$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/daZd1fCZmG6OFhI_OYGAI8NmRyI.roa File: daZd1fCZmG6OFhI_OYGAI8NmRyI.roa (raw, json) Hash identifier: e7vRx8ai7YM+tJ9igqlDaV565ZU2VGf7x9cJd+Nk/M0= Subject key identifier: 75:A6:5D:D5:F0:99:98:6E:8E:16:12:3F:39:81:80:23:C3:66:47:22 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 12ED Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/daZd1fCZmG6OFhI_OYGAI8NmRyI.roa Signing time: Sat 29 Jun 2024 19:44:16 +0000 ROA not before: Sat 29 Jun 2024 19:44:16 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 50983 IP address blocks: 2403:1b80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4845 (0x12ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jun 29 19:44:16 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=75A65DD5F099986E8E16123F39818023C3664722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e9:2a:eb:18:99:15:2e:f7:93:b7:6c:6b:da: a4:e2:cb:30:38:6f:db:d0:7c:a0:bc:64:c0:b0:ba: 2e:70:d8:05:4b:c6:34:61:b7:9c:61:de:ef:99:b3: 2c:78:1a:e5:73:8c:f7:83:c7:07:b3:6a:b0:dc:22: 93:fa:4d:f9:b9:81:23:b7:a6:67:a5:fc:38:84:2f: 80:97:89:df:90:bb:21:20:94:67:a6:f6:9f:20:fd: d2:ab:11:d7:00:63:a3:61:8d:01:cc:fc:51:05:af: f7:4c:25:b7:5d:6c:ea:0d:5a:1a:05:b5:8e:24:77: 76:e6:ce:7a:ad:e3:f8:48:29:f4:9c:d6:e8:cf:26: a7:2d:b9:8a:03:19:9b:59:77:f2:b6:61:61:f1:0c: ea:00:0e:34:18:28:6b:29:bb:2f:16:8c:29:a8:0d: b2:f1:84:5c:a7:00:09:b0:2c:f5:5e:fc:a3:fd:8b: 9a:4c:4e:dc:6f:50:a0:82:75:20:fb:f6:11:a4:11: 78:12:17:ff:d0:b2:37:c7:53:e3:61:ba:bc:bc:36: 71:80:43:ad:39:2a:73:ed:d1:b5:11:b4:5d:3f:8d: c8:a4:30:44:5f:15:9b:be:1b:ab:9e:f4:a7:7b:5b: b2:d0:5d:a1:fe:7b:27:0d:72:6b:f6:7c:4d:4d:b5: 43:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A6:5D:D5:F0:99:98:6E:8E:16:12:3F:39:81:80:23:C3:66:47:22 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/daZd1fCZmG6OFhI_OYGAI8NmRyI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:1b80::/32 Signature Algorithm: sha256WithRSAEncryption b8:15:c3:72:79:49:7b:8e:36:73:61:c9:85:53:9b:35:1f:62: 29:d5:db:c8:00:c0:60:4a:5a:79:e8:a5:17:54:55:9f:59:99: fc:68:af:18:3d:d8:4f:e4:ac:64:22:ba:e1:ed:fa:ce:3b:4d: 54:b2:fd:1e:8f:c0:56:46:86:43:78:e7:10:c5:64:ce:d2:3e: c6:49:34:9b:0b:7a:79:55:a0:2a:4b:23:b4:45:49:73:a9:d8: 9d:14:6f:4b:94:3d:e6:b3:6b:37:19:97:ea:98:a1:cb:e7:cd: 29:ca:2b:4e:f4:9b:94:7e:93:eb:87:26:fa:42:2e:12:32:51: d5:30:26:ae:cd:6a:b7:ef:46:78:d0:79:2c:08:37:fd:99:3c: 30:7c:af:98:9f:05:70:b6:af:0e:7e:23:e8:a0:ce:b3:ca:ca: 7a:1f:b6:e9:59:26:bd:79:14:f4:1c:d6:ae:2c:be:d4:da:a1: ab:d3:f8:53:ce:e7:ac:ba:02:f0:34:a7:71:72:c5:a5:d5:42: 96:2f:35:af:64:c3:8a:7b:f6:84:7a:97:1e:9a:a3:4c:b9:0b: a9:8c:9a:a3:f4:f4:24:4f:27:2f:b5:44:b8:44:2f:ee:1a:33: dc:cc:df:36:43:25:c0:23:92:f4:53:3d:ec:69:85:db:ca:2b: ed:2b:d4:fe -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEu0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA2Mjkx OTQ0MTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDc1QTY1REQ1RjA5OTk4 NkU4RTE2MTIzRjM5ODE4MDIzQzM2NjQ3MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDg6SrrGJkVLveTt2xr2qTiyzA4b9vQfKC8ZMCwui5w2AVLxjRh t5xh3u+Zsyx4GuVzjPeDxwezarDcIpP6Tfm5gSO3pmel/DiEL4CXid+QuyEglGem 9p8g/dKrEdcAY6NhjQHM/FEFr/dMJbddbOoNWhoFtY4kd3bmznqt4/hIKfSc1ujP JqctuYoDGZtZd/K2YWHxDOoADjQYKGspuy8WjCmoDbLxhFynAAmwLPVe/KP9i5pM TtxvUKCCdSD79hGkEXgSF//QsjfHU+Nhury8NnGAQ605KnPt0bURtF0/jcikMERf FZu+G6ue9Kd7W7LQXaH+eycNcmv2fE1NtUONAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUdaZd1fCZmG6OFhI/OYGAI8NmRyIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2RhWmQxZkNabUc2T0Zo SV9PWUdBSThObVJ5SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAxuAMA0GCSqGSIb3DQEBCwUAA4IBAQC4FcNyeUl7jjZzYcmFU5s1H2Ip1dvI AMBgSlp56KUXVFWfWZn8aK8YPdhP5KxkIrrh7frOO01Usv0ej8BWRoZDeOcQxWTO 0j7GSTSbC3p5VaAqSyO0RUlzqdidFG9LlD3ms2s3GZfqmKHL580pyitO9JuUfpPr hyb6Qi4SMlHVMCauzWq370Z40HksCDf9mTwwfK+YnwVwtq8OfiPooM6zysp6H7bp WSa9eRT0HNauLL7U2qGr0/hTzuesugLwNKdxcsWl1UKWLzWvZMOKe/aEepcemqNM uQupjJqj9PQkTycvtUS4RC/uGjPczN82QyXAI5L0Uz3saYXbyivtK9T+ -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org