$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/kIJmsag39iSx6lmJEkPBiT0BQv4.roa File: kIJmsag39iSx6lmJEkPBiT0BQv4.roa (raw, json) Hash identifier: kUo3qBtTT+uVchr5ViYIUOR0ptx8Cfst/Rnb5FoDJJM= Subject key identifier: 90:82:66:B1:A8:37:F6:24:B1:EA:59:89:12:43:C1:89:3D:01:42:FE Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Certificate serial: 0961 Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/kIJmsag39iSx6lmJEkPBiT0BQv4.roa Signing time: Mon 20 Jan 2025 01:30:16 +0000 ROA not before: Mon 20 Jan 2025 01:30:16 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 56040 IP address blocks: 202.46.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2401 (0x961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Validity Not Before: Jan 20 01:30:16 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=908266B1A837F624B1EA59891243C1893D0142FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:09:74:5a:47:f4:2e:94:b7:50:1a:c6:bd: 9e:6c:1d:08:5d:38:1d:e1:7c:ae:1a:3e:22:4a:47: 29:db:3b:6f:50:6a:31:a5:b3:82:17:1c:43:27:92: f5:42:c0:88:44:e2:75:9f:6b:75:fa:6a:1f:49:8d: 65:57:48:dc:42:9f:f9:4d:d6:31:2b:48:de:c8:82: 0d:46:ba:a1:c8:15:40:43:08:19:88:34:21:24:15: c8:8e:5e:24:b0:03:72:e0:93:d3:da:1a:d5:b4:ac: 26:24:d8:ee:01:09:6c:44:0c:55:d9:dc:ce:64:b6: bd:3e:40:d8:9f:99:43:0b:73:a1:ed:1d:fe:df:e4: d2:66:52:1f:27:df:55:5c:ae:99:b5:c3:63:0a:95: fc:c5:bf:b6:d0:0c:e5:ae:84:a6:c2:e9:7d:e5:ce: 85:30:54:e6:d4:79:a5:67:42:54:2c:af:11:d3:75: d2:db:c7:23:8c:cd:3d:5d:bc:4f:fb:aa:b7:49:08: 33:66:d9:93:21:a9:a7:98:7e:30:9d:b7:9c:5d:0e: 0f:17:4b:cc:f2:ca:f3:84:61:cd:cd:ca:e5:9d:f8: 6b:40:45:4b:4f:98:04:55:94:e6:8d:e0:84:3a:d8: 6c:22:4e:b9:b7:72:f2:91:42:b5:4e:fa:98:77:31: 33:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:82:66:B1:A8:37:F6:24:B1:EA:59:89:12:43:C1:89:3D:01:42:FE X509v3 Authority Key Identifier: keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/kIJmsag39iSx6lmJEkPBiT0BQv4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.46.224.0/22 Signature Algorithm: sha256WithRSAEncryption 83:91:65:63:87:b5:40:3c:d8:97:63:9f:3a:08:70:01:61:d9: 95:f1:53:d2:cb:b1:92:00:7c:91:8d:c2:0a:60:0e:fb:09:d9: 6d:32:00:82:9d:8b:5c:45:17:ad:2f:d4:3a:a5:03:db:23:33: 63:4b:55:5e:07:1b:85:8f:c0:ba:b1:89:df:71:fa:9e:35:b8: e6:ec:5a:0d:cd:62:26:a1:5c:92:95:a2:d3:e0:94:79:14:ee: f3:c4:4b:d1:0e:43:15:2b:e6:38:5b:9f:30:da:34:71:fc:06: 07:57:26:10:d3:bc:ed:46:1c:42:fd:37:d0:8f:f4:3f:c8:8b: 55:00:0a:4d:fc:45:cb:65:de:00:9b:f1:a5:cc:ca:84:4b:e2: 66:d1:6e:8d:12:9c:02:57:aa:5f:f7:a5:69:37:92:ac:7a:02: 29:f1:fa:84:e7:5b:f0:e5:cc:49:00:77:c2:da:6e:ab:29:0b: b5:b7:87:33:ce:c1:50:0f:22:5c:1a:8c:59:26:30:8b:9f:3c: eb:40:f8:89:bf:79:38:22:80:75:2c:ea:0b:4f:7e:31:25:0c: 57:66:d6:0d:9c:2c:00:a1:e0:c7:f7:62:d8:35:52:0b:bc:22: 69:08:37:09:dd:07:ff:5a:0e:ec:22:8a:27:48:dd:8a:50:ab: 4e:9c:da:a1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ix NjcwN0VBRjBCREZEMTMyNkFGRDlCREVDNkFGRkE2RTYzQkE5ODAeFw0yNTAxMjAw MTMwMTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkwODI2NkIxQTgzN0Y2 MjRCMUVBNTk4OTEyNDNDMTg5M0QwMTQyRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3HQl0Wkf0LpS3UBrGvZ5sHQhdOB3hfK4aPiJKRynbO29QajGl s4IXHEMnkvVCwIhE4nWfa3X6ah9JjWVXSNxCn/lN1jErSN7Igg1GuqHIFUBDCBmI NCEkFciOXiSwA3Lgk9PaGtW0rCYk2O4BCWxEDFXZ3M5ktr0+QNifmUMLc6HtHf7f 5NJmUh8n31Vcrpm1w2MKlfzFv7bQDOWuhKbC6X3lzoUwVObUeaVnQlQsrxHTddLb xyOMzT1dvE/7qrdJCDNm2ZMhqaeYfjCdt5xdDg8XS8zyyvOEYc3NyuWd+GtARUtP mARVlOaN4IQ62GwiTrm3cvKRQrVO+ph3MTOrAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUkIJmsag39iSx6lmJEkPBiT0BQv4wHwYDVR0jBBgwFoAUyxZwfq8L39Eyav2b 3sav+m5jupgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 NS95eFp3ZnE4TDM5RXlhdjJiM3Nhdi1tNWp1cGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3l4WndmcThMMzlFeWF2MmIzc2F2LW01anVwZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTUva0lKbXNhZzM5aVN4 NmxtSkVrUEJpVDBCUXY0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAsou4DANBgkqhkiG9w0BAQsFAAOCAQEAg5FlY4e1QDzYl2OfOghwAWHZlfFT 0suxkgB8kY3CCmAO+wnZbTIAgp2LXEUXrS/UOqUD2yMzY0tVXgcbhY/AurGJ33H6 njW45uxaDc1iJqFckpWi0+CUeRTu88RL0Q5DFSvmOFufMNo0cfwGB1cmENO87UYc Qv030I/0P8iLVQAKTfxFy2XeAJvxpczKhEviZtFujRKcAleqX/elaTeSrHoCKfH6 hOdb8OXMSQB3wtpuqykLtbeHM87BUA8iXBqMWSYwi58860D4ib95OCKAdSzqC09+ MSUMV2bWDZwsAKHgx/di2DVSC7wiaQg3Cd0H/1oO7CKKJ0jdilCrTpzaoQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net