$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/6-j7tWwgCHXAtn7kDXObctV_AbQ.roa File: 6-j7tWwgCHXAtn7kDXObctV_AbQ.roa (raw, json) Hash identifier: uiMHtKQFS0wX0O4bZaGARhmnsaywtAHQxXYoxy6HoOY= Subject key identifier: EB:E8:FB:B5:6C:20:08:75:C0:B6:7E:E4:0D:73:9B:72:D5:7F:01:B4 Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Certificate serial: 4C28 Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/6-j7tWwgCHXAtn7kDXObctV_AbQ.roa Signing time: Tue 25 Mar 2025 06:07:55 +0000 ROA not before: Tue 25 Mar 2025 06:07:55 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63603 IP address blocks: 103.102.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19496 (0x4c28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Validity Not Before: Mar 25 06:07:55 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=EBE8FBB56C200875C0B67EE40D739B72D57F01B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:bd:10:85:8d:e1:0e:63:c4:a7:22:d5:ae: d2:41:1b:d4:b2:f5:6b:ac:59:04:92:04:be:20:1c: 79:91:b0:e3:f3:20:e3:3b:33:9e:a6:7d:a8:85:df: f5:d1:51:e6:9b:04:cd:28:e3:40:c1:c6:4b:65:09: e5:ea:f9:4b:36:cc:ed:61:79:ab:ac:c8:16:d8:f6: 3e:d0:14:d2:ca:dc:96:23:88:06:87:a8:30:1c:07: 07:0d:02:e1:f6:8b:08:a1:75:82:2e:e9:9b:9b:3b: fe:42:08:b3:04:29:39:dd:26:06:4e:51:bc:f7:4f: 72:37:d2:80:26:81:a1:98:02:c9:7a:fe:f7:a7:78: 35:9f:0f:78:e8:55:c7:ed:03:c2:dd:d8:83:0a:3d: 04:bb:e7:6f:eb:4a:6d:cc:e7:1d:68:20:e4:f5:b9: 79:63:c3:3f:fe:9a:8b:24:fc:a3:7c:d5:dc:b6:01: 15:f8:4e:c1:05:3f:78:58:44:46:a9:63:7f:e3:33: 0e:fc:6e:bc:12:43:fd:b1:be:c6:10:76:70:61:ab: 5d:bc:a3:b0:f1:c1:15:06:58:02:cb:f9:4b:96:cb: 73:68:3b:5d:60:af:19:18:83:a9:5e:ee:f0:b8:fb: b7:bc:63:ca:94:6b:bb:b5:cf:76:a8:13:14:09:16: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E8:FB:B5:6C:20:08:75:C0:B6:7E:E4:0D:73:9B:72:D5:7F:01:B4 X509v3 Authority Key Identifier: keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/6-j7tWwgCHXAtn7kDXObctV_AbQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.102.198.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:0a:d3:4c:78:60:87:dc:a7:a2:79:43:72:c0:e3:b5:ae:fb: a4:47:ea:a7:a0:b8:05:e3:46:71:f8:6c:64:f1:86:a7:86:77: 84:06:95:79:6a:b4:f7:bb:9e:0f:c5:1d:84:d8:18:4c:6d:3e: 3a:b0:73:cd:cf:17:90:72:92:2b:16:23:e0:37:5a:40:63:ba: aa:db:8a:73:08:2e:47:28:2d:46:af:08:91:91:a9:09:a6:c5: 9f:20:a4:0e:a9:3d:70:14:33:a7:20:b7:2d:d0:21:eb:3f:e7: 50:54:b7:eb:6e:85:2a:4a:f0:37:2d:8a:0e:4d:e2:9e:00:e6: 13:44:b3:65:7f:42:08:f9:07:99:65:44:3e:3e:f0:4e:bc:31: 9a:3f:dc:4d:73:a1:42:f3:1d:e2:09:b3:9e:c1:32:c5:28:e7: 6e:cb:89:cf:d5:f8:8f:ab:7a:3d:e8:92:2e:b2:ac:7a:4d:ac: 52:5b:f7:4f:1d:b8:64:95:62:ec:67:70:7e:17:b4:41:23:5f: fc:15:d4:9a:28:2d:a0:46:94:79:2d:d8:14:98:87:68:01:f0: 78:6c:98:c5:1f:96:f9:e8:67:ff:b9:75:23:60:7b:85:6c:57: 6c:44:61:0d:8e:4a:13:28:01:e2:89:23:38:3b:4e:98:34:cd: 4a:ca:c7:c7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICTCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEz NjA0MUEyRjUzRjI2QjQyMEQ2QkQ0RkQwRTlDMkQ3NzMyMDk3MTAeFw0yNTAzMjUw NjA3NTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVCRThGQkI1NkMyMDA4 NzVDMEI2N0VFNDBENzM5QjcyRDU3RjAxQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOP70QhY3hDmPEpyLVrtJBG9Sy9WusWQSSBL4gHHmRsOPzIOM7 M56mfaiF3/XRUeabBM0o40DBxktlCeXq+Us2zO1heausyBbY9j7QFNLK3JYjiAaH qDAcBwcNAuH2iwihdYIu6ZubO/5CCLMEKTndJgZOUbz3T3I30oAmgaGYAsl6/ven eDWfD3joVcftA8Ld2IMKPQS752/rSm3M5x1oIOT1uXljwz/+mosk/KN81dy2ARX4 TsEFP3hYREapY3/jMw78brwSQ/2xvsYQdnBhq128o7DxwRUGWALL+UuWy3NoO11g rxkYg6le7vC4+7e8Y8qUa7u1z3aoExQJFi5xAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU6+j7tWwgCHXAtn7kDXObctV/AbQwHwYDVR0jBBgwFoAUATYEGi9T8mtCDWvU /Q6cLXcyCXEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx OC9BVFlFR2k5VDhtdENEV3ZVX1E2Y0xYY3lDWEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FUWUVHaTlUOG10Q0RXdlVfUTZjTFhjeUNYRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MTgvNi1qN3RXd2dDSFhB dG43a0RYT2JjdFZfQWJRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdmxjANBgkqhkiG9w0BAQsFAAOCAQEATArTTHhgh9ynonlDcsDjta77pEfq p6C4BeNGcfhsZPGGp4Z3hAaVeWq097ueD8UdhNgYTG0+OrBzzc8XkHKSKxYj4Dda QGO6qtuKcwguRygtRq8IkZGpCabFnyCkDqk9cBQzpyC3LdAh6z/nUFS3626FKkrw Ny2KDk3ingDmE0SzZX9CCPkHmWVEPj7wTrwxmj/cTXOhQvMd4gmznsEyxSjnbsuJ z9X4j6t6PeiSLrKsek2sUlv3Tx24ZJVi7Gdwfhe0QSNf/BXUmigtoEaUeS3YFJiH aAHweGyYxR+W+ehn/7l1I2B7hWxXbERhDY5KEygB4okjODtOmDTNSsrHxw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:25 2025 by rpki-client on console.sobornost.net