$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/yk3GyHwtB7PVjMLc9VdfNU_VF-A.roa File: yk3GyHwtB7PVjMLc9VdfNU_VF-A.roa (raw, json) Hash identifier: rqIckEn+o7RYP0kD8h+heC+QXExHnUVNmjz9nzrsV8k= Subject key identifier: CA:4D:C6:C8:7C:2D:07:B3:D5:8C:C2:DC:F5:57:5F:35:4F:D5:17:E0 Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 10D7 Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/yk3GyHwtB7PVjMLc9VdfNU_VF-A.roa Signing time: Sun 09 Mar 2025 16:18:18 +0000 ROA not before: Sun 09 Mar 2025 16:18:18 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 62387 IP address blocks: 101.232.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 20:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4311 (0x10d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Mar 9 16:18:18 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=CA4DC6C87C2D07B3D58CC2DCF5575F354FD517E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:99:2c:9b:48:52:9d:19:84:2b:3e:db:79:7d: 4f:ac:74:36:3d:e5:5b:ed:2e:c7:18:fc:f6:c2:bb: d0:d4:ad:27:db:d5:e4:e5:a7:c4:ec:74:c7:dc:71: f6:3c:33:01:c7:b2:5c:2a:00:7f:b1:db:80:19:1d: ff:92:49:8d:6d:04:78:8d:c1:62:30:59:21:0a:8f: 86:7c:36:8e:2d:4a:7a:ed:0e:90:3c:14:5b:a5:20: d1:7d:e4:1d:03:a5:df:e4:5c:05:5c:c9:ea:af:85: aa:0e:b9:74:74:9d:59:81:2a:ef:14:40:9e:51:02: 1c:43:f2:91:f3:8e:94:78:fb:cc:b0:2f:72:20:37: ac:ce:23:1d:8e:d1:ae:2f:f5:0e:72:36:89:f7:64: 2a:46:e0:62:c2:14:9e:eb:24:b0:d9:e0:d1:a7:bc: 46:47:9d:36:29:00:8f:76:12:be:35:d6:0c:c3:9e: ca:a9:71:a5:d0:b4:b2:69:49:03:4b:b6:60:57:e4: 1b:79:61:32:2f:77:34:9f:59:65:38:2b:93:40:2c: 8a:91:67:3c:7e:39:2e:0b:bc:38:c4:e6:63:34:1b: f6:ef:ce:de:56:c4:af:0b:47:eb:32:91:db:a9:f4: 61:11:26:71:b8:79:da:50:b6:2a:cc:ab:80:81:17: 20:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4D:C6:C8:7C:2D:07:B3:D5:8C:C2:DC:F5:57:5F:35:4F:D5:17:E0 X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/yk3GyHwtB7PVjMLc9VdfNU_VF-A.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.232.8.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:be:04:ab:4b:2c:60:b1:9e:29:e8:f8:77:62:a6:84:9d:eb: 20:54:01:89:de:f1:bc:2e:1f:29:9c:85:a5:e7:14:3d:1a:29: 23:de:12:5b:84:6e:6b:19:43:78:44:2a:76:82:71:7a:af:11: 23:24:26:d4:d9:16:4a:05:21:e6:c1:46:b1:50:a9:2a:c5:bb: cd:39:71:ea:90:7a:4b:fb:23:d6:43:16:11:08:04:ae:b9:a4: e7:e7:0c:c7:db:ab:6f:0b:77:40:12:cc:de:ae:29:c0:9f:06: c7:c6:82:fb:bb:ee:ec:62:4f:5e:63:7c:34:a1:97:57:2f:f4: 08:3c:e8:bd:af:5d:ce:77:0a:70:04:8e:94:03:db:6f:e2:d5: 04:8e:a0:97:e2:80:97:84:50:18:79:54:97:e7:a6:e5:85:54: 26:b0:0e:ca:65:05:b1:83:5c:49:7f:81:be:ff:2e:e4:d9:78: 1a:1d:32:54:83:93:63:40:ac:4d:67:01:13:bd:79:1a:b1:bc: 1b:5e:ad:ad:90:02:18:3f:87:0b:77:69:e5:d7:7a:39:56:37: 0f:c4:26:56:47:0b:5e:38:3d:7a:6b:9c:8c:e6:bb:38:99:b6: cd:d1:69:cb:47:a2:69:5c:68:8b:40:c5:a7:69:d4:09:5e:d8: 78:38:9e:35 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICENcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAzMDkx NjE4MThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKENBNERDNkM4N0MyRDA3 QjNENThDQzJEQ0Y1NTc1RjM1NEZENTE3RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYmSybSFKdGYQrPtt5fU+sdDY95VvtLscY/PbCu9DUrSfb1eTl p8TsdMfccfY8MwHHslwqAH+x24AZHf+SSY1tBHiNwWIwWSEKj4Z8No4tSnrtDpA8 FFulINF95B0Dpd/kXAVcyeqvhaoOuXR0nVmBKu8UQJ5RAhxD8pHzjpR4+8ywL3Ig N6zOIx2O0a4v9Q5yNon3ZCpG4GLCFJ7rJLDZ4NGnvEZHnTYpAI92Er411gzDnsqp caXQtLJpSQNLtmBX5Bt5YTIvdzSfWWU4K5NALIqRZzx+OS4LvDjE5mM0G/bvzt5W xK8LR+sykdup9GERJnG4edpQtirMq4CBFyCbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUyk3GyHwtB7PVjMLc9VdfNU/VF+AwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL3lrM0d5SHd0QjdQVmpN TGM5VmRmTlVfVkYtQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJl6AgwDQYJKoZIhvcNAQELBQADggEBAHu+BKtLLGCxnino+HdipoSd6yBUAYne 8bwuHymchaXnFD0aKSPeEluEbmsZQ3hEKnaCcXqvESMkJtTZFkoFIebBRrFQqSrF u805ceqQekv7I9ZDFhEIBK65pOfnDMfbq28Ld0ASzN6uKcCfBsfGgvu77uxiT15j fDShl1cv9Ag86L2vXc53CnAEjpQD22/i1QSOoJfigJeEUBh5VJfnpuWFVCawDspl BbGDXEl/gb7/LuTZeBodMlSDk2NArE1nARO9eRqxvBtera2QAhg/hwt3aeXXejlW Nw/EJlZHC144PXprnIzmuziZts3RactHomlcaItAxadp1Ale2Hg4njU= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:28 2025 by rpki-client on console.sobornost.net