$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/75ys0PrDinDFKrNoR4e23Idu8m4.roa File: 75ys0PrDinDFKrNoR4e23Idu8m4.roa (raw, json) Hash identifier: hqT2Mqlf2A+MLPQIu6Z0Qjy6Mwg44SLEln0zoQxySso= Subject key identifier: EF:9C:AC:D0:FA:C3:8A:70:C5:2A:B3:68:47:87:B6:DC:87:6E:F2:6E Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Certificate serial: 14CA Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/75ys0PrDinDFKrNoR4e23Idu8m4.roa Signing time: Wed 09 Apr 2025 06:48:36 +0000 ROA not before: Wed 09 Apr 2025 06:48:36 +0000 ROA not after: Thu 09 Apr 2026 06:41:24 +0000 asID: 34549 IP address blocks: 114.66.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5322 (0x14ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Validity Not Before: Apr 9 06:48:36 2025 GMT Not After : Apr 9 06:41:24 2026 GMT Subject: CN=EF9CACD0FAC38A70C52AB3684787B6DC876EF26E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:65:29:7c:1a:73:4b:38:bb:b6:92:63:80: 80:53:8d:8d:ee:7e:fa:b8:b6:cc:2c:5c:8b:c7:97: fd:0d:f1:e1:27:d2:7c:bf:2e:38:11:f7:41:f0:1f: 17:b4:20:c0:b5:aa:e4:55:23:73:d6:6b:d1:09:5f: cf:bc:3b:0a:d0:fd:4b:4e:48:39:39:6a:a9:15:98: fe:fb:f5:fb:89:a8:f1:1d:6e:1d:8d:d9:81:d0:a7: 05:ce:22:b1:c9:3d:49:9e:7f:03:00:a0:29:35:e8: f6:58:17:5c:fa:17:73:7d:5a:57:59:15:03:cb:f8: ac:e5:65:ec:80:12:07:95:9e:ec:e0:c4:19:66:19: ae:cb:ef:40:89:d2:7a:65:b0:ab:cb:30:a0:9f:75: 0d:86:ef:2a:4c:f3:b0:10:0d:9d:ba:c0:d3:1a:1a: 93:6d:77:8d:95:db:3b:a8:05:db:3c:9f:5e:0e:1e: 4d:cd:53:b8:c6:fc:d6:71:ef:c9:bd:fa:46:f4:d3: 94:8e:62:b7:d6:83:d0:58:9f:f2:81:2b:7f:92:36: 09:a1:9c:eb:31:59:b1:e6:56:62:a8:51:f5:02:15: 32:fd:16:c9:ac:ec:4f:c3:0a:99:6f:77:9e:4a:97: 6f:25:34:c1:69:c6:7d:82:05:b0:c2:34:ec:14:62: 64:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9C:AC:D0:FA:C3:8A:70:C5:2A:B3:68:47:87:B6:DC:87:6E:F2:6E X509v3 Authority Key Identifier: keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/75ys0PrDinDFKrNoR4e23Idu8m4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.66.169.0/24 Signature Algorithm: sha256WithRSAEncryption 79:ac:5a:3f:23:0a:b7:d0:fa:a8:20:71:94:db:a0:1c:91:08: 9d:87:ae:9c:74:aa:70:ce:c6:86:33:8a:d5:c1:d4:13:31:05: fd:b6:0e:46:f4:af:6b:f3:72:ad:40:53:1b:4b:72:8b:2e:1d: 3f:31:5f:b5:0e:e4:fa:73:bb:a4:40:5e:fd:ad:a0:06:c3:44: c7:98:a4:8a:3e:18:82:69:ba:db:66:b4:55:db:8d:a6:40:96: 42:34:8c:8b:9f:5c:52:1c:82:41:22:fa:ff:95:eb:65:eb:28: 63:3d:f8:72:01:c0:52:32:24:14:81:0b:8b:ff:36:1a:c9:73: e6:3e:1d:b7:c3:e5:7e:1e:ef:19:2b:60:ca:a7:0b:e5:13:7d: c4:74:69:88:67:7b:16:ed:98:2b:a6:1f:fd:34:96:16:3c:99: 44:0b:c4:9f:2a:59:60:73:b2:4c:76:16:a9:bb:2c:c9:90:41: 15:38:86:69:d0:4e:a0:80:2e:f5:77:0f:e4:04:ee:02:ba:66: a5:40:5b:34:40:d9:d1:38:0a:c4:e4:20:4c:61:ab:f7:ab:4d: 0f:bc:e7:91:ce:28:10:19:7f:ca:59:31:ea:1a:4c:7d:37:bc: 03:39:b9:5e:5c:e3:0b:ef:9a:68:95:5d:0b:70:71:0c:7a:11: ff:37:e2:58 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREM2 ODkyRTM2MjBERDBGMUZENjI5ODJFMTE4RTI5NzU3REM4Q0IzRDAeFw0yNTA0MDkw NjQ4MzZaFw0yNjA0MDkwNjQxMjRaMDMxMTAvBgNVBAMTKEVGOUNBQ0QwRkFDMzhB NzBDNTJBQjM2ODQ3ODdCNkRDODc2RUYyNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8BmUpfBpzSzi7tpJjgIBTjY3ufvq4tswsXIvHl/0N8eEn0ny/ LjgR90HwHxe0IMC1quRVI3PWa9EJX8+8OwrQ/UtOSDk5aqkVmP779fuJqPEdbh2N 2YHQpwXOIrHJPUmefwMAoCk16PZYF1z6F3N9WldZFQPL+KzlZeyAEgeVnuzgxBlm Ga7L70CJ0nplsKvLMKCfdQ2G7ypM87AQDZ26wNMaGpNtd42V2zuoBds8n14OHk3N U7jG/NZx78m9+kb005SOYrfWg9BYn/KBK3+SNgmhnOsxWbHmVmKoUfUCFTL9Fsms 7E/DCplvd55Kl28lNMFpxn2CBbDCNOwUYmRJAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU75ys0PrDinDFKrNoR4e23Idu8m4wHwYDVR0jBBgwFoAU3GiS42IN0PH9Ypgu EY4pdX3Iyz0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS8zR2lTNDJJTjBQSDlZcGd1RVk0cGRYM0l5ejAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNHaVM0MklOMFBIOVlwZ3VFWTRwZFgzSXl6MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvNzV5czBQckRpbkRG S3JOb1I0ZTIzSWR1OG00LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHJCqTANBgkqhkiG9w0BAQsFAAOCAQEAeaxaPyMKt9D6qCBxlNugHJEInYeu nHSqcM7GhjOK1cHUEzEF/bYORvSva/NyrUBTG0tyiy4dPzFftQ7k+nO7pEBe/a2g BsNEx5ikij4Ygmm622a0VduNpkCWQjSMi59cUhyCQSL6/5XrZesoYz34cgHAUjIk FIELi/82Gslz5j4dt8Plfh7vGStgyqcL5RN9xHRpiGd7Fu2YK6Yf/TSWFjyZRAvE nypZYHOyTHYWqbssyZBBFTiGadBOoIAu9XcP5ATuArpmpUBbNEDZ0TgKxOQgTGGr 96tND7znkc4oEBl/ylkx6hpMfTe8Azm5XlzjC++aaJVdC3BxDHoR/zfiWA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:25 2025 by rpki-client on console.sobornost.net