$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/q-rvnbL1WKSM_nVnVRknygSMSiQ.roa File: q-rvnbL1WKSM_nVnVRknygSMSiQ.roa (raw, json) Hash identifier: UWEXP5Sn4Z/wm1B6yMeJW0wEMyr2vbKNqioK2UZumYI= Subject key identifier: AB:EA:EF:9D:B2:F5:58:A4:8C:FE:75:67:55:19:27:CA:04:8C:4A:24 Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 10DF Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/q-rvnbL1WKSM_nVnVRknygSMSiQ.roa Signing time: Sun 09 Mar 2025 16:19:24 +0000 ROA not before: Sun 09 Mar 2025 16:19:24 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 62387 IP address blocks: 101.232.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 01:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4319 (0x10df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Mar 9 16:19:24 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=ABEAEF9DB2F558A48CFE7567551927CA048C4A24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:56:cf:6e:85:1e:60:e2:34:9a:01:63:33:2b: dc:ff:2e:15:ee:75:3d:35:e3:ec:9d:db:1e:32:a4: 5f:89:d1:c0:cd:72:57:6c:5d:eb:b7:62:fa:f5:c4: 35:da:a3:a9:74:ed:1c:0b:62:dd:20:db:d7:e8:0b: 77:04:13:17:2d:25:b6:77:b1:a3:e8:77:de:d4:f5: 1b:3b:1b:ad:d1:4c:2e:b7:c6:88:17:0c:70:71:24: 07:32:da:5b:11:c8:f8:80:56:aa:00:5c:47:4c:0d: 84:cc:ac:a5:4f:66:14:aa:79:be:30:4f:fb:d5:56: eb:10:34:ab:be:cf:f0:09:f8:44:6e:86:ab:e2:fb: 2d:b5:2b:10:ca:c6:88:fa:ac:dc:8d:ef:04:6e:88: 68:8b:d0:6f:8e:74:92:31:6e:3f:3a:c2:83:05:b6: 88:5f:d4:42:aa:94:81:e4:a4:1d:49:b9:b0:74:f6: b2:89:49:ed:93:11:16:77:29:5b:30:01:b7:5d:3d: 9a:e7:08:b9:28:e8:4e:dd:07:ff:ba:73:f9:dc:5d: 71:d2:38:d1:35:a0:ba:9c:39:4a:f5:2b:a2:b4:16: e1:fc:aa:2b:96:e0:e1:8a:b8:20:34:4a:98:bc:5c: aa:84:6f:10:43:ad:0c:c7:28:5f:64:10:b7:d4:39: ea:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EA:EF:9D:B2:F5:58:A4:8C:FE:75:67:55:19:27:CA:04:8C:4A:24 X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/q-rvnbL1WKSM_nVnVRknygSMSiQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.232.24.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:a6:59:4b:90:a9:f6:3b:23:4a:cd:a0:51:a8:0d:02:b8:00: af:5b:85:f1:a9:39:5e:a5:88:3c:43:eb:72:77:39:05:92:4b: a6:6e:9f:9b:9c:f6:04:e9:48:5a:d5:c7:4c:17:d7:98:14:bf: b6:2a:34:13:46:48:af:e3:b3:be:c8:72:3a:7b:35:02:69:27: e2:29:38:ce:4f:8b:c1:46:fb:fc:fe:4b:d6:ce:44:7e:73:9d: da:16:69:98:be:25:88:2d:32:7d:42:d9:a2:75:3a:ab:55:ba: 62:39:03:27:0c:25:dd:25:6b:29:1f:0f:a9:6b:f2:e3:b0:ac: cf:54:da:56:46:00:f1:65:98:82:e2:2e:3d:86:e1:f0:54:bf: 9c:d6:94:ff:d2:49:bd:8f:97:c8:94:73:3d:3e:fe:31:48:f2: 57:15:23:da:ab:ba:54:d0:4d:ef:77:d4:00:ff:07:f9:83:24: ef:13:19:62:07:bc:e6:42:ed:ed:7a:cf:83:fb:a8:06:43:8f: 04:91:70:f8:83:f2:20:b5:09:bb:cb:a5:9a:8d:88:0d:10:c3: aa:fa:c7:52:63:c5:da:3e:78:78:40:78:78:3b:f4:ce:f3:f1: 8d:1c:71:8a:b0:4d:6c:b2:e0:55:c5:7c:f3:20:c0:b7:6b:fb: 46:c7:62:26 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAzMDkx NjE5MjRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFCRUFFRjlEQjJGNTU4 QTQ4Q0ZFNzU2NzU1MTkyN0NBMDQ4QzRBMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtVs9uhR5g4jSaAWMzK9z/LhXudT014+yd2x4ypF+J0cDNclds Xeu3Yvr1xDXao6l07RwLYt0g29foC3cEExctJbZ3saPod97U9Rs7G63RTC63xogX DHBxJAcy2lsRyPiAVqoAXEdMDYTMrKVPZhSqeb4wT/vVVusQNKu+z/AJ+ERuhqvi +y21KxDKxoj6rNyN7wRuiGiL0G+OdJIxbj86woMFtohf1EKqlIHkpB1JubB09rKJ Se2TERZ3KVswAbddPZrnCLko6E7dB/+6c/ncXXHSONE1oLqcOUr1K6K0FuH8qiuW 4OGKuCA0Spi8XKqEbxBDrQzHKF9kELfUOeoJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUq+rvnbL1WKSM/nVnVRknygSMSiQwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL3EtcnZuYkwxV0tTTV9u Vm5WUmtueWdTTVNpUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJl6BgwDQYJKoZIhvcNAQELBQADggEBAIymWUuQqfY7I0rNoFGoDQK4AK9bhfGp OV6liDxD63J3OQWSS6Zun5uc9gTpSFrVx0wX15gUv7YqNBNGSK/js77Icjp7NQJp J+IpOM5Pi8FG+/z+S9bORH5zndoWaZi+JYgtMn1C2aJ1OqtVumI5AycMJd0laykf D6lr8uOwrM9U2lZGAPFlmILiLj2G4fBUv5zWlP/SSb2Pl8iUcz0+/jFI8lcVI9qr ulTQTe931AD/B/mDJO8TGWIHvOZC7e16z4P7qAZDjwSRcPiD8iC1CbvLpZqNiA0Q w6r6x1Jjxdo+eHhAeHg79M7z8Y0ccYqwTWyy4FXFfPMgwLdr+0bHYiY= -----END CERTIFICATE-----Generated at Sun Apr 27 21:44:49 2025 by rpki-client on console.sobornost.net