$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3146/tIV9RWQFOPSIEbmylntj-dw9FVk.roa File: tIV9RWQFOPSIEbmylntj-dw9FVk.roa (raw, json) Hash identifier: rr3yfE6EWoU7TL6ZcoQXRnQx6iBCuWFMUZuto0vWr5M= Subject key identifier: B4:85:7D:45:64:05:38:F4:88:11:B9:B2:96:7B:63:F9:DC:3D:15:59 Certificate issuer: /CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB Certificate serial: 3030 Authority key identifier: C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/tIV9RWQFOPSIEbmylntj-dw9FVk.roa Signing time: Wed 09 Apr 2025 20:06:35 +0000 ROA not before: Wed 09 Apr 2025 20:06:35 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 151492 IP address blocks: 103.186.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12336 (0x3030) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB Validity Not Before: Apr 9 20:06:35 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=B4857D45640538F48811B9B2967B63F9DC3D1559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4c:2d:0c:0f:76:e2:38:0e:7a:c9:56:35:70: 55:38:14:84:42:93:6d:2d:b7:a5:27:73:70:86:71: 29:8b:36:bc:e0:ab:0a:67:fd:6b:67:b8:73:e8:02: 28:f7:c0:d6:c1:1f:45:70:14:85:5d:1e:9f:f2:44: de:44:11:a0:8d:17:12:8a:ce:37:ce:ce:10:ab:6a: 5a:17:dd:4c:41:d4:e6:b6:85:27:45:d5:43:30:53: 0f:15:1c:f2:6f:ac:e1:79:dd:ce:af:0a:31:06:d2: 6e:1c:20:3f:35:3b:38:05:c2:54:24:03:70:e5:b7: e8:38:ed:8a:64:2b:97:b0:47:31:c6:4e:d4:d5:76: a1:31:14:3a:ca:48:48:d8:5e:1e:74:b1:7e:4f:45: ce:d2:a4:6d:70:6f:f4:0b:72:42:39:35:8d:db:88: e7:22:4c:4a:89:02:c7:c9:d7:6c:fe:7b:c5:3d:41: be:0e:e3:97:18:0c:f0:0f:c1:08:52:c9:37:22:40: e6:b2:00:75:93:62:78:ed:d3:80:5a:63:d8:52:c7: c4:e5:af:dc:b8:12:2c:a4:0c:3d:4f:35:6f:5d:1e: 9e:1f:49:97:f5:f7:c5:c3:ea:c2:a4:94:7f:6e:38: 73:87:5f:64:f5:5f:54:ad:59:76:9b:eb:83:77:ab: d1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:7D:45:64:05:38:F4:88:11:B9:B2:96:7B:63:F9:DC:3D:15:59 X509v3 Authority Key Identifier: keyid:C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/tIV9RWQFOPSIEbmylntj-dw9FVk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.186.136.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:4e:2d:e6:1b:7f:eb:d3:61:d4:e9:9a:8e:b3:f5:36:a3:ea: 67:41:68:8d:03:7a:50:82:ce:c9:4f:91:7a:29:34:29:44:4f: ed:ea:a2:da:c8:99:f6:0a:30:e1:7f:ed:83:1f:06:ce:0c:66: 69:6a:0f:2b:a4:b5:cd:c3:cf:c9:3b:92:5f:fa:a9:37:00:5f: 96:1b:48:f5:ba:52:7e:0c:74:ad:a9:11:5e:85:6e:36:7b:86: e4:e0:d8:56:51:bf:65:d5:04:f6:cd:47:63:c7:a7:20:6d:72: a5:26:41:27:2c:37:57:36:7b:c8:b8:de:a0:35:b5:9e:96:30: 65:9d:6e:09:3c:c7:2f:ef:26:57:aa:d2:67:ca:06:c8:b3:6b: ad:e9:a2:9d:7a:66:68:54:8d:61:38:08:8c:f2:47:35:bc:fa: a0:34:f8:cc:83:83:08:1f:e3:11:e2:bc:b1:84:49:96:3e:ff: 6f:b7:22:62:fb:80:95:e7:f1:12:3e:d5:88:a6:69:f2:c3:ab: e3:dc:9d:8a:16:25:77:11:71:51:47:7f:23:d5:90:c1:45:a9: e3:07:da:ad:11:78:4e:2d:c4:72:06:44:5c:a8:8c:7d:70:db: 61:f6:fd:34:da:eb:84:8e:b5:27:60:87:aa:3c:8e:a9:22:6d: 27:88:e5:58 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICMDAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzFE RTI5REY5RUNCOEJEQUNCRkJFMUZEREI4NkRGMjk2QjY5MDhFQjAeFw0yNTA0MDky MDA2MzVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEI0ODU3RDQ1NjQwNTM4 RjQ4ODExQjlCMjk2N0I2M0Y5REMzRDE1NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQTC0MD3biOA56yVY1cFU4FIRCk20tt6Unc3CGcSmLNrzgqwpn /WtnuHPoAij3wNbBH0VwFIVdHp/yRN5EEaCNFxKKzjfOzhCraloX3UxB1Oa2hSdF 1UMwUw8VHPJvrOF53c6vCjEG0m4cID81OzgFwlQkA3Dlt+g47YpkK5ewRzHGTtTV dqExFDrKSEjYXh50sX5PRc7SpG1wb/QLckI5NY3biOciTEqJAsfJ12z+e8U9Qb4O 45cYDPAPwQhSyTciQOayAHWTYnjt04BaY9hSx8Tlr9y4EiykDD1PNW9dHp4fSZf1 98XD6sKklH9uOHOHX2T1X1StWXab64N3q9EbAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUtIV9RWQFOPSIEbmylntj+dw9FVkwHwYDVR0jBBgwFoAUwd4p357Li9rL++H9 24bfKWtpCOswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0 Ni93ZDRwMzU3TGk5ckwtLUg5MjRiZktXdHBDT3MuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dkNHAzNTdMaTlyTC0tSDkyNGJmS1d0cENPcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDYvdElWOVJXUUZPUFNJ RWJteWxudGotZHc5RlZrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWe6iDANBgkqhkiG9w0BAQsFAAOCAQEACk4t5ht/69Nh1OmajrP1NqPqZ0Fo jQN6UILOyU+Reik0KURP7eqi2siZ9gow4X/tgx8GzgxmaWoPK6S1zcPPyTuSX/qp NwBflhtI9bpSfgx0rakRXoVuNnuG5ODYVlG/ZdUE9s1HY8enIG1ypSZBJyw3VzZ7 yLjeoDW1npYwZZ1uCTzHL+8mV6rSZ8oGyLNrreminXpmaFSNYTgIjPJHNbz6oDT4 zIODCB/jEeK8sYRJlj7/b7ciYvuAlefxEj7ViKZp8sOr49ydihYldxFxUUd/I9WQ wUWp4wfarRF4Ti3EcgZEXKiMfXDbYfb9NNrrhI61J2CHqjyOqSJtJ4jlWA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net