$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/WkAyDeYEfZL8dAUa83_ssgZySSY.roa File: WkAyDeYEfZL8dAUa83_ssgZySSY.roa (raw, json) Hash identifier: MSUM6de18iyiDbCqouwTIcnybYVGZSn21budl/NNiwI= Subject key identifier: 5A:40:32:0D:E6:04:7D:92:FC:74:05:1A:F3:7F:EC:B2:06:72:49:26 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 187E Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WkAyDeYEfZL8dAUa83_ssgZySSY.roa Signing time: Fri 17 Jan 2025 01:25:08 +0000 ROA not before: Fri 17 Jan 2025 01:25:08 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 17621 IP address blocks: 103.5.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6270 (0x187e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:08 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5A40320DE6047D92FC74051AF37FECB206724926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:2a:62:77:b9:da:50:98:36:83:a6:8f:db: 40:e2:55:d8:54:4f:04:29:df:62:bf:49:52:d4:d4: ff:19:5b:fc:b2:de:f9:8a:8d:31:0f:45:ce:ea:cb: cc:12:ff:6b:14:61:22:1c:dc:0b:49:47:a0:84:c1: 06:8a:05:af:38:ab:d7:18:f7:18:22:f7:b7:a6:23: 0d:e0:0d:7b:e3:55:01:53:d1:c8:d9:2b:86:73:db: bb:c1:ac:be:0f:21:3c:4d:a2:18:86:99:29:e6:36: 25:71:30:47:10:b8:6d:0d:0d:cb:72:b6:7c:89:27: fc:4a:8d:25:f7:b9:3b:91:15:c9:7c:ad:47:ab:4b: c5:a0:fd:0e:28:a1:ca:7d:41:58:ef:46:75:c7:b7: 94:38:db:61:64:b4:23:bf:cd:95:ae:63:98:67:ff: fb:07:70:a0:53:8c:64:8e:07:9d:32:05:28:bb:e2: 1b:5c:68:6c:bd:91:f9:5f:02:2d:19:8a:76:26:c7: 4e:03:23:0b:46:a2:51:ee:d6:ee:61:22:dc:58:a2: 8a:e7:e6:bc:1c:9f:be:ed:dc:1f:3c:85:9c:d6:12: f2:9f:a6:f5:6b:33:b4:da:d3:08:4f:8f:a7:22:03: 7e:d3:21:b1:d5:cd:70:2d:6c:25:3e:61:bc:3e:4e: 72:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:40:32:0D:E6:04:7D:92:FC:74:05:1A:F3:7F:EC:B2:06:72:49:26 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WkAyDeYEfZL8dAUa83_ssgZySSY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.5.192.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:ce:0c:ef:7b:8d:d0:e1:09:02:5a:1b:c1:15:5d:64:1a:9a: 12:77:08:63:c9:62:f6:05:9c:f2:1d:5c:e4:d3:48:08:e7:05: 71:9b:f1:92:9f:a5:9d:25:7d:0a:94:a8:bd:db:9a:dd:25:61: 4a:02:e4:a4:16:e8:79:6b:75:aa:52:ab:f6:8a:c1:78:61:43: fc:a0:a5:68:c1:89:3a:c4:16:72:d3:6c:93:c0:00:c7:ae:aa: 0a:93:31:80:4c:aa:d6:32:b0:ec:ba:f9:fe:8e:52:62:30:85: b5:11:36:d4:7a:b5:2c:bc:07:1b:11:a4:eb:f6:54:90:2e:b9: da:2c:24:4c:af:ff:d8:b0:a0:a2:ce:b7:61:1a:3e:fb:65:43: d2:d3:06:43:fb:aa:dd:ce:26:aa:40:8e:d7:cc:a0:46:1d:4f: a6:63:8b:47:d5:13:23:f3:59:b8:17:20:ad:fe:58:7b:54:f2: 23:fa:79:56:af:3c:ad:e7:c1:84:b3:6b:e9:9b:3d:73:79:48: f7:c1:d7:a0:f7:1b:7c:e0:39:0a:80:6f:a4:db:70:bd:c9:e0: 31:b6:e6:0b:97:2a:c8:61:39:6d:c2:6d:92:45:fe:04:ad:ec: 41:d5:16:f7:eb:e4:ef:95:84:0f:0d:f9:23:85:1a:15:49:25: 06:54:ec:5e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDVBNDAzMjBERTYwNDdE OTJGQzc0MDUxQUYzN0ZFQ0IyMDY3MjQ5MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG7ipid7naUJg2g6aP20DiVdhUTwQp32K/SVLU1P8ZW/yy3vmK jTEPRc7qy8wS/2sUYSIc3AtJR6CEwQaKBa84q9cY9xgi97emIw3gDXvjVQFT0cjZ K4Zz27vBrL4PITxNohiGmSnmNiVxMEcQuG0NDctytnyJJ/xKjSX3uTuRFcl8rUer S8Wg/Q4oocp9QVjvRnXHt5Q422FktCO/zZWuY5hn//sHcKBTjGSOB50yBSi74htc aGy9kflfAi0ZinYmx04DIwtGolHu1u5hItxYoorn5rwcn77t3B88hZzWEvKfpvVr M7Ta0whPj6ciA37TIbHVzXAtbCU+Ybw+TnLPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUWkAyDeYEfZL8dAUa83/ssgZySSYwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1drQXlEZVlFZlpMOGRB VWE4M19zc2daeVNTWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnBcAwDQYJKoZIhvcNAQELBQADggEBAIzODO97jdDhCQJaG8EVXWQamhJ3CGPJ YvYFnPIdXOTTSAjnBXGb8ZKfpZ0lfQqUqL3bmt0lYUoC5KQW6HlrdapSq/aKwXhh Q/ygpWjBiTrEFnLTbJPAAMeuqgqTMYBMqtYysOy6+f6OUmIwhbURNtR6tSy8BxsR pOv2VJAuudosJEyv/9iwoKLOt2EaPvtlQ9LTBkP7qt3OJqpAjtfMoEYdT6Zji0fV EyPzWbgXIK3+WHtU8iP6eVavPK3nwYSza+mbPXN5SPfB16D3G3zgOQqAb6TbcL3J 4DG25guXKshhOW3CbZJF/gSt7EHVFvfr5O+VhA8N+SOFGhVJJQZU7F4= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:29 2025 by rpki-client on console.sobornost.net