$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OjvJeSo6lsEg9uLCdozMhBG1wpM.roa File: OjvJeSo6lsEg9uLCdozMhBG1wpM.roa (raw, json) Hash identifier: o11AaYnXnEfRHY+f+c5bRhxX0vq/1+fUyNDi4psENWI= Subject key identifier: 3A:3B:C9:79:2A:3A:96:C1:20:F6:E2:C2:76:8C:CC:84:11:B5:C2:93 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0E Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OjvJeSo6lsEg9uLCdozMhBG1wpM.roa Signing time: Wed 09 Apr 2025 07:08:25 +0000 ROA not before: Wed 09 Apr 2025 07:08:25 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 210.78.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Apr 9 07:08:25 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=3A3BC9792A3A96C120F6E2C2768CCC8411B5C293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:01:97:c3:21:4e:ea:a6:7f:28:7f:c8:6a: 3b:37:86:9f:3f:54:ef:fc:9f:a8:20:a7:27:97:d0: 1e:02:f1:21:df:15:62:2b:6a:e3:38:2c:60:10:66: 6a:42:89:53:1e:61:8c:50:fe:b1:5b:65:1f:84:af: 63:c8:cb:6a:6f:d1:9b:01:d7:e4:a9:57:ef:43:2f: b1:cb:b0:7c:33:81:02:c9:4e:82:47:e0:78:46:6f: ff:17:ae:87:6b:19:ed:93:f6:20:39:1e:a2:0c:8d: cb:67:3f:fd:3b:d7:34:c4:f5:01:69:f0:e4:2f:2d: 8a:75:33:33:d5:78:00:af:18:1d:54:79:f5:21:f2: 5d:f7:af:a0:ba:22:1b:2c:aa:f5:0e:17:2c:6d:31: 99:b6:7a:93:be:dd:21:b3:ef:d9:f5:86:97:47:0e: 33:fe:32:d3:2f:1d:0b:59:0e:21:1b:87:b2:65:c7: 42:5a:f3:a9:70:22:b3:8f:c4:35:fc:f2:ef:40:20: 92:7e:a6:fa:b7:e2:df:94:8c:e1:e3:02:2a:8f:44: c7:e8:69:1c:4b:d9:56:48:02:1a:9e:f2:71:af:27: 3f:59:04:4e:eb:ad:5a:78:45:b0:8b:73:9c:d0:5d: 8d:f7:c5:22:8e:6d:0c:74:18:2e:f1:57:9f:e5:d6: c4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3B:C9:79:2A:3A:96:C1:20:F6:E2:C2:76:8C:CC:84:11:B5:C2:93 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OjvJeSo6lsEg9uLCdozMhBG1wpM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.78.64.0/19 Signature Algorithm: sha256WithRSAEncryption 87:62:2f:21:fe:5f:2e:1e:26:54:38:48:31:50:e0:2a:d4:27: 68:8e:b8:65:25:6a:5b:ea:9c:69:e0:c9:e8:49:1b:3a:86:ae: 04:a9:be:e7:7d:9c:97:70:de:46:4b:6b:3d:73:f0:52:0f:89: dc:d7:6c:fc:14:a7:85:ac:fe:cb:95:0f:93:10:61:26:f8:a2: 60:3c:99:50:06:fb:af:64:73:e8:34:1f:35:3c:30:d6:e9:87: cd:60:bb:49:78:d0:29:9a:cb:8a:9b:83:7d:56:89:67:f5:a9: 43:d5:cd:4f:69:99:f2:74:4a:b7:d2:c5:e6:f4:88:01:2b:1b: 8d:63:29:4c:f3:84:59:f3:ca:3a:ea:94:18:2e:69:a4:c8:76: d9:7a:3c:fa:b4:ad:b7:ed:68:78:db:32:d1:38:9a:ee:28:8b: 68:92:1a:6b:ac:3e:d0:89:73:e6:7a:bb:0e:0a:01:01:c1:bb: bc:2b:6d:0b:15:fb:e2:ca:d3:60:0c:7d:56:e6:e3:70:91:b4: ee:26:fe:a9:1c:92:1a:22:3e:54:6d:cc:89:47:b0:6f:8a:6d: 51:9d:9c:2a:aa:92:91:3b:a4:29:b6:b8:83:ca:f4:30:61:5e: 28:bb:2e:4c:8d:04:2f:db:19:b0:d5:dc:73:96:32:b7:70:c1: 98:11:0b:d3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRTI2 NkRDM0VBRDgwRUIyNUQ0OTg1OEE2NERDMUVGMUM4QTFCOTQyMB4XDTI1MDQwOTA3 MDgyNVoXDTI2MDQwOTA2MzMyMVowMzExMC8GA1UEAxMoM0EzQkM5NzkyQTNBOTZD MTIwRjZFMkMyNzY4Q0NDODQxMUI1QzI5MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJqRAZfDIU7qpn8of8hqOzeGnz9U7/yfqCCnJ5fQHgLxId8VYitq 4zgsYBBmakKJUx5hjFD+sVtlH4SvY8jLam/RmwHX5KlX70MvscuwfDOBAslOgkfg eEZv/xeuh2sZ7ZP2IDkeogyNy2c//TvXNMT1AWnw5C8tinUzM9V4AK8YHVR59SHy XfevoLoiGyyq9Q4XLG0xmbZ6k77dIbPv2fWGl0cOM/4y0y8dC1kOIRuHsmXHQlrz qXAis4/ENfzy70Agkn6m+rfi35SM4eMCKo9Ex+hpHEvZVkgCGp7yca8nP1kETuut WnhFsItznNBdjffFIo5tDHQYLvFXn+XWxDMCAwEAAaOCAe8wggHrMB0GA1UdDgQW BBQ6O8l5KjqWwSD24sJ2jMyEEbXCkzAfBgNVHSMEGDAWgBQuJm3D6tgOsl1JhYpk 3B7xyKG5QjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9M aVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL0xpWnR3LXJZRHJKZFNZV0taTndlOGNpaHVVSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzc2L09qdkplU282bHNFZzl1TENk b3pNaEJHMXdwTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j bi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXS TkAwDQYJKoZIhvcNAQELBQADggEBAIdiLyH+Xy4eJlQ4SDFQ4CrUJ2iOuGUlalvq nGngyehJGzqGrgSpvud9nJdw3kZLaz1z8FIPidzXbPwUp4Ws/suVD5MQYSb4omA8 mVAG+69kc+g0HzU8MNbph81gu0l40Cmay4qbg31WiWf1qUPVzU9pmfJ0SrfSxeb0 iAErG41jKUzzhFnzyjrqlBguaaTIdtl6PPq0rbftaHjbMtE4mu4oi2iSGmusPtCJ c+Z6uw4KAQHBu7wrbQsV++LK02AMfVbm43CRtO4m/qkckhoiPlRtzIlHsG+KbVGd nCqqkpE7pCm2uIPK9DBhXii7LkyNBC/bGbDV3HOWMrdwwZgRC9M= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:30 2025 by rpki-client on console.sobornost.net