$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/N-3f8J-OLMHDDdIT3rzr3uk9xt0.roa File: N-3f8J-OLMHDDdIT3rzr3uk9xt0.roa (raw, json) Hash identifier: A/9MdpgdeMuKkQwQg4TgR/vu+avZEe9epdsX4J+fRzw= Subject key identifier: 37:ED:DF:F0:9F:8E:2C:C1:C3:0D:D2:13:DE:BC:EB:DE:E9:3D:C6:DD Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1903 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/N-3f8J-OLMHDDdIT3rzr3uk9xt0.roa Signing time: Fri 17 Jan 2025 01:25:55 +0000 ROA not before: Fri 17 Jan 2025 01:25:55 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 24373 IP address blocks: 103.221.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 08:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6403 (0x1903) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:55 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=37EDDFF09F8E2CC1C30DD213DEBCEBDEE93DC6DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:c7:2e:bf:89:8d:55:e2:43:eb:88:16:97: da:cb:e2:bc:7e:9d:24:4b:70:42:56:7c:dc:f8:80: 48:e9:55:d6:98:24:f7:d9:86:35:05:40:54:f9:b3: f3:9e:25:d3:b5:e5:8f:34:52:07:be:a0:6e:06:96: 71:c1:62:4c:a9:7d:90:3c:3f:5a:d9:00:3b:39:ec: a5:86:24:0e:92:81:5f:6f:32:d8:8b:4b:d8:79:2f: f4:a5:e9:2f:c4:08:85:6a:b5:f1:10:50:8a:d4:e7: 2d:07:65:68:ad:40:76:1b:81:2d:ac:51:22:f7:73: 67:23:b8:0a:6c:0c:f2:fd:27:6f:40:ba:f3:cd:07: e5:e0:a8:29:9c:81:be:e9:67:54:b4:92:72:d5:fe: 7a:4a:a5:9e:27:89:b9:48:24:78:2c:b3:5f:96:1c: 42:a1:7a:26:45:cc:34:f3:ae:ed:80:51:b2:11:59: 46:9e:6e:6e:bb:c9:da:e1:97:ac:2d:77:bf:93:23: 62:f2:ba:4a:82:7c:9f:51:bf:e4:ee:68:91:2c:9d: 8d:38:8c:56:50:46:89:df:4d:c6:d0:f6:89:3f:41: 8b:05:a4:a7:66:34:e6:94:19:08:25:2f:d7:c5:01: bb:f4:4c:d1:54:9d:b7:c2:ed:5f:af:6a:28:51:0a: 38:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:ED:DF:F0:9F:8E:2C:C1:C3:0D:D2:13:DE:BC:EB:DE:E9:3D:C6:DD X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/N-3f8J-OLMHDDdIT3rzr3uk9xt0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.40.0/22 Signature Algorithm: sha256WithRSAEncryption af:af:3a:df:88:3a:93:29:f3:20:99:69:bc:16:1a:f3:a4:b7: a8:88:19:af:f0:e8:a7:27:f1:15:4c:2e:67:51:3f:a9:78:45: b1:d4:0a:c9:e4:e0:dc:d0:63:47:ec:99:2a:d2:02:9f:00:e9: 1d:94:ec:17:17:8d:af:c2:31:2b:bc:98:bf:c7:9c:f1:37:7c: 3d:0e:96:a7:96:c8:94:6d:f8:3a:18:bf:1c:2d:e1:09:a6:39: 17:7e:5f:09:b6:03:d1:f1:74:65:ad:8a:52:72:90:24:81:47: 84:ac:66:73:bd:d6:eb:83:7e:8f:3c:7d:96:91:4a:98:67:00: d3:30:89:85:27:36:cd:23:f9:bc:72:3a:33:89:37:cf:f1:ea: d2:f6:fe:cf:40:ac:7f:64:07:d6:86:65:4a:f3:60:68:21:92: 9b:2a:98:50:22:6f:6c:60:31:39:b9:3c:6c:f8:6b:e8:a8:ed: 34:fd:06:c6:b1:b7:f8:3a:6d:b9:2f:f8:99:bd:be:81:de:d8: bc:fd:ae:70:29:f8:e3:de:c2:34:e3:59:60:a8:8e:ea:f9:3b: 98:7e:d2:1d:b8:b4:fb:17:22:3d:68:45:58:c8:62:2d:8d:6a: 4e:56:d3:1c:ec:24:76:0f:ed:a9:d8:b0:34:1f:11:19:cf:7c: dd:27:ed:1c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM3RURERkYwOUY4RTJD QzFDMzBERDIxM0RFQkNFQkRFRTkzREM2REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1dccuv4mNVeJD64gWl9rL4rx+nSRLcEJWfNz4gEjpVdaYJPfZ hjUFQFT5s/OeJdO15Y80Uge+oG4GlnHBYkypfZA8P1rZADs57KWGJA6SgV9vMtiL S9h5L/Sl6S/ECIVqtfEQUIrU5y0HZWitQHYbgS2sUSL3c2cjuApsDPL9J29AuvPN B+XgqCmcgb7pZ1S0knLV/npKpZ4niblIJHgss1+WHEKheiZFzDTzru2AUbIRWUae bm67ydrhl6wtd7+TI2LyukqCfJ9Rv+TuaJEsnY04jFZQRonfTcbQ9ok/QYsFpKdm NOaUGQglL9fFAbv0TNFUnbfC7V+vaihRCji9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUN+3f8J+OLMHDDdIT3rzr3uk9xt0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L04tM2Y4Si1PTE1IRERk SVQzcnpyM3VrOXh0MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3SgwDQYJKoZIhvcNAQELBQADggEBAK+vOt+IOpMp8yCZabwWGvOkt6iIGa/w 6Kcn8RVMLmdRP6l4RbHUCsnk4NzQY0fsmSrSAp8A6R2U7BcXja/CMSu8mL/HnPE3 fD0OlqeWyJRt+DoYvxwt4QmmORd+Xwm2A9HxdGWtilJykCSBR4SsZnO91uuDfo88 fZaRSphnANMwiYUnNs0j+bxyOjOJN8/x6tL2/s9ArH9kB9aGZUrzYGghkpsqmFAi b2xgMTm5PGz4a+io7TT9Bsaxt/g6bbkv+Jm9voHe2Lz9rnAp+OPewjTjWWCojur5 O5h+0h24tPsXIj1oRVjIYi2Nak5W0xzsJHYP7anYsDQfERnPfN0n7Rw= -----END CERTIFICATE-----Generated at Mon Apr 28 06:06:59 2025 by rpki-client on console.sobornost.net