$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/dlLTumfb3n-CxqJRR4-AnMwkLTU.roa File: dlLTumfb3n-CxqJRR4-AnMwkLTU.roa (raw, json) Hash identifier: SrHv5LPqu/BzOXfzAj3B6C6PsXwXQaCztouku4z+U28= Subject key identifier: 76:52:D3:BA:67:DB:DE:7F:82:C6:A2:51:47:8F:80:9C:CC:24:2D:35 Certificate issuer: /CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285 Certificate serial: 1171 Authority key identifier: DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/dlLTumfb3n-CxqJRR4-AnMwkLTU.roa Signing time: Fri 15 Nov 2024 09:13:19 +0000 ROA not before: Fri 15 Nov 2024 09:13:19 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63199 IP address blocks: 2400:5280:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 10:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4465 (0x1171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285 Validity Not Before: Nov 15 09:13:19 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=7652D3BA67DBDE7F82C6A251478F809CCC242D35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a3:da:7d:25:bb:bd:ce:38:4f:31:bb:ad:e3: 0c:ff:8a:e3:8b:b4:3a:ad:5c:ff:50:eb:e4:73:72: b4:06:c2:23:16:2f:85:a4:5b:bf:0a:b7:93:c9:47: 9b:dc:ca:31:aa:99:19:b7:3c:04:f3:a2:de:48:6e: fc:5e:b4:f0:01:73:08:d1:f5:75:81:17:ac:bc:fd: c8:12:67:49:28:e1:76:cf:dc:bc:d3:72:83:ac:73: a2:ad:07:8e:ae:c6:da:20:13:81:18:59:b6:7e:95: d6:b2:28:34:f5:24:6f:cb:a2:c4:14:33:b4:ce:93: 56:69:8d:fd:65:66:cb:62:bc:8f:2e:4a:a5:92:ec: fa:bb:4b:e7:2b:cf:69:97:5c:ab:84:0e:0c:fc:b8: 36:b0:47:79:9c:6f:40:64:3f:8b:01:8c:3f:e7:e4: af:49:72:a2:2b:04:18:23:a1:51:4a:85:8a:27:01: a6:10:ec:5e:24:56:72:02:15:56:7d:eb:61:5c:4f: f9:06:2b:02:d8:c1:2b:13:4d:87:73:43:14:72:ab: 54:c7:ff:05:7d:ea:49:6c:31:04:8f:9d:9a:f0:26: 27:bd:34:70:0e:76:76:1d:40:15:b8:51:8c:96:cb: 8a:83:b8:f8:9a:be:51:99:2d:f8:02:19:f0:a8:4e: 14:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:52:D3:BA:67:DB:DE:7F:82:C6:A2:51:47:8F:80:9C:CC:24:2D:35 X509v3 Authority Key Identifier: keyid:DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/dlLTumfb3n-CxqJRR4-AnMwkLTU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:5280:3c00::/38 Signature Algorithm: sha256WithRSAEncryption 50:18:70:7d:6e:b4:cc:f4:62:c7:61:58:4f:1e:8e:ea:58:37: d2:cf:ed:69:19:5a:d2:d4:da:e3:9a:1d:2a:d4:8e:a4:cc:f1: ca:67:fb:22:01:05:5a:54:2f:a6:0a:56:9c:ca:0a:34:f3:fc: a0:d5:64:3d:54:9e:41:3c:6d:86:14:51:d6:2e:c9:70:b5:1e: f1:30:97:4d:08:df:99:14:e9:da:d5:4f:75:ac:c6:ab:0a:2b: df:14:cb:91:aa:4b:65:96:21:0e:bc:79:8e:48:11:a3:b2:99: 0a:e7:38:c1:ac:dc:2b:08:92:94:23:7e:ea:c0:38:8a:64:40: d9:a8:9b:f1:68:79:20:47:08:c8:be:ef:ec:0b:48:03:9d:27: 5c:a4:75:10:1a:ce:d4:1e:f7:3d:72:39:9b:d6:3c:97:3d:ce: 0a:33:cd:2b:8f:22:8d:0c:10:b4:a5:e6:ca:36:2d:89:23:76: 4c:91:c1:fc:55:cd:0a:df:4a:16:0e:1b:93:3d:b7:69:22:8b: 06:db:e9:dc:1c:35:25:8d:ad:0b:9b:04:90:e2:5b:00:22:ad: ae:dd:e5:74:79:8a:7b:c7:a0:39:52:4b:45:af:9c:9d:f6:5e: d7:9c:3e:5e:16:49:4f:7d:64:b5:6c:8a:69:33:ba:20:d8:34: f2:af:a7:8b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREE5 OTNGRTVDMDRGRjlGMjJDNTI2MjYzMEJFQzM3RjVCM0E3ODI4NTAeFw0yNDExMTUw OTEzMTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc2NTJEM0JBNjdEQkRF N0Y4MkM2QTI1MTQ3OEY4MDlDQ0MyNDJEMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbo9p9Jbu9zjhPMbut4wz/iuOLtDqtXP9Q6+RzcrQGwiMWL4Wk W78Kt5PJR5vcyjGqmRm3PATzot5IbvxetPABcwjR9XWBF6y8/cgSZ0ko4XbP3LzT coOsc6KtB46uxtogE4EYWbZ+ldayKDT1JG/LosQUM7TOk1Zpjf1lZstivI8uSqWS 7Pq7S+crz2mXXKuEDgz8uDawR3mcb0BkP4sBjD/n5K9JcqIrBBgjoVFKhYonAaYQ 7F4kVnICFVZ962FcT/kGKwLYwSsTTYdzQxRyq1TH/wV96klsMQSPnZrwJie9NHAO dnYdQBW4UYyWy4qDuPiavlGZLfgCGfCoThSHAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUdlLTumfb3n+CxqJRR4+AnMwkLTUwHwYDVR0jBBgwFoAU2pk/5cBP+fIsUmJj C+w39bOngoUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0 LzJwa181Y0JQLWZJc1VtSmpDLXczOWJPbmdvVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMnBrXzVjQlAtZklzVW1KakMtdzM5Yk9uZ29VLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0L2RsTFR1bWZiM24tQ3hx SlJSNC1Bbk13a0xUVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD BgIkAFKAPDANBgkqhkiG9w0BAQsFAAOCAQEAUBhwfW60zPRix2FYTx6O6lg30s/t aRla0tTa45odKtSOpMzxymf7IgEFWlQvpgpWnMoKNPP8oNVkPVSeQTxthhRR1i7J cLUe8TCXTQjfmRTp2tVPdazGqwor3xTLkapLZZYhDrx5jkgRo7KZCuc4wazcKwiS lCN+6sA4imRA2aib8Wh5IEcIyL7v7AtIA50nXKR1EBrO1B73PXI5m9Y8lz3OCjPN K48ijQwQtKXmyjYtiSN2TJHB/FXNCt9KFg4bkz23aSKLBtvp3Bw1JY2tC5sEkOJb ACKtrt3ldHmKe8egOVJLRa+cnfZe15w+XhZJT31ktWyKaTO6INg08q+niw== -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:13 2024 by rpki-client on console-ams.rpki-client.org