$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/CXx0RjbHf90qFoYv9cXuI37Bhkc.roa File: CXx0RjbHf90qFoYv9cXuI37Bhkc.roa (raw, json) Hash identifier: GiZdrnzEpyGP+Xj8UAJxVX3Y8MGpWjA1r6jTnCqMtCs= Subject key identifier: 09:7C:74:46:36:C7:7F:DD:2A:16:86:2F:F5:C5:EE:23:7E:C1:86:47 Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Certificate serial: 0AF6 Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/CXx0RjbHf90qFoYv9cXuI37Bhkc.roa Signing time: Fri 11 Apr 2025 01:19:40 +0000 ROA not before: Fri 11 Apr 2025 01:19:40 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 37968 IP address blocks: 202.46.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2806 (0xaf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Validity Not Before: Apr 11 01:19:40 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=097C744636C77FDD2A16862FF5C5EE237EC18647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:ae:2c:f4:f7:04:20:1e:a0:4e:60:8e:b0: 21:79:8a:5e:e6:75:64:6b:4b:3c:dd:41:69:a2:24: f7:8b:4e:31:e2:36:61:8b:b7:99:f8:7e:4a:76:a2: 81:54:07:e7:72:75:22:39:1c:c5:8b:a8:a1:a8:50: 29:3c:a9:95:43:49:75:ee:a0:12:1f:4d:a1:3a:7f: fd:21:8d:16:81:00:b8:e7:30:00:80:cd:15:82:7a: 70:2c:a0:40:f9:47:92:ba:85:4f:f7:83:f2:8b:a6: dc:1f:0d:01:16:fc:f3:be:5c:26:84:32:89:15:9e: c6:e9:1c:0f:5d:6c:0d:a7:7c:5a:0e:24:84:e3:4f: bc:38:85:bf:ca:3b:c3:12:ab:20:e7:11:5e:83:ad: e7:8d:20:52:cf:7c:8c:64:12:28:60:ed:52:8c:23: 5b:7d:d7:3d:4b:07:ee:c1:19:f7:02:12:72:4f:11: 32:3e:e4:ae:d9:17:1b:91:16:47:77:0a:da:8d:2c: 1e:c5:75:e0:56:c1:42:c9:6c:d0:01:56:34:22:a1: 84:2a:4b:b8:a4:d8:b9:65:06:17:d3:d0:ee:38:60: 1b:f4:21:e4:97:93:b7:fb:91:82:01:83:9a:44:a3: 6b:92:cb:a2:07:8a:49:d6:f1:d2:52:7d:05:f5:f1: d4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7C:74:46:36:C7:7F:DD:2A:16:86:2F:F5:C5:EE:23:7E:C1:86:47 X509v3 Authority Key Identifier: keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/CXx0RjbHf90qFoYv9cXuI37Bhkc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.46.232.0/23 Signature Algorithm: sha256WithRSAEncryption 14:b8:03:f9:07:85:7a:39:0e:01:c0:68:f3:1e:ea:30:a7:2b: 12:b6:4b:ea:8a:34:0b:91:89:07:8d:19:af:07:ed:de:78:b3: 4a:9b:46:4d:19:f8:15:e3:26:cb:94:5e:ba:e6:1f:d7:82:c8: 9e:e6:0d:36:1b:b2:1a:1a:01:2b:40:4b:1f:e9:f9:37:ff:1b: b8:36:fe:e1:c1:dc:1e:ab:8e:64:44:37:e5:9c:7f:59:24:75: 6a:e3:14:69:b2:e2:d3:76:17:94:9c:33:8d:db:a1:c4:53:59: 5a:71:58:e6:59:bd:57:81:85:29:5b:c4:f7:5c:3c:91:fc:8d: 9b:9c:ef:e2:9e:46:bd:8e:38:b0:9c:61:c3:ba:6c:fa:e3:72: 7c:d9:3e:de:a0:92:e1:24:c6:70:87:98:67:47:23:66:43:e0: 17:55:94:7f:9f:c6:91:51:32:a9:74:2b:7c:ea:53:3a:89:1e: c6:8a:3b:8b:b4:61:e0:a5:33:7b:5c:9c:7f:70:e1:73:77:c3: cf:ee:75:46:39:08:e5:40:a2:93:50:64:0f:09:0f:8f:5f:4f: e8:f4:3c:ea:39:05:40:e2:a9:a4:e0:10:f1:f0:90:78:cf:f6: d2:62:76:92:9b:06:dd:d0:b6:7e:d6:50:5f:1b:61:22:dd:b7: 9d:cb:39:b0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCvYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ix NjcwN0VBRjBCREZEMTMyNkFGRDlCREVDNkFGRkE2RTYzQkE5ODAeFw0yNTA0MTEw MTE5NDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDA5N0M3NDQ2MzZDNzdG REQyQTE2ODYyRkY1QzVFRTIzN0VDMTg2NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6v64s9PcEIB6gTmCOsCF5il7mdWRrSzzdQWmiJPeLTjHiNmGL t5n4fkp2ooFUB+dydSI5HMWLqKGoUCk8qZVDSXXuoBIfTaE6f/0hjRaBALjnMACA zRWCenAsoED5R5K6hU/3g/KLptwfDQEW/PO+XCaEMokVnsbpHA9dbA2nfFoOJITj T7w4hb/KO8MSqyDnEV6DreeNIFLPfIxkEihg7VKMI1t91z1LB+7BGfcCEnJPETI+ 5K7ZFxuRFkd3CtqNLB7FdeBWwULJbNABVjQioYQqS7ik2LllBhfT0O44YBv0IeSX k7f7kYIBg5pEo2uSy6IHiknW8dJSfQX18dQ5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUCXx0RjbHf90qFoYv9cXuI37BhkcwHwYDVR0jBBgwFoAUyxZwfq8L39Eyav2b 3sav+m5jupgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 NS95eFp3ZnE4TDM5RXlhdjJiM3Nhdi1tNWp1cGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3l4WndmcThMMzlFeWF2MmIzc2F2LW01anVwZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTUvQ1h4MFJqYkhmOTBx Rm9ZdjljWHVJMzdCaGtjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAcou6DANBgkqhkiG9w0BAQsFAAOCAQEAFLgD+QeFejkOAcBo8x7qMKcrErZL 6oo0C5GJB40Zrwft3nizSptGTRn4FeMmy5ReuuYf14LInuYNNhuyGhoBK0BLH+n5 N/8buDb+4cHcHquOZEQ35Zx/WSR1auMUabLi03YXlJwzjduhxFNZWnFY5lm9V4GF KVvE91w8kfyNm5zv4p5GvY44sJxhw7ps+uNyfNk+3qCS4STGcIeYZ0cjZkPgF1WU f5/GkVEyqXQrfOpTOokexoo7i7Rh4KUze1ycf3Dhc3fDz+51RjkI5UCik1BkDwkP j19P6PQ86jkFQOKppOAQ8fCQeM/20mJ2kpsG3dC2ftZQXxthIt23ncs5sA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net