$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/kQFDATsXYrdy4QJt7F5sn1Sy2EM.roa File: kQFDATsXYrdy4QJt7F5sn1Sy2EM.roa (raw, json) Hash identifier: XHI0J5/o5O5ceg1Z+ckCn+FaTtcIPko4W8gNfs++aKE= Subject key identifier: 91:01:43:01:3B:17:62:B7:72:E1:02:6D:EC:5E:6C:9F:54:B2:D8:43 Certificate issuer: /CN=8E3E027142C633D56598418DF6DEBC01BDD8008C Certificate serial: 12A0 Authority key identifier: 8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/kQFDATsXYrdy4QJt7F5sn1Sy2EM.roa Signing time: Fri 17 Jan 2025 01:26:59 +0000 ROA not before: Fri 17 Jan 2025 01:26:59 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137798 IP address blocks: 103.116.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4768 (0x12a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3E027142C633D56598418DF6DEBC01BDD8008C Validity Not Before: Jan 17 01:26:59 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=910143013B1762B772E1026DEC5E6C9F54B2D843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:9b:0c:01:b7:b3:65:7c:49:a5:4b:66:41: 1b:b8:79:d0:85:79:10:ec:d9:d5:a2:e4:5e:31:c6: ea:d5:80:60:61:20:d4:2d:80:44:d2:18:87:1f:9a: 39:2f:d7:ef:c4:e1:38:aa:ff:2c:c9:ff:4a:fd:8a: 9a:49:df:43:4d:f8:3b:2e:41:3c:eb:86:67:94:e6: b6:46:b0:4f:ce:fa:93:94:4b:8a:9b:c9:42:49:ef: 88:85:ec:78:ca:bd:47:0b:64:e6:f1:5e:3c:fa:b9: 37:eb:87:06:50:52:c2:85:fd:f3:cc:92:65:f3:be: 5d:10:cd:71:d2:27:bc:5d:04:d6:d2:5b:54:6c:26: cc:72:1e:dc:ee:e5:eb:a1:4b:04:80:38:70:8b:32: 84:7f:9e:b5:e7:9f:2f:0b:52:0a:38:2d:27:3b:94: 71:d8:5f:89:29:04:bf:8b:15:89:d2:aa:f4:98:9b: e0:43:41:04:17:9e:1f:2f:4a:ad:42:19:e1:c2:74: 91:d7:ca:42:39:b1:fd:f6:39:8a:36:9a:02:09:90: d8:fe:8a:6d:3e:fb:0b:28:e1:b1:0a:0c:1e:0b:23: 97:73:c2:32:59:12:b7:67:85:11:ed:1b:a6:8a:26: c0:a1:01:f4:36:81:b4:25:0e:cb:da:43:88:93:b5: fd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:01:43:01:3B:17:62:B7:72:E1:02:6D:EC:5E:6C:9F:54:B2:D8:43 X509v3 Authority Key Identifier: keyid:8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/kQFDATsXYrdy4QJt7F5sn1Sy2EM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.92.0/24 Signature Algorithm: sha256WithRSAEncryption b6:58:ed:84:98:66:51:02:72:f0:c3:1b:0a:b8:87:c1:f1:93: f5:66:e1:8a:ad:ce:8c:f7:5c:4f:c4:00:8a:5c:8b:76:70:bf: 20:06:6e:d8:9c:58:ee:f7:3d:31:f4:e4:e6:74:89:23:aa:3f: 21:a4:65:b3:a9:f2:98:1a:1f:b1:3a:63:9e:eb:2a:3f:9b:bd: c1:f8:71:59:d3:c2:39:c0:fb:64:d6:6e:7d:04:d1:9d:51:dc: c4:a1:80:63:77:d9:f0:90:48:d1:40:23:7f:a5:0a:81:e1:ed: 9d:29:71:d4:a7:1d:c9:f0:79:c8:35:fc:3c:dc:f9:b6:7e:d5: 10:43:2d:32:7d:c8:97:54:73:c7:8a:01:ca:f2:04:53:eb:82: 71:aa:8e:ee:86:de:6e:36:62:b8:98:15:97:ad:e9:d4:be:e4: 71:85:43:f1:3a:e6:86:75:50:d1:24:08:66:fa:15:03:c7:46: 98:8c:91:e9:9a:09:b6:6e:09:49:af:32:f6:d4:45:f6:fa:dc: d5:dd:11:fd:e1:d0:9f:93:63:7d:14:83:f5:e5:82:06:fd:20: 61:a1:f6:59:b9:cd:9a:58:e3:74:40:b8:87:af:f3:c4:b0:7d: bf:a9:78:37:c1:2b:df:03:8d:c6:5d:1a:c4:e6:bd:53:de:c1: c3:4f:d5:e6 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEUz RTAyNzE0MkM2MzNENTY1OTg0MThERjZERUJDMDFCREQ4MDA4QzAeFw0yNTAxMTcw MTI2NTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkxMDE0MzAxM0IxNzYy Qjc3MkUxMDI2REVDNUU2QzlGNTRCMkQ4NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/55sMAbezZXxJpUtmQRu4edCFeRDs2dWi5F4xxurVgGBhINQt gETSGIcfmjkv1+/E4Tiq/yzJ/0r9ippJ30NN+DsuQTzrhmeU5rZGsE/O+pOUS4qb yUJJ74iF7HjKvUcLZObxXjz6uTfrhwZQUsKF/fPMkmXzvl0QzXHSJ7xdBNbSW1Rs JsxyHtzu5euhSwSAOHCLMoR/nrXnny8LUgo4LSc7lHHYX4kpBL+LFYnSqvSYm+BD QQQXnh8vSq1CGeHCdJHXykI5sf32OYo2mgIJkNj+im0++wso4bEKDB4LI5dzwjJZ ErdnhRHtG6aKJsChAfQ2gbQlDsvaQ4iTtf2BAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUkQFDATsXYrdy4QJt7F5sn1Sy2EMwHwYDVR0jBBgwFoAUjj4CcULGM9VlmEGN 9t68Ab3YAIwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcz OC9qajRDY1VMR005VmxtRUdOOXQ2OEFiM1lBSXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pqNENjVUxHTTlWbG1FR045dDY4QWIzWUFJdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3Mzgva1FGREFUc1hZcmR5 NFFKdDdGNXNuMVN5MkVNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGd0XDANBgkqhkiG9w0BAQsFAAOCAQEAtljthJhmUQJy8MMbCriHwfGT9Wbh iq3OjPdcT8QAilyLdnC/IAZu2JxY7vc9MfTk5nSJI6o/IaRls6nymBofsTpjnusq P5u9wfhxWdPCOcD7ZNZufQTRnVHcxKGAY3fZ8JBI0UAjf6UKgeHtnSlx1KcdyfB5 yDX8PNz5tn7VEEMtMn3Il1Rzx4oByvIEU+uCcaqO7obebjZiuJgVl63p1L7kcYVD 8TrmhnVQ0SQIZvoVA8dGmIyR6ZoJtm4JSa8y9tRF9vrc1d0R/eHQn5NjfRSD9eWC Bv0gYaH2WbnNmljjdEC4h6/zxLB9v6l4N8Er3wONxl0axOa9U97Bw0/V5g== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:25 2025 by rpki-client on console.sobornost.net