$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/A2O6FGBz0JvKyQoyxRuqi-ahYmY.roa File: A2O6FGBz0JvKyQoyxRuqi-ahYmY.roa (raw, json) Hash identifier: U8hGVrzai4D3RZSiiejly4PYFeY0Mk/luvquCtDU6vs= Subject key identifier: 03:63:BA:14:60:73:D0:9B:CA:C9:0A:32:C5:1B:AA:8B:E6:A1:62:66 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 10AD Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/A2O6FGBz0JvKyQoyxRuqi-ahYmY.roa Signing time: Fri 17 Jan 2025 01:28:53 +0000 ROA not before: Fri 17 Jan 2025 01:28:53 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 136907 IP address blocks: 110.41.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4269 (0x10ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Jan 17 01:28:53 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0363BA146073D09BCAC90A32C51BAA8BE6A16266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f6:ff:94:31:5c:45:b4:b2:17:a0:1a:88:f2: 13:1f:44:b4:d6:1b:e7:84:27:a5:e0:4a:85:72:ec: b2:c7:a7:ce:92:06:fc:85:1b:a0:52:b7:e2:d5:f8: 62:df:9e:cb:03:32:13:81:c4:2b:20:31:8c:73:20: c6:31:86:8c:b9:79:d6:2b:bd:44:7d:9a:35:f9:7e: d2:00:19:bb:9a:2a:fe:36:85:53:d1:9f:6a:7a:ec: 4f:5f:7f:f4:cd:7b:46:54:c6:0a:f4:1a:01:84:74: f1:67:e8:c5:f0:96:40:a9:2f:87:3d:60:45:b8:cb: 01:d2:d3:68:ad:2e:ba:21:dc:cf:ea:1d:07:6b:61: 13:12:be:e9:4a:53:58:77:17:b2:7b:b1:ed:f9:7b: 73:2c:21:2d:87:08:64:16:58:a4:c7:86:8e:35:c4: 34:f3:b8:dc:5a:52:95:a6:5d:76:45:64:d5:72:7f: c8:22:f8:03:ba:39:ac:3c:15:e7:aa:6b:01:91:9b: da:d2:44:2c:c9:0e:46:12:6f:84:59:67:dc:b4:a1: c7:66:df:8b:6e:98:6c:f6:77:d0:c4:30:e3:9f:06: 83:1f:17:08:ee:67:8c:03:62:d9:41:9a:d3:2a:6b: de:51:b2:80:60:8c:05:98:a0:d5:3c:03:fd:a8:cd: 4f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:63:BA:14:60:73:D0:9B:CA:C9:0A:32:C5:1B:AA:8B:E6:A1:62:66 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/A2O6FGBz0JvKyQoyxRuqi-ahYmY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.41.209.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:20:2b:73:20:6a:f6:a0:9d:29:4d:26:d1:57:37:f5:d2:05: 7f:c8:39:51:db:d0:9c:3c:4d:8d:bb:af:f5:95:60:05:77:92: 37:42:9f:90:00:6e:33:b4:df:c2:40:75:e7:ae:27:87:16:07: 27:2d:4e:9d:ea:da:df:b5:8a:7e:b3:5a:c6:4c:af:90:95:d8: 2e:ba:ab:fa:2d:dc:83:d3:aa:0b:2a:e1:07:69:1b:d7:8e:13: 58:3c:20:74:39:4d:69:43:f5:7a:2e:eb:62:42:d7:99:34:84: 26:aa:af:b0:ec:1c:87:3e:1c:4e:95:d7:d2:3f:a4:9d:f8:93: 90:d3:a6:fa:54:4a:aa:18:da:c2:db:59:66:84:9f:d4:4d:d2: 9d:0f:13:7e:f3:89:44:7c:1a:79:b1:f3:ed:eb:3b:48:23:ce: ca:46:62:97:02:3e:2e:df:64:3d:7a:d9:d7:8c:0e:76:c5:78: de:1e:96:e9:94:a0:64:fe:af:f7:2b:f2:5e:1d:25:a4:32:90: 73:3c:75:81:ce:0a:df:60:84:e8:13:4e:4a:45:65:c3:91:33: 4c:00:56:98:e0:e7:e8:05:3a:bd:68:85:0e:72:c2:b7:84:56: 62:33:49:10:e5:7d:01:47:7a:1c:70:47:c1:77:50:7a:d3:a8: 59:15:65:64 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAxMTcw MTI4NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAzNjNCQTE0NjA3M0Qw OUJDQUM5MEEzMkM1MUJBQThCRTZBMTYyNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ9v+UMVxFtLIXoBqI8hMfRLTWG+eEJ6XgSoVy7LLHp86SBvyF G6BSt+LV+GLfnssDMhOBxCsgMYxzIMYxhoy5edYrvUR9mjX5ftIAGbuaKv42hVPR n2p67E9ff/TNe0ZUxgr0GgGEdPFn6MXwlkCpL4c9YEW4ywHS02itLroh3M/qHQdr YRMSvulKU1h3F7J7se35e3MsIS2HCGQWWKTHho41xDTzuNxaUpWmXXZFZNVyf8gi +AO6Oaw8FeeqawGRm9rSRCzJDkYSb4RZZ9y0ocdm34tumGz2d9DEMOOfBoMfFwju Z4wDYtlBmtMqa95RsoBgjAWYoNU8A/2ozU9tAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUA2O6FGBz0JvKyQoyxRuqi+ahYmYwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvQTJPNkZHQnowSnZL eVFveXhSdXFpLWFoWW1ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG4p0TANBgkqhkiG9w0BAQsFAAOCAQEALCArcyBq9qCdKU0m0Vc39dIFf8g5 UdvQnDxNjbuv9ZVgBXeSN0KfkABuM7TfwkB1564nhxYHJy1Onera37WKfrNaxkyv kJXYLrqr+i3cg9OqCyrhB2kb144TWDwgdDlNaUP1ei7rYkLXmTSEJqqvsOwchz4c TpXX0j+knfiTkNOm+lRKqhjawttZZoSf1E3SnQ8TfvOJRHwaebHz7es7SCPOykZi lwI+Lt9kPXrZ14wOdsV43h6W6ZSgZP6v9yvyXh0lpDKQczx1gc4K32CE6BNOSkVl w5EzTABWmODn6AU6vWiFDnLCt4RWYjNJEOV9AUd6HHBHwXdQetOoWRVlZA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net