$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/mOP5PXAJj2kQLFwCgVjCZczJXBo.roa File: mOP5PXAJj2kQLFwCgVjCZczJXBo.roa (raw, json) Hash identifier: wfV0HRjPUvGW/UwP9JCls20oaaBHIMZWwQL7DaYqcbw= Subject key identifier: 98:E3:F9:3D:70:09:8F:69:10:2C:5C:02:81:58:C2:65:CC:C9:5C:1A Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Certificate serial: 14CE Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mOP5PXAJj2kQLFwCgVjCZczJXBo.roa Signing time: Wed 09 Apr 2025 06:48:37 +0000 ROA not before: Wed 09 Apr 2025 06:48:37 +0000 ROA not after: Thu 09 Apr 2026 06:41:24 +0000 asID: 62387 IP address blocks: 103.83.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 12:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5326 (0x14ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Validity Not Before: Apr 9 06:48:37 2025 GMT Not After : Apr 9 06:41:24 2026 GMT Subject: CN=98E3F93D70098F69102C5C028158C265CCC95C1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:dd:57:58:4e:eb:4b:c5:0b:97:bb:ff:d1: 68:2b:67:9d:44:48:e5:e2:e8:2b:da:c9:ce:55:ba: 1d:94:1d:ee:df:32:a1:ba:fd:dd:5c:49:9b:7a:1c: 91:e0:ea:13:14:40:95:04:62:3b:21:6f:4f:0d:68: 11:40:25:0f:97:50:89:84:bd:cb:f4:7c:ff:d4:8c: 64:32:e8:e5:e9:d1:86:ff:ae:88:8e:3b:ed:a5:e5: 6c:83:b5:dc:9c:db:a0:a5:ee:5b:75:18:f1:b6:37: 33:c4:cc:b7:19:c1:14:5a:de:32:3d:5c:c9:66:25: f0:f4:46:d7:ab:0e:5a:e0:6c:f9:71:fe:8f:1d:3a: cb:c9:29:db:09:2f:92:72:ae:97:ec:d7:58:56:38: 1a:12:e3:07:5f:22:98:b6:4a:b6:46:10:d2:52:a9: 0c:96:01:97:84:0f:e4:74:9c:53:26:da:16:7d:d0: 1b:f0:5b:55:03:96:2b:de:ff:4d:62:a5:97:49:2b: 1a:92:a1:5e:60:64:7d:c5:4f:8f:8d:29:17:d9:98: f6:b7:69:6f:f1:28:46:93:b6:5e:cd:6d:43:fe:c0: de:ea:6d:44:dd:6b:06:cd:00:c0:9e:b3:a4:74:fc: 2a:8c:c7:45:96:c1:c5:b0:99:f3:88:1b:29:c5:bc: 46:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E3:F9:3D:70:09:8F:69:10:2C:5C:02:81:58:C2:65:CC:C9:5C:1A X509v3 Authority Key Identifier: keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mOP5PXAJj2kQLFwCgVjCZczJXBo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.83.180.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:6b:3f:16:63:34:6e:33:15:96:f3:de:6d:cd:04:32:e0:8f: d1:ec:06:05:7c:48:74:b8:1f:d1:b3:3c:ee:84:7f:45:d0:55: 3b:34:b3:5f:71:b9:04:8c:57:72:82:99:a5:ca:b8:7e:ec:6c: 4a:36:b5:ef:39:22:45:e3:8f:54:72:1d:fb:ec:5f:b2:a7:6d: f2:4d:70:bb:e6:31:53:18:55:4e:14:8e:37:cd:ec:66:6d:fe: 9d:5b:55:5f:38:e5:da:0a:c8:a0:ba:c9:e4:a7:69:9d:72:d4: 16:d0:7d:d9:b3:77:2c:1a:24:e2:b8:0f:3c:c6:cd:bf:ae:b7: 77:96:72:85:89:2f:86:4d:c7:9f:79:f9:76:7d:4c:4e:9b:5b: cd:d7:4f:60:c5:03:65:94:2d:d7:0d:70:9c:07:5a:96:bc:e9: a2:e6:3c:c2:c4:43:37:95:81:fe:72:e3:82:9a:c4:e3:ac:10: e9:0f:19:59:0c:7c:76:d0:d9:0c:fe:d9:61:68:20:e9:e9:03: 4d:0e:21:d3:d0:11:32:64:c6:e3:99:2a:8a:0a:aa:d0:85:39: 16:c7:77:69:94:a3:c7:d8:65:e5:8a:a3:29:4e:ca:66:0c:d4: 38:d7:94:c0:fb:31:03:92:08:a3:a3:93:2a:77:41:a9:03:1f: 42:d9:2e:9d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREM2 ODkyRTM2MjBERDBGMUZENjI5ODJFMTE4RTI5NzU3REM4Q0IzRDAeFw0yNTA0MDkw NjQ4MzdaFw0yNjA0MDkwNjQxMjRaMDMxMTAvBgNVBAMTKDk4RTNGOTNENzAwOThG NjkxMDJDNUMwMjgxNThDMjY1Q0NDOTVDMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAjN1XWE7rS8ULl7v/0WgrZ51ESOXi6Cvayc5Vuh2UHe7fMqG6 /d1cSZt6HJHg6hMUQJUEYjshb08NaBFAJQ+XUImEvcv0fP/UjGQy6OXp0Yb/roiO O+2l5WyDtdyc26Cl7lt1GPG2NzPEzLcZwRRa3jI9XMlmJfD0RterDlrgbPlx/o8d OsvJKdsJL5Jyrpfs11hWOBoS4wdfIpi2SrZGENJSqQyWAZeED+R0nFMm2hZ90Bvw W1UDlive/01ipZdJKxqSoV5gZH3FT4+NKRfZmPa3aW/xKEaTtl7NbUP+wN7qbUTd awbNAMCes6R0/CqMx0WWwcWwmfOIGynFvEYXAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUmOP5PXAJj2kQLFwCgVjCZczJXBowHwYDVR0jBBgwFoAU3GiS42IN0PH9Ypgu EY4pdX3Iyz0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS8zR2lTNDJJTjBQSDlZcGd1RVk0cGRYM0l5ejAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNHaVM0MklOMFBIOVlwZ3VFWTRwZFgzSXl6MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvbU9QNVBYQUpqMmtR TEZ3Q2dWakNaY3pKWEJvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdTtDANBgkqhkiG9w0BAQsFAAOCAQEAm2s/FmM0bjMVlvPebc0EMuCP0ewG BXxIdLgf0bM87oR/RdBVOzSzX3G5BIxXcoKZpcq4fuxsSja17zkiReOPVHId++xf sqdt8k1wu+YxUxhVThSON83sZm3+nVtVXzjl2grIoLrJ5KdpnXLUFtB92bN3LBok 4rgPPMbNv663d5ZyhYkvhk3Hn3n5dn1MTptbzddPYMUDZZQt1w1wnAdalrzpouY8 wsRDN5WB/nLjgprE46wQ6Q8ZWQx8dtDZDP7ZYWgg6ekDTQ4h09ARMmTG45kqigqq 0IU5Fsd3aZSjx9hl5YqjKU7KZgzUONeUwPsxA5IIo6OTKndBqQMfQtkunQ== -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:20 2025 by rpki-client on console.sobornost.net