$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ZIu2cDATC1fuyNWUre-4z8MdRJQ.roa File: ZIu2cDATC1fuyNWUre-4z8MdRJQ.roa (raw, json) Hash identifier: FvWAWdHlZfe8cZsITf2/A06d9VsOp6LGA7o/YZd8tAI= Subject key identifier: 64:8B:B6:70:30:13:0B:57:EE:C8:D5:94:AD:EF:B8:CF:C3:1D:44:94 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0D Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZIu2cDATC1fuyNWUre-4z8MdRJQ.roa Signing time: Wed 09 Apr 2025 07:08:25 +0000 ROA not before: Wed 09 Apr 2025 07:08:25 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 218.97.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Apr 9 07:08:25 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=648BB67030130B57EEC8D594ADEFB8CFC31D4494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:92:15:ee:dc:dc:e9:d5:f4:fd:be:b7:cc: 44:29:84:81:c2:c4:c7:66:d6:37:0d:84:5a:06:1b: aa:9e:40:e0:8a:5b:f6:62:de:7b:92:28:f5:51:f2: 60:db:55:3e:38:f8:eb:83:26:2f:41:bd:17:8e:1e: 9e:72:42:d3:0e:ba:c7:eb:0b:2e:f8:3e:58:bf:71: 1c:00:5f:dc:6b:5c:b4:cd:57:d2:63:d4:e1:6b:d7: 37:5d:71:05:28:1d:d7:c4:d8:d7:ec:f5:ac:05:5f: 5a:d4:42:2f:04:ee:8c:3e:96:34:bb:f5:0a:3d:e6: a3:f3:2f:22:4b:d8:dc:d3:d4:cc:ff:df:d9:1e:6b: 49:1b:05:d8:60:41:1b:fd:77:9e:88:e6:51:79:7d: eb:7d:d9:fb:71:50:65:2b:c0:4f:73:cb:e0:38:28: b4:16:2d:83:9f:b7:01:c5:06:46:4e:cb:7a:83:9f: 79:d0:f3:ff:37:f9:36:f7:4a:bb:40:6b:82:52:b9: 20:35:27:1a:c8:dc:5c:a5:0c:92:45:68:d5:2f:2e: 63:e6:d6:5f:3b:04:a5:9f:4c:b5:e5:9f:b6:df:99: fc:90:79:29:db:7b:d4:a4:87:17:77:50:2e:5d:8f: e6:82:97:ad:af:b2:fa:fa:97:35:8c:bb:83:ca:d1: 0a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8B:B6:70:30:13:0B:57:EE:C8:D5:94:AD:EF:B8:CF:C3:1D:44:94 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZIu2cDATC1fuyNWUre-4z8MdRJQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.97.224.0/20 Signature Algorithm: sha256WithRSAEncryption 97:23:2f:91:f6:db:57:21:b0:b9:ad:db:ae:e5:e9:74:cf:03: c7:cf:55:01:86:d9:15:6e:2f:5e:b9:6b:3b:74:88:11:e3:42: 6e:16:0a:d4:f4:19:b4:4b:0b:6a:82:9d:3c:64:f6:8f:fd:fa: 49:94:fd:d3:3a:5f:b3:d4:bc:3d:79:47:b1:13:71:5a:87:dc: b4:f6:a5:39:dc:02:27:9d:b3:4a:a3:97:bb:68:c6:cc:b5:79: 5c:35:53:33:ad:a2:50:36:87:68:bf:1f:90:09:2d:cc:40:b6: f6:52:8e:c0:2b:54:61:97:8f:fc:59:08:9b:0d:b6:69:36:63: 03:d6:bb:13:43:a8:95:88:45:cb:69:f2:f1:c0:1b:e8:1c:ee: f2:40:fb:f0:e5:5d:f6:b5:a0:81:8c:f2:2c:a7:00:e4:7d:02: d6:f6:64:ec:f9:c2:84:b7:e2:49:e2:c6:c8:b0:26:6c:83:a3: 26:7c:12:49:49:fa:20:01:16:67:ae:39:a3:b9:56:9d:2d:54: 63:e6:4a:cd:fd:47:05:0c:40:7d:8e:a1:59:9a:f1:f5:86:29: fc:ef:c0:e7:ce:7a:6b:47:be:87:77:17:9a:2a:de:48:27:cd: 3e:7d:84:e2:f3:64:7d:fb:5c:64:80:65:27:71:0f:57:ef:a7: ed:17:00:de -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRTI2 NkRDM0VBRDgwRUIyNUQ0OTg1OEE2NERDMUVGMUM4QTFCOTQyMB4XDTI1MDQwOTA3 MDgyNVoXDTI2MDQwOTA2MzMyMVowMzExMC8GA1UEAxMoNjQ4QkI2NzAzMDEzMEI1 N0VFQzhENTk0QURFRkI4Q0ZDMzFENDQ5NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ9IkhXu3Nzp1fT9vrfMRCmEgcLEx2bWNw2EWgYbqp5A4Ipb9mLe e5Io9VHyYNtVPjj464MmL0G9F44ennJC0w66x+sLLvg+WL9xHABf3GtctM1X0mPU 4WvXN11xBSgd18TY1+z1rAVfWtRCLwTujD6WNLv1Cj3mo/MvIkvY3NPUzP/f2R5r SRsF2GBBG/13nojmUXl9633Z+3FQZSvAT3PL4DgotBYtg5+3AcUGRk7LeoOfedDz /zf5NvdKu0BrglK5IDUnGsjcXKUMkkVo1S8uY+bWXzsEpZ9MteWftt+Z/JB5Kdt7 1KSHF3dQLl2P5oKXra+y+vqXNYy7g8rRChECAwEAAaOCAe8wggHrMB0GA1UdDgQW BBRki7ZwMBMLV+7I1ZSt77jPwx1ElDAfBgNVHSMEGDAWgBQuJm3D6tgOsl1JhYpk 3B7xyKG5QjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9M aVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL0xpWnR3LXJZRHJKZFNZV0taTndlOGNpaHVVSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzc2L1pJdTJjREFUQzFmdXlOV1Vy ZS00ejhNZFJKUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j bi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATa YeAwDQYJKoZIhvcNAQELBQADggEBAJcjL5H221chsLmt267l6XTPA8fPVQGG2RVu L165azt0iBHjQm4WCtT0GbRLC2qCnTxk9o/9+kmU/dM6X7PUvD15R7ETcVqH3LT2 pTncAieds0qjl7toxsy1eVw1UzOtolA2h2i/H5AJLcxAtvZSjsArVGGXj/xZCJsN tmk2YwPWuxNDqJWIRctp8vHAG+gc7vJA+/DlXfa1oIGM8iynAOR9Atb2ZOz5woS3 4knixsiwJmyDoyZ8EklJ+iABFmeuOaO5Vp0tVGPmSs39RwUMQH2OoVma8fWGKfzv wOfOemtHvod3F5oq3kgnzT59hOLzZH37XGSAZSdxD1fvp+0XAN4= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:30 2025 by rpki-client on console.sobornost.net