$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/k3O1Nd4DbSodsyWRi07EJUrNlkQ.roa File: k3O1Nd4DbSodsyWRi07EJUrNlkQ.roa (raw, json) Hash identifier: 6+ANxpnzey4Klf1S8DfB2hc6EZutyB0kEHptxML/vYU= Subject key identifier: 93:73:B5:35:DE:03:6D:2A:1D:B3:25:91:8B:4E:C4:25:4A:CD:96:44 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14BB Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/k3O1Nd4DbSodsyWRi07EJUrNlkQ.roa Signing time: Wed 11 Sep 2024 02:23:44 +0000 ROA not before: Wed 11 Sep 2024 02:23:44 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59803 IP address blocks: 2403:1b80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5307 (0x14bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:44 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=9373B535DE036D2A1DB325918B4EC4254ACD9644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:54:6a:23:30:54:3e:0f:d5:73:36:4c:19:cf: 26:bc:30:19:a2:92:2d:22:c7:f1:f7:2d:f8:5d:08: 36:0e:64:f4:0c:a2:18:b9:ef:48:e8:b5:00:51:3a: 2a:ee:8f:f2:7d:b6:99:9e:eb:63:d4:2f:2b:87:3e: 69:0a:de:1b:e0:2f:1c:f7:d2:ce:10:3b:aa:4d:c9: 81:1b:64:be:8f:8f:a3:d4:fe:ac:30:2d:b8:ca:82: 15:f5:ad:0d:7b:6e:3c:ac:03:25:db:ae:4c:30:89: cf:7d:8e:5c:12:67:8d:15:35:17:28:05:ea:59:1d: 06:94:65:dc:fc:b8:fd:5a:73:d6:8b:82:ba:ef:a1: 56:97:5a:5f:12:c0:5a:c1:e7:8a:8b:12:25:4c:6a: c0:df:72:92:22:ef:46:a3:3e:c7:75:6d:5c:3d:2c: 53:35:3d:e8:14:25:6e:e3:70:f3:75:5a:d1:12:62: 46:19:52:de:cb:7f:52:7d:59:11:14:72:66:7f:9c: d9:52:9c:2d:0a:99:b8:0c:8b:df:1e:bb:fc:54:39: 7d:5e:01:24:9f:45:68:fe:85:27:0b:ac:7e:53:05: 2a:61:2f:e8:be:34:9b:61:fc:85:03:e0:d5:7d:39: d9:84:c1:c8:55:b4:d0:ba:a8:13:ef:cb:bf:9e:79: 76:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:73:B5:35:DE:03:6D:2A:1D:B3:25:91:8B:4E:C4:25:4A:CD:96:44 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/k3O1Nd4DbSodsyWRi07EJUrNlkQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:1b80::/32 Signature Algorithm: sha256WithRSAEncryption 66:96:11:42:ff:9c:c0:06:ac:28:f8:8f:87:e5:08:1c:48:44: bd:25:51:b3:82:1a:8e:12:15:47:93:ae:b4:ce:c1:35:d6:86: 8e:00:7a:05:bb:25:e8:e4:97:71:7d:27:01:60:5d:3e:9f:75: b3:2c:da:76:ea:f0:75:e2:ad:87:61:a7:d7:4f:ba:8e:fa:54: 0f:83:c3:de:27:9b:d5:da:37:e1:a6:a8:c4:c9:db:01:e1:22: ef:73:46:41:db:b7:a5:e6:e4:ff:f4:c1:fe:b7:18:31:c7:54: aa:ba:68:59:04:7a:58:16:af:94:d7:ee:76:cc:c6:60:e9:35: 68:5e:b4:11:81:c1:89:57:5a:f1:d4:cf:9a:08:72:bb:30:d9: 34:28:0a:da:32:db:1b:e6:38:99:14:c0:04:b7:23:69:5d:7b: 73:74:68:a3:7d:24:4e:f2:ac:d9:f6:54:78:54:af:6c:62:79: 97:2f:db:89:b7:39:c7:98:54:a0:e5:d4:6c:82:ae:c6:31:7f: 6a:75:a3:2f:ed:3d:4b:f0:75:62:be:09:17:40:14:f2:47:74: 93:1a:4f:ec:b6:eb:63:5f:97:0f:d0:77:4b:f0:10:17:d5:33: 81:10:cb:09:c4:aa:e2:54:73:c0:98:94:a6:b4:8f:b9:da:6a: 25:a2:08:0e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFLswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzNDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDkzNzNCNTM1REUwMzZE MkExREIzMjU5MThCNEVDNDI1NEFDRDk2NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwVGojMFQ+D9VzNkwZzya8MBmiki0ix/H3LfhdCDYOZPQMohi5 70jotQBROiruj/J9tpme62PULyuHPmkK3hvgLxz30s4QO6pNyYEbZL6Pj6PU/qww LbjKghX1rQ17bjysAyXbrkwwic99jlwSZ40VNRcoBepZHQaUZdz8uP1ac9aLgrrv oVaXWl8SwFrB54qLEiVMasDfcpIi70ajPsd1bVw9LFM1PegUJW7jcPN1WtESYkYZ Ut7Lf1J9WREUcmZ/nNlSnC0KmbgMi98eu/xUOX1eASSfRWj+hScLrH5TBSphL+i+ NJth/IUD4NV9OdmEwchVtNC6qBPvy7+eeXazAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUk3O1Nd4DbSodsyWRi07EJUrNlkQwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2szTzFOZDREYlNvZHN5 V1JpMDdFSlVyTmxrUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAxuAMA0GCSqGSIb3DQEBCwUAA4IBAQBmlhFC/5zABqwo+I+H5QgcSES9JVGz ghqOEhVHk660zsE11oaOAHoFuyXo5JdxfScBYF0+n3WzLNp26vB14q2HYafXT7qO +lQPg8PeJ5vV2jfhpqjEydsB4SLvc0ZB27el5uT/9MH+txgxx1SqumhZBHpYFq+U 1+52zMZg6TVoXrQRgcGJV1rx1M+aCHK7MNk0KAraMtsb5jiZFMAEtyNpXXtzdGij fSRO8qzZ9lR4VK9sYnmXL9uJtznHmFSg5dRsgq7GMX9qdaMv7T1L8HVivgkXQBTy R3STGk/stutjX5cP0HdL8BAX1TOBEMsJxKriVHPAmJSmtI+52mologgO -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org