$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/BFYDfHNXz3f3DQh7ldupGgODZ0o.roa File: BFYDfHNXz3f3DQh7ldupGgODZ0o.roa (raw, json) Hash identifier: 4J5B5ab0UvtREoxCvbEjhof9upQ4t4Q0Ovk6QH7ir5Y= Subject key identifier: 04:56:03:7C:73:57:CF:77:F7:0D:08:7B:95:DB:A9:1A:03:83:67:4A Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Certificate serial: 4C23 Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/BFYDfHNXz3f3DQh7ldupGgODZ0o.roa Signing time: Tue 25 Mar 2025 06:07:53 +0000 ROA not before: Tue 25 Mar 2025 06:07:53 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63603 IP address blocks: 103.102.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19491 (0x4c23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Validity Not Before: Mar 25 06:07:53 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0456037C7357CF77F70D087B95DBA91A0383674A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6f:33:04:f7:c2:07:c6:be:69:ea:1b:4d:73: 29:be:01:0e:f5:fb:57:9e:ed:d4:a3:9d:2c:00:11: 6c:e6:bb:36:d7:e9:e0:b8:fd:27:ce:30:ef:0e:df: a0:90:37:b6:ae:4a:91:eb:fe:31:bb:fa:f2:22:ef: 35:c5:5e:83:31:f9:28:08:9c:ef:21:38:d3:da:05: 01:23:dd:54:9b:d8:c5:64:43:49:a7:f7:63:c3:85: 2b:30:82:ac:a8:cd:59:88:e7:ac:90:09:c1:bb:05: a7:b2:94:c1:99:f3:b8:7b:8b:62:bf:54:d9:df:e3: 7c:6e:57:f9:b0:18:72:ef:cb:7c:46:d4:a6:2a:e4: ae:17:7c:b4:24:ea:61:53:cf:b1:a6:d1:76:30:0b: 20:78:f2:dd:f7:46:04:be:f7:bc:34:52:c3:e6:a5: 1a:a7:cd:13:1a:12:90:1e:79:c5:9f:f3:4e:77:c0: d3:f3:d2:ac:13:c6:ed:56:a1:7c:7d:a6:8b:00:8a: c7:d2:51:b1:5a:fb:93:4f:34:84:f6:68:81:e6:22: ed:f2:e1:b5:c7:07:44:35:ba:f1:e8:8f:54:11:03: 0f:72:c6:d1:cf:5c:00:9a:a3:dc:c1:2e:dd:03:4d: 1d:93:86:44:68:d2:4c:b3:87:35:a5:65:2c:0f:19: 6d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:56:03:7C:73:57:CF:77:F7:0D:08:7B:95:DB:A9:1A:03:83:67:4A X509v3 Authority Key Identifier: keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/BFYDfHNXz3f3DQh7ldupGgODZ0o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.102.196.0/24 Signature Algorithm: sha256WithRSAEncryption 88:4e:5e:73:01:57:43:2c:2f:e3:ab:4f:a7:bb:1c:21:1a:f4: ca:fc:f5:4a:e4:10:b5:69:ec:91:50:e3:5c:24:ba:5e:3e:95: 3b:4b:1d:1b:fd:06:95:cb:b6:02:e0:65:72:bb:54:11:8d:44: b4:87:00:59:49:b2:ac:f7:d2:7d:64:4e:06:91:de:55:a9:e1: 11:27:25:11:3d:44:25:6e:c2:93:e0:7b:0b:5a:8d:35:71:3d: a3:85:f7:d8:83:2a:89:ad:a1:c8:4b:04:00:b7:04:b8:12:27: e6:3b:d9:6d:42:7c:aa:30:97:8c:de:4b:ac:8f:6d:ca:07:ef: 92:22:58:55:92:aa:fd:18:82:94:cc:e4:14:90:30:58:cc:10: e9:b2:82:50:4f:d0:2c:be:50:8b:f9:b2:14:94:92:88:9f:81: 28:28:70:38:46:d7:d2:6c:cb:bc:6a:5e:5b:95:e7:e1:7d:4c: 9b:47:96:d2:3b:6b:09:de:66:e1:a8:7f:6f:d5:66:59:cb:19: eb:92:4b:da:9d:23:fa:ec:7d:03:5c:4d:40:58:82:17:eb:10: fa:9b:a1:34:1d:78:2c:7c:0e:4e:f8:16:96:42:58:7f:ec:56: 2e:e3:9a:10:31:16:76:aa:53:83:8c:06:37:b4:88:36:f8:23: fe:4a:79:11 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICTCMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEz NjA0MUEyRjUzRjI2QjQyMEQ2QkQ0RkQwRTlDMkQ3NzMyMDk3MTAeFw0yNTAzMjUw NjA3NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDA0NTYwMzdDNzM1N0NG NzdGNzBEMDg3Qjk1REJBOTFBMDM4MzY3NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6bzME98IHxr5p6htNcym+AQ71+1ee7dSjnSwAEWzmuzbX6eC4 /SfOMO8O36CQN7auSpHr/jG7+vIi7zXFXoMx+SgInO8hONPaBQEj3VSb2MVkQ0mn 92PDhSswgqyozVmI56yQCcG7BaeylMGZ87h7i2K/VNnf43xuV/mwGHLvy3xG1KYq 5K4XfLQk6mFTz7Gm0XYwCyB48t33RgS+97w0UsPmpRqnzRMaEpAeecWf8053wNPz 0qwTxu1WoXx9posAisfSUbFa+5NPNIT2aIHmIu3y4bXHB0Q1uvHoj1QRAw9yxtHP XACao9zBLt0DTR2ThkRo0kyzhzWlZSwPGW0DAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUBFYDfHNXz3f3DQh7ldupGgODZ0owHwYDVR0jBBgwFoAUATYEGi9T8mtCDWvU /Q6cLXcyCXEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx OC9BVFlFR2k5VDhtdENEV3ZVX1E2Y0xYY3lDWEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FUWUVHaTlUOG10Q0RXdlVfUTZjTFhjeUNYRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MTgvQkZZRGZITlh6M2Yz RFFoN2xkdXBHZ09EWjBvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdmxDANBgkqhkiG9w0BAQsFAAOCAQEAiE5ecwFXQywv46tPp7scIRr0yvz1 SuQQtWnskVDjXCS6Xj6VO0sdG/0Glcu2AuBlcrtUEY1EtIcAWUmyrPfSfWROBpHe VanhESclET1EJW7Ck+B7C1qNNXE9o4X32IMqia2hyEsEALcEuBIn5jvZbUJ8qjCX jN5LrI9tygfvkiJYVZKq/RiClMzkFJAwWMwQ6bKCUE/QLL5Qi/myFJSSiJ+BKChw OEbX0mzLvGpeW5Xn4X1Mm0eW0jtrCd5m4ah/b9VmWcsZ65JL2p0j+ux9A1xNQFiC F+sQ+puhNB14LHwOTvgWlkJYf+xWLuOaEDEWdqpTg4wGN7SINvgj/kp5EQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:25 2025 by rpki-client on console.sobornost.net