$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/yVCeVSdYcGSgIEZ7ns34fALeY6w.roa File: yVCeVSdYcGSgIEZ7ns34fALeY6w.roa (raw, json) Hash identifier: 37YcQVfz5Xs12JKZlzGMhU0SATgmn3/Zn9Jnck5yiyU= Subject key identifier: C9:50:9E:55:27:58:70:64:A0:20:46:7B:9E:CD:F8:7C:02:DE:63:AC Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 07 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yVCeVSdYcGSgIEZ7ns34fALeY6w.roa Signing time: Wed 09 Apr 2025 06:45:54 +0000 ROA not before: Wed 09 Apr 2025 06:45:54 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 124.29.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Apr 9 06:45:54 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=C9509E5527587064A020467B9ECDF87C02DE63AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2b:61:c5:bf:50:49:c9:54:83:29:ee:c9:a1: d1:8b:7d:01:7a:1f:c5:5f:52:37:7b:dc:29:b4:93: d0:f2:6e:d2:f3:2c:fe:8f:47:8a:96:2f:0d:ea:a8: 37:a8:b0:a7:4d:17:7e:ab:15:75:bd:a0:30:96:c0: 98:e6:08:2b:b0:21:02:fe:2e:23:06:08:09:e5:d2: 08:6b:44:12:cb:e8:26:eb:f9:d9:9e:b7:2b:2f:15: 7c:44:6a:41:7f:91:27:51:ec:49:04:77:aa:6e:42: e5:2d:d6:3a:02:b8:f8:a5:b8:d3:a7:81:bf:17:cd: cf:50:ff:fe:1c:8f:c3:11:36:3a:c9:86:a3:b0:9b: 78:21:69:15:1a:a6:84:44:3f:70:3c:c1:c2:a4:0e: 5f:90:0a:51:8b:08:23:ed:4a:e5:a7:df:1d:c5:7d: a6:ec:16:fe:b2:45:cf:52:02:6c:bd:35:02:5a:7c: 99:34:5e:ec:b7:3d:13:c4:88:d2:f8:7f:b4:09:7f: ae:ab:02:05:4a:dd:08:62:58:c2:91:a4:84:d8:53: 3c:b3:d3:0b:3f:36:7e:f2:f0:98:ef:87:6a:08:fd: 94:87:90:61:b0:6b:30:dc:6b:ee:63:ff:20:47:d0: 46:0e:47:40:03:c2:bf:c1:be:89:4b:9c:7b:c5:32: e3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:50:9E:55:27:58:70:64:A0:20:46:7B:9E:CD:F8:7C:02:DE:63:AC X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yVCeVSdYcGSgIEZ7ns34fALeY6w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.29.0.0/17 Signature Algorithm: sha256WithRSAEncryption a3:85:83:1e:75:57:46:64:22:5a:d0:74:e3:7c:86:17:24:eb: d8:7a:bf:55:2c:fa:e3:23:3b:c0:ae:4e:a5:b8:6b:af:1d:9d: de:a5:5b:55:03:97:09:d5:52:42:fe:99:4a:6c:f0:19:31:7d: fb:70:e0:d2:32:b2:51:38:90:72:5d:d8:44:c4:c6:b8:51:ef: b1:46:75:e8:fb:bb:8f:1f:49:59:32:b2:3a:01:db:ab:39:8b: a1:40:79:50:48:dd:94:11:c5:66:33:94:48:2b:51:3f:ef:dd: 3a:d9:cb:52:60:7f:86:7f:32:87:16:e1:6c:f5:c3:cc:60:be: 05:68:b2:c4:0a:71:6f:8e:35:2b:0f:82:fd:3f:0e:30:aa:5e: 22:94:07:39:79:38:50:29:12:d3:b6:04:59:d7:dd:f5:84:4a: f7:60:d8:f4:73:e7:73:d2:20:49:23:0e:93:6a:2e:8c:9f:70: 60:be:e6:7a:d9:87:be:16:22:e3:3a:67:a4:7c:e7:d4:82:35: b4:88:86:f0:f1:23:b9:90:a1:4e:ac:89:4b:16:48:73:a0:36: 9b:fb:53:a0:9b:79:09:c7:d0:20:a6:bc:78:74:6f:8a:84:f1: 1b:68:4b:43:f6:4d:30:c0:3b:3c:56:f0:bc:dc:9c:be:22:76: c3:23:c0:98 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRTI2 NkRDM0VBRDgwRUIyNUQ0OTg1OEE2NERDMUVGMUM4QTFCOTQyMB4XDTI1MDQwOTA2 NDU1NFoXDTI2MDQwOTA2MzMyMVowMzExMC8GA1UEAxMoQzk1MDlFNTUyNzU4NzA2 NEEwMjA0NjdCOUVDREY4N0MwMkRFNjNBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALgrYcW/UEnJVIMp7smh0Yt9AXofxV9SN3vcKbST0PJu0vMs/o9H ipYvDeqoN6iwp00XfqsVdb2gMJbAmOYIK7AhAv4uIwYICeXSCGtEEsvoJuv52Z63 Ky8VfERqQX+RJ1HsSQR3qm5C5S3WOgK4+KW406eBvxfNz1D//hyPwxE2OsmGo7Cb eCFpFRqmhEQ/cDzBwqQOX5AKUYsII+1K5affHcV9puwW/rJFz1ICbL01Alp8mTRe 7Lc9E8SI0vh/tAl/rqsCBUrdCGJYwpGkhNhTPLPTCz82fvLwmO+Hagj9lIeQYbBr MNxr7mP/IEfQRg5HQAPCv8G+iUuce8Uy4/MCAwEAAaOCAe8wggHrMB0GA1UdDgQW BBTJUJ5VJ1hwZKAgRnuezfh8At5jrDAfBgNVHSMEGDAWgBQuJm3D6tgOsl1JhYpk 3B7xyKG5QjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9M aVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL0xpWnR3LXJZRHJKZFNZV0taTndlOGNpaHVVSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzc2L3lWQ2VWU2RZY0dTZ0lFWjdu czM0ZkFMZVk2dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j bi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd8 HQAwDQYJKoZIhvcNAQELBQADggEBAKOFgx51V0ZkIlrQdON8hhck69h6v1Us+uMj O8CuTqW4a68dnd6lW1UDlwnVUkL+mUps8Bkxfftw4NIyslE4kHJd2ETExrhR77FG dej7u48fSVkysjoB26s5i6FAeVBI3ZQRxWYzlEgrUT/v3TrZy1Jgf4Z/MocW4Wz1 w8xgvgVossQKcW+ONSsPgv0/DjCqXiKUBzl5OFApEtO2BFnX3fWESvdg2PRz53PS IEkjDpNqLoyfcGC+5nrZh74WIuM6Z6R859SCNbSIhvDxI7mQoU6siUsWSHOgNpv7 U6CbeQnH0CCmvHh0b4qE8RtoS0P2TTDAOzxW8LzcnL4idsMjwJg= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:30 2025 by rpki-client on console.sobornost.net