$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/5D0c-WWWWw4FF1ELtp0U_cPBQd8.roa File: 5D0c-WWWWw4FF1ELtp0U_cPBQd8.roa (raw, json) Hash identifier: +BAnoDks/I9MJXYriLgObyMPkMI3GpRgHTysE1uOmJ0= Subject key identifier: E4:3D:1C:F9:65:96:5B:0E:05:17:51:0B:B6:9D:14:FD:C3:C1:41:DF Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Certificate serial: 14D1 Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/5D0c-WWWWw4FF1ELtp0U_cPBQd8.roa Signing time: Wed 09 Apr 2025 06:48:39 +0000 ROA not before: Wed 09 Apr 2025 06:48:39 +0000 ROA not after: Thu 09 Apr 2026 06:41:24 +0000 asID: 34549 IP address blocks: 114.66.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5329 (0x14d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Validity Not Before: Apr 9 06:48:39 2025 GMT Not After : Apr 9 06:41:24 2026 GMT Subject: CN=E43D1CF965965B0E0517510BB69D14FDC3C141DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1a:61:77:76:49:58:ae:c2:42:ee:d1:84:3d: 3b:3a:03:78:dc:4e:55:d2:de:f9:00:c1:2b:70:a3: 1d:3d:ff:f0:62:ec:46:5b:25:08:18:1a:dc:8e:20: 38:40:7a:0e:de:88:19:97:dc:34:c3:33:e6:67:57: 62:2c:ba:c6:81:8b:a7:93:d8:9b:11:bf:60:f7:96: eb:5d:63:42:11:ce:46:6c:64:8e:a8:cc:32:64:a2: 61:81:94:de:6f:24:dd:35:4f:0f:a9:fb:72:6b:d8: b4:43:d1:6f:db:6e:c7:f3:5e:0c:b0:31:a6:44:e6: 86:3f:bb:47:ce:96:a8:99:8f:8f:e2:d3:90:a9:4c: f5:0b:c0:e8:c5:60:a9:35:46:91:bd:01:03:cd:3b: 29:4e:34:18:65:28:1e:37:d7:ac:e0:3f:57:76:1c: 6f:c1:55:29:68:60:4f:7b:5e:42:58:5b:27:a7:f3: 49:17:ab:3a:6b:8f:42:3d:81:f6:d7:09:f9:59:f1: 23:95:f6:d9:7a:a6:10:a2:89:fa:56:39:57:f3:d6: c5:bf:29:d9:09:1b:0e:17:d5:a1:21:ee:8c:c7:15: 6b:80:fd:bd:fa:b1:a6:17:f3:3e:02:8a:c9:4c:1e: 49:9d:87:1f:aa:3b:59:92:cd:c2:62:cb:e2:61:59: 87:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3D:1C:F9:65:96:5B:0E:05:17:51:0B:B6:9D:14:FD:C3:C1:41:DF X509v3 Authority Key Identifier: keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/5D0c-WWWWw4FF1ELtp0U_cPBQd8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.66.212.0/22 Signature Algorithm: sha256WithRSAEncryption 60:94:8a:9b:04:67:f1:54:c6:7e:ea:3e:83:22:e1:84:17:47: 23:b9:e4:b4:a2:1a:4c:2c:c4:8b:37:c9:0a:0e:2b:ba:30:60: f1:3b:da:97:15:dd:5b:ee:23:bd:08:61:5d:54:95:b1:81:b7: a9:79:72:90:e2:db:ae:f0:b4:3a:58:a7:fc:31:8c:d7:7f:d2: 1d:6a:8c:37:48:ee:eb:10:7d:ac:74:d4:93:5e:2c:d4:d1:06: 65:3b:d2:32:30:17:55:f1:4a:83:0a:d5:58:15:4a:35:e2:77: b8:4a:7c:b1:ff:9d:21:c0:89:86:44:2c:4f:3b:7c:cf:09:a0: 23:37:1f:37:e3:1c:21:4c:24:96:38:78:c6:0e:cc:f0:d1:2a: 15:6e:71:1a:67:85:d5:31:5a:56:96:18:6c:00:fe:60:2f:41: e4:f9:99:93:94:7e:49:d1:cc:7c:17:cb:65:0c:b0:f0:c0:7f: 58:a7:70:c9:63:85:df:a9:0f:ab:ca:51:e8:03:86:f3:d4:36: eb:41:c6:99:6e:87:22:fa:22:8b:0c:69:91:67:9f:db:60:40: e8:fb:57:45:50:c8:4d:bb:aa:26:ce:74:94:76:a4:75:5b:35: b1:8f:71:3d:50:69:3f:3c:2d:57:7c:7c:be:ca:92:0c:b6:6a: 10:82:6f:4e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFNEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREM2 ODkyRTM2MjBERDBGMUZENjI5ODJFMTE4RTI5NzU3REM4Q0IzRDAeFw0yNTA0MDkw NjQ4MzlaFw0yNjA0MDkwNjQxMjRaMDMxMTAvBgNVBAMTKEU0M0QxQ0Y5NjU5NjVC MEUwNTE3NTEwQkI2OUQxNEZEQzNDMTQxREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDyGmF3dklYrsJC7tGEPTs6A3jcTlXS3vkAwStwox09//Bi7EZb JQgYGtyOIDhAeg7eiBmX3DTDM+ZnV2IsusaBi6eT2JsRv2D3lutdY0IRzkZsZI6o zDJkomGBlN5vJN01Tw+p+3Jr2LRD0W/bbsfzXgywMaZE5oY/u0fOlqiZj4/i05Cp TPULwOjFYKk1RpG9AQPNOylONBhlKB4316zgP1d2HG/BVSloYE97XkJYWyen80kX qzprj0I9gfbXCflZ8SOV9tl6phCiifpWOVfz1sW/KdkJGw4X1aEh7ozHFWuA/b36 saYX8z4CislMHkmdhx+qO1mSzcJiy+JhWYdPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU5D0c+WWWWw4FF1ELtp0U/cPBQd8wHwYDVR0jBBgwFoAU3GiS42IN0PH9Ypgu EY4pdX3Iyz0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS8zR2lTNDJJTjBQSDlZcGd1RVk0cGRYM0l5ejAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNHaVM0MklOMFBIOVlwZ3VFWTRwZFgzSXl6MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvNUQwYy1XV1dXdzRG RjFFTHRwMFVfY1BCUWQ4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAnJC1DANBgkqhkiG9w0BAQsFAAOCAQEAYJSKmwRn8VTGfuo+gyLhhBdHI7nk tKIaTCzEizfJCg4rujBg8TvalxXdW+4jvQhhXVSVsYG3qXlykOLbrvC0Olin/DGM 13/SHWqMN0ju6xB9rHTUk14s1NEGZTvSMjAXVfFKgwrVWBVKNeJ3uEp8sf+dIcCJ hkQsTzt8zwmgIzcfN+McIUwkljh4xg7M8NEqFW5xGmeF1TFaVpYYbAD+YC9B5PmZ k5R+SdHMfBfLZQyw8MB/WKdwyWOF36kPq8pR6AOG89Q260HGmW6HIvoiiwxpkWef 22BA6PtXRVDITbuqJs50lHakdVs1sY9xPVBpPzwtV3x8vsqSDLZqEIJvTg== -----END CERTIFICATE-----Generated at Sun Apr 27 14:57:59 2025 by rpki-client on console.sobornost.net