$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2522/Xo2xzHkIY-YGuMySicyhhRpo8IE.roa File: Xo2xzHkIY-YGuMySicyhhRpo8IE.roa (raw, json) Hash identifier: QgOMwwkT8JO8mXrvSbMFJwD24TDI++b2WLOiuCQt8Nw= Subject key identifier: 5E:8D:B1:CC:79:08:63:E6:06:B8:CC:92:89:CC:A1:85:1A:68:F0:81 Certificate issuer: /CN=4087DAB67172836B082075CE18BE5E5FA45D5E95 Certificate serial: 1BE1 Authority key identifier: 40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/Xo2xzHkIY-YGuMySicyhhRpo8IE.roa Signing time: Fri 17 Jan 2025 01:26:51 +0000 ROA not before: Fri 17 Jan 2025 01:26:51 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 131567 IP address blocks: 2401:7240::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7137 (0x1be1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4087DAB67172836B082075CE18BE5E5FA45D5E95 Validity Not Before: Jan 17 01:26:51 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5E8DB1CC790863E606B8CC9289CCA1851A68F081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:48:10:0a:9e:58:e1:d5:45:c1:aa:01:09: 87:cd:74:24:47:09:d1:c0:30:9f:d5:86:d6:be:b5: e4:61:23:f8:81:ac:03:12:d4:e3:c3:7c:55:fe:da: 50:dd:56:3a:2f:17:71:d0:f1:c2:42:b3:7b:0d:f9: 5c:4a:34:d5:c0:36:36:03:84:fc:f3:13:47:e2:be: 1f:ef:c3:78:41:e8:8b:7a:e1:92:cf:d2:e0:bf:7a: 11:60:cd:f9:9a:b9:54:b0:ac:95:ef:6a:cc:aa:3d: 26:f0:b5:ed:b8:b4:b8:63:ee:c3:6c:6b:a5:18:b9: d5:e0:3c:f7:a4:ff:48:05:9e:23:fb:69:c3:51:4e: db:34:66:54:aa:f7:5e:3a:52:7f:2f:f2:99:67:4a: 9a:91:44:b9:90:02:9b:1c:35:5d:d7:39:47:21:2f: 4f:08:48:54:7f:cb:21:4c:5f:98:d3:9c:96:88:eb: 7d:27:74:7d:a7:3c:d7:a6:06:52:b8:ed:04:a3:b2: 04:c7:b9:4a:99:92:14:c9:fa:d5:75:70:6e:9d:c7: 1b:1c:10:44:b2:b7:01:45:fc:25:8d:08:64:33:85: e1:58:bb:0f:43:69:f6:44:34:54:60:20:05:5b:bf: 4e:50:11:de:1c:90:4a:6a:bb:28:e8:23:c1:70:6f: 5e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8D:B1:CC:79:08:63:E6:06:B8:CC:92:89:CC:A1:85:1A:68:F0:81 X509v3 Authority Key Identifier: keyid:40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/Xo2xzHkIY-YGuMySicyhhRpo8IE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:7240::/32 Signature Algorithm: sha256WithRSAEncryption 65:57:ce:63:0c:f0:08:ce:e0:71:9b:9b:8f:48:27:f6:36:37: ca:c5:56:2e:b7:c2:ab:aa:bb:8d:7b:d2:e9:41:0c:d9:53:4a: 7c:e2:9f:aa:a0:4b:e7:4e:82:2d:2a:37:81:79:2a:9e:7a:ce: 89:1e:fd:8a:8a:31:97:01:a8:c8:43:55:7b:d4:57:43:93:01: 72:58:66:12:8a:dc:36:2f:5d:4a:a1:a3:3d:d5:3e:86:d0:f6: e8:a8:49:77:16:8b:98:15:8c:12:23:1a:4a:2c:8b:53:9f:6e: 87:6c:f8:fa:05:90:46:c4:8b:74:91:b1:c3:43:1e:6a:bb:24: 25:33:0e:14:9d:ef:f7:ce:c9:89:2e:9b:48:e9:4e:c7:cc:d3: 4f:c8:60:f6:19:05:0a:d4:94:f2:96:65:d7:75:35:e9:a9:76: d2:c2:5c:a4:f7:3d:2a:fa:3c:f2:ea:ff:8b:a4:e2:d8:86:b4: c5:08:c4:9d:6c:44:13:10:ce:07:6d:f4:a2:f0:16:69:b7:dc: b7:8e:6e:0a:c8:2a:63:9e:d9:df:b0:25:e2:c4:5f:3c:4d:0f: 77:82:74:81:bc:90:51:9c:ae:f2:0b:dd:86:f8:b2:fd:a0:31: 68:e6:5c:d2:6d:02:46:cb:6f:17:ac:d1:ca:b4:25:ac:90:64: 90:f8:20:e5 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICG+EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA4 N0RBQjY3MTcyODM2QjA4MjA3NUNFMThCRTVFNUZBNDVENUU5NTAeFw0yNTAxMTcw MTI2NTFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDVFOERCMUNDNzkwODYz RTYwNkI4Q0M5Mjg5Q0NBMTg1MUE2OEYwODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBckgQCp5Y4dVFwaoBCYfNdCRHCdHAMJ/Vhta+teRhI/iBrAMS 1OPDfFX+2lDdVjovF3HQ8cJCs3sN+VxKNNXANjYDhPzzE0fivh/vw3hB6It64ZLP 0uC/ehFgzfmauVSwrJXvasyqPSbwte24tLhj7sNsa6UYudXgPPek/0gFniP7acNR Tts0ZlSq9146Un8v8plnSpqRRLmQApscNV3XOUchL08ISFR/yyFMX5jTnJaI630n dH2nPNemBlK47QSjsgTHuUqZkhTJ+tV1cG6dxxscEESytwFF/CWNCGQzheFYuw9D afZENFRgIAVbv05QEd4ckEpquyjoI8Fwb16PAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUXo2xzHkIY+YGuMySicyhhRpo8IEwHwYDVR0jBBgwFoAUQIfatnFyg2sIIHXO GL5eX6RdXpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy Mi9RSWZhdG5GeWcyc0lJSFhPR0w1ZVg2UmRYcFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1FJZmF0bkZ5ZzJzSUlIWE9HTDVlWDZSZFhwVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MjIvWG8yeHpIa0lZLVlH dU15U2ljeWhoUnBvOElFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBckAwDQYJKoZIhvcNAQELBQADggEBAGVXzmMM8AjO4HGbm49IJ/Y2N8rF Vi63wququ4170ulBDNlTSnzin6qgS+dOgi0qN4F5Kp56zoke/YqKMZcBqMhDVXvU V0OTAXJYZhKK3DYvXUqhoz3VPobQ9uioSXcWi5gVjBIjGkosi1Ofbods+PoFkEbE i3SRscNDHmq7JCUzDhSd7/fOyYkum0jpTsfM00/IYPYZBQrUlPKWZdd1NempdtLC XKT3PSr6PPLq/4uk4tiGtMUIxJ1sRBMQzgdt9KLwFmm33LeObgrIKmOe2d+wJeLE XzxND3eCdIG8kFGcrvIL3Yb4sv2gMWjmXNJtAkbLbxes0cq0JayQZJD4IOU= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:25 2025 by rpki-client on console.sobornost.net