$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/SXeeQW1Tm6k_jhOMuM8v2YGQaHA.roa File: SXeeQW1Tm6k_jhOMuM8v2YGQaHA.roa (raw, json) Hash identifier: 5C4Kz2tvXlKpPp0zUdoEHwlfyvHduEz/cUpmRj3xDAg= Subject key identifier: 49:77:9E:41:6D:53:9B:A9:3F:8E:13:8C:B8:CF:2F:D9:81:90:68:70 Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Certificate serial: 14CB Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/SXeeQW1Tm6k_jhOMuM8v2YGQaHA.roa Signing time: Wed 09 Apr 2025 06:48:36 +0000 ROA not before: Wed 09 Apr 2025 06:48:36 +0000 ROA not after: Thu 09 Apr 2026 06:41:24 +0000 asID: 34549 IP address blocks: 114.66.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5323 (0x14cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Validity Not Before: Apr 9 06:48:36 2025 GMT Not After : Apr 9 06:41:24 2026 GMT Subject: CN=49779E416D539BA93F8E138CB8CF2FD981906870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:04:bd:8d:2a:f0:c4:dd:27:e6:88:e6:d9: 9b:7e:a4:5e:7d:7a:20:a0:19:bd:91:26:54:e1:da: 0b:39:4a:ad:4d:09:42:88:5f:a3:28:51:92:69:58: 26:19:b7:ee:ca:c5:87:87:be:23:4c:18:eb:4b:ad: 35:c5:62:f6:3b:b3:65:97:61:74:8e:1f:7d:09:f4: a4:b4:d3:cb:45:4c:8e:59:54:8a:d3:38:77:43:c3: 85:1a:d8:4e:51:19:90:13:c0:ae:38:82:d2:5a:83: 1c:c0:b3:86:6a:f7:4d:3f:c6:c9:42:8d:d3:41:6c: cf:a3:fe:91:86:f9:55:3c:74:f1:4c:39:ac:49:86: 16:8a:7d:2b:d2:8f:57:f8:4d:59:a6:db:f2:8c:c4: d7:25:c0:30:c5:02:70:f7:a1:05:7a:88:25:55:92: 75:e5:e5:b2:83:c6:e2:ff:0f:53:87:2e:bb:56:07: 93:7f:b3:76:e5:14:91:9f:3a:56:30:e1:2e:4b:0f: 7b:ee:59:a5:e6:a9:b7:c2:a6:d2:14:ce:1d:a3:8b: 2d:b5:78:7a:53:f8:63:4c:83:cc:09:6e:50:57:bf: e6:c6:d1:85:54:71:85:b9:ab:2a:d9:52:21:78:b4: 7a:bf:cd:40:9d:b9:f5:03:7b:73:40:6f:aa:8c:69: 83:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:77:9E:41:6D:53:9B:A9:3F:8E:13:8C:B8:CF:2F:D9:81:90:68:70 X509v3 Authority Key Identifier: keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/SXeeQW1Tm6k_jhOMuM8v2YGQaHA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.66.181.0/24 Signature Algorithm: sha256WithRSAEncryption 79:6c:c4:b2:c5:bc:57:30:85:bf:03:e3:4c:52:3c:9d:f8:af: c1:0b:b7:d3:77:38:24:3b:fb:ea:8c:91:e2:dc:76:d2:3e:1d: 40:32:59:49:4a:db:cf:f6:2d:ef:4c:50:df:f4:0c:81:d2:f4: 0a:36:a8:2b:de:c3:ef:60:7f:c9:33:22:ad:0a:73:29:42:df: cd:64:e7:03:bc:aa:f5:64:ec:c6:64:09:57:cf:06:fc:39:14: a1:3e:78:b6:0b:80:db:5a:db:3b:c8:db:8d:b3:a2:49:bc:ed: a1:db:a9:5b:ea:9c:58:24:19:5c:11:29:19:b7:c1:f3:a4:5a: bc:42:d1:93:de:59:af:93:30:2a:50:9b:4b:79:e6:4b:88:a1: 92:8a:d4:34:4c:34:3a:af:64:10:0e:5d:91:c4:f3:4f:34:4c: 78:a4:53:6e:45:d3:5e:7b:e3:fe:5a:1d:c7:fc:b9:e2:f5:a4: 18:4f:35:6a:72:ad:c6:2e:da:26:28:af:b9:9a:e1:9b:7a:2a: 7b:d4:2b:23:7f:3a:04:3f:f6:e6:89:87:8e:49:b5:e8:72:f2: 06:ba:13:94:a4:8c:92:de:9f:ee:f2:83:11:0d:3e:20:ad:62: 9c:12:56:5d:d9:a8:ee:ff:64:58:2e:99:32:38:50:03:63:d4: 49:8c:39:31 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREM2 ODkyRTM2MjBERDBGMUZENjI5ODJFMTE4RTI5NzU3REM4Q0IzRDAeFw0yNTA0MDkw NjQ4MzZaFw0yNjA0MDkwNjQxMjRaMDMxMTAvBgNVBAMTKDQ5Nzc5RTQxNkQ1MzlC QTkzRjhFMTM4Q0I4Q0YyRkQ5ODE5MDY4NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIAgS9jSrwxN0n5ojm2Zt+pF59eiCgGb2RJlTh2gs5Sq1NCUKI X6MoUZJpWCYZt+7KxYeHviNMGOtLrTXFYvY7s2WXYXSOH30J9KS008tFTI5ZVIrT OHdDw4Ua2E5RGZATwK44gtJagxzAs4Zq900/xslCjdNBbM+j/pGG+VU8dPFMOaxJ hhaKfSvSj1f4TVmm2/KMxNclwDDFAnD3oQV6iCVVknXl5bKDxuL/D1OHLrtWB5N/ s3blFJGfOlYw4S5LD3vuWaXmqbfCptIUzh2jiy21eHpT+GNMg8wJblBXv+bG0YVU cYW5qyrZUiF4tHq/zUCdufUDe3NAb6qMaYP5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUSXeeQW1Tm6k/jhOMuM8v2YGQaHAwHwYDVR0jBBgwFoAU3GiS42IN0PH9Ypgu EY4pdX3Iyz0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS8zR2lTNDJJTjBQSDlZcGd1RVk0cGRYM0l5ejAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNHaVM0MklOMFBIOVlwZ3VFWTRwZFgzSXl6MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvU1hlZVFXMVRtNmtf amhPTXVNOHYyWUdRYUhBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHJCtTANBgkqhkiG9w0BAQsFAAOCAQEAeWzEssW8VzCFvwPjTFI8nfivwQu3 03c4JDv76oyR4tx20j4dQDJZSUrbz/Yt70xQ3/QMgdL0CjaoK97D72B/yTMirQpz KULfzWTnA7yq9WTsxmQJV88G/DkUoT54tguA21rbO8jbjbOiSbztodupW+qcWCQZ XBEpGbfB86RavELRk95Zr5MwKlCbS3nmS4ihkorUNEw0Oq9kEA5dkcTzTzRMeKRT bkXTXnvj/lodx/y54vWkGE81anKtxi7aJiivuZrhm3oqe9QrI386BD/25omHjkm1 6HLyBroTlKSMkt6f7vKDEQ0+IK1inBJWXdmo7v9kWC6ZMjhQA2PUSYw5MQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:25 2025 by rpki-client on console.sobornost.net