$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/I4t8S7wXzRpV_lu0fFLT4HMMGzg.roa File: I4t8S7wXzRpV_lu0fFLT4HMMGzg.roa (raw, json) Hash identifier: jEeVJOIjdYMWGfh49iogsPidGly8ChKCUqbqSaC2l4g= Subject key identifier: 23:8B:7C:4B:BC:17:CD:1A:55:FE:5B:B4:7C:52:D3:E0:73:0C:1B:38 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 16FE Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/I4t8S7wXzRpV_lu0fFLT4HMMGzg.roa Signing time: Wed 13 Mar 2024 01:21:51 +0000 ROA not before: Wed 13 Mar 2024 01:21:51 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59077 IP address blocks: 2401:3480::/36 maxlen: 36 2401:3480:2000::/36 maxlen: 36 2401:3480:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 03:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5886 (0x16fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Mar 13 01:21:51 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=238B7C4BBC17CD1A55FE5BB47C52D3E0730C1B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:98:91:f1:34:67:2b:5e:08:a7:61:4d:0d:37: a9:f8:78:da:72:51:7c:e8:f0:b7:6b:40:7c:9a:57: 2c:81:c9:c1:22:30:01:f5:07:17:81:c1:48:18:d1: 10:fe:42:4a:f9:13:63:71:26:76:90:0c:33:fd:2a: 85:e0:8a:4b:23:8a:94:95:25:0a:0e:53:58:aa:34: 38:0b:fd:b2:2b:b5:ad:ad:53:ea:f0:07:c5:56:a6: 2d:e1:54:3c:12:a8:9c:79:fb:84:18:0a:b4:f9:c6: b9:e3:b3:04:c0:2a:c3:54:57:81:41:be:16:9f:6b: 09:1c:53:a1:e3:c9:14:d2:d5:33:06:28:c3:79:8f: d8:cc:6c:1d:91:72:9f:d7:91:99:ff:51:51:aa:bc: 10:dc:88:da:d7:5f:7a:81:df:38:4e:ca:f1:87:b8: 79:29:5a:f0:c8:f9:a7:37:12:66:13:41:08:22:b2: 66:ef:3b:2d:75:48:b0:0d:f5:13:ae:bb:55:08:13: 54:ac:e5:8c:2d:a8:36:be:7a:ea:fe:83:32:1f:4b: 63:04:31:86:cd:57:71:e5:ff:93:56:1a:64:b3:3a: 5e:35:96:e5:44:20:af:bd:0c:70:e8:28:20:41:5b: 90:0a:d7:f0:fe:f4:67:cf:83:52:5f:87:62:7e:35: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8B:7C:4B:BC:17:CD:1A:55:FE:5B:B4:7C:52:D3:E0:73:0C:1B:38 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/I4t8S7wXzRpV_lu0fFLT4HMMGzg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:3480::/36 2401:3480:2000::/35 Signature Algorithm: sha256WithRSAEncryption 3f:03:93:69:2a:55:00:f2:38:74:08:b1:5f:ed:82:57:f8:d6: 58:35:7e:c5:2f:30:29:11:34:c5:7f:14:ee:9a:3d:5e:d2:8f: 7e:07:b1:d2:ab:ea:d6:9c:de:51:67:3c:b3:21:d1:f6:dd:4e: 87:81:e8:bd:db:3a:6f:a3:d0:bc:f5:51:09:4b:1b:9f:cb:81: 04:c3:58:ce:2b:95:c7:93:c7:37:7b:18:62:f2:ff:12:5f:ca: 5c:47:66:6b:7e:a0:ce:e2:92:10:60:c1:94:b7:29:67:f7:21: 7c:c1:98:7e:4b:91:1c:68:16:73:f4:83:d1:05:0e:1d:7f:a8: d7:9a:dd:95:66:a8:3d:8d:30:ab:1d:19:cd:f1:72:af:e4:50: e4:dc:28:11:c3:61:d5:c2:cb:95:bc:f7:78:0b:fc:7c:f8:0e: 58:5f:ca:3c:44:4d:4c:19:01:33:0e:32:03:09:a1:70:f0:79: 97:e2:dc:2f:f9:ea:88:87:2b:c4:b5:26:04:85:a9:55:fa:50: 88:e4:57:67:eb:aa:a9:79:00:a7:22:ef:ab:7b:c7:1c:6d:81: 8f:39:b5:12:ef:e9:22:a1:f5:26:b8:17:63:a7:20:21:8c:28: 3c:16:b9:75:e2:1f:79:d0:23:a7:e0:a3:32:b6:d6:23:31:fb: 62:20:fc:23 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgICFv4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNDAzMTMw MTIxNTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDIzOEI3QzRCQkMxN0NE MUE1NUZFNUJCNDdDNTJEM0UwNzMwQzFCMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRmJHxNGcrXginYU0NN6n4eNpyUXzo8LdrQHyaVyyBycEiMAH1 BxeBwUgY0RD+Qkr5E2NxJnaQDDP9KoXgiksjipSVJQoOU1iqNDgL/bIrta2tU+rw B8VWpi3hVDwSqJx5+4QYCrT5xrnjswTAKsNUV4FBvhafawkcU6HjyRTS1TMGKMN5 j9jMbB2Rcp/XkZn/UVGqvBDciNrXX3qB3zhOyvGHuHkpWvDI+ac3EmYTQQgismbv Oy11SLAN9ROuu1UIE1Ss5YwtqDa+eur+gzIfS2MEMYbNV3Hl/5NWGmSzOl41luVE IK+9DHDoKCBBW5AK1/D+9GfPg1Jfh2J+NQ3pAgMBAAGjggH7MIIB9zAdBgNVHQ4E FgQUI4t8S7wXzRpV/lu0fFLT4HMMGzgwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L0k0dDhTN3dYelJwVl9s dTBmRkxUNEhNTUd6Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBAD BgQkATSAAAMGBSQBNIAgMA0GCSqGSIb3DQEBCwUAA4IBAQA/A5NpKlUA8jh0CLFf 7YJX+NZYNX7FLzApETTFfxTumj1e0o9+B7HSq+rWnN5RZzyzIdH23U6Hgei92zpv o9C89VEJSxufy4EEw1jOK5XHk8c3exhi8v8SX8pcR2ZrfqDO4pIQYMGUtyln9yF8 wZh+S5EcaBZz9IPRBQ4df6jXmt2VZqg9jTCrHRnN8XKv5FDk3CgRw2HVwsuVvPd4 C/x8+A5YX8o8RE1MGQEzDjIDCaFw8HmX4twv+eqIhyvEtSYEhalV+lCI5Fdn66qp eQCnIu+re8ccbYGPObUS7+kiofUmuBdjpyAhjCg8Frl14h950COn4KMyttYjMfti IPwj -----END CERTIFICATE-----Generated at Tue Nov 26 00:29:02 2024 by rpki-client on console-fra.rpki-client.org