$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/7soASTit_KMcNFvMOikZ9NnCecE.roa File: 7soASTit_KMcNFvMOikZ9NnCecE.roa (raw, json) Hash identifier: gXF2OOvsm81nvcaC7m48HSQ5U+MHYj9ddjZhIYcHdHw= Subject key identifier: EE:CA:00:49:38:AD:FC:A3:1C:34:5B:CC:3A:29:19:F4:D9:C2:79:C1 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 189C Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/7soASTit_KMcNFvMOikZ9NnCecE.roa Signing time: Fri 17 Jan 2025 01:25:19 +0000 ROA not before: Fri 17 Jan 2025 01:25:19 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138527 IP address blocks: 45.252.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6300 (0x189c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:19 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=EECA004938ADFCA31C345BCC3A2919F4D9C279C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:56:b9:e8:60:ad:95:c4:59:61:c7:a6:43: 95:46:78:b2:16:4f:82:e6:5e:13:88:fe:25:8a:43: 8b:d2:b2:16:39:97:2a:29:32:de:bc:5a:26:20:5a: c3:4d:02:24:39:78:d9:f4:16:99:77:b2:13:e7:41: e5:ea:af:30:fc:3c:b1:6b:a8:60:58:59:ca:a2:e7: c0:b2:6c:c6:52:b8:ab:da:12:e8:1c:16:14:5f:dc: 65:c2:2e:e9:ff:7c:2e:4d:e4:b1:09:2b:c5:ca:0a: 91:aa:c8:d8:77:e8:cd:4f:7f:f0:91:6f:18:33:eb: 42:28:1a:8b:4f:ae:8e:dd:93:6b:09:7b:db:48:f5: 7c:1f:37:7c:23:19:88:d0:d2:ad:a8:35:08:81:b9: 8f:a0:cf:92:a7:53:c8:84:d7:8b:3d:95:f7:22:81: cc:97:0a:7b:f4:02:b1:94:2b:ea:5f:35:80:dd:90: 38:2f:f4:5a:9c:f9:5f:bc:45:e5:e1:48:fd:14:b6: c1:41:e1:fd:d4:2b:e2:8a:41:3d:b9:ec:2e:9d:e1: 0e:9f:aa:f3:f2:14:1d:c8:18:cf:07:b3:ca:73:e2: 26:e9:67:1b:f9:5b:31:07:1b:aa:e3:7a:6f:2b:1e: 18:76:00:0d:f8:8a:5a:2f:46:72:f8:15:7c:5d:9d: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CA:00:49:38:AD:FC:A3:1C:34:5B:CC:3A:29:19:F4:D9:C2:79:C1 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/7soASTit_KMcNFvMOikZ9NnCecE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.40.0/22 Signature Algorithm: sha256WithRSAEncryption 32:37:e0:6c:60:eb:26:ee:66:62:82:67:f6:19:23:32:97:91: aa:19:1d:cc:b7:23:f6:df:59:c0:4e:61:08:3d:5e:e8:4d:cb: 96:86:03:4b:a7:da:19:6b:b5:49:4d:4d:c1:e0:5e:d3:61:4e: ec:8e:a4:bb:be:01:fd:a2:7d:02:ac:56:d0:2f:1c:12:54:59: 8f:88:00:13:ab:74:e9:4c:4d:d4:58:83:9a:8f:04:a1:32:6a: 4c:e2:74:97:77:77:d7:7c:7b:ef:f6:7a:92:a9:5f:99:fd:9d: 91:32:fd:32:ca:8e:c9:bc:40:26:a1:1c:01:e4:cc:b4:f3:aa: 8b:01:1e:0d:7c:09:dd:62:68:71:01:20:84:70:cc:f8:a5:36: 63:d2:36:40:77:10:ce:21:18:33:ea:42:87:5b:22:da:60:7a: fc:87:36:fc:15:ac:fb:5c:03:06:74:1d:bf:93:b4:24:7b:7b: df:58:aa:69:00:c1:b6:15:b2:23:dc:3e:fe:26:b9:79:73:0d: 62:99:51:ab:98:e9:3c:e2:cf:00:c7:d9:18:bd:56:ab:ae:3d: 58:d3:11:45:81:b1:7c:74:59:cc:e0:be:5e:12:01:78:73:4a: 50:46:5a:fc:d2:69:bb:88:50:26:7b:b4:f8:0e:da:df:77:5b: 65:b1:5e:b6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVFQ0EwMDQ5MzhBREZD QTMxQzM0NUJDQzNBMjkxOUY0RDlDMjc5QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBNFa56GCtlcRZYcemQ5VGeLIWT4LmXhOI/iWKQ4vSshY5lyop Mt68WiYgWsNNAiQ5eNn0Fpl3shPnQeXqrzD8PLFrqGBYWcqi58CybMZSuKvaEugc FhRf3GXCLun/fC5N5LEJK8XKCpGqyNh36M1Pf/CRbxgz60IoGotPro7dk2sJe9tI 9XwfN3wjGYjQ0q2oNQiBuY+gz5KnU8iE14s9lfcigcyXCnv0ArGUK+pfNYDdkDgv 9Fqc+V+8ReXhSP0UtsFB4f3UK+KKQT257C6d4Q6fqvPyFB3IGM8Hs8pz4ibpZxv5 WzEHG6rjem8rHhh2AA34ilovRnL4FXxdnUclAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU7soASTit/KMcNFvMOikZ9NnCecEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3Lzdzb0FTVGl0X0tNY05G dk1PaWtaOU5uQ2VjRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/CgwDQYJKoZIhvcNAQELBQADggEBADI34Gxg6ybuZmKCZ/YZIzKXkaoZHcy3 I/bfWcBOYQg9XuhNy5aGA0un2hlrtUlNTcHgXtNhTuyOpLu+Af2ifQKsVtAvHBJU WY+IABOrdOlMTdRYg5qPBKEyakzidJd3d9d8e+/2epKpX5n9nZEy/TLKjsm8QCah HAHkzLTzqosBHg18Cd1iaHEBIIRwzPilNmPSNkB3EM4hGDPqQodbItpgevyHNvwV rPtcAwZ0Hb+TtCR7e99YqmkAwbYVsiPcPv4muXlzDWKZUauY6TzizwDH2Ri9Vquu PVjTEUWBsXx0Wczgvl4SAXhzSlBGWvzSabuIUCZ7tPgO2t93W2WxXrY= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:29 2025 by rpki-client on console.sobornost.net