$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-GYOd-df_Oy-f0YGZ8QoXpE-KUY.roa File: -GYOd-df_Oy-f0YGZ8QoXpE-KUY.roa (raw, json) Hash identifier: XMRU4RMulafL9ykW2oShRAn56DaYEZ2ldVuJ0Q69omY= Subject key identifier: F8:66:0E:77:E7:5F:FC:EC:BE:7F:46:06:67:C4:28:5E:91:3E:29:46 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0C Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-GYOd-df_Oy-f0YGZ8QoXpE-KUY.roa Signing time: Wed 09 Apr 2025 07:08:24 +0000 ROA not before: Wed 09 Apr 2025 07:08:24 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 203.118.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Apr 9 07:08:24 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=F8660E77E75FFCECBE7F460667C4285E913E2946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:22:e1:9a:29:07:d5:71:6a:ec:a1:13:0f:49: 5e:2c:dc:01:04:f1:16:ab:45:a6:eb:96:79:88:9d: 6f:f9:47:a8:1d:a2:b9:21:0b:70:67:41:5c:28:86: 45:ef:f9:28:a4:4b:88:20:57:41:e8:09:f8:db:b4: 8b:7f:c7:b2:48:0f:20:32:28:a2:c3:7a:05:25:51: 6a:6f:84:51:06:be:1e:59:98:95:9f:f8:99:fe:cc: f2:3c:91:f9:e5:d3:b3:f9:c9:e5:1c:03:bc:81:c4: df:61:3e:3d:61:cb:9e:7b:c5:89:2a:d4:d5:c3:3a: 42:a9:5a:3c:11:dc:70:64:87:d2:ae:b4:e0:60:e5: 4a:b9:27:49:21:e3:bc:7d:1c:30:89:62:d5:9f:35: 51:50:53:02:1d:4f:08:5a:fb:e1:5c:15:34:d1:d9: 61:34:87:56:9b:7b:3c:de:1d:05:72:0a:b7:7d:e0: 55:e7:08:bf:ff:70:a2:cd:ed:2d:7a:e2:9c:60:92: 3d:77:2d:83:6f:e7:b9:6e:04:10:4e:a0:67:a3:d8: 16:86:a7:df:b7:7b:4f:d6:f7:55:3a:d5:1b:5f:2b: 16:d8:63:32:61:68:83:7f:c4:4b:82:a1:de:a9:7e: 36:ee:a3:d8:1e:12:e3:66:67:40:24:ee:43:60:ef: 76:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:66:0E:77:E7:5F:FC:EC:BE:7F:46:06:67:C4:28:5E:91:3E:29:46 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-GYOd-df_Oy-f0YGZ8QoXpE-KUY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.118.192.0/19 Signature Algorithm: sha256WithRSAEncryption 4f:ea:d3:55:76:ae:19:bf:00:cc:56:71:02:2b:e9:8d:52:3d: 6c:62:4f:63:35:dd:7e:ca:62:c0:d5:7c:fc:b4:c9:e6:27:ae: f0:7d:29:c6:11:2a:ea:ee:e6:4c:21:0b:ff:da:04:33:ad:5c: 02:6d:ba:50:c7:b4:7b:04:48:e6:ab:eb:5a:b4:14:a9:e9:08: 4e:20:4b:a4:2f:32:30:11:96:42:5d:a6:f8:62:49:2f:bd:8b: 53:34:f6:db:42:4a:e8:6f:63:2d:35:93:93:ce:7d:98:00:1f: df:c8:02:41:b1:46:e2:3e:c3:2e:b3:1a:5a:65:3d:5e:56:bd: 0a:be:cd:82:81:25:0a:d1:e8:66:9e:f7:84:44:46:aa:ff:2c: c9:52:97:f2:80:1a:b8:e7:49:c7:b6:06:5a:55:50:74:95:c7: 10:b5:3c:1e:cc:43:b8:fc:09:e9:69:24:13:72:47:f9:49:bf: 02:17:24:48:b6:16:e2:f5:f7:2f:23:bd:4d:fb:d7:b6:91:87: 59:d0:c4:21:9c:13:42:c8:59:b4:fa:d3:5f:c8:7b:b6:ec:80: 65:10:cd:5a:03:cc:4e:ab:9e:ee:92:97:a4:7c:1a:b7:69:11: 20:b2:85:59:6b:5f:35:44:f4:46:0a:3b:68:ef:16:03:2e:ee: bc:5f:f5:97 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRTI2 NkRDM0VBRDgwRUIyNUQ0OTg1OEE2NERDMUVGMUM4QTFCOTQyMB4XDTI1MDQwOTA3 MDgyNFoXDTI2MDQwOTA2MzMyMVowMzExMC8GA1UEAxMoRjg2NjBFNzdFNzVGRkNF Q0JFN0Y0NjA2NjdDNDI4NUU5MTNFMjk0NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALUi4ZopB9VxauyhEw9JXizcAQTxFqtFpuuWeYidb/lHqB2iuSEL cGdBXCiGRe/5KKRLiCBXQegJ+Nu0i3/HskgPIDIoosN6BSVRam+EUQa+HlmYlZ/4 mf7M8jyR+eXTs/nJ5RwDvIHE32E+PWHLnnvFiSrU1cM6QqlaPBHccGSH0q604GDl SrknSSHjvH0cMIli1Z81UVBTAh1PCFr74VwVNNHZYTSHVpt7PN4dBXIKt33gVecI v/9wos3tLXrinGCSPXctg2/nuW4EEE6gZ6PYFoan37d7T9b3VTrVG18rFthjMmFo g3/ES4Kh3ql+Nu6j2B4S42ZnQCTuQ2Dvdr8CAwEAAaOCAe8wggHrMB0GA1UdDgQW BBT4Zg5351/87L5/RgZnxChekT4pRjAfBgNVHSMEGDAWgBQuJm3D6tgOsl1JhYpk 3B7xyKG5QjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9M aVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL0xpWnR3LXJZRHJKZFNZV0taTndlOGNpaHVVSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzc2Ly1HWU9kLWRmX095LWYwWUda OFFvWHBFLUtVWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j bi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXL dsAwDQYJKoZIhvcNAQELBQADggEBAE/q01V2rhm/AMxWcQIr6Y1SPWxiT2M13X7K YsDVfPy0yeYnrvB9KcYRKuru5kwhC//aBDOtXAJtulDHtHsESOar61q0FKnpCE4g S6QvMjARlkJdpvhiSS+9i1M09ttCSuhvYy01k5POfZgAH9/IAkGxRuI+wy6zGlpl PV5WvQq+zYKBJQrR6Gae94RERqr/LMlSl/KAGrjnSce2BlpVUHSVxxC1PB7MQ7j8 CelpJBNyR/lJvwIXJEi2FuL19y8jvU3717aRh1nQxCGcE0LIWbT601/Ie7bsgGUQ zVoDzE6rnu6Sl6R8GrdpESCyhVlrXzVE9EYKO2jvFgMu7rxf9Zc= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:30 2025 by rpki-client on console.sobornost.net