$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Zh-TrPXLJawINzS9cbP1jeuAkEw.roa File: Zh-TrPXLJawINzS9cbP1jeuAkEw.roa (raw, json) Hash identifier: 1zZUTgmM/VPpj/F/YaUJxGDeleAuGD+AG+AQn5HcH/Y= Subject key identifier: 66:1F:93:AC:F5:CB:25:AC:08:37:34:BD:71:B3:F5:8D:EB:80:90:4C Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1825 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Zh-TrPXLJawINzS9cbP1jeuAkEw.roa Signing time: Fri 17 Jan 2025 01:24:39 +0000 ROA not before: Fri 17 Jan 2025 01:24:39 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.220.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6181 (0x1825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:39 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=661F93ACF5CB25AC083734BD71B3F58DEB80904C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:ee:f6:5f:9a:07:a6:9a:2a:98:7e:a7:6b: 24:38:84:1d:1e:7b:a6:9e:79:e0:8d:8a:ed:81:9e: 45:d1:a4:4b:b9:a4:25:18:04:01:0b:b3:3e:c0:8a: 19:5c:0b:91:bb:ac:b4:01:ee:5e:ec:03:c9:44:36: d5:90:86:ff:f6:c1:73:23:c8:52:d5:ab:c4:5a:a5: c2:17:f1:0f:93:75:c5:68:db:f2:15:ee:fc:77:32: db:15:85:27:ce:3b:45:72:91:73:2f:c4:a7:68:27: c8:4e:26:59:aa:99:5e:b3:09:13:5a:77:36:78:86: 7f:26:1e:66:c1:52:b9:8f:5b:52:8d:cc:33:7a:86: f6:9c:6d:67:0c:8b:e6:c6:7c:eb:aa:f2:16:c5:4e: d9:69:b0:17:59:bf:f0:d5:2b:08:59:fd:0d:bc:b2: 68:74:f9:8b:90:90:93:8c:77:ab:da:65:84:7d:aa: bc:1d:b6:56:ef:9c:bb:ec:37:10:7a:6d:7a:29:80: 2a:61:3c:db:fd:db:e3:78:88:db:87:06:d4:6f:18: eb:a1:3a:5a:7c:c1:33:dd:28:50:4a:bb:f1:b5:85: 64:c6:05:8d:96:84:8b:0a:e0:d0:98:99:3e:fb:86: 81:39:50:aa:ef:51:6d:c1:ef:2d:78:ed:ad:15:08: 46:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1F:93:AC:F5:CB:25:AC:08:37:34:BD:71:B3:F5:8D:EB:80:90:4C X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Zh-TrPXLJawINzS9cbP1jeuAkEw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.254.0/24 Signature Algorithm: sha256WithRSAEncryption a8:29:a2:ad:b7:cb:2d:78:e2:88:5d:d5:61:ab:59:8f:f8:94: 01:04:94:8d:4a:e9:df:4a:5d:9a:ae:17:e8:a9:49:aa:dd:06: 4b:0b:0d:28:d3:69:d2:d5:d8:f4:d6:04:5b:49:19:e0:ed:64: 49:f8:90:02:da:2d:1d:a2:b9:a8:15:c7:95:8a:86:75:4b:bd: 2e:ce:29:8f:0a:15:e5:0e:9d:6e:bb:d1:09:9b:db:03:2d:87: 66:fd:31:15:f9:6e:1b:7f:6d:dd:74:bb:a4:66:20:fa:d9:9d: f7:6c:e1:5e:28:f7:e1:cc:c8:4c:6d:9a:8e:1d:6d:1c:fa:65: 18:7b:72:4a:48:47:61:9b:77:6e:5b:9d:02:90:31:05:8d:33: 96:37:91:e4:ee:d8:70:41:30:cd:5a:b6:3b:d3:f1:3c:a8:c3: b9:8c:46:62:5d:c9:0f:98:f2:a6:11:1f:3f:d4:23:54:f4:f1: d2:ac:d0:c3:fb:d3:18:89:76:fa:e9:d5:62:df:6e:6e:33:03: 79:7d:3b:4c:4b:95:5c:11:ad:a8:5e:a3:e8:01:af:0f:5f:d1: 0d:eb:82:44:dc:18:4a:b0:22:ac:7b:a6:50:ab:db:27:ed:9d: cb:a5:ba:7e:c4:96:85:8e:80:88:71:98:4a:f8:cf:d9:d4:c8: 31:97:8f:2c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MzlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDY2MUY5M0FDRjVDQjI1 QUMwODM3MzRCRDcxQjNGNThERUI4MDkwNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/4O72X5oHppoqmH6nayQ4hB0ee6aeeeCNiu2BnkXRpEu5pCUY BAELsz7AihlcC5G7rLQB7l7sA8lENtWQhv/2wXMjyFLVq8RapcIX8Q+TdcVo2/IV 7vx3MtsVhSfOO0VykXMvxKdoJ8hOJlmqmV6zCRNadzZ4hn8mHmbBUrmPW1KNzDN6 hvacbWcMi+bGfOuq8hbFTtlpsBdZv/DVKwhZ/Q28smh0+YuQkJOMd6vaZYR9qrwd tlbvnLvsNxB6bXopgCphPNv92+N4iNuHBtRvGOuhOlp8wTPdKFBKu/G1hWTGBY2W hIsK4NCYmT77hoE5UKrvUW3B7y147a0VCEbrAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUZh+TrPXLJawINzS9cbP1jeuAkEwwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1poLVRyUFhMSmF3SU56 UzljYlAxamV1QWtFdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3P4wDQYJKoZIhvcNAQELBQADggEBAKgpoq23yy144ohd1WGrWY/4lAEElI1K 6d9KXZquF+ipSardBksLDSjTadLV2PTWBFtJGeDtZEn4kALaLR2iuagVx5WKhnVL vS7OKY8KFeUOnW670Qmb2wMth2b9MRX5bht/bd10u6RmIPrZnfds4V4o9+HMyExt mo4dbRz6ZRh7ckpIR2Gbd25bnQKQMQWNM5Y3keTu2HBBMM1atjvT8Tyow7mMRmJd yQ+Y8qYRHz/UI1T08dKs0MP70xiJdvrp1WLfbm4zA3l9O0xLlVwRraheo+gBrw9f 0Q3rgkTcGEqwIqx7plCr2yftnculun7EloWOgIhxmEr4z9nUyDGXjyw= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:29 2025 by rpki-client on console.sobornost.net