$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/Cx_PMXrwCzMbeqeFlDPfklmRXzE.roa File: Cx_PMXrwCzMbeqeFlDPfklmRXzE.roa (raw, json) Hash identifier: sfsnweCmG/jHm5nbrPsozdJRdYLLaS3/WMbJAlYUq4E= Subject key identifier: 0B:1F:CF:31:7A:F0:0B:33:1B:7A:A7:85:94:33:DF:92:59:91:5F:31 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 1D0B Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Cx_PMXrwCzMbeqeFlDPfklmRXzE.roa Signing time: Fri 17 Jan 2025 01:26:47 +0000 ROA not before: Fri 17 Jan 2025 01:26:47 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4808 IP address blocks: 106.75.0.0/19 maxlen: 19 106.75.32.0/19 maxlen: 19 106.75.64.0/19 maxlen: 19 106.75.96.0/19 maxlen: 19 117.50.0.0/19 maxlen: 19 117.50.32.0/19 maxlen: 19 117.50.64.0/19 maxlen: 19 117.50.96.0/19 maxlen: 19 117.50.128.0/19 maxlen: 19 117.50.160.0/19 maxlen: 19 117.50.192.0/19 maxlen: 19 117.50.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7435 (0x1d0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Jan 17 01:26:47 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0B1FCF317AF00B331B7AA7859433DF9259915F31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:a8:00:9c:31:f1:88:b1:a7:15:e6:b4:9c: b8:03:ee:b4:02:7a:6d:f5:02:92:0f:95:23:3e:3c: 60:6e:fd:7e:19:02:b4:ff:bf:3b:68:e4:cd:6e:35: 63:1b:ed:e4:20:65:02:ca:88:09:c0:e8:e4:92:81: e2:49:ac:c9:ec:6b:57:7d:7f:7b:73:9a:c7:29:63: c9:17:8d:e6:17:df:81:3f:41:62:dc:7b:fc:f8:1b: 75:2e:23:1f:59:43:88:8f:01:5b:7d:be:52:0d:4c: d5:f9:81:76:e8:ec:2d:7b:d1:4b:72:1f:c7:fc:cd: eb:12:e2:07:0e:41:05:eb:a6:ac:38:19:31:9c:ad: 45:21:85:4f:30:65:4d:60:e8:8a:d1:b6:ff:14:c1: 8d:78:4a:a7:ff:0d:42:77:72:e4:31:0d:86:9d:b4: 37:5b:bf:96:c1:39:95:4e:f2:bf:a9:2b:73:11:16: c1:96:64:c4:7a:52:77:7b:32:97:57:7a:bd:fb:8f: 61:99:41:02:a2:62:d4:00:cc:a1:bc:a9:ef:c9:10: a2:6b:1d:46:4d:f3:7a:69:1c:50:52:c1:50:ae:1c: e2:1b:bb:65:56:c9:2c:c3:fa:bd:2a:3b:e7:80:be: 00:da:f9:cd:a6:88:70:7b:c2:4c:10:ee:78:33:04: 5d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1F:CF:31:7A:F0:0B:33:1B:7A:A7:85:94:33:DF:92:59:91:5F:31 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Cx_PMXrwCzMbeqeFlDPfklmRXzE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.0.0/17 117.50.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8b:c3:06:57:24:cf:d6:37:53:7c:8c:f6:ac:c1:24:55:f0:5b: a9:80:94:87:51:4c:97:92:e1:0d:1e:eb:2e:b2:16:00:bf:50: 44:e8:27:87:1e:d6:98:c2:d6:ab:2b:38:a5:d3:74:43:2a:17: 4f:76:8f:34:de:bb:46:49:4b:5c:5e:08:08:f6:b6:d0:0d:f3: d3:97:59:ea:66:e2:6a:eb:7c:5d:ee:38:1b:35:98:1e:34:06: 18:56:c1:56:66:8a:b4:0d:9d:a3:ea:64:ed:33:8f:52:b3:0f: a5:ab:3d:fd:e1:85:2f:83:af:7d:4c:b9:d8:e2:16:15:93:f7: b9:3e:74:31:bd:97:4b:63:1a:5a:0b:47:18:51:4d:ed:ae:b5: 4b:8e:2d:f0:9f:1c:c7:67:be:d2:21:4e:55:6a:c4:b9:db:07: e1:c9:81:62:5f:75:46:d6:1e:5c:9a:53:f2:a1:94:d7:af:00: 83:bb:3a:18:18:d7:22:35:1a:02:2c:7e:f5:b5:a9:e9:85:6b: b2:02:54:17:6e:61:55:c6:75:a0:ba:e7:bb:a1:20:63:3b:1e: 58:0c:3a:2e:16:ac:66:50:7c:61:b3:18:c8:3a:9d:bc:e5:14: ab:b0:27:92:37:c6:08:68:87:37:f7:6b:22:b4:27:f7:b5:8e: 71:97:11:45 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICHQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTAxMTcw MTI2NDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBCMUZDRjMxN0FGMDBC MzMxQjdBQTc4NTk0MzNERjkyNTk5MTVGMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR0KgAnDHxiLGnFea0nLgD7rQCem31ApIPlSM+PGBu/X4ZArT/ vzto5M1uNWMb7eQgZQLKiAnA6OSSgeJJrMnsa1d9f3tzmscpY8kXjeYX34E/QWLc e/z4G3UuIx9ZQ4iPAVt9vlINTNX5gXbo7C170UtyH8f8zesS4gcOQQXrpqw4GTGc rUUhhU8wZU1g6IrRtv8UwY14Sqf/DUJ3cuQxDYadtDdbv5bBOZVO8r+pK3MRFsGW ZMR6Und7MpdXer37j2GZQQKiYtQAzKG8qe/JEKJrHUZN83ppHFBSwVCuHOIbu2VW ySzD+r0qO+eAvgDa+c2miHB7wkwQ7ngzBF31AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUCx/PMXrwCzMbeqeFlDPfklmRXzEwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L0N4X1BNWHJ3Q3pNYmVx ZUZsRFBma2xtUlh6RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwJAYIKwYBBQUHAQcBAf8EFTATMBEEAgABMAsD BAdqSwADAwB1MjANBgkqhkiG9w0BAQsFAAOCAQEAi8MGVyTP1jdTfIz2rMEkVfBb qYCUh1FMl5LhDR7rLrIWAL9QROgnhx7WmMLWqys4pdN0QyoXT3aPNN67RklLXF4I CPa20A3z05dZ6mbiaut8Xe44GzWYHjQGGFbBVmaKtA2do+pk7TOPUrMPpas9/eGF L4OvfUy52OIWFZP3uT50Mb2XS2MaWgtHGFFN7a61S44t8J8cx2e+0iFOVWrEudsH 4cmBYl91RtYeXJpT8qGU168Ag7s6GBjXIjUaAix+9bWp6YVrsgJUF25hVcZ1oLrn u6EgYzseWAw6LhasZlB8YbMYyDqdvOUUq7AnkjfGCGiHN/drIrQn97WOcZcRRQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:30 2025 by rpki-client on console.sobornost.net