$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2823/0DGlmhMzGOmVPtV7XfDqzQDic2E.roa File: 0DGlmhMzGOmVPtV7XfDqzQDic2E.roa (raw, json) Hash identifier: 067K5NmjQjkU7dH/jzobDc1zLfZ9xuRvdm/K3Ct0DmE= Subject key identifier: D0:31:A5:9A:13:33:18:E9:95:3E:D5:7B:5D:F0:EA:CD:00:E2:73:61 Certificate issuer: /CN=6647DAB6455116964FAC00012CCC83174D4E46E1 Certificate serial: 129F Authority key identifier: 66:47:DA:B6:45:51:16:96:4F:AC:00:01:2C:CC:83:17:4D:4E:46:E1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZkfatkVRFpZPrAABLMyDF01ORuE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/0DGlmhMzGOmVPtV7XfDqzQDic2E.roa Signing time: Fri 17 Jan 2025 01:26:57 +0000 ROA not before: Fri 17 Jan 2025 01:26:57 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137730 IP address blocks: 103.124.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/ZkfatkVRFpZPrAABLMyDF01ORuE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/ZkfatkVRFpZPrAABLMyDF01ORuE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZkfatkVRFpZPrAABLMyDF01ORuE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4767 (0x129f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6647DAB6455116964FAC00012CCC83174D4E46E1 Validity Not Before: Jan 17 01:26:57 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D031A59A133318E9953ED57B5DF0EACD00E27361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:23:c2:b7:6e:92:f4:d2:b5:50:bc:13:8a: d6:b2:1d:e1:49:ea:ba:a2:7e:8c:6f:55:35:7e:e9: 9f:29:4a:bb:6e:9d:41:d6:f4:0d:79:8e:bf:33:3e: 3d:73:11:04:5c:02:eb:2d:6c:75:29:3c:4b:9b:42: 72:af:9e:f9:ad:6a:69:d8:07:aa:8e:05:42:ca:b9: 0a:6f:34:63:23:c3:35:91:f4:96:44:df:69:f8:d3: 6a:84:c5:30:e6:f7:1b:9e:4c:db:9d:b4:9e:ac:c2: 86:4b:cb:ad:f3:b4:11:e4:5e:cc:c0:88:1b:48:af: e1:bd:2c:7c:fa:39:87:fe:2b:cf:ea:c6:5a:f1:89: 01:db:60:39:73:13:59:98:a3:5d:b9:f3:81:eb:b0: df:57:ad:ce:ee:b1:9a:a8:15:01:6a:15:ba:a4:fb: dc:85:8f:4a:87:d9:47:6d:f1:be:73:c6:c3:57:9a: d6:06:58:c7:1f:24:7d:4c:4d:04:2d:65:6d:35:3d: ce:4a:15:7a:1f:7e:7d:63:1f:d8:96:5a:28:55:21: 29:1e:51:7d:0a:0d:62:17:37:30:d5:16:9f:39:e8: 07:f2:72:0e:43:e8:79:19:c3:1d:73:5f:82:6c:4c: e7:f3:96:ff:df:d8:19:05:9c:f2:15:60:96:ea:c6: e3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:31:A5:9A:13:33:18:E9:95:3E:D5:7B:5D:F0:EA:CD:00:E2:73:61 X509v3 Authority Key Identifier: keyid:66:47:DA:B6:45:51:16:96:4F:AC:00:01:2C:CC:83:17:4D:4E:46:E1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/ZkfatkVRFpZPrAABLMyDF01ORuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZkfatkVRFpZPrAABLMyDF01ORuE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/0DGlmhMzGOmVPtV7XfDqzQDic2E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.124.48.0/24 