$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/mJq41e3bmb7nDvyiHC5QHjH_Il0.roa File: mJq41e3bmb7nDvyiHC5QHjH_Il0.roa (raw, json) Hash identifier: sBZh9kc28M0gPy8qn21bFMGTZjn6VtBzPHnrMnUQEGo= Subject key identifier: 98:9A:B8:D5:ED:DB:99:BE:E7:0E:FC:A2:1C:2E:50:1E:31:FF:22:5D Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 10AC Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/mJq41e3bmb7nDvyiHC5QHjH_Il0.roa Signing time: Fri 17 Jan 2025 01:28:52 +0000 ROA not before: Fri 17 Jan 2025 01:28:52 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 136907 IP address blocks: 110.41.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4268 (0x10ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Jan 17 01:28:52 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=989AB8D5EDDB99BEE70EFCA21C2E501E31FF225D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:34:83:23:14:81:0d:49:c9:bb:e8:cd:e1: cd:67:10:68:57:b1:71:7d:c0:80:c6:91:9c:fb:64: 48:43:a8:32:03:4f:e9:ce:bf:30:de:27:42:8e:3e: 13:09:d1:aa:30:55:09:c0:39:2b:fd:89:21:54:4a: a6:96:2e:16:1b:80:49:39:c5:83:86:16:17:e5:60: 2e:8f:ca:3e:01:2d:52:7c:6e:f8:e4:1d:5a:66:ba: a4:70:1b:86:8f:ea:03:9c:91:fc:4b:74:ad:88:b3: a6:ea:f6:3c:cf:9c:6d:3f:e1:8e:45:9d:3e:d1:66: 30:ef:cd:77:61:9c:a4:63:64:fa:02:26:08:7f:b3: b1:d2:2f:6f:ca:89:20:1c:1f:e2:fc:15:d7:18:5d: 67:3e:6d:4b:22:c9:2c:9f:eb:1c:8a:84:9d:9c:15: be:25:ad:90:0d:84:c4:ca:7b:18:08:f0:b6:db:8a: a9:8e:46:70:b6:2b:9c:aa:44:bc:14:29:ff:32:ea: e4:c1:a6:b1:77:8d:d3:bb:e7:f2:e8:12:cd:3b:60: c7:4d:f3:39:25:9e:a6:04:b8:f6:51:7a:14:07:e8: 57:bd:8e:15:7d:eb:48:22:f2:13:ec:4d:b6:79:61: 77:79:7f:bd:85:88:91:93:d4:a0:b1:9e:3a:f8:80: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9A:B8:D5:ED:DB:99:BE:E7:0E:FC:A2:1C:2E:50:1E:31:FF:22:5D X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/mJq41e3bmb7nDvyiHC5QHjH_Il0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.41.90.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:f4:b9:a1:89:b5:5e:df:4c:b3:e4:6d:dd:4f:21:23:88:c4: a2:a7:48:f2:a7:e4:9d:ea:3e:64:63:be:14:84:90:07:5e:c5: e1:c9:37:ed:9d:b7:c8:c2:de:90:0a:10:7b:a4:c4:31:d7:6e: 64:3a:a3:d3:30:4d:d3:56:79:55:ba:d2:a0:00:18:35:09:2f: c0:4a:23:e2:d4:a8:28:32:17:09:33:3d:0a:09:35:61:4d:2e: 69:fe:b9:a8:c7:8e:f7:19:49:51:27:bb:18:fc:0f:6f:a2:37: 77:31:72:2f:36:0b:a0:bd:23:ab:b6:89:48:14:c7:56:8b:3e: bc:15:68:49:37:0a:02:16:0f:86:d4:34:35:13:c8:e8:bf:90: 97:40:31:4b:65:a2:0b:34:00:ee:b3:94:d9:60:b3:45:4c:87: ba:a2:e8:52:14:07:6e:06:31:32:97:03:18:51:0a:de:e7:85: 96:4d:75:52:29:f6:92:0e:6a:eb:b2:95:90:6b:28:25:d8:b0: 7e:0d:8c:87:42:d8:9e:79:b6:d6:a1:db:8b:0b:bb:b2:2f:a3: 86:5f:5f:dc:ac:d4:16:e1:77:4a:49:18:aa:1b:de:ea:21:78: b7:bb:f5:93:a9:8d:5c:a8:ac:2b:9a:60:1d:5a:89:f3:e7:46: 37:be:59:08 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAxMTcw MTI4NTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk4OUFCOEQ1RUREQjk5 QkVFNzBFRkNBMjFDMkU1MDFFMzFGRjIyNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2qjSDIxSBDUnJu+jN4c1nEGhXsXF9wIDGkZz7ZEhDqDIDT+nO vzDeJ0KOPhMJ0aowVQnAOSv9iSFUSqaWLhYbgEk5xYOGFhflYC6Pyj4BLVJ8bvjk HVpmuqRwG4aP6gOckfxLdK2Is6bq9jzPnG0/4Y5FnT7RZjDvzXdhnKRjZPoCJgh/ s7HSL2/KiSAcH+L8FdcYXWc+bUsiySyf6xyKhJ2cFb4lrZANhMTKexgI8LbbiqmO RnC2K5yqRLwUKf8y6uTBprF3jdO75/LoEs07YMdN8zklnqYEuPZRehQH6Fe9jhV9 60gi8hPsTbZ5YXd5f72FiJGT1KCxnjr4gLvRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUmJq41e3bmb7nDvyiHC5QHjH/Il0wHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvbUpxNDFlM2JtYjdu RHZ5aUhDNVFIakhfSWwwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG4pWjANBgkqhkiG9w0BAQsFAAOCAQEAW/S5oYm1Xt9Ms+Rt3U8hI4jEoqdI 8qfkneo+ZGO+FISQB17F4ck37Z23yMLekAoQe6TEMdduZDqj0zBN01Z5VbrSoAAY NQkvwEoj4tSoKDIXCTM9Cgk1YU0uaf65qMeO9xlJUSe7GPwPb6I3dzFyLzYLoL0j q7aJSBTHVos+vBVoSTcKAhYPhtQ0NRPI6L+Ql0AxS2WiCzQA7rOU2WCzRUyHuqLo UhQHbgYxMpcDGFEK3ueFlk11Uin2kg5q67KVkGsoJdiwfg2Mh0LYnnm21qHbiwu7 si+jhl9f3KzUFuF3SkkYqhve6iF4t7v1k6mNXKisK5pgHVqJ8+dGN75ZCA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net