$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2639/vRo9vgL-xjdBRH0vTw2uYBwgSXw.roa File: vRo9vgL-xjdBRH0vTw2uYBwgSXw.roa (raw, json) Hash identifier: tCVuBUyEUM57dgnufusnZUsvqrjJxRpLl47S9uhlG5Q= Subject key identifier: BD:1A:3D:BE:02:FE:C6:37:41:44:7D:2F:4F:0D:AE:60:1C:20:49:7C Certificate issuer: /CN=262CFF5632E4BCD10211BFA08B63F49FC9469F03 Certificate serial: 20FF Authority key identifier: 26:2C:FF:56:32:E4:BC:D1:02:11:BF:A0:8B:63:F4:9F:C9:46:9F:03 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jiz_VjLkvNECEb-gi2P0n8lGnwM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/vRo9vgL-xjdBRH0vTw2uYBwgSXw.roa Signing time: Fri 21 Mar 2025 03:28:27 +0000 ROA not before: Fri 21 Mar 2025 03:28:27 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 24424 IP address blocks: 103.104.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/Jiz_VjLkvNECEb-gi2P0n8lGnwM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/Jiz_VjLkvNECEb-gi2P0n8lGnwM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jiz_VjLkvNECEb-gi2P0n8lGnwM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8447 (0x20ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=262CFF5632E4BCD10211BFA08B63F49FC9469F03 Validity Not Before: Mar 21 03:28:27 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BD1A3DBE02FEC63741447D2F4F0DAE601C20497C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cf:6e:7a:18:89:49:76:c2:67:c8:21:d2:d9: 09:35:fa:4f:06:a3:cd:a9:5f:5d:5a:bb:c6:58:3c: d8:54:af:4e:47:42:1d:12:fb:be:55:23:98:55:3b: 3f:3a:4d:59:7b:1b:8e:96:2e:e3:79:13:7f:e6:b8: 2a:81:1d:1a:45:37:63:fb:4d:1f:82:b1:b5:2b:ed: d8:5c:fe:98:1c:af:d2:36:35:10:c4:b0:b9:23:1d: 48:09:27:96:8e:55:45:91:1d:f2:b0:ed:db:64:86: 92:02:da:6c:97:dd:55:c4:77:36:db:2e:d8:c6:32: cc:91:7a:96:bd:40:9f:e1:65:63:85:dd:96:d4:60: ae:8c:28:1f:6d:7c:56:81:da:e1:cc:1d:f3:95:11: 6c:28:34:b1:19:95:4a:1e:53:33:48:3b:67:9b:b3: 45:2b:70:52:09:f3:90:dd:7e:1d:48:e3:64:51:ba: 37:b6:b2:63:7e:7e:7d:49:13:ab:f0:40:a7:56:a9: d4:a7:fe:1d:89:ea:c3:24:d5:34:66:3d:93:88:94: 19:75:aa:f4:ea:c6:03:30:40:de:19:18:29:e1:f4: ca:6e:b0:2b:40:3c:f4:d5:4f:81:f9:2f:d7:70:d1: 27:c2:f2:5a:7b:47:b8:4e:4c:98:88:86:a6:92:89: 02:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1A:3D:BE:02:FE:C6:37:41:44:7D:2F:4F:0D:AE:60:1C:20:49:7C X509v3 Authority Key Identifier: keyid:26:2C:FF:56:32:E4:BC:D1:02:11:BF:A0:8B:63:F4:9F:C9:46:9F:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/Jiz_VjLkvNECEb-gi2P0n8lGnwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jiz_VjLkvNECEb-gi2P0n8lGnwM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/vRo9vgL-xjdBRH0vTw2uYBwgSXw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.104.152.0/22 