EQFx3nLqOG7EBOyQlKbw8qWQkYJxg5p/G4q0zAa qHaFwO+unFFXHwvH8zfULkVW0NkvM7EMPT8tPJPforQMVfxxm/rMEQ== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:46 2024 by rpki-client on console-ams.rpki-client.org