$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/MSeUJvFTY9o-_khDapawXnZ-LNI.roa File: MSeUJvFTY9o-_khDapawXnZ-LNI.roa (raw, json) Hash identifier: ZHI2+ejxdkV2JDfHiihk+oNfqwqvO6AtvULRFom7nLg= Subject key identifier: 31:27:94:26:F1:53:63:DA:3E:FE:48:43:6A:96:B0:5E:76:7E:2C:D2 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 2027 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/MSeUJvFTY9o-_khDapawXnZ-LNI.roa Signing time: Fri 17 Jan 2025 01:24:10 +0000 ROA not before: Fri 17 Jan 2025 01:24:10 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 212237 IP address blocks: 103.31.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 01:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8231 (0x2027) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Jan 17 01:24:10 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=31279426F15363DA3EFE48436A96B05E767E2CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:97:d2:2b:89:49:90:86:d9:53:33:4f:f8: cf:86:02:84:54:77:81:23:4a:cc:91:d2:ba:35:3b: 78:f4:83:2c:f1:e3:db:91:e8:f1:3d:e9:0a:c8:96: 92:cc:48:c2:de:86:e2:3b:f5:95:e5:88:d1:20:42: 21:62:41:98:ba:03:68:7c:a0:a0:96:ec:06:67:75: 93:24:2e:0c:5d:b3:a9:a0:e6:98:c0:86:26:e2:d6: 88:8a:82:da:eb:cb:aa:e5:ce:1a:26:72:7d:d6:2a: 9b:e5:e6:90:8b:a6:07:54:dc:94:92:0b:d6:da:f3: 61:6c:8a:29:43:97:e0:cd:5f:f8:f7:47:fa:c1:75: de:fa:d6:a5:eb:0f:55:72:d9:a7:0b:20:cc:63:bf: 51:e1:2f:ab:10:c4:56:be:32:7c:eb:57:01:d8:08: f4:f8:e3:36:0a:32:11:5b:68:eb:63:70:14:55:a3: c4:11:1e:79:1c:22:2e:f9:0c:ff:51:f7:58:db:01: 57:2e:65:55:b8:10:8a:2f:e7:bc:0a:6a:1f:1b:29: a5:64:34:90:28:6e:e7:bf:b3:19:6a:4a:87:b3:91: 49:90:20:01:de:46:bc:a6:2c:84:1a:ca:34:da:db: eb:bf:75:f5:58:9a:2e:77:54:4d:88:e9:19:c5:e2: df:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:27:94:26:F1:53:63:DA:3E:FE:48:43:6A:96:B0:5E:76:7E:2C:D2 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/MSeUJvFTY9o-_khDapawXnZ-LNI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.31.236.0/22 Signature Algorithm: sha256WithRSAEncryption a8:eb:fb:a8:50:c9:ca:ea:54:f1:df:49:77:e4:90:eb:b1:99: ed:8f:9c:41:3a:94:a2:6a:49:6a:8f:db:54:78:b2:79:19:db: 2c:60:fb:c3:d7:3a:d3:d9:1e:c9:65:ff:03:a1:18:33:41:15: 74:d1:1e:83:91:7a:a3:43:6d:a3:2f:42:78:12:96:e9:b4:2c: 95:4c:e4:55:e2:16:2d:96:1d:e4:c4:57:e6:b1:04:02:15:1d: ce:16:3e:eb:8c:b4:77:37:87:18:f2:c9:cc:c6:34:65:81:28: f4:1b:12:29:c8:df:e5:de:14:06:e3:7d:a0:d9:e0:b6:0e:4c: 73:69:b8:2b:47:41:95:b2:5f:f6:e0:33:32:dc:d2:fc:47:4e: 53:5f:7b:8c:7b:71:b0:cc:44:b7:0b:63:4f:fe:32:69:c5:d7: c4:fa:ec:1b:66:33:56:6c:9d:4f:39:87:fe:76:0c:96:7c:b5: d7:c2:1e:cd:ef:19:e1:55:1d:42:6e:b8:7e:19:2b:55:2b:2c: 5d:97:6a:b3:f0:23:5b:ff:59:12:27:a3:8c:bd:e9:94:ab:24: fd:4b:68:8c:33:d7:51:13:8a:bc:f0:22:0e:be:03:da:c5:f4: f3:d0:db:e3:db:5f:01:b1:cc:85:8b:77:98:9a:bd:a6:d3:8d: fe:da:c5:47 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICICcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTAxMTcw MTI0MTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDMxMjc5NDI2RjE1MzYz REEzRUZFNDg0MzZBOTZCMDVFNzY3RTJDRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC97JfSK4lJkIbZUzNP+M+GAoRUd4EjSsyR0ro1O3j0gyzx49uR 6PE96QrIlpLMSMLehuI79ZXliNEgQiFiQZi6A2h8oKCW7AZndZMkLgxds6mg5pjA hibi1oiKgtrry6rlzhomcn3WKpvl5pCLpgdU3JSSC9ba82FsiilDl+DNX/j3R/rB dd761qXrD1Vy2acLIMxjv1HhL6sQxFa+MnzrVwHYCPT44zYKMhFbaOtjcBRVo8QR HnkcIi75DP9R91jbAVcuZVW4EIov57wKah8bKaVkNJAobue/sxlqSoezkUmQIAHe RrymLIQayjTa2+u/dfVYmi53VE2I6RnF4t+9AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUMSeUJvFTY9o+/khDapawXnZ+LNIwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvTVNlVUp2RlRZOW8t X2toRGFwYXdYblotTE5JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcf7DANBgkqhkiG9w0BAQsFAAOCAQEAqOv7qFDJyupU8d9Jd+SQ67GZ7Y+c QTqUompJao/bVHiyeRnbLGD7w9c609keyWX/A6EYM0EVdNEeg5F6o0Ntoy9CeBKW 6bQslUzkVeIWLZYd5MRX5rEEAhUdzhY+64y0dzeHGPLJzMY0ZYEo9BsSKcjf5d4U BuN9oNngtg5Mc2m4K0dBlbJf9uAzMtzS/EdOU197jHtxsMxEtwtjT/4yacXXxPrs G2YzVmydTzmH/nYMlny118Ieze8Z4VUdQm64fhkrVSssXZdqs/AjW/9ZEiejjL3p lKsk/UtojDPXUROKvPAiDr4D2sX089Db49tfAbHMhYt3mJq9ptON/trFRw== -----END CERTIFICATE-----Generated at Sun Apr 27 21:44:44 2025 by rpki-client on console.sobornost.net