$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/rta4ctWrP7dVbEYm8mprCffVCp4.roa File: rta4ctWrP7dVbEYm8mprCffVCp4.roa (raw, json) Hash identifier: bMsO3mJGyuKXflu57u8LrkuSirAz6u+24GxECcB0HzA= Subject key identifier: AE:D6:B8:72:D5:AB:3F:B7:55:6C:46:26:F2:6A:6B:09:F7:D5:0A:9E Certificate issuer: /CN=183D882201945BE13993B4C6DAC954F8EE426C97 Certificate serial: 1022 Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/rta4ctWrP7dVbEYm8mprCffVCp4.roa Signing time: Mon 24 Feb 2025 05:03:03 +0000 ROA not before: Mon 24 Feb 2025 05:03:03 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63701 IP address blocks: 218.246.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4130 (0x1022) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97 Validity Not Before: Feb 24 05:03:03 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=AED6B872D5AB3FB7556C4626F26A6B09F7D50A9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:e6:07:ef:08:5b:b0:1f:3b:81:20:8c:3c: 00:80:88:5c:86:02:30:a2:d2:f6:cb:b8:5b:28:3e: de:b4:b9:4e:c5:38:62:ea:54:fc:3a:dc:de:16:40: d4:32:d5:a5:bd:53:22:89:9f:14:3f:f0:b4:dd:a8: 8c:eb:1a:a8:a8:3a:51:ae:77:17:1a:c9:f3:d4:46: 2e:c6:d7:01:a0:b7:5b:e4:6c:53:2f:cb:b6:6d:66: 08:da:95:ef:02:26:6f:7f:5a:80:49:ad:42:5f:3a: da:80:b3:26:f8:f9:6a:bc:74:a2:33:8b:b5:e4:1d: ae:85:86:b0:a5:09:a9:88:86:33:b1:17:e3:88:9c: 1a:5e:ee:d9:d7:5f:07:26:c2:61:05:55:f0:4e:94: e5:df:60:8d:97:7b:1d:fb:e6:14:24:78:c4:66:b8: e9:ec:c1:ea:7e:dc:fd:27:97:67:f2:5e:da:63:dd: 9e:93:74:d8:47:31:19:f9:33:08:41:bf:c9:83:79: bf:3d:ec:ea:33:6a:5f:4f:56:b4:d9:90:2b:e1:b1: 11:ac:fc:86:82:82:f5:87:1c:fe:e9:22:40:5d:98: fa:5d:88:ea:51:72:ee:e1:e7:27:f5:28:2d:f3:4b: 93:fe:b9:58:68:47:2e:23:1e:bb:76:f7:ae:b4:b3: 11:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D6:B8:72:D5:AB:3F:B7:55:6C:46:26:F2:6A:6B:09:F7:D5:0A:9E X509v3 Authority Key Identifier: keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/rta4ctWrP7dVbEYm8mprCffVCp4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.246.48.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:a4:3e:48:0b:cd:31:b2:07:2d:34:73:50:b0:36:ff:76:c1: c6:d5:00:f1:80:d2:d9:27:68:76:64:6a:1d:f3:f5:1c:d6:db: a8:97:c9:09:08:23:0d:cf:95:0e:36:ab:c3:22:77:2a:55:0f: 11:f0:67:20:b0:bc:0d:5d:f7:9f:10:03:85:4e:be:4a:0e:91: 1b:26:d9:cf:2b:89:d7:09:1c:d5:b4:fc:db:15:3c:0f:ea:b9: e5:9c:dc:6c:45:21:66:85:cb:ac:06:2b:c2:1d:81:d5:4c:e6: 62:0e:fa:aa:bd:ff:b0:c5:47:08:e0:92:59:75:7a:19:00:d1: 07:a7:d9:59:4a:22:1c:eb:6d:f3:20:5a:7b:dd:c1:a6:96:6e: 7e:12:83:9c:a6:47:7e:04:c4:a3:5b:cc:87:b6:58:8a:e9:6b: 4d:46:a6:b7:7d:e5:c7:91:0b:5d:07:4c:15:42:d1:9f:2d:a3: 7a:b7:e5:10:46:f2:97:8c:e5:ed:59:f4:f6:14:a4:5e:f9:77: dd:0f:18:42:c6:eb:ff:01:2b:dc:28:95:c1:41:34:eb:61:92: 96:d9:68:cb:96:69:c4:20:01:88:99:fb:c7:01:f7:32:b0:10: 17:2d:fb:f8:89:7f:3d:99:e5:6c:12:8d:ee:3d:e8:e6:d0:1b: 36:2d:19:5f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICECIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTgz RDg4MjIwMTk0NUJFMTM5OTNCNEM2REFDOTU0RjhFRTQyNkM5NzAeFw0yNTAyMjQw NTAzMDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFFRDZCODcyRDVBQjNG Qjc1NTZDNDYyNkYyNkE2QjA5RjdENTBBOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjw+YH7whbsB87gSCMPACAiFyGAjCi0vbLuFsoPt60uU7FOGLq VPw63N4WQNQy1aW9UyKJnxQ/8LTdqIzrGqioOlGudxcayfPURi7G1wGgt1vkbFMv y7ZtZgjale8CJm9/WoBJrUJfOtqAsyb4+Wq8dKIzi7XkHa6FhrClCamIhjOxF+OI nBpe7tnXXwcmwmEFVfBOlOXfYI2Xex375hQkeMRmuOnswep+3P0nl2fyXtpj3Z6T dNhHMRn5MwhBv8mDeb897Oozal9PVrTZkCvhsRGs/IaCgvWHHP7pIkBdmPpdiOpR cu7h5yf1KC3zS5P+uVhoRy4jHrt29660sxHZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUrta4ctWrP7dVbEYm8mprCffVCp4wHwYDVR0jBBgwFoAUGD2IIgGUW+E5k7TG 2slU+O5CbJcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx MS9HRDJJSWdHVVctRTVrN1RHMnNsVS1PNUNiSmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dEMklJZ0dVVy1FNWs3VEcyc2xVLU81Q2JKYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMTEvcnRhNGN0V3JQN2RW YkVZbThtcHJDZmZWQ3A0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtr2MDANBgkqhkiG9w0BAQsFAAOCAQEAbqQ+SAvNMbIHLTRzULA2/3bBxtUA 8YDS2SdodmRqHfP1HNbbqJfJCQgjDc+VDjarwyJ3KlUPEfBnILC8DV33nxADhU6+ Sg6RGybZzyuJ1wkc1bT82xU8D+q55ZzcbEUhZoXLrAYrwh2B1UzmYg76qr3/sMVH COCSWXV6GQDRB6fZWUoiHOtt8yBae93BppZufhKDnKZHfgTEo1vMh7ZYiulrTUam t33lx5ELXQdMFULRny2jerflEEbyl4zl7Vn09hSkXvl33Q8YQsbr/wEr3CiVwUE0 62GSltloy5ZpxCABiJn7xwH3MrAQFy37+Il/PZnlbBKN7j3o5tAbNi0ZXw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:24 2025 by rpki-client on console.sobornost.net