$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/775/Ey9lm2BDu6-ukb0-klPyGAcyIn4.roa File: Ey9lm2BDu6-ukb0-klPyGAcyIn4.roa (raw, json) Hash identifier: OoFB/c0QyymdR+gp/5ZAoH9LRseHL2vfIXQy62uu9xM= Subject key identifier: 13:2F:65:9B:60:43:BB:AF:AE:91:BD:3E:92:53:F2:18:07:32:22:7E Certificate issuer: /CN=CD65DDFFCA490F695E12F3A53EEBAFF0EDA77050 Certificate serial: 06CB Authority key identifier: CD:65:DD:FF:CA:49:0F:69:5E:12:F3:A5:3E:EB:AF:F0:ED:A7:70:50 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/Ey9lm2BDu6-ukb0-klPyGAcyIn4.roa Signing time: Wed 21 Aug 2024 05:46:17 +0000 ROA not before: Wed 21 Aug 2024 05:46:17 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59078 IP address blocks: 2402:e7c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1739 (0x6cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD65DDFFCA490F695E12F3A53EEBAFF0EDA77050 Validity Not Before: Aug 21 05:46:17 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=132F659B6043BBAFAE91BD3E9253F2180732227E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c0:c1:79:2a:34:a8:62:7e:2a:2d:b9:ab:cf: 6e:33:f8:78:ef:12:af:8e:aa:12:f5:d0:b4:64:d2: 7b:7e:19:80:ca:ee:ed:77:ce:ae:d9:46:ec:6c:8b: a8:6f:6d:a4:f9:12:a5:e1:9b:48:83:ef:63:00:b6: d6:e3:9a:12:ab:72:10:b2:63:54:03:90:6d:4b:6a: 80:50:24:f8:cb:42:fd:5e:04:c2:7d:d2:64:01:23: 66:dd:3d:11:d6:be:34:48:1d:f6:ce:90:9b:42:7d: 69:81:5c:3b:6b:3d:6a:1f:cb:d1:d2:b0:46:fb:56: d2:6e:05:7a:5a:c3:18:c0:b0:5f:57:92:d8:f8:83: f3:bd:8c:64:86:e7:20:1c:d6:39:1e:1f:41:9b:bc: 98:0b:e0:24:5e:f3:7c:b4:ae:9c:24:a7:b3:b6:12: cd:cd:7d:80:fc:9c:fe:bc:fc:30:08:58:88:3e:f1: 27:5a:46:29:58:56:df:12:3a:9d:6d:b1:48:b2:44: cd:aa:9d:1e:06:a7:da:c9:6a:da:bf:29:13:ab:e7: cb:62:7e:11:64:a3:85:8d:69:03:e2:43:cf:db:48: b8:1d:f1:b8:3e:27:56:2b:f7:4e:2f:6b:fa:8c:ac: 99:92:63:25:63:0d:67:46:47:fa:ed:24:45:f2:38: 7e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2F:65:9B:60:43:BB:AF:AE:91:BD:3E:92:53:F2:18:07:32:22:7E X509v3 Authority Key Identifier: keyid:CD:65:DD:FF:CA:49:0F:69:5E:12:F3:A5:3E:EB:AF:F0:ED:A7:70:50 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/Ey9lm2BDu6-ukb0-klPyGAcyIn4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:e7c0::/32 Signature Algorithm: sha256WithRSAEncryption 4a:0c:0b:9a:6f:a5:36:67:40:3d:a3:20:94:28:fc:cb:89:dc: ac:4e:f7:2b:da:72:58:34:fa:20:8b:89:9d:59:a5:66:dc:ef: ed:ea:57:05:81:93:fc:9f:ab:81:b4:16:f0:d7:91:44:f2:ae: 3a:9a:3f:97:df:b5:f1:79:05:ac:1e:42:7e:d0:a9:c4:89:36: d1:74:37:93:0b:9c:b2:32:ae:e3:88:c3:e8:fd:d2:14:4e:44: da:6b:d3:c0:ec:6d:49:df:39:0d:bb:60:4d:45:c1:2e:58:f0: f1:4c:30:56:ec:9e:4f:e6:78:ba:4a:4d:02:e0:db:d6:de:1f: ee:a7:93:84:46:7e:ad:68:4a:00:df:ff:ae:4a:94:61:9d:fd: 65:74:9d:45:25:f8:70:cd:8a:32:6d:7b:c0:fa:f8:e0:ac:2c: 30:9c:71:41:4f:bc:d9:29:1c:22:48:63:cb:63:82:70:0c:04: af:31:99:03:ce:f9:25:dd:ab:3b:b5:40:46:04:4f:bc:34:b8: 4b:04:b8:ff:be:d4:19:d8:53:70:80:c9:a1:14:9a:ff:02:b7: ab:89:e8:4d:b4:fe:58:80:ec:7e:9b:d6:6e:ee:57:d9:c0:7e: fe:7c:ca:7c:26:4c:1b:9c:12:e4:82:01:2e:4c:8b:e6:87:61: c7:db:10:2a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICBsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Q2 NURERkZDQTQ5MEY2OTVFMTJGM0E1M0VFQkFGRjBFREE3NzA1MDAeFw0yNDA4MjEw NTQ2MTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDEzMkY2NTlCNjA0M0JC QUZBRTkxQkQzRTkyNTNGMjE4MDczMjIyN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnwMF5KjSoYn4qLbmrz24z+HjvEq+OqhL10LRk0nt+GYDK7u13 zq7ZRuxsi6hvbaT5EqXhm0iD72MAttbjmhKrchCyY1QDkG1LaoBQJPjLQv1eBMJ9 0mQBI2bdPRHWvjRIHfbOkJtCfWmBXDtrPWofy9HSsEb7VtJuBXpawxjAsF9Xktj4 g/O9jGSG5yAc1jkeH0GbvJgL4CRe83y0rpwkp7O2Es3NfYD8nP68/DAIWIg+8Sda RilYVt8SOp1tsUiyRM2qnR4Gp9rJatq/KROr58tifhFko4WNaQPiQ8/bSLgd8bg+ J1Yr904va/qMrJmSYyVjDWdGR/rtJEXyOH45AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUEy9lm2BDu6+ukb0+klPyGAcyIn4wHwYDVR0jBBgwFoAUzWXd/8pJD2leEvOl Puuv8O2ncFAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzc1 L3pXWGRfOHBKRDJsZUV2T2xQdXV2OE8ybmNGQS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveldYZF84cEpEMmxlRXZPbFB1dXY4TzJuY0ZBLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzc1L0V5OWxtMkJEdTYtdWti MC1rbFB5R0FjeUluNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAufAMA0GCSqGSIb3DQEBCwUAA4IBAQBKDAuab6U2Z0A9oyCUKPzLidysTvcr 2nJYNPogi4mdWaVm3O/t6lcFgZP8n6uBtBbw15FE8q46mj+X37XxeQWsHkJ+0KnE iTbRdDeTC5yyMq7jiMPo/dIUTkTaa9PA7G1J3zkNu2BNRcEuWPDxTDBW7J5P5ni6 Sk0C4NvW3h/up5OERn6taEoA3/+uSpRhnf1ldJ1FJfhwzYoybXvA+vjgrCwwnHFB T7zZKRwiSGPLY4JwDASvMZkDzvkl3as7tUBGBE+8NLhLBLj/vtQZ2FNwgMmhFJr/ AreriehNtP5YgOx+m9Zu7lfZwH7+fMp8JkwbnBLkggEuTIvmh2HH2xAq -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:51 2024 by rpki-client on console-ams.rpki-client.org