$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/eeFl-6fErvCI48pt3UqIXwW-v3o.roa File: eeFl-6fErvCI48pt3UqIXwW-v3o.roa (raw, json) Hash identifier: T7yXyLiPll1C6ommCMy1RmKFIetPU8wjb8I/w9EXlWQ= Subject key identifier: 79:E1:65:FB:A7:C4:AE:F0:88:E3:CA:6D:DD:4A:88:5F:05:BE:BF:7A Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 0FB8 Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/eeFl-6fErvCI48pt3UqIXwW-v3o.roa Signing time: Fri 17 Jan 2025 01:27:54 +0000 ROA not before: Fri 17 Jan 2025 01:27:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 34549 IP address blocks: 123.98.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 01:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4024 (0xfb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Jan 17 01:27:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=79E165FBA7C4AEF088E3CA6DDD4A885F05BEBF7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:f4:1a:52:10:7a:ed:5b:29:7c:3e:f7:cc: 0b:84:2b:83:f7:0f:6f:c4:f2:50:e3:c2:6d:64:ea: 90:52:2a:00:03:17:34:20:73:3d:47:ee:a7:17:77: c6:3b:63:dd:f2:88:7d:1d:04:49:5c:63:fc:35:48: 97:ae:79:22:d6:ae:e1:db:a9:ea:d6:02:4e:2a:c2: 77:f4:75:73:46:d0:23:53:88:27:2f:6c:48:4d:1e: b5:e3:f2:b2:e7:34:f7:93:7d:d8:8f:87:de:42:0e: 43:52:f9:57:96:56:22:9e:73:9c:d7:01:35:10:9d: 2c:23:69:67:ab:40:89:26:92:b8:86:0c:e6:35:11: a8:fe:a1:93:0c:ea:1d:b9:0e:43:9a:c9:f8:7a:1b: 45:cf:47:79:33:5e:84:e1:9c:21:96:f3:77:81:0f: 33:d6:df:63:9b:31:32:26:ad:a9:1c:73:d7:3a:fd: a3:0e:e1:c2:89:83:86:16:4f:ac:10:b9:92:a9:3b: 3a:fc:3f:6a:21:48:d8:1c:22:b9:0f:ac:bc:0f:66: e3:a6:16:eb:79:88:7b:0d:b6:5e:d5:18:e1:99:cf: f8:86:7c:38:14:1f:16:1a:5c:54:3b:e7:d8:69:31: a7:ee:5b:f6:05:0a:4d:b4:30:f0:ce:a4:f6:f7:6e: d9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E1:65:FB:A7:C4:AE:F0:88:E3:CA:6D:DD:4A:88:5F:05:BE:BF:7A X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/eeFl-6fErvCI48pt3UqIXwW-v3o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.98.100.0/23 Signature Algorithm: sha256WithRSAEncryption 79:69:71:3a:75:b5:ab:80:9d:be:0c:10:8d:83:93:ab:1f:17: 0f:32:b6:35:46:44:2a:56:b3:f2:7a:1b:7e:89:e2:ca:47:a8: 39:ff:5e:e5:23:ec:b1:11:75:f3:e8:65:99:c6:1b:5c:50:e2: f9:9d:ff:80:ca:7d:0d:69:d4:7f:91:63:81:40:06:82:9d:e7: 02:53:97:3f:16:ae:4c:d9:28:57:b6:c9:81:98:3a:be:97:65: cf:a2:da:c5:5a:02:26:55:fc:a3:12:af:a9:be:dc:8e:b2:31: 1b:a1:3f:ea:d2:14:83:80:ae:e7:39:bf:14:e1:49:64:a4:f4: ba:34:90:42:23:7f:84:71:0f:7e:be:24:04:22:77:0e:d5:ed: e1:4e:a3:ab:19:2a:56:57:37:ad:5b:00:c0:f3:8f:8e:b1:be: 5b:f2:c7:80:23:52:a9:26:c9:f4:fd:af:d7:90:3c:95:02:b5: 82:11:48:8b:8f:74:ef:54:f4:fa:a0:50:f7:09:01:38:4d:ea: a2:63:94:bb:11:54:11:09:b6:1d:d3:6e:d4:d9:7e:3a:21:08: b0:62:ad:33:bf:49:ab:35:92:35:64:72:49:c8:85:b6:54:db: 36:d3:f8:c1:ad:a1:fb:58:5e:a0:43:9e:91:c5:81:f0:0a:c6: 25:85:a0:d4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICD7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAxMTcw MTI3NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc5RTE2NUZCQTdDNEFF RjA4OEUzQ0E2RERENEE4ODVGMDVCRUJGN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI+fQaUhB67VspfD73zAuEK4P3D2/E8lDjwm1k6pBSKgADFzQg cz1H7qcXd8Y7Y93yiH0dBElcY/w1SJeueSLWruHbqerWAk4qwnf0dXNG0CNTiCcv bEhNHrXj8rLnNPeTfdiPh95CDkNS+VeWViKec5zXATUQnSwjaWerQIkmkriGDOY1 Eaj+oZMM6h25DkOayfh6G0XPR3kzXoThnCGW83eBDzPW32ObMTImrakcc9c6/aMO 4cKJg4YWT6wQuZKpOzr8P2ohSNgcIrkPrLwPZuOmFut5iHsNtl7VGOGZz/iGfDgU HxYaXFQ759hpMafuW/YFCk20MPDOpPb3btkzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUeeFl+6fErvCI48pt3UqIXwW+v3owHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL2VlRmwtNmZFcnZDSTQ4 cHQzVXFJWHdXLXYzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAF7YmQwDQYJKoZIhvcNAQELBQADggEBAHlpcTp1tauAnb4MEI2Dk6sfFw8ytjVG RCpWs/J6G36J4spHqDn/XuUj7LERdfPoZZnGG1xQ4vmd/4DKfQ1p1H+RY4FABoKd 5wJTlz8WrkzZKFe2yYGYOr6XZc+i2sVaAiZV/KMSr6m+3I6yMRuhP+rSFIOAruc5 vxThSWSk9Lo0kEIjf4RxD36+JAQidw7V7eFOo6sZKlZXN61bAMDzj46xvlvyx4Aj UqkmyfT9r9eQPJUCtYIRSIuPdO9U9PqgUPcJAThN6qJjlLsRVBEJth3TbtTZfjoh CLBirTO/Sas1kjVkcknIhbZU2zbT+MGtoftYXqBDnpHFgfAKxiWFoNQ= -----END CERTIFICATE-----Generated at Sun Apr 27 21:44:49 2025 by rpki-client on console.sobornost.net