$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/fFW5_t7XVzLKernsExPGIFpM2JA.roa File: fFW5_t7XVzLKernsExPGIFpM2JA.roa (raw, json) Hash identifier: pRxq7Rip4CxMTe0waVEB0Oz3tf8WBd6skOfdjzyUrSs= Subject key identifier: 7C:55:B9:FE:DE:D7:57:32:CA:7A:B9:EC:13:13:C6:20:5A:4C:D8:90 Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Certificate serial: 12B1 Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/fFW5_t7XVzLKernsExPGIFpM2JA.roa Signing time: Fri 17 Jan 2025 01:26:14 +0000 ROA not before: Fri 17 Jan 2025 01:26:14 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 58593 IP address blocks: 2404:7940::/32 maxlen: 64 2406:e500::/33 maxlen: 64 2406:e500::/48 maxlen: 64 2406:e500:1::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4785 (0x12b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Validity Not Before: Jan 17 01:26:14 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=7C55B9FEDED75732CA7AB9EC1313C6205A4CD890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:85:11:f7:b4:e3:6b:40:00:e1:b8:e5:69: 9f:79:1a:54:2b:3a:62:49:03:b9:c4:fe:ec:b7:f7: 1f:7a:a4:a7:c2:94:dc:2b:d8:b1:07:db:54:bc:66: 13:0c:8d:e3:24:9c:cc:27:e8:26:f4:c6:25:ec:c0: 1d:65:d9:68:51:b2:58:28:a6:45:2f:bf:db:db:ff: 27:1d:43:30:40:13:71:71:85:39:ad:3d:5a:17:76: 33:58:e8:89:5c:05:c9:e8:67:40:57:81:be:59:6a: 32:61:5b:24:4d:ff:95:58:ee:c5:ce:af:7e:f6:7c: 66:3f:aa:d6:89:0d:c6:26:b9:bd:44:0d:06:fc:23: d0:45:9c:5a:6c:45:e2:a4:da:93:e0:ba:5a:e2:43: 4b:61:da:ed:99:fd:b4:0a:73:63:4e:55:62:19:9a: 56:c9:d4:37:0e:00:ee:a4:c9:9d:53:dc:a8:73:a8: eb:33:a3:25:8d:a3:0b:3b:7d:de:f3:04:57:30:14: 39:d7:36:84:cb:b0:1d:5b:79:65:f7:1e:05:3c:8a: ae:0b:6e:3f:1b:91:4b:0f:a3:10:8a:61:ea:eb:25: cc:93:48:48:b0:33:7f:c8:93:54:1f:28:b6:30:ec: f2:f4:c2:c2:da:fa:b9:aa:d1:12:23:f2:51:12:95: 42:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:55:B9:FE:DE:D7:57:32:CA:7A:B9:EC:13:13:C6:20:5A:4C:D8:90 X509v3 Authority Key Identifier: keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/fFW5_t7XVzLKernsExPGIFpM2JA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:7940::/32 2406:e500::/33 Signature Algorithm: sha256WithRSAEncryption 2c:0e:f4:51:50:73:08:2c:f4:3f:cd:e0:fa:2f:5e:17:c8:f9: 6a:fb:43:85:dd:59:fd:90:d9:4d:67:ed:7c:f9:3d:71:d6:1e: de:4c:55:af:9a:5d:4d:0c:37:77:b0:24:71:dc:82:fd:a0:16: 49:f7:5d:5b:9b:59:32:e8:f2:e9:b9:b7:cd:c3:ae:a9:b0:c1: d1:9c:bc:5f:d6:00:4b:ae:eb:a0:a4:7b:8e:21:b8:68:21:93: d4:5e:8d:18:4d:c4:08:67:a5:7a:04:a3:bd:81:5c:b2:68:4a: 72:48:0e:f2:09:18:a3:c5:3e:98:fc:e2:d9:50:8c:30:9a:b4: 8d:f5:f2:74:98:f4:2c:a2:0e:eb:72:f0:01:66:b4:5a:66:65: 92:6a:8f:3e:f9:3a:81:50:a0:9d:a8:32:52:4f:80:b2:d1:8b: 03:19:99:d9:f4:be:a0:eb:45:7d:07:81:1b:ee:be:0c:5f:3d: b0:8a:c4:44:52:2b:8c:31:34:8e:5d:42:66:ac:fa:2b:df:39: dd:a5:3f:38:c2:2d:8b:0c:70:16:05:ce:37:a0:1e:8c:2c:da: aa:49:57:15:51:9e:c7:f2:a4:e3:9d:68:5d:79:95:28:e7:9f: ff:ce:b6:d9:76:ca:0f:f5:80:d1:0c:66:04:41:e3:54:21:fb: 79:c3:9f:06 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgICErEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RF RjcxMTFERTk4QkQ3NTZEOTJCMzREMzk0REEyRDM5RUZGOUI4RTAeFw0yNTAxMTcw MTI2MTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDdDNTVCOUZFREVENzU3 MzJDQTdBQjlFQzEzMTNDNjIwNUE0Q0Q4OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCusoUR97Tja0AA4bjlaZ95GlQrOmJJA7nE/uy39x96pKfClNwr 2LEH21S8ZhMMjeMknMwn6Cb0xiXswB1l2WhRslgopkUvv9vb/ycdQzBAE3FxhTmt PVoXdjNY6IlcBcnoZ0BXgb5ZajJhWyRN/5VY7sXOr372fGY/qtaJDcYmub1EDQb8 I9BFnFpsReKk2pPgulriQ0th2u2Z/bQKc2NOVWIZmlbJ1DcOAO6kyZ1T3KhzqOsz oyWNows7fd7zBFcwFDnXNoTLsB1beWX3HgU8iq4Lbj8bkUsPoxCKYerrJcyTSEiw M3/Ik1QfKLYw7PL0wsLa+rmq0RIj8lESlUIBAgMBAAGjggH8MIIB+DAdBgNVHQ4E FgQUfFW5/t7XVzLKernsExPGIFpM2JAwHwYDVR0jBBgwFoAUze9xEd6YvXVtkrNN OU2i057/m44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy MC96ZTl4RWQ2WXZYVnRrck5OT1UyaTA1N19tNDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3plOXhFZDZZdlhWdGtyTk5PVTJpMDU3X200NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvZkZXNV90N1hWekxL ZXJuc0V4UEdJRnBNMkpBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAoBggrBgEFBQcBBwEB/wQZMBcwFQQCAAIw DwMFACQEeUADBgckBuUAADANBgkqhkiG9w0BAQsFAAOCAQEALA70UVBzCCz0P83g +i9eF8j5avtDhd1Z/ZDZTWftfPk9cdYe3kxVr5pdTQw3d7AkcdyC/aAWSfddW5tZ Mujy6bm3zcOuqbDB0Zy8X9YAS67roKR7jiG4aCGT1F6NGE3ECGelegSjvYFcsmhK ckgO8gkYo8U+mPzi2VCMMJq0jfXydJj0LKIO63LwAWa0WmZlkmqPPvk6gVCgnagy Uk+AstGLAxmZ2fS+oOtFfQeBG+6+DF89sIrERFIrjDE0jl1CZqz6K9853aU/OMIt iwxwFgXON6AejCzaqklXFVGex/Kk451oXXmVKOef/8622XbKD/WA0QxmBEHjVCH7 ecOfBg== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:25 2025 by rpki-client on console.sobornost.net