$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/g6dvdPPpijOkcmRmRTZnT-y14Tk.roa File: g6dvdPPpijOkcmRmRTZnT-y14Tk.roa (raw, json) Hash identifier: CB2d6yyYQRrRoAdL2nEn/Kl5Yw9asCUF8Gr2w7kfsrs= Subject key identifier: 83:A7:6F:74:F3:E9:8A:33:A4:72:64:66:45:36:67:4F:EC:B5:E1:39 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0B Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/g6dvdPPpijOkcmRmRTZnT-y14Tk.roa Signing time: Wed 09 Apr 2025 07:08:24 +0000 ROA not before: Wed 09 Apr 2025 07:08:24 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 27.103.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Apr 9 07:08:24 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=83A76F74F3E98A33A47264664536674FECB5E139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:ed:a3:08:ff:37:40:8f:8e:dd:04:26:68: ac:96:9f:c2:df:62:ed:52:97:92:69:41:f0:da:3b: 51:0c:f0:53:fc:c2:a1:fa:ec:8f:2f:7f:42:23:6f: f0:a5:28:cd:10:34:7f:58:6e:c8:29:4b:57:90:1c: 49:44:b2:56:35:d5:55:14:d3:80:75:8e:eb:49:bf: 6a:47:f0:e6:6e:4e:ec:e7:d1:f3:e1:64:1e:51:b7: f1:84:f9:4c:63:f5:10:cb:34:f5:b6:96:6e:e0:cc: a6:c4:7a:ed:6f:69:5e:21:71:c6:88:a2:a1:17:18: 3b:c8:cb:ea:b3:63:62:d1:f0:23:0d:d5:91:5a:48: 33:ce:0b:71:e9:db:9f:24:17:4b:0a:7a:3a:06:12: 71:bc:01:b6:be:42:a4:2d:8e:d4:23:cc:1c:17:f5: 0e:38:72:c3:25:3c:09:3c:3d:4c:a3:45:3c:f8:e1: ca:8e:e3:19:d2:43:0d:f5:5b:19:12:d5:34:4f:0b: a1:2a:56:00:04:08:d0:45:1e:87:e4:55:13:30:79: b8:fc:0b:f5:c6:df:5b:df:21:05:8b:15:fb:1e:50: 6c:c1:e3:eb:6d:54:7d:cd:c2:96:53:b2:3b:40:7f: 47:95:7d:fd:99:9d:ef:33:07:b9:13:81:7f:65:29: cd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A7:6F:74:F3:E9:8A:33:A4:72:64:66:45:36:67:4F:EC:B5:E1:39 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/g6dvdPPpijOkcmRmRTZnT-y14Tk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption 89:7d:09:9a:bc:94:d8:ee:5d:6a:90:75:db:55:73:0e:72:84: d8:92:30:c8:ec:59:65:ad:5b:0e:6e:a6:21:05:da:ff:d4:39: bc:d8:c8:31:8f:0e:b9:70:24:45:a7:ae:4a:b1:50:7e:3f:77: 0e:5f:6a:91:8b:7f:6c:99:b6:cc:c7:cd:e8:a5:4e:ae:2d:53: f4:26:e3:ae:f9:df:f6:9f:7a:ec:fe:4a:8d:15:6d:88:c4:ff: e6:3a:be:05:87:76:c4:bb:5c:2b:6a:df:62:99:2e:b3:be:65: c7:91:52:01:b0:ca:c3:2f:1d:8e:c4:8f:9a:73:93:20:36:f5: 32:13:15:4d:2a:e8:68:55:a1:ba:76:1f:c4:fc:20:db:f0:73: eb:b4:47:70:e0:a6:52:04:49:f0:f0:d1:19:14:5e:80:29:05: 62:54:cb:1b:a1:8f:6a:d4:e6:24:6a:7d:f5:d8:01:c9:c5:7b: db:2f:ac:05:a3:b9:fe:04:d6:d9:db:7d:d5:b5:d6:65:12:2f: 66:bb:67:c2:32:ec:4c:2b:55:44:65:3d:e0:1c:0f:c3:0e:52: d6:2a:5f:fd:e3:fe:58:26:5f:a2:d9:cf:8d:14:95:ba:b1:6c: bc:f6:a0:9b:df:2e:e0:94:aa:9b:1a:71:3c:b5:e4:96:f9:59: ac:eb:b1:cc -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRTI2 NkRDM0VBRDgwRUIyNUQ0OTg1OEE2NERDMUVGMUM4QTFCOTQyMB4XDTI1MDQwOTA3 MDgyNFoXDTI2MDQwOTA2MzMyMVowMzExMC8GA1UEAxMoODNBNzZGNzRGM0U5OEEz M0E0NzI2NDY2NDUzNjY3NEZFQ0I1RTEzOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKnM7aMI/zdAj47dBCZorJafwt9i7VKXkmlB8No7UQzwU/zCofrs jy9/QiNv8KUozRA0f1huyClLV5AcSUSyVjXVVRTTgHWO60m/akfw5m5O7OfR8+Fk HlG38YT5TGP1EMs09baWbuDMpsR67W9pXiFxxoiioRcYO8jL6rNjYtHwIw3VkVpI M84LcenbnyQXSwp6OgYScbwBtr5CpC2O1CPMHBf1DjhywyU8CTw9TKNFPPjhyo7j GdJDDfVbGRLVNE8LoSpWAAQI0EUeh+RVEzB5uPwL9cbfW98hBYsV+x5QbMHj621U fc3CllOyO0B/R5V9/Zmd7zMHuROBf2UpzWECAwEAAaOCAe4wggHqMB0GA1UdDgQW BBSDp2908+mKM6RyZGZFNmdP7LXhOTAfBgNVHSMEGDAWgBQuJm3D6tgOsl1JhYpk 3B7xyKG5QjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9M aVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL0xpWnR3LXJZRHJKZFNZV0taTndlOGNpaHVVSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzc2L2c2ZHZkUFBwaWpPa2NtUm1S VFpuVC15MTRUay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j bi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAb ZzANBgkqhkiG9w0BAQsFAAOCAQEAiX0JmryU2O5dapB121VzDnKE2JIwyOxZZa1b Dm6mIQXa/9Q5vNjIMY8OuXAkRaeuSrFQfj93Dl9qkYt/bJm2zMfN6KVOri1T9Cbj rvnf9p967P5KjRVtiMT/5jq+BYd2xLtcK2rfYpkus75lx5FSAbDKwy8djsSPmnOT IDb1MhMVTSroaFWhunYfxPwg2/Bz67RHcOCmUgRJ8PDRGRRegCkFYlTLG6GPatTm JGp99dgBycV72y+sBaO5/gTW2dt91bXWZRIvZrtnwjLsTCtVRGU94BwPww5S1ipf /eP+WCZfotnPjRSVurFsvPagm98u4JSqmxpxPLXklvlZrOuxzA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:30 2025 by rpki-client on console.sobornost.net