Signature Algorithm: sha256WithRSAEncryption 27:8f:94:15:7d:aa:6c:7a:7c:1f:40:f1:7e:d4:d1:7a:b2:08: 9f:19:6b:2e:57:d9:45:9f:22:d8:48:cb:bc:6e:a8:f1:43:6c: a5:e7:b0:71:5b:a4:01:4f:da:bf:3f:a8:c4:33:78:46:ce:b5: 70:ac:0f:4e:ce:75:af:c3:2e:63:46:52:44:31:1b:b8:8e:f1: e0:30:22:91:69:f0:f0:9a:8a:4f:2e:db:db:12:28:f2:40:be: 2b:87:c0:13:59:bd:70:73:1d:3f:50:ec:15:67:c3:4c:bf:e5: fd:ff:31:b7:20:03:58:29:ba:64:fe:cf:0a:18:a3:91:10:bd: 03:5c:b3:33:43:fb:87:57:c6:35:12:ec:2d:c8:c2:5f:37:0b: 74:aa:9c:71:1e:62:ee:5d:80:63:3f:0f:44:4b:d1:f9:74:c5: d9:ef:a9:3b:1a:1b:a0:db:c4:18:e7:91:a5:c3:61:0f:11:2c: 92:d8:00:7a:1e:a5:15:62:99:14:66:c8:87:b8:59:12:f3:00: d0:ab:ac:d3:82:f3:1b:4c:dc:92:81:d0:ca:f1:5e:32:27:7d: 41:aa:13:b2:7d:0d:60:62:53:34:83:13:b0:44:b6:51:ff:92: d9:7b:95:d7:08:18:76:c9:ee:76:14:39:06:59:bc:1a:74:db: 40:be:b9:ad -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjYy Q0ZGNTYzMkU0QkNEMTAyMTFCRkEwOEI2M0Y0OUZDOTQ2OUYwMzAeFw0yNTAzMjEw MzI4MjdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJEMUEzREJFMDJGRUM2 Mzc0MTQ0N0QyRjRGMERBRTYwMUMyMDQ5N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsz256GIlJdsJnyCHS2Qk1+k8Go82pX11au8ZYPNhUr05HQh0S +75VI5hVOz86TVl7G46WLuN5E3/muCqBHRpFN2P7TR+CsbUr7dhc/pgcr9I2NRDE sLkjHUgJJ5aOVUWRHfKw7dtkhpIC2myX3VXEdzbbLtjGMsyRepa9QJ/hZWOF3ZbU YK6MKB9tfFaB2uHMHfOVEWwoNLEZlUoeUzNIO2ebs0UrcFIJ85Ddfh1I42RRuje2 smN+fn1JE6vwQKdWqdSn/h2J6sMk1TRmPZOIlBl1qvTqxgMwQN4ZGCnh9MpusCtA PPTVT4H5L9dw0SfC8lp7R7hOTJiIhqaSiQJFAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUvRo9vgL+xjdBRH0vTw2uYBwgSXwwHwYDVR0jBBgwFoAUJiz/VjLkvNECEb+g i2P0n8lGnwMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYz OS9KaXpfVmpMa3ZORUNFYi1naTJQMG44bEdud00uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ppel9Wakxrdk5FQ0ViLWdpMlAwbjhsR253TS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MzkvdlJvOXZnTC14amRC UkgwdlR3MnVZQndnU1h3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdomDANBgkqhkiG9w0BAQsFAAOCAQEAJ4+UFX2qbHp8H0DxftTRerIInxlr LlfZRZ8i2EjLvG6o8UNspeewcVukAU/avz+oxDN4Rs61cKwPTs51r8MuY0ZSRDEb uI7x4DAikWnw8JqKTy7b2xIo8kC+K4fAE1m9cHMdP1DsFWfDTL/l/f8xtyADWCm6 ZP7PChijkRC9A1yzM0P7h1fGNRLsLcjCXzcLdKqccR5i7l2AYz8PREvR+XTF2e+p OxoboNvEGOeRpcNhDxEsktgAeh6lFWKZFGbIh7hZEvMA0Kus04LzG0zckoHQyvFe Mid9QaoTsn0NYGJTNIMTsES2Uf+S2XuV1wgYdsnudhQ5Blm8GnTbQL65rQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:25 2025 by rpki-client on console.sobornost.net