$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/OlrGKbm_5LqtcCt6zE3f2bsHpHo.roa File: OlrGKbm_5LqtcCt6zE3f2bsHpHo.roa (raw, json) Hash identifier: 0InvCCX8dmQtbbbD1TB9/AY+GZmHtnh1y6/8B8fnNSM= Subject key identifier: 3A:5A:C6:29:B9:BF:E4:BA:AD:70:2B:7A:CC:4D:DF:D9:BB:07:A4:7A Certificate issuer: /CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285 Certificate serial: 116F Authority key identifier: DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/OlrGKbm_5LqtcCt6zE3f2bsHpHo.roa Signing time: Fri 15 Nov 2024 09:13:18 +0000 ROA not before: Fri 15 Nov 2024 09:13:18 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63199 IP address blocks: 2400:5280:4800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 10:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4463 (0x116f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285 Validity Not Before: Nov 15 09:13:18 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=3A5AC629B9BFE4BAAD702B7ACC4DDFD9BB07A47A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:df:60:77:d5:a3:80:94:dd:63:da:43:af:4e: 6d:9a:06:29:ff:20:c7:8a:91:c6:f3:a4:31:84:0a: bd:bf:59:42:db:3e:f8:70:8d:f3:42:bd:d9:9d:39: e6:b4:58:64:f1:3c:0c:cc:c4:85:4a:c4:41:4e:de: 45:18:25:e3:3c:f3:9e:5e:56:44:e3:aa:11:18:31: 27:38:e2:14:62:30:c8:ba:01:ba:2e:cc:78:68:ae: 2a:7b:06:62:14:f1:ef:3c:be:f5:25:e5:79:20:16: 9a:93:15:0c:93:bf:1c:12:0b:56:6a:38:39:09:80: 52:d6:94:6e:43:a6:5c:72:50:4e:c2:60:eb:49:1d: 51:b6:3b:80:4b:1f:27:0c:28:b0:49:79:c1:e5:1c: 05:68:75:09:68:17:55:fc:12:6b:b5:f6:22:fe:3a: 7c:40:5f:46:38:fc:a3:b1:04:7b:c0:37:26:02:2e: ac:10:37:ef:02:3e:f3:4b:1d:08:00:89:9b:2c:18: dd:ad:f8:41:d8:9f:17:0d:bd:10:bb:02:eb:cb:45: a7:3d:4f:91:1e:a1:f0:35:d2:63:e7:0f:fd:3d:53: aa:df:b5:4b:2a:c0:5d:19:33:df:2c:ec:f5:7f:72: 6c:57:6d:75:eb:ed:2d:ed:7e:ef:95:3e:ef:10:88: 23:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5A:C6:29:B9:BF:E4:BA:AD:70:2B:7A:CC:4D:DF:D9:BB:07:A4:7A X509v3 Authority Key Identifier: keyid:DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/OlrGKbm_5LqtcCt6zE3f2bsHpHo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:5280:4800::/38 Signature Algorithm: sha256WithRSAEncryption 3a:f4:2e:06:98:23:28:58:4e:23:39:4a:e8:7a:99:8b:d1:ca: 54:11:3d:98:73:89:82:df:0a:c5:88:6e:21:fa:a3:fd:7d:57: b1:1a:53:b1:a2:ef:9a:ee:fa:21:ce:34:71:82:af:79:91:fe: 3b:3b:12:7b:3a:6b:a5:16:07:39:ac:5e:a6:9b:74:11:30:b4: 64:cf:23:71:60:0f:d7:08:49:1f:f5:26:fa:d9:6f:d9:d0:14: ce:ba:88:8b:ef:e6:f0:05:80:ee:f3:1e:b3:b3:28:5a:51:a8: 74:96:ce:f1:d6:d5:59:9d:1d:2d:61:c3:a5:da:3d:57:12:b3: 3a:31:2e:00:5c:63:e8:da:c1:20:f4:48:30:3d:5c:43:a8:9c: 1a:9c:7f:03:68:27:df:d0:3a:65:73:a0:ef:df:9c:38:8e:9f: 9b:c7:5e:ff:9f:13:75:6d:06:12:6e:4e:7b:64:ee:34:ef:f3: ba:fa:02:90:a4:e4:37:09:cb:c4:e5:71:8c:0a:bd:85:9c:d6: 7f:e6:d8:6e:46:eb:06:0e:00:44:f8:a7:ac:87:6b:c5:e6:31: ea:9e:b7:53:7f:fc:89:b7:b0:17:0f:cd:0b:a9:b8:05:af:56: dc:ab:3a:e4:e2:55:97:a0:f0:b0:2e:0b:e0:77:56:98:2c:83: 2f:0a:3a:61 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREE5 OTNGRTVDMDRGRjlGMjJDNTI2MjYzMEJFQzM3RjVCM0E3ODI4NTAeFw0yNDExMTUw OTEzMThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNBNUFDNjI5QjlCRkU0 QkFBRDcwMkI3QUNDNERERkQ5QkIwN0E0N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCW32B31aOAlN1j2kOvTm2aBin/IMeKkcbzpDGECr2/WULbPvhw jfNCvdmdOea0WGTxPAzMxIVKxEFO3kUYJeM8855eVkTjqhEYMSc44hRiMMi6Abou zHhorip7BmIU8e88vvUl5XkgFpqTFQyTvxwSC1ZqODkJgFLWlG5DplxyUE7CYOtJ HVG2O4BLHycMKLBJecHlHAVodQloF1X8Emu19iL+OnxAX0Y4/KOxBHvANyYCLqwQ N+8CPvNLHQgAiZssGN2t+EHYnxcNvRC7AuvLRac9T5EeofA10mPnD/09U6rftUsq wF0ZM98s7PV/cmxXbXXr7S3tfu+VPu8QiCNjAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUOlrGKbm/5LqtcCt6zE3f2bsHpHowHwYDVR0jBBgwFoAU2pk/5cBP+fIsUmJj C+w39bOngoUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0 LzJwa181Y0JQLWZJc1VtSmpDLXczOWJPbmdvVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMnBrXzVjQlAtZklzVW1KakMtdzM5Yk9uZ29VLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0L09sckdLYm1fNUxxdGND dDZ6RTNmMmJzSHBIby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD BgIkAFKASDANBgkqhkiG9w0BAQsFAAOCAQEAOvQuBpgjKFhOIzlK6HqZi9HKVBE9 mHOJgt8KxYhuIfqj/X1XsRpTsaLvmu76Ic40cYKveZH+OzsSezprpRYHOaxeppt0 ETC0ZM8jcWAP1whJH/Um+tlv2dAUzrqIi+/m8AWA7vMes7MoWlGodJbO8dbVWZ0d LWHDpdo9VxKzOjEuAFxj6NrBIPRIMD1cQ6icGpx/A2gn39A6ZXOg79+cOI6fm8de /58TdW0GEm5Oe2TuNO/zuvoCkKTkNwnLxOVxjAq9hZzWf+bYbkbrBg4ARPinrIdr xeYx6p63U3/8ibewFw/NC6m4Ba9W3Ks65OJVl6DwsC4L4HdWmCyDLwo6YQ== -----END CERTIFICATE-----Generated at Fri Nov 22 07:02:36 2024 by rpki-client on console-fra.rpki-client.org