$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2671/t046ocjVzR5RVU4MgL8a40I6WXM.roa File: t046ocjVzR5RVU4MgL8a40I6WXM.roa (raw, json) Hash identifier: bpJtaKatuHT31RMM4QTq/swvYvz+zQwsuB8w1QRVAUk= Subject key identifier: B7:4E:3A:A1:C8:D5:CD:1E:51:55:4E:0C:80:BF:1A:E3:42:3A:59:73 Certificate issuer: /CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F Certificate serial: 1D30 Authority key identifier: DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/t046ocjVzR5RVU4MgL8a40I6WXM.roa Signing time: Fri 17 Jan 2025 01:29:50 +0000 ROA not before: Fri 17 Jan 2025 01:29:50 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 62387 IP address blocks: 103.108.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7472 (0x1d30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F Validity Not Before: Jan 17 01:29:50 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B74E3AA1C8D5CD1E51554E0C80BF1AE3423A5973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:92:92:2f:03:3c:c4:e2:8e:3a:15:b0:e3: fb:19:6a:9e:0f:fe:78:a8:e3:5c:e7:2d:1a:1f:12: 9c:ba:58:30:17:15:c1:ec:ca:5c:1c:3d:3f:05:fe: 86:e4:5f:20:5e:92:cb:4b:c4:2f:a4:73:f7:af:e5: cf:94:c2:ed:c3:63:c2:de:c3:10:f7:68:d3:cb:e0: ea:43:79:4b:ec:7d:41:81:87:7f:c2:fd:43:c0:a2: 58:4b:c3:59:e7:18:8a:8d:d1:34:f0:43:dc:4a:c7: e7:80:3f:89:23:a6:f6:61:c9:33:d5:a5:48:55:85: 53:d1:b1:77:21:20:9f:74:6c:3d:75:6a:11:29:39: ee:fa:ed:02:1e:08:5d:8d:3b:b1:d1:da:aa:78:71: de:7b:f0:2a:a0:4f:3d:b7:fe:42:c1:6d:f2:bc:3b: 46:04:50:8d:85:1b:4a:23:57:7a:a6:90:fc:24:13: 2c:d2:8c:70:c5:d3:db:01:9e:3c:7b:17:ce:70:76: ff:64:be:8b:c4:49:0d:a8:c5:20:06:e4:75:bf:3c: e3:83:88:4f:7f:e4:98:51:be:df:73:03:da:78:34: 85:a9:56:6b:73:af:c3:4b:42:69:3c:0d:c6:c6:be: 2a:ac:65:ad:32:d1:f2:f6:af:20:59:cc:3d:93:bf: e6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4E:3A:A1:C8:D5:CD:1E:51:55:4E:0C:80:BF:1A:E3:42:3A:59:73 X509v3 Authority Key Identifier: keyid:DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/t046ocjVzR5RVU4MgL8a40I6WXM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.108.164.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:9b:69:73:4b:ee:33:30:0c:94:ca:b2:0f:ff:4b:69:76:36: 91:20:b3:2e:1a:b7:9e:bc:81:e3:88:81:4e:1b:5d:8a:3a:c0: 89:fc:f8:c6:27:ce:38:3a:6a:52:6a:ea:84:33:f6:fd:10:58: ae:ce:b6:f7:db:1b:b9:b1:07:e1:9f:8a:75:68:9f:52:7b:c6: d1:93:df:7f:d3:0e:c4:e8:e1:43:55:75:2f:83:4d:74:86:7c: e5:dd:c2:2a:69:c2:b6:47:d7:2d:17:db:96:4f:9d:cd:5d:3c: 05:1f:dd:7d:29:8a:83:71:01:25:94:df:09:32:82:a5:21:bb: 68:12:00:52:29:ac:94:88:99:39:ee:25:09:a3:3d:0d:ba:42: ac:ba:cb:1e:d9:58:65:8d:3d:68:9e:63:fd:74:e3:4a:5f:21: 8c:8e:bb:10:21:91:34:a9:5a:3c:02:ba:e8:b3:26:b0:a1:84: 0e:c6:db:ca:b4:69:75:25:5a:a1:f5:a7:66:64:d1:9d:ad:7a: 7c:9f:77:5e:4e:7a:27:12:8a:f6:7d:50:34:2a:0f:fb:df:1d: 8d:a0:d2:62:5e:0c:b8:6a:67:d2:c1:22:f4:30:a8:aa:1b:9c: 69:43:af:6b:2a:52:b1:74:02:5d:11:9d:da:42:aa:04:76:b2: f7:e3:b8:cd -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHTAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREQ1 OEI4REVFNzdCOEFGRTZFMjkxQTVCODIwNUIxMzEzMTY5Nzg0RjAeFw0yNTAxMTcw MTI5NTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI3NEUzQUExQzhENUNE MUU1MTU1NEUwQzgwQkYxQUUzNDIzQTU5NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSkJKSLwM8xOKOOhWw4/sZap4P/nio41znLRofEpy6WDAXFcHs ylwcPT8F/obkXyBekstLxC+kc/ev5c+Uwu3DY8LewxD3aNPL4OpDeUvsfUGBh3/C /UPAolhLw1nnGIqN0TTwQ9xKx+eAP4kjpvZhyTPVpUhVhVPRsXchIJ90bD11ahEp Oe767QIeCF2NO7HR2qp4cd578CqgTz23/kLBbfK8O0YEUI2FG0ojV3qmkPwkEyzS jHDF09sBnjx7F85wdv9kvovESQ2oxSAG5HW/POODiE9/5JhRvt9zA9p4NIWpVmtz r8NLQmk8DcbGviqsZa0y0fL2ryBZzD2Tv+anAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUt046ocjVzR5RVU4MgL8a40I6WXMwHwYDVR0jBBgwFoAU3Vi43ud7iv5uKRpb ggWxMTFpeE8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 MS8zVmk0M3VkN2l2NXVLUnBiZ2dXeE1URnBlRTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNWaTQzdWQ3aXY1dUtScGJnZ1d4TVRGcGVFOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzEvdDA0Nm9jalZ6UjVS VlU0TWdMOGE0MEk2V1hNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdspDANBgkqhkiG9w0BAQsFAAOCAQEAmptpc0vuMzAMlMqyD/9LaXY2kSCz Lhq3nryB44iBThtdijrAifz4xifOODpqUmrqhDP2/RBYrs6299sbubEH4Z+KdWif UnvG0ZPff9MOxOjhQ1V1L4NNdIZ85d3CKmnCtkfXLRfblk+dzV08BR/dfSmKg3EB JZTfCTKCpSG7aBIAUimslIiZOe4lCaM9DbpCrLrLHtlYZY09aJ5j/XTjSl8hjI67 ECGRNKlaPAK66LMmsKGEDsbbyrRpdSVaofWnZmTRna16fJ93Xk56JxKK9n1QNCoP +98djaDSYl4MuGpn0sEi9DCoqhucaUOvaypSsXQCXRGd2kKqBHay9+O4zQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:25 2025 by rpki-client on console.sobornost.net