$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/BM949r9rNNFmiE2hZJ2CsNvFnyE.roa File: BM949r9rNNFmiE2hZJ2CsNvFnyE.roa (raw, json) Hash identifier: 1QomDKiRwegkAUt2SGXKWdg8w4qkMFj2xF9UiJfg0Bw= Subject key identifier: 04:CF:78:F6:BF:6B:34:D1:66:88:4D:A1:64:9D:82:B0:DB:C5:9F:21 Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Certificate serial: 0962 Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/BM949r9rNNFmiE2hZJ2CsNvFnyE.roa Signing time: Mon 20 Jan 2025 01:30:16 +0000 ROA not before: Mon 20 Jan 2025 01:30:16 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 37968 IP address blocks: 103.168.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2402 (0x962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Validity Not Before: Jan 20 01:30:16 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=04CF78F6BF6B34D166884DA1649D82B0DBC59F21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7d:3d:92:d3:16:5b:9a:c1:a1:1b:6f:8d:12: 42:5d:62:8c:3b:68:4b:cd:e8:7f:13:aa:2c:b7:f1: 5a:38:0b:75:79:b4:5f:3a:d0:04:0b:08:8b:95:28: c3:ae:4c:c5:1d:6d:78:0f:3c:50:e8:c1:b8:2f:89: 17:e5:57:09:82:ac:4c:28:a4:db:2c:41:f7:ec:16: 54:b7:cb:d7:1e:29:9a:7e:11:9f:9a:b5:ee:82:39: 11:47:c2:61:15:ad:0c:da:a3:f8:42:ec:47:9d:7e: 02:9c:80:a8:2a:27:0d:3b:95:c5:82:6a:52:fb:65: c3:9f:e2:45:73:23:79:fb:ce:65:00:4e:cb:b4:b1: 4a:c6:39:75:53:47:f5:a7:18:03:62:c6:f4:cc:0d: 22:18:02:15:52:e2:93:35:00:2b:94:7d:53:3c:85: 49:a3:57:1b:fa:19:64:a7:ce:5e:7f:e4:d5:1b:a1: 2b:42:be:b3:a1:cf:d9:1b:a1:fe:13:cf:a8:74:43: bc:25:4f:3a:a1:b3:30:35:c0:d1:67:dc:e4:74:6c: fe:bd:21:c6:1e:8d:c7:2f:e8:51:a3:72:9e:0a:4e: 90:ec:a9:36:87:ba:67:aa:3e:00:81:ad:c8:4e:0d: 7c:9d:4d:0b:da:1f:e0:d3:1a:b7:f7:ea:c1:24:f5: a4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CF:78:F6:BF:6B:34:D1:66:88:4D:A1:64:9D:82:B0:DB:C5:9F:21 X509v3 Authority Key Identifier: keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/BM949r9rNNFmiE2hZJ2CsNvFnyE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.168.98.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:47:73:27:cb:6d:f9:d0:02:4f:22:1c:85:f5:da:46:9b:1b: 12:5d:b9:eb:a5:43:27:9b:ad:88:5b:e3:c9:a5:b2:8a:d2:d9: 7c:95:59:e0:74:b8:91:8d:bf:a2:bd:60:96:d5:f2:92:c9:b4: 5e:23:13:c6:1d:1d:db:4e:b7:7d:af:9a:7e:31:f8:8a:ea:51: e3:97:dd:5d:af:5c:03:83:c5:85:d3:23:99:e0:cb:05:41:41: 8f:df:6b:c6:9d:7a:52:8c:5e:f0:82:81:0f:52:24:0e:81:74: 6f:68:bd:18:7c:ed:e6:7e:a9:07:cd:52:46:62:4e:28:90:d3: 14:fd:c7:ab:4f:b6:2a:5e:3c:3b:6b:a1:06:9a:78:9b:0f:ab: 4d:a5:4c:23:1e:4a:56:a2:93:02:a3:6f:b7:89:13:c7:5f:70: c7:9b:16:d2:a1:6e:7a:ef:87:9e:9f:3b:fa:14:58:fc:31:3d: b5:04:80:2a:c9:4c:ad:7f:eb:15:31:a7:bf:af:6e:d0:b5:44: f8:ac:fa:2a:96:5e:66:6d:52:6e:47:03:1e:31:dd:91:05:27: 50:2c:3c:9c:bf:d7:ce:a8:08:a8:be:15:a2:38:94:6d:2a:47: e5:66:8c:f8:ec:0b:6f:f6:02:56:17:da:49:06:1b:fe:cb:0c: 3d:6b:68:18 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCWIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ix NjcwN0VBRjBCREZEMTMyNkFGRDlCREVDNkFGRkE2RTYzQkE5ODAeFw0yNTAxMjAw MTMwMTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDA0Q0Y3OEY2QkY2QjM0 RDE2Njg4NERBMTY0OUQ4MkIwREJDNTlGMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFfT2S0xZbmsGhG2+NEkJdYow7aEvN6H8Tqiy38Vo4C3V5tF86 0AQLCIuVKMOuTMUdbXgPPFDowbgviRflVwmCrEwopNssQffsFlS3y9ceKZp+EZ+a te6CORFHwmEVrQzao/hC7EedfgKcgKgqJw07lcWCalL7ZcOf4kVzI3n7zmUATsu0 sUrGOXVTR/WnGANixvTMDSIYAhVS4pM1ACuUfVM8hUmjVxv6GWSnzl5/5NUboStC vrOhz9kbof4Tz6h0Q7wlTzqhszA1wNFn3OR0bP69IcYejccv6FGjcp4KTpDsqTaH umeqPgCBrchODXydTQvaH+DTGrf36sEk9aTjAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUBM949r9rNNFmiE2hZJ2CsNvFnyEwHwYDVR0jBBgwFoAUyxZwfq8L39Eyav2b 3sav+m5jupgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 NS95eFp3ZnE4TDM5RXlhdjJiM3Nhdi1tNWp1cGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3l4WndmcThMMzlFeWF2MmIzc2F2LW01anVwZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTUvQk05NDlyOXJOTkZt aUUyaFpKMkNzTnZGbnlFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWeoYjANBgkqhkiG9w0BAQsFAAOCAQEAbkdzJ8tt+dACTyIchfXaRpsbEl25 66VDJ5utiFvjyaWyitLZfJVZ4HS4kY2/or1gltXyksm0XiMTxh0d2063fa+afjH4 iupR45fdXa9cA4PFhdMjmeDLBUFBj99rxp16Uoxe8IKBD1IkDoF0b2i9GHzt5n6p B81SRmJOKJDTFP3Hq0+2Kl48O2uhBpp4mw+rTaVMIx5KVqKTAqNvt4kTx19wx5sW 0qFueu+Hnp87+hRY/DE9tQSAKslMrX/rFTGnv69u0LVE+Kz6KpZeZm1SbkcDHjHd kQUnUCw8nL/XzqgIqL4VojiUbSpH5WaM+OwLb/YCVhfaSQYb/ssMPWtoGA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net