$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/_toISeST9c__yt0nsOzGy2GDpA0.roa File: _toISeST9c__yt0nsOzGy2GDpA0.roa (raw, json) Hash identifier: +NLDSz0Rhn3MaJ6UHSolXyDgqXhhOPJGpKtVqELkTrE= Subject key identifier: FE:DA:08:49:E4:93:F5:CF:FF:CA:DD:27:B0:EC:C6:CB:61:83:A4:0D Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 10AE Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/_toISeST9c__yt0nsOzGy2GDpA0.roa Signing time: Fri 17 Jan 2025 01:28:53 +0000 ROA not before: Fri 17 Jan 2025 01:28:53 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 124.71.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4270 (0x10ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Jan 17 01:28:53 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FEDA0849E493F5CFFFCADD27B0ECC6CB6183A40D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:e0:b5:39:77:81:27:10:ae:d8:23:bb:e4: b2:f6:29:4b:08:a7:c6:0b:44:57:2d:fc:54:d6:3d: cd:8a:ab:8e:af:7a:79:14:f7:df:54:fa:f3:ef:72: 2c:32:09:38:91:86:1a:14:7e:c3:2b:86:85:00:7a: 8f:f0:90:9a:db:15:66:3c:2c:87:f0:2d:a6:fc:e0: c3:ab:c7:16:d8:b2:e7:34:b3:42:c6:c5:a9:25:96: 7b:5b:3b:a0:e3:58:d4:04:9b:13:b0:e0:2e:8c:7e: 33:63:b2:5c:65:e6:3d:1a:44:cf:60:f1:c8:6f:53: a8:19:20:51:89:ba:d7:a6:93:fd:07:1f:b7:45:0d: fa:4c:ad:d5:e7:4f:fc:25:76:ee:5a:47:38:83:82: b3:99:3d:c2:70:9a:78:30:9d:5a:1e:dd:5f:50:cf: b9:78:9e:65:8a:8b:21:db:e6:0a:02:65:40:98:82: dd:1e:17:bc:bf:18:ce:b6:09:d5:05:5e:c0:58:2a: 34:4a:b1:84:9d:01:f4:df:bb:81:e9:09:df:79:6d: f6:4e:4a:c5:32:82:e2:40:ec:9b:42:de:98:9c:59: 13:13:9a:90:a0:29:ac:03:02:43:62:ee:1e:67:8c: 7b:49:06:08:95:fa:34:c5:d4:6a:0d:e3:22:f4:4a: c2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DA:08:49:E4:93:F5:CF:FF:CA:DD:27:B0:EC:C6:CB:61:83:A4:0D X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/_toISeST9c__yt0nsOzGy2GDpA0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.71.250.0/24 Signature Algorithm: sha256WithRSAEncryption 58:db:cb:a8:3a:04:a0:c4:6c:f4:78:92:08:5d:6c:a8:f3:b7: 77:2f:0d:86:95:36:01:09:9f:ff:a8:fe:cd:09:db:1c:61:39: 3d:32:8b:78:34:4d:16:dd:c7:93:b0:3d:39:2c:89:5f:07:5d: a4:e7:c5:c4:2e:21:60:41:4b:51:8e:56:25:c8:4f:75:c9:25: c0:f5:88:e8:d6:30:5d:4d:39:bd:01:1e:c2:92:db:a3:f7:d5: 2c:a3:7d:a9:9e:15:2f:a7:d0:99:81:99:f1:f2:41:09:34:a0: 24:1e:a1:e7:08:4a:ac:ae:a4:be:4b:98:88:82:dc:7d:21:08: 6c:d3:9e:64:91:0d:c5:f9:a0:61:f8:53:f3:e5:d6:f6:ee:41: 7f:34:02:4f:20:d1:9d:28:64:db:4f:fa:15:ce:5f:70:e9:d9: f3:b5:70:60:b2:fe:4f:3a:c0:ed:ff:1c:c3:69:4d:b9:98:5e: 97:42:04:e9:82:8b:c0:52:ee:80:05:d4:7e:a6:4d:59:12:1f: 1b:66:6a:1c:ed:4b:4a:ec:8d:a5:c5:57:23:65:61:39:6f:98: 39:41:70:ab:d6:2e:8b:ad:f9:08:3d:22:5a:9a:27:70:75:9f: 5f:00:02:58:8a:20:94:96:52:e9:b3:5b:7a:c2:8e:fb:d9:db: b5:4e:61:99 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAxMTcw MTI4NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZFREEwODQ5RTQ5M0Y1 Q0ZGRkNBREQyN0IwRUNDNkNCNjE4M0E0MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAmOC1OXeBJxCu2CO75LL2KUsIp8YLRFct/FTWPc2Kq46venkU 999U+vPvciwyCTiRhhoUfsMrhoUAeo/wkJrbFWY8LIfwLab84MOrxxbYsuc0s0LG xakllntbO6DjWNQEmxOw4C6MfjNjslxl5j0aRM9g8chvU6gZIFGJutemk/0HH7dF DfpMrdXnT/wldu5aRziDgrOZPcJwmngwnVoe3V9Qz7l4nmWKiyHb5goCZUCYgt0e F7y/GM62CdUFXsBYKjRKsYSdAfTfu4HpCd95bfZOSsUyguJA7JtC3picWRMTmpCg KawDAkNi7h5njHtJBgiV+jTF1GoN4yL0SsKlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU/toISeST9c//yt0nsOzGy2GDpA0wHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvX3RvSVNlU1Q5Y19f eXQwbnNPekd5MkdEcEEwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHxH+jANBgkqhkiG9w0BAQsFAAOCAQEAWNvLqDoEoMRs9HiSCF1sqPO3dy8N hpU2AQmf/6j+zQnbHGE5PTKLeDRNFt3Hk7A9OSyJXwddpOfFxC4hYEFLUY5WJchP dcklwPWI6NYwXU05vQEewpLbo/fVLKN9qZ4VL6fQmYGZ8fJBCTSgJB6h5whKrK6k vkuYiILcfSEIbNOeZJENxfmgYfhT8+XW9u5BfzQCTyDRnShk20/6Fc5fcOnZ87Vw YLL+TzrA7f8cw2lNuZhel0IE6YKLwFLugAXUfqZNWRIfG2ZqHO1LSuyNpcVXI2Vh OW+YOUFwq9Yui635CD0iWponcHWfXwACWIoglJZS6bNbesKO+9nbtU5hmQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net