$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/fjW9kpn-jSDef962IrBiDPJFxcI.roa File: fjW9kpn-jSDef962IrBiDPJFxcI.roa (raw, json) Hash identifier: 8/JUM4FE6l44cxvaJlc7MWmB3UMokrNBqRDkPsNPTLM= Subject key identifier: 7E:35:BD:92:99:FE:8D:20:DE:7F:DE:B6:22:B0:62:0C:F2:45:C5:C2 Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Certificate serial: 4C27 Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/fjW9kpn-jSDef962IrBiDPJFxcI.roa Signing time: Tue 25 Mar 2025 06:07:54 +0000 ROA not before: Tue 25 Mar 2025 06:07:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63603 IP address blocks: 103.102.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19495 (0x4c27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Validity Not Before: Mar 25 06:07:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=7E35BD9299FE8D20DE7FDEB622B0620CF245C5C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:17:58:f2:92:8f:26:2a:68:b0:61:7c:3d:3c: 74:6c:2e:14:e4:2d:d5:1e:75:dd:e1:42:02:6c:39: f4:5f:77:8a:61:d7:a4:f2:66:97:56:57:de:0f:ea: ee:24:a3:b6:8f:a6:24:05:ff:8a:8b:0d:dc:70:30: a5:e8:3f:dc:28:a7:5e:55:a8:fe:7d:46:f0:97:b5: ba:66:fa:91:db:bb:06:eb:c6:27:52:40:41:9f:ef: e4:b2:25:06:ef:58:8c:86:f7:da:a9:a2:9c:5e:33: bb:56:1f:95:27:55:e3:48:c7:6e:d9:a0:15:d8:92: a4:18:91:f3:21:a7:ef:d0:52:3c:f7:2b:10:3c:a3: 17:e7:95:d4:17:82:5c:83:8c:db:0c:f7:77:da:ff: 4e:4f:68:82:c9:8c:0c:dc:11:69:32:fe:cc:3a:a3: 25:af:0b:b7:03:72:5f:dd:11:8c:08:c7:ac:35:04: 30:e5:64:b0:c5:2b:27:f5:62:a8:df:da:13:cc:08: 93:67:2a:e6:de:e7:f1:70:45:9f:88:95:fe:45:60: 48:36:79:37:87:97:51:72:eb:28:82:09:86:57:af: 7f:00:d9:23:24:ec:9e:cf:b0:4b:8b:1d:aa:e7:ec: 76:bb:59:32:e9:99:d5:8d:30:c5:3b:9d:9a:c7:9c: 78:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:35:BD:92:99:FE:8D:20:DE:7F:DE:B6:22:B0:62:0C:F2:45:C5:C2 X509v3 Authority Key Identifier: keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/fjW9kpn-jSDef962IrBiDPJFxcI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.102.199.0/24 Signature Algorithm: sha256WithRSAEncryption 73:af:65:ba:af:23:83:65:3a:8c:83:a5:62:9e:42:25:d2:23: e1:4c:4c:08:00:7d:4c:05:20:d2:2e:ff:de:e1:f0:20:00:fa: 67:2e:7d:a7:25:60:25:26:12:11:98:dc:d9:bd:7c:2e:1d:69: 48:52:bd:7a:c5:bd:13:49:66:b6:c4:89:87:37:0f:ef:e6:05: 05:37:e5:04:bc:d4:d5:5b:99:30:55:01:83:61:f9:07:83:35: d1:cd:90:6a:b3:8c:d4:7a:c5:f8:2a:49:65:b3:91:44:2d:0f: d5:20:b6:31:62:e1:55:f8:82:1e:cd:9a:38:7b:b9:33:66:8f: 6a:9f:00:34:2b:43:87:92:3a:18:79:2d:d8:1e:97:19:98:0f: d4:80:d2:c3:24:82:14:c7:8e:64:dc:64:a8:0e:05:c7:97:e3: dc:0a:4e:91:23:eb:65:5a:be:f7:07:a2:49:5e:c3:df:00:2d: e1:42:82:3f:4e:c4:9d:8b:29:ab:35:43:8d:8c:7f:d9:b1:0f: 73:22:1f:3c:b8:40:f3:02:7b:4a:fb:0f:49:1e:13:72:10:7c: 16:52:b4:e6:cb:63:c5:b9:74:91:f6:fa:2d:30:8b:ca:3e:43: 38:0c:ac:94:a6:68:9e:ce:d5:d8:19:70:be:e8:5e:57:b2:74: 6f:a7:ce:d5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICTCcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEz NjA0MUEyRjUzRjI2QjQyMEQ2QkQ0RkQwRTlDMkQ3NzMyMDk3MTAeFw0yNTAzMjUw NjA3NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDdFMzVCRDkyOTlGRThE MjBERTdGREVCNjIyQjA2MjBDRjI0NUM1QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqF1jyko8mKmiwYXw9PHRsLhTkLdUedd3hQgJsOfRfd4ph16Ty ZpdWV94P6u4ko7aPpiQF/4qLDdxwMKXoP9wop15VqP59RvCXtbpm+pHbuwbrxidS QEGf7+SyJQbvWIyG99qpopxeM7tWH5UnVeNIx27ZoBXYkqQYkfMhp+/QUjz3KxA8 oxfnldQXglyDjNsM93fa/05PaILJjAzcEWky/sw6oyWvC7cDcl/dEYwIx6w1BDDl ZLDFKyf1Yqjf2hPMCJNnKube5/FwRZ+Ilf5FYEg2eTeHl1Fy6yiCCYZXr38A2SMk 7J7PsEuLHarn7Ha7WTLpmdWNMMU7nZrHnHhPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUfjW9kpn+jSDef962IrBiDPJFxcIwHwYDVR0jBBgwFoAUATYEGi9T8mtCDWvU /Q6cLXcyCXEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx OC9BVFlFR2k5VDhtdENEV3ZVX1E2Y0xYY3lDWEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FUWUVHaTlUOG10Q0RXdlVfUTZjTFhjeUNYRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MTgvZmpXOWtwbi1qU0Rl Zjk2MklyQmlEUEpGeGNJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdmxzANBgkqhkiG9w0BAQsFAAOCAQEAc69luq8jg2U6jIOlYp5CJdIj4UxM CAB9TAUg0i7/3uHwIAD6Zy59pyVgJSYSEZjc2b18Lh1pSFK9esW9E0lmtsSJhzcP 7+YFBTflBLzU1VuZMFUBg2H5B4M10c2QarOM1HrF+CpJZbORRC0P1SC2MWLhVfiC Hs2aOHu5M2aPap8ANCtDh5I6GHkt2B6XGZgP1IDSwySCFMeOZNxkqA4Fx5fj3ApO kSPrZVq+9weiSV7D3wAt4UKCP07EnYspqzVDjYx/2bEPcyIfPLhA8wJ7SvsPSR4T chB8FlK05stjxbl0kfb6LTCLyj5DOAyslKZons7V2BlwvuheV7J0b6fO1Q== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:25 2025 by rpki-client on console.sobornost.net