$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/bzm7-jLcv3Wh87N9Z5qhkKuezDw.roa File: bzm7-jLcv3Wh87N9Z5qhkKuezDw.roa (raw, json) Hash identifier: FPsYvAAOaQMSgDGGxAOpHgM9zH3kX06iyzaLE9msP8c= Subject key identifier: 6F:39:BB:FA:32:DC:BF:75:A1:F3:B3:7D:67:9A:A1:90:AB:9E:CC:3C Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Certificate serial: 14D0 Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/bzm7-jLcv3Wh87N9Z5qhkKuezDw.roa Signing time: Wed 09 Apr 2025 06:48:38 +0000 ROA not before: Wed 09 Apr 2025 06:48:38 +0000 ROA not after: Thu 09 Apr 2026 06:41:24 +0000 asID: 62387 IP address blocks: 103.235.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5328 (0x14d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Validity Not Before: Apr 9 06:48:38 2025 GMT Not After : Apr 9 06:41:24 2026 GMT Subject: CN=6F39BBFA32DCBF75A1F3B37D679AA190AB9ECC3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:84:43:7c:40:95:be:c6:c5:cf:95:3f:e3: 71:1f:07:85:e8:ae:5c:26:d2:2a:1f:66:3b:bd:94: 78:39:0f:4a:fb:d5:be:67:c2:92:d3:b1:ff:ab:11: 61:e0:06:9f:9a:99:7f:9f:39:4c:6c:1e:e3:f3:65: d5:47:ce:04:91:10:d6:b0:88:1a:d4:84:10:45:34: 4b:50:ed:04:a6:b5:31:39:42:ab:ba:70:e0:99:95: 22:06:1c:61:7d:5b:4d:28:e2:84:ce:0c:ca:90:32: 0e:7e:a2:d5:5d:6a:14:38:a4:15:7f:d1:cb:9c:6c: dd:d5:e7:80:88:b1:67:f0:19:86:cc:6c:5d:86:42: d2:5c:28:39:33:32:ca:fe:ee:13:09:82:86:7d:67: c4:e4:90:4a:29:4c:ae:2c:9e:06:23:30:2f:8d:43: 84:81:45:72:4a:4e:79:70:3f:7e:0d:d0:64:78:6a: 47:9b:0b:09:3e:10:01:eb:37:0f:f8:23:f5:24:e9: 3a:65:b1:07:f5:22:8b:df:3b:97:2c:03:6f:fd:fa: 65:30:0f:ea:16:9e:87:38:0f:e1:29:9a:28:6c:a3: 5e:20:38:bd:21:1f:a4:0d:2a:4b:80:16:23:b5:7f: 81:89:60:cf:e7:c5:3f:fd:13:cd:b9:5b:9f:07:22: c6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:39:BB:FA:32:DC:BF:75:A1:F3:B3:7D:67:9A:A1:90:AB:9E:CC:3C X509v3 Authority Key Identifier: keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/bzm7-jLcv3Wh87N9Z5qhkKuezDw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.235.128.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:27:89:5c:8e:52:1c:c3:03:06:96:66:c3:67:10:6f:57:dd: 9b:3b:0e:9c:49:0b:3d:38:b2:ed:40:19:d6:a2:a3:2a:9b:a4: 15:13:b7:01:37:34:91:38:8c:f1:f7:89:b3:62:a8:17:65:0e: be:c0:cc:8d:30:1d:e8:3c:95:b6:38:ce:d4:fc:37:24:c4:6d: c9:0c:82:4f:41:fd:a1:3d:e9:14:36:f8:b0:57:e1:52:5a:3f: 77:b7:96:8d:1f:04:80:87:c7:e6:00:b7:d1:30:a6:7d:7a:60: 9a:d8:36:78:52:53:a0:ee:8a:8a:05:41:74:f7:7d:71:8a:e7: 7b:d0:a3:71:3a:ba:6f:ee:ff:5d:51:21:84:95:88:db:90:11: 51:f5:34:38:9b:6f:7e:9e:f0:aa:84:25:e6:45:25:82:71:64: 01:ad:28:ee:19:d1:ec:3e:be:fd:8e:1a:a7:65:f5:5b:71:cb: dc:1b:84:9e:77:c7:9d:f7:4c:22:9c:18:32:1d:d6:c8:b6:8b: db:bb:c0:ac:68:6f:af:f7:76:3f:a3:b9:17:9c:52:88:ae:2a: be:e9:4f:76:67:23:df:eb:2c:65:fc:fb:da:08:35:5f:ec:6b: 01:ca:7d:58:d6:18:b7:59:20:d6:51:3b:af:db:08:01:04:e7: ed:e4:45:a8 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFNAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREM2 ODkyRTM2MjBERDBGMUZENjI5ODJFMTE4RTI5NzU3REM4Q0IzRDAeFw0yNTA0MDkw NjQ4MzhaFw0yNjA0MDkwNjQxMjRaMDMxMTAvBgNVBAMTKDZGMzlCQkZBMzJEQ0JG NzVBMUYzQjM3RDY3OUFBMTkwQUI5RUNDM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMLIRDfECVvsbFz5U/43EfB4Xorlwm0iofZju9lHg5D0r71b5n wpLTsf+rEWHgBp+amX+fOUxsHuPzZdVHzgSRENawiBrUhBBFNEtQ7QSmtTE5Qqu6 cOCZlSIGHGF9W00o4oTODMqQMg5+otVdahQ4pBV/0cucbN3V54CIsWfwGYbMbF2G QtJcKDkzMsr+7hMJgoZ9Z8TkkEopTK4sngYjMC+NQ4SBRXJKTnlwP34N0GR4akeb Cwk+EAHrNw/4I/Uk6TplsQf1IovfO5csA2/9+mUwD+oWnoc4D+Epmihso14gOL0h H6QNKkuAFiO1f4GJYM/nxT/9E825W58HIsbxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUbzm7+jLcv3Wh87N9Z5qhkKuezDwwHwYDVR0jBBgwFoAU3GiS42IN0PH9Ypgu EY4pdX3Iyz0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS8zR2lTNDJJTjBQSDlZcGd1RVk0cGRYM0l5ejAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNHaVM0MklOMFBIOVlwZ3VFWTRwZFgzSXl6MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvYnptNy1qTGN2M1do ODdOOVo1cWhrS3VlekR3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfrgDANBgkqhkiG9w0BAQsFAAOCAQEAGyeJXI5SHMMDBpZmw2cQb1fdmzsO nEkLPTiy7UAZ1qKjKpukFRO3ATc0kTiM8feJs2KoF2UOvsDMjTAd6DyVtjjO1Pw3 JMRtyQyCT0H9oT3pFDb4sFfhUlo/d7eWjR8EgIfH5gC30TCmfXpgmtg2eFJToO6K igVBdPd9cYrne9CjcTq6b+7/XVEhhJWI25ARUfU0OJtvfp7wqoQl5kUlgnFkAa0o 7hnR7D6+/Y4ap2X1W3HL3BuEnnfHnfdMIpwYMh3WyLaL27vArGhvr/d2P6O5F5xS iK4qvulPdmcj3+ssZfz72gg1X+xrAcp9WNYYt1kg1lE7r9sIAQTn7eRFqA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:25 2025 by rpki-client on console.sobornost.net