Signature Algorithm: sha256WithRSAEncryption b3:35:ce:1e:f0:04:4a:a9:04:57:ca:ca:93:9f:05:79:6d:4f: 8c:ad:df:05:db:69:dc:ff:e2:bb:ec:8e:81:a0:55:b0:80:5a: 41:0a:59:ee:e1:90:41:00:35:3d:54:e6:45:2c:f2:58:cb:9a: 64:80:1f:42:bc:d1:10:1f:45:3f:ba:63:a0:68:07:fc:3e:82: 4f:ba:ba:1c:33:62:bf:f8:79:41:a9:89:01:ac:a0:b9:11:eb: 24:31:d6:01:90:d6:1a:bc:ce:db:7f:bf:8e:dc:86:0a:2f:47: 66:04:9d:1f:94:b8:5d:6e:82:26:57:00:0e:8d:4f:3e:16:b6: 15:49:dd:48:3b:73:d5:82:17:ef:d1:9b:8a:1f:db:ca:81:6a: 34:53:a3:7f:8d:f0:db:f4:c6:1c:04:49:51:d9:08:e9:b5:55: 3e:2a:62:2e:ee:17:85:7d:3d:c7:8e:95:d0:07:42:a2:9b:81: 1d:0d:f6:02:12:70:d1:e5:df:2b:67:3d:8e:61:4f:b8:78:b6: 3d:75:86:e6:5f:1e:43:60:b6:f1:c4:56:ce:f6:35:2d:29:9a: d2:86:5a:5e:22:24:f5:6b:37:99:57:33:e0:f2:4b:b8:4e:b7: be:65:6d:80:c6:c4:0a:d7:c0:8b:49:e3:b6:08:e1:65:cf:85: ac:d8:aa:ac -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEp8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjY0 N0RBQjY0NTUxMTY5NjRGQUMwMDAxMkNDQzgzMTc0RDRFNDZFMTAeFw0yNTAxMTcw MTI2NTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQwMzFBNTlBMTMzMzE4 RTk5NTNFRDU3QjVERjBFQUNEMDBFMjczNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGmyPCt26S9NK1ULwTitayHeFJ6rqifoxvVTV+6Z8pSrtunUHW 9A15jr8zPj1zEQRcAustbHUpPEubQnKvnvmtamnYB6qOBULKuQpvNGMjwzWR9JZE 32n402qExTDm9xueTNudtJ6swoZLy63ztBHkXszAiBtIr+G9LHz6OYf+K8/qxlrx iQHbYDlzE1mYo12584HrsN9Xrc7usZqoFQFqFbqk+9yFj0qH2Udt8b5zxsNXmtYG WMcfJH1MTQQtZW01Pc5KFXoffn1jH9iWWihVISkeUX0KDWIXNzDVFp856Afycg5D 6HkZwx1zX4JsTOfzlv/f2BkFnPIVYJbqxuNvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU0DGlmhMzGOmVPtV7XfDqzQDic2EwHwYDVR0jBBgwFoAUZkfatkVRFpZPrAAB LMyDF01ORuEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgy My9aa2ZhdGtWUkZwWlByQUFCTE15REYwMU9SdUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1prZmF0a1ZSRnBaUHJBQUJMTXlERjAxT1J1RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MjMvMERHbG1oTXpHT21W UHRWN1hmRHF6UURpYzJFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGd8MDANBgkqhkiG9w0BAQsFAAOCAQEAszXOHvAESqkEV8rKk58FeW1PjK3f Bdtp3P/iu+yOgaBVsIBaQQpZ7uGQQQA1PVTmRSzyWMuaZIAfQrzREB9FP7pjoGgH /D6CT7q6HDNiv/h5QamJAayguRHrJDHWAZDWGrzO23+/jtyGCi9HZgSdH5S4XW6C JlcADo1PPha2FUndSDtz1YIX79Gbih/byoFqNFOjf43w2/TGHARJUdkI6bVVPipi Lu4XhX09x46V0AdCopuBHQ32AhJw0eXfK2c9jmFPuHi2PXWG5l8eQ2C28cRWzvY1 LSma0oZaXiIk9Ws3mVcz4PJLuE63vmVtgMbECtfAi0njtgjhZc+FrNiqrA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net