$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/UJOyOphSKYh11vThQ0_iW9sJMW8.roa File: UJOyOphSKYh11vThQ0_iW9sJMW8.roa (raw, json) Hash identifier: nSF3GUFV478SD378DMrV+kCtuZQlWMKVRcDjRwWCOlg= Subject key identifier: 50:93:B2:3A:98:52:29:88:75:D6:F4:E1:43:4F:E2:5B:DB:09:31:6F Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 0CDF Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UJOyOphSKYh11vThQ0_iW9sJMW8.roa Signing time: Wed 13 Mar 2024 01:21:59 +0000 ROA not before: Wed 13 Mar 2024 01:21:59 +0000 ROA not after: Fri 07 Jun 2024 02:16:11 +0000 asID: 24373 IP address blocks: 2406:1e80::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Mar 13 01:21:59 2024 GMT Not After : Jun 7 02:16:11 2024 GMT Subject: CN=5093B23A9852298875D6F4E1434FE25BDB09316F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:00:34:8c:bc:33:aa:f8:04:e9:06:e1:0a:b8: 14:be:e1:67:af:f9:f8:c4:d1:a1:4c:8c:7b:1b:7f: c9:06:dd:1b:1c:1b:4f:1b:2c:70:28:74:b5:2d:1c: 80:31:7d:d3:36:b4:b5:dc:bc:90:be:78:fe:20:2d: fb:10:59:00:1e:15:71:4c:82:22:12:ac:54:96:b0: 9e:b1:c0:6f:69:c1:03:7d:24:1b:d7:37:9c:a7:b5: 2d:16:4d:f6:66:8b:90:11:e2:43:03:65:a4:65:55: 7d:a9:e3:a1:33:83:69:7a:be:2a:2a:69:44:de:7f: 53:73:b5:4d:92:c3:05:1e:f9:1f:c1:5a:34:f9:1a: 56:4d:c0:50:26:a0:fe:03:d1:a1:4b:d2:74:c9:3c: 9a:42:33:a8:52:10:e6:c2:e4:91:f9:2d:74:9d:b4: 80:bb:41:19:4f:ba:ee:74:3a:f5:be:57:f8:50:a0: c6:1a:14:83:6a:8b:4b:ac:46:ab:08:1a:5e:ad:d7: 76:03:e0:52:56:35:5d:f1:18:15:4e:c6:fa:62:4a: f2:fd:da:6a:e0:48:02:b0:02:37:a3:3d:85:b2:bb: fe:b5:f5:18:34:46:e9:a2:b0:fa:7a:fe:c6:8b:b7: b9:a9:1f:fe:8d:f7:84:0c:f8:ad:53:22:ab:96:8a: 7d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:93:B2:3A:98:52:29:88:75:D6:F4:E1:43:4F:E2:5B:DB:09:31:6F X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UJOyOphSKYh11vThQ0_iW9sJMW8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:1e80::/48 Signature Algorithm: sha256WithRSAEncryption 57:ec:9e:48:9c:e2:b8:16:79:ea:3c:a2:c9:e5:7a:c7:ff:c3: ff:6f:22:60:6e:27:98:14:36:c6:6c:46:cb:74:23:35:91:53: 43:89:0a:cd:34:bd:40:a8:b8:f5:c3:37:30:21:f1:97:1d:9d: 9d:54:e8:a2:42:aa:a3:da:16:75:18:64:2d:b3:7b:62:8d:12: 77:3c:b3:f0:f9:3b:7a:7a:ee:fb:48:32:50:e0:db:c6:d1:0d: 8b:04:c2:40:5c:56:2f:fe:8a:92:89:1b:08:b5:b2:24:ba:34: e2:00:ee:b6:20:20:0e:f7:da:04:2f:c7:24:35:56:16:ca:25: 91:a4:9a:ef:7c:8f:11:37:91:70:c5:94:88:a1:41:2f:d7:5e: ad:73:d3:66:1f:74:b8:72:a3:16:b1:94:ec:aa:1b:e6:63:00: 01:2f:56:e1:91:5f:63:7c:04:45:e9:b2:88:3b:77:2c:f3:3b: 8d:e5:e7:1b:5a:4f:fa:f4:e1:5d:58:24:14:4a:91:fd:a5:81: 65:cb:d5:b2:aa:9c:38:12:43:d6:23:a4:e1:60:ae:e6:29:6d: 7d:53:70:1d:7c:f9:66:d1:1b:d6:d9:3d:72:b3:56:b6:dc:50: 4d:42:1f:46:a9:b3:15:aa:71:12:04:64:3f:9a:7f:fb:66:15: 85:32:c5:e7 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDAzMTMw MTIxNTlaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDUwOTNCMjNBOTg1MjI5 ODg3NUQ2RjRFMTQzNEZFMjVCREIwOTMxNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+ADSMvDOq+ATpBuEKuBS+4Wev+fjE0aFMjHsbf8kG3RscG08b LHAodLUtHIAxfdM2tLXcvJC+eP4gLfsQWQAeFXFMgiISrFSWsJ6xwG9pwQN9JBvX N5yntS0WTfZmi5AR4kMDZaRlVX2p46Ezg2l6vioqaUTef1NztU2SwwUe+R/BWjT5 GlZNwFAmoP4D0aFL0nTJPJpCM6hSEObC5JH5LXSdtIC7QRlPuu50OvW+V/hQoMYa FINqi0usRqsIGl6t13YD4FJWNV3xGBVOxvpiSvL92mrgSAKwAjejPYWyu/619Rg0 RumisPp6/saLt7mpH/6N94QM+K1TIquWin0pAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUUJOyOphSKYh11vThQ0/iW9sJMW8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1VKT3lPcGhTS1loMTF2 VGhRMF9pVzlzSk1XOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAkBh6AAAAwDQYJKoZIhvcNAQELBQADggEBAFfsnkic4rgWeeo8osnlesf/w/9v ImBuJ5gUNsZsRst0IzWRU0OJCs00vUCouPXDNzAh8ZcdnZ1U6KJCqqPaFnUYZC2z e2KNEnc8s/D5O3p67vtIMlDg28bRDYsEwkBcVi/+ipKJGwi1siS6NOIA7rYgIA73 2gQvxyQ1VhbKJZGkmu98jxE3kXDFlIihQS/XXq1z02YfdLhyoxaxlOyqG+ZjAAEv VuGRX2N8BEXpsog7dyzzO43l5xtaT/r04V1YJBRKkf2lgWXL1bKqnDgSQ9YjpOFg ruYpbX1TcB18+WbRG9bZPXKzVrbcUE1CH0apsxWqcRIEZD+af/tmFYUyxec= -----END CERTIFICATE-----Generated at Sat Jun 1 11:37:20 2024 by rpki-client on console-fra.rpki-client.org