$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/iPCP6IuT-0QUdjr7rWq4x3eahUs.roa File: iPCP6IuT-0QUdjr7rWq4x3eahUs.roa (raw, json) Hash identifier: 392WqWeFbPlBXrnmWzfBSMp8DlyfnVN0seKH8/K1kVA= Subject key identifier: 88:F0:8F:E8:8B:93:FB:44:14:76:3A:FB:AD:6A:B8:C7:77:9A:85:4B Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Certificate serial: 14CD Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/iPCP6IuT-0QUdjr7rWq4x3eahUs.roa Signing time: Wed 09 Apr 2025 06:48:37 +0000 ROA not before: Wed 09 Apr 2025 06:48:37 +0000 ROA not after: Thu 09 Apr 2026 06:41:24 +0000 asID: 34549 IP address blocks: 114.66.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5325 (0x14cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Validity Not Before: Apr 9 06:48:37 2025 GMT Not After : Apr 9 06:41:24 2026 GMT Subject: CN=88F08FE88B93FB4414763AFBAD6AB8C7779A854B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:87:ed:4a:b0:1c:92:7e:7a:3a:4b:ae:85: a8:09:1d:63:b9:17:5d:5b:fd:e3:67:e2:df:f1:87: 4c:a4:15:02:a9:1e:b1:f7:d4:4c:11:56:b2:bc:f2: 8a:bb:9d:9f:67:a2:ef:45:7f:e7:8f:44:8c:3a:7a: 9e:56:4b:81:c5:6e:7a:15:ee:ab:09:4e:af:69:57: e4:77:68:e2:11:db:4c:cd:f8:7a:31:a1:d8:ba:65: 19:94:eb:98:cf:0c:c5:85:9e:9f:81:26:5d:42:e8: be:06:c0:82:48:fe:47:9c:a3:8b:86:7d:c2:9a:e1: 89:1e:a0:2b:d0:29:93:d8:2f:73:b0:99:da:f4:a0: 8e:71:05:6a:1c:1c:5e:0a:c1:79:c9:08:98:3f:57: 08:f5:53:8f:be:cb:98:e1:c0:9f:0c:20:bd:6d:6f: b1:fb:56:6e:f0:12:3f:9d:c2:86:1e:a9:6f:e4:44: e4:8b:04:d1:83:a1:e8:60:27:d1:75:17:4e:41:77: 02:62:de:38:3f:5a:c1:74:95:64:27:2d:70:ea:2e: 9f:7f:f2:6e:07:c6:21:9f:2f:f8:8a:83:00:aa:d9: be:20:95:0c:5f:9d:40:dc:2b:9b:96:2e:8b:02:f5: 20:16:a5:b2:e7:89:4f:18:b1:72:94:72:61:16:e8: 37:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F0:8F:E8:8B:93:FB:44:14:76:3A:FB:AD:6A:B8:C7:77:9A:85:4B X509v3 Authority Key Identifier: keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/iPCP6IuT-0QUdjr7rWq4x3eahUs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.66.183.0/24 Signature Algorithm: sha256WithRSAEncryption 22:dc:91:89:91:8a:94:8e:26:a5:16:cb:38:b7:4f:35:0f:83: af:15:50:95:08:fb:71:c4:9e:a6:65:15:7a:49:62:91:6d:61: d5:ee:26:d3:72:5c:45:12:d8:62:c1:bc:f8:18:dd:83:86:5b: 41:96:72:a6:0a:b0:92:72:5b:26:e0:bc:eb:ac:a2:9e:68:4a: 07:fa:48:47:a8:ce:93:c7:b7:54:d1:9d:47:31:fa:de:16:df: f4:e3:1b:a4:e4:94:b4:d6:54:f6:9c:9c:dc:e1:1d:3f:3f:05: cc:3d:71:4c:70:e3:08:bb:4c:4b:1a:a8:a2:37:a7:17:5b:77: 9b:48:b9:1f:b2:4e:70:d9:9d:92:d4:79:3f:ec:78:2f:d7:d6: 91:f6:d2:85:42:48:54:3d:1d:96:dd:c5:7c:ee:d2:8d:4f:00: 76:95:23:69:a2:a4:d1:f5:78:dd:5d:08:cc:de:fb:4c:be:60: 1a:ba:1f:db:5e:c0:64:97:ed:d0:56:77:9e:b1:03:21:cc:95: 7e:b4:fc:f4:2c:c4:93:69:eb:7d:70:45:1c:64:6f:b5:98:36: f8:77:17:c6:8e:62:47:57:3f:e2:bf:98:c4:ea:78:26:57:25: 2e:83:f9:5f:a3:8f:10:e6:c7:01:84:1d:e7:77:06:5b:b4:4f: 45:a5:81:64 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREM2 ODkyRTM2MjBERDBGMUZENjI5ODJFMTE4RTI5NzU3REM4Q0IzRDAeFw0yNTA0MDkw NjQ4MzdaFw0yNjA0MDkwNjQxMjRaMDMxMTAvBgNVBAMTKDg4RjA4RkU4OEI5M0ZC NDQxNDc2M0FGQkFENkFCOEM3Nzc5QTg1NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCg4IftSrAckn56OkuuhagJHWO5F11b/eNn4t/xh0ykFQKpHrH3 1EwRVrK88oq7nZ9nou9Ff+ePRIw6ep5WS4HFbnoV7qsJTq9pV+R3aOIR20zN+Hox odi6ZRmU65jPDMWFnp+BJl1C6L4GwIJI/keco4uGfcKa4YkeoCvQKZPYL3Owmdr0 oI5xBWocHF4KwXnJCJg/Vwj1U4++y5jhwJ8MIL1tb7H7Vm7wEj+dwoYeqW/kROSL BNGDoehgJ9F1F05BdwJi3jg/WsF0lWQnLXDqLp9/8m4HxiGfL/iKgwCq2b4glQxf nUDcK5uWLosC9SAWpbLniU8YsXKUcmEW6DddAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUiPCP6IuT+0QUdjr7rWq4x3eahUswHwYDVR0jBBgwFoAU3GiS42IN0PH9Ypgu EY4pdX3Iyz0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS8zR2lTNDJJTjBQSDlZcGd1RVk0cGRYM0l5ejAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNHaVM0MklOMFBIOVlwZ3VFWTRwZFgzSXl6MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvaVBDUDZJdVQtMFFV ZGpyN3JXcTR4M2VhaFVzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHJCtzANBgkqhkiG9w0BAQsFAAOCAQEAItyRiZGKlI4mpRbLOLdPNQ+DrxVQ lQj7ccSepmUVeklikW1h1e4m03JcRRLYYsG8+Bjdg4ZbQZZypgqwknJbJuC866yi nmhKB/pIR6jOk8e3VNGdRzH63hbf9OMbpOSUtNZU9pyc3OEdPz8FzD1xTHDjCLtM SxqoojenF1t3m0i5H7JOcNmdktR5P+x4L9fWkfbShUJIVD0dlt3FfO7SjU8AdpUj aaKk0fV43V0IzN77TL5gGrof217AZJft0FZ3nrEDIcyVfrT89CzEk2nrfXBFHGRv tZg2+HcXxo5iR1c/4r+YxOp4JlclLoP5X6OPEObHAYQd53cGW7RPRaWBZA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:25 2025 by rpki-client on console.sobornost.net