$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/z8hNT_-BaDPv7L-q5i-asd7-phc.roa File: z8hNT_-BaDPv7L-q5i-asd7-phc.roa (raw, json) Hash identifier: 1MaV40uOs5zTD5/4NL/YhZ5lzJPM/sgnUQqndz5Kmhk= Subject key identifier: CF:C8:4D:4F:FF:81:68:33:EF:EC:BF:AA:E6:2F:9A:B1:DE:FE:A6:17 Certificate issuer: /CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D Certificate serial: 17FB Authority key identifier: 47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/z8hNT_-BaDPv7L-q5i-asd7-phc.roa Signing time: Wed 13 Mar 2024 01:21:22 +0000 ROA not before: Wed 13 Mar 2024 01:21:22 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 59000 IP address blocks: 2401:5180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6139 (0x17fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D Validity Not Before: Mar 13 01:21:22 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=CFC84D4FFF816833EFECBFAAE62F9AB1DEFEA617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1a:48:4c:75:a3:e1:be:ee:6b:42:fa:5a:6c: b5:7f:9f:6f:89:7d:04:0c:a2:7b:44:58:44:6d:eb: dc:06:2f:c3:0a:d0:f6:38:f4:a6:8e:d8:f9:bf:76: fa:18:d4:cc:e0:b3:81:54:12:d9:47:24:1a:79:ef: 45:df:86:97:22:28:f0:c0:6c:c3:6a:40:20:dd:b6: 2f:da:e5:ed:43:5e:9d:ff:86:87:bf:12:fd:cd:12: af:38:6b:a1:bb:85:1d:f6:20:2b:2f:c2:c9:54:6d: dd:74:2e:19:99:5a:61:0d:0f:8b:81:9f:46:45:1c: 60:93:0f:6d:a0:77:b2:60:53:d7:82:cd:b6:df:49: 06:49:88:af:0c:f4:04:0f:76:90:a9:64:ea:ca:ea: ad:3d:16:fc:03:67:a9:f0:75:6e:0c:24:8b:fc:ff: f6:41:2c:c2:a6:6c:7b:86:94:bc:f4:a6:08:02:c6: b1:52:48:70:1f:59:fe:33:e7:ac:5c:39:c0:5f:01: 9c:62:e2:0c:49:45:fa:ac:f1:5a:28:96:af:26:15: 06:af:7f:ff:32:ee:10:81:39:f2:0e:94:3f:ca:ce: 93:d8:eb:fa:78:bb:3e:7f:36:ae:52:98:b7:ed:83: c5:01:ae:9e:8a:e6:33:cc:58:0f:eb:f0:b1:b9:9b: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C8:4D:4F:FF:81:68:33:EF:EC:BF:AA:E6:2F:9A:B1:DE:FE:A6:17 X509v3 Authority Key Identifier: keyid:47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/z8hNT_-BaDPv7L-q5i-asd7-phc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:5180::/32 Signature Algorithm: sha256WithRSAEncryption a1:9c:2e:2d:93:8a:9c:ac:7a:6f:33:97:2e:f8:e1:f1:7b:50: 3c:a1:d9:74:71:6d:f2:f2:b2:59:93:7d:2e:3d:87:aa:8b:7d: 2e:ee:5a:fe:e4:c0:ca:43:20:29:10:97:13:11:3d:0c:54:70: c0:72:04:c0:b1:7a:b8:02:cd:5d:4f:1c:0b:2e:77:63:26:ef: 13:6f:a9:2e:ef:ac:26:38:23:f6:09:46:06:73:cd:92:29:e8: 47:ba:b5:d1:3c:d5:86:37:2b:83:c8:91:1e:17:6d:cf:83:1c: 3a:3d:ca:4c:4c:99:63:72:8d:a3:15:7d:e7:18:fe:bf:99:53: 7e:13:cc:2c:66:dc:9f:05:5c:d9:c1:bd:f4:d3:11:98:e4:25: 3f:81:d7:e9:4b:de:ed:39:69:da:f3:f5:be:f8:1a:4d:bb:6e: 87:4d:af:3a:f0:a3:58:f3:b4:3f:25:db:b7:d3:1d:ce:a5:a9: 3a:69:d4:52:8a:db:f9:f4:71:4d:40:db:3e:61:d3:7f:c3:43: fe:00:12:7a:7a:c8:2d:68:69:7d:82:7e:cd:7c:9e:38:ae:1d: a6:d2:52:72:f7:da:ec:86:cf:3e:3a:27:e3:5b:f1:a4:53:61: 8f:2f:16:e5:6d:6c:e2:b3:d8:c7:a1:29:32:55:60:f0:c9:ba: 25:a9:d6:e7 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICF/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDcx NkNCNUI0NDgxRUMxM0FFREQ0MEIyQzMwMkM1MEY2MDFBRjc3RDAeFw0yNDAzMTMw MTIxMjJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENGQzg0RDRGRkY4MTY4 MzNFRkVDQkZBQUU2MkY5QUIxREVGRUE2MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEGkhMdaPhvu5rQvpabLV/n2+JfQQMontEWERt69wGL8MK0PY4 9KaO2Pm/dvoY1Mzgs4FUEtlHJBp570XfhpciKPDAbMNqQCDdti/a5e1DXp3/hoe/ Ev3NEq84a6G7hR32ICsvwslUbd10LhmZWmEND4uBn0ZFHGCTD22gd7JgU9eCzbbf SQZJiK8M9AQPdpCpZOrK6q09FvwDZ6nwdW4MJIv8//ZBLMKmbHuGlLz0pggCxrFS SHAfWf4z56xcOcBfAZxi4gxJRfqs8Voolq8mFQavf/8y7hCBOfIOlD/KzpPY6/p4 uz5/Nq5SmLftg8UBrp6K5jPMWA/r8LG5myaLAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUz8hNT/+BaDPv7L+q5i+asd7+phcwHwYDVR0jBBgwFoAURxbLW0SB7BOu3UCy wwLFD2Aa930wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ4 L1J4YkxXMFNCN0JPdTNVQ3l3d0xGRDJBYTkzMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvUnhiTFcwU0I3Qk91M1VDeXd3TEZEMkFhOTMwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ4L3o4aE5UXy1CYURQdjdM LXE1aS1hc2Q3LXBoYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAVGAMA0GCSqGSIb3DQEBCwUAA4IBAQChnC4tk4qcrHpvM5cu+OHxe1A8odl0 cW3y8rJZk30uPYeqi30u7lr+5MDKQyApEJcTET0MVHDAcgTAsXq4As1dTxwLLndj Ju8Tb6ku76wmOCP2CUYGc82SKehHurXRPNWGNyuDyJEeF23Pgxw6PcpMTJljco2j FX3nGP6/mVN+E8wsZtyfBVzZwb300xGY5CU/gdfpS97tOWna8/W++BpNu26HTa86 8KNY87Q/Jdu30x3Opak6adRSitv59HFNQNs+YdN/w0P+ABJ6esgtaGl9gn7NfJ44 rh2m0lJy99rshs8+OifjW/GkU2GPLxblbWzis9jHoSkyVWDwybolqdbn -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:14 2024 by rpki-client on console-fra.rpki-client.org