$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/zc_LqOgC_WTMJ56GTcsJB1ySUkY.roa File: zc_LqOgC_WTMJ56GTcsJB1ySUkY.roa (raw, json) Hash identifier: ZjJLCfqbOICAb/bUdjVN0s78ALnnEMyxgH0ZL30ibxY= Subject key identifier: CD:CF:CB:A8:E8:02:FD:64:CC:27:9E:86:4D:CB:09:07:5C:92:52:46 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 14A5 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/zc_LqOgC_WTMJ56GTcsJB1ySUkY.roa Signing time: Wed 11 Sep 2024 02:23:35 +0000 ROA not before: Wed 11 Sep 2024 02:23:35 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59803 IP address blocks: 2406:1e80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5285 (0x14a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 11 02:23:35 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=CDCFCBA8E802FD64CC279E864DCB09075C925246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:8e:ea:05:17:ed:e5:9a:3c:b4:70:e6:f4: 1a:50:4f:9d:34:c0:e7:d9:02:5f:56:a9:a0:a5:2c: fc:1c:48:01:cd:0f:68:b9:4b:b1:08:b9:55:62:b2: b3:01:7e:5c:07:30:22:e5:dc:a3:b2:5f:0f:3f:43: 5e:7d:f8:5a:d2:00:81:8b:78:80:26:52:0b:a6:29: 06:f4:b8:57:09:70:8f:a0:2d:4b:2e:77:1b:f6:ec: 22:c9:3e:f3:25:de:79:db:fe:e0:13:c9:40:ee:e2: aa:b3:3c:7d:f7:64:8e:d8:9e:5c:1d:b7:28:bb:bf: aa:66:cc:d0:2e:c3:6d:64:88:e4:6a:8c:16:e2:77: 4a:e4:42:0a:c1:ce:e4:2f:d3:9f:19:e1:dd:54:19: f8:d9:c2:65:a9:e4:ff:a2:b9:8e:f7:0c:c9:86:97: 57:31:9b:d4:cd:8b:8d:44:d9:9e:b8:88:4e:a0:3f: 60:ba:48:9a:0a:86:cf:dc:f3:c7:df:2f:84:b0:ce: 96:28:79:a0:88:9e:02:27:26:64:c4:9c:89:51:e2: 08:76:db:cc:0a:af:7c:6f:63:0f:d9:4c:91:a3:64: 00:6e:88:f3:62:a9:bd:eb:eb:32:db:41:ba:de:4d: db:8e:f8:c9:93:e4:8a:94:e3:44:3d:ab:45:44:ad: 07:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CF:CB:A8:E8:02:FD:64:CC:27:9E:86:4D:CB:09:07:5C:92:52:46 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/zc_LqOgC_WTMJ56GTcsJB1ySUkY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:1e80::/32 Signature Algorithm: sha256WithRSAEncryption 2a:0a:18:50:85:90:e9:a0:7b:69:ec:85:1b:4a:c8:b5:6f:82: b9:0f:97:15:06:8c:d9:bb:62:91:cc:e2:6b:e3:9d:5d:2b:73: 8b:7e:95:47:c0:77:ba:56:52:bb:cf:e9:87:17:8f:be:9f:f9: 8e:3b:ca:a1:8b:25:a8:f3:ea:4f:e3:e9:ab:f1:21:53:7f:a0: 72:a3:10:ed:91:fb:f3:53:24:55:64:51:a3:65:3e:02:f5:83: 16:41:85:ae:1e:39:5c:7d:5e:c3:94:d0:c6:0d:78:71:fe:35: 6e:18:68:78:41:d5:7f:3f:eb:ca:a0:97:bc:41:9b:bd:6c:f7: 8e:e2:9b:97:4b:72:04:7c:03:97:ac:be:76:02:fa:cc:39:78: 35:57:2e:c5:62:93:1c:ec:5a:70:99:b2:d1:b2:db:0d:db:ce: ef:eb:c3:f0:77:f3:bb:3d:a6:cc:4c:c3:5b:ed:44:26:ac:7b: 61:6b:4e:c3:de:54:25:c0:10:f6:f9:1c:9f:46:5c:c2:1f:2d: c0:25:89:b6:dc:bd:24:33:39:8f:61:32:9e:e2:8b:ec:c4:19: 4a:a0:47:e6:5f:ea:df:13:d0:c5:34:cf:ef:ba:9f:e6:ad:44: 9f:8d:f2:0c:3c:43:13:87:09:7d:72:a3:bb:4b:55:6f:82:dc: 04:44:c1:07 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw MjIzMzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENEQ0ZDQkE4RTgwMkZE NjRDQzI3OUU4NjREQ0IwOTA3NUM5MjUyNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkF47qBRft5Zo8tHDm9BpQT500wOfZAl9WqaClLPwcSAHND2i5 S7EIuVVisrMBflwHMCLl3KOyXw8/Q159+FrSAIGLeIAmUgumKQb0uFcJcI+gLUsu dxv27CLJPvMl3nnb/uATyUDu4qqzPH33ZI7Ynlwdtyi7v6pmzNAuw21kiORqjBbi d0rkQgrBzuQv058Z4d1UGfjZwmWp5P+iuY73DMmGl1cxm9TNi41E2Z64iE6gP2C6 SJoKhs/c88ffL4SwzpYoeaCIngInJmTEnIlR4gh228wKr3xvYw/ZTJGjZABuiPNi qb3r6zLbQbreTduO+MmT5IqU40Q9q0VErQeVAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUzc/LqOgC/WTMJ56GTcsJB1ySUkYwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3pjX0xxT2dDX1dUTUo1 NkdUY3NKQjF5U1VrWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkBh6AMA0GCSqGSIb3DQEBCwUAA4IBAQAqChhQhZDpoHtp7IUbSsi1b4K5D5cV BozZu2KRzOJr451dK3OLfpVHwHe6VlK7z+mHF4++n/mOO8qhiyWo8+pP4+mr8SFT f6ByoxDtkfvzUyRVZFGjZT4C9YMWQYWuHjlcfV7DlNDGDXhx/jVuGGh4QdV/P+vK oJe8QZu9bPeO4puXS3IEfAOXrL52AvrMOXg1Vy7FYpMc7FpwmbLRstsN287v68Pw d/O7PabMTMNb7UQmrHtha07D3lQlwBD2+RyfRlzCHy3AJYm23L0kMzmPYTKe4ovs xBlKoEfmX+rfE9DFNM/vup/mrUSfjfIMPEMThwl9cqO7S1VvgtwERMEH -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:47 2024 by rpki-client on console-ams.rpki-client.org