$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/S4HbotJRQ5_GhRWt9jAb8IEQHDw.roa File: S4HbotJRQ5_GhRWt9jAb8IEQHDw.roa (raw, json) Hash identifier: otv2lZAvLzrW3EDlzi9Lnv7aEft9dRekQtock8hNwT0= Subject key identifier: 4B:81:DB:A2:D2:51:43:9F:C6:85:15:AD:F6:30:1B:F0:81:10:1C:3C Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 1D05 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/S4HbotJRQ5_GhRWt9jAb8IEQHDw.roa Signing time: Fri 17 Jan 2025 01:26:46 +0000 ROA not before: Fri 17 Jan 2025 01:26:46 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 58466 IP address blocks: 2401:3480:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7429 (0x1d05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Jan 17 01:26:46 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4B81DBA2D251439FC68515ADF6301BF081101C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:ff:99:29:d5:a5:21:bc:7a:cc:91:dd:ae: 31:23:dd:3c:25:56:ff:6c:29:7d:a1:b8:f2:23:dd: 59:2d:11:72:3e:36:72:80:d8:00:e6:ce:00:6b:ae: 04:d3:e7:83:51:eb:70:62:06:49:61:72:39:af:9c: 71:0e:63:71:e0:e0:d7:a2:6e:9f:b2:55:c7:ad:6e: f8:9c:24:ec:14:9a:81:5a:ba:f9:ec:4f:8b:c2:1f: 09:fc:07:f1:00:c7:2c:5e:fc:4a:c9:6d:58:44:95: fe:62:db:9a:10:db:45:4e:0e:64:86:e0:a4:80:5c: 5b:10:f1:13:78:6a:9d:57:e1:46:cc:ab:7c:97:5c: 33:f2:cf:00:14:fe:09:92:6b:fc:e5:91:ec:16:0a: 64:21:37:cd:c2:9c:af:75:05:1b:0c:c7:64:60:45: 3c:69:8f:9e:b3:54:8b:eb:f4:fd:84:69:20:d4:a8: 23:a8:9f:76:b7:d9:16:a1:39:bd:7b:12:51:56:ce: 23:af:81:cf:ea:f2:45:93:5d:13:7d:0e:44:d1:ad: 02:dd:75:ce:20:e3:8a:e2:78:db:cd:32:e2:cb:f3: 1d:67:69:e0:9a:53:ad:eb:70:b8:4b:c9:74:9d:e6: 30:68:3b:e9:1c:38:6e:35:0a:30:1e:c1:08:e8:10: 1c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:81:DB:A2:D2:51:43:9F:C6:85:15:AD:F6:30:1B:F0:81:10:1C:3C X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/S4HbotJRQ5_GhRWt9jAb8IEQHDw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:3480:3000::/36 Signature Algorithm: sha256WithRSAEncryption a5:44:f2:f8:2e:a9:2b:64:85:eb:cc:b7:99:bd:a0:2c:81:96: 54:a1:34:2b:e1:53:f0:1d:a5:7c:27:fb:71:eb:37:4e:83:4a: f5:f8:48:6b:02:5e:8f:9b:f9:4b:37:d6:b5:18:e8:a7:36:b4: 76:5d:23:6f:97:1a:f5:aa:a6:3f:03:15:0e:c1:a3:09:06:8e: 11:de:64:2d:d7:c2:7b:59:23:44:c8:be:a4:fe:54:d1:93:95: 0b:44:54:88:11:15:61:74:f7:08:73:4a:36:48:06:86:2f:a9: 32:31:60:cd:dd:6c:ae:dd:43:bd:cf:03:0b:dd:2f:a4:97:ed: f3:d3:66:a6:e2:50:42:ca:8f:ec:90:2e:66:8d:c6:65:93:02: 0d:e0:0c:82:64:0e:51:18:c7:ea:b0:9b:79:da:9c:67:22:5d: 64:60:d9:33:29:84:d2:d4:df:e7:55:91:cf:b2:a9:4f:6d:db: ab:78:e1:f1:fa:74:78:a9:cc:ab:34:92:84:00:ff:b8:4c:24: 3e:ae:c3:1d:8b:d5:17:24:c5:7f:bf:00:ed:41:07:13:a0:06: f2:02:e3:ef:3e:e5:f5:8c:b9:2b:f8:3b:ee:33:1c:77:22:1e: 00:a3:86:e1:28:b7:e9:d8:73:8e:b1:09:66:82:b8:9b:87:ae: cf:d4:20:1b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTAxMTcw MTI2NDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRCODFEQkEyRDI1MTQz OUZDNjg1MTVBREY2MzAxQkYwODExMDFDM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7BP+ZKdWlIbx6zJHdrjEj3TwlVv9sKX2huPIj3VktEXI+NnKA 2ADmzgBrrgTT54NR63BiBklhcjmvnHEOY3Hg4Neibp+yVcetbvicJOwUmoFauvns T4vCHwn8B/EAxyxe/ErJbVhElf5i25oQ20VODmSG4KSAXFsQ8RN4ap1X4UbMq3yX XDPyzwAU/gmSa/zlkewWCmQhN83CnK91BRsMx2RgRTxpj56zVIvr9P2EaSDUqCOo n3a32RahOb17ElFWziOvgc/q8kWTXRN9DkTRrQLddc4g44rieNvNMuLL8x1naeCa U63rcLhLyXSd5jBoO+kcOG41CjAewQjoEBzTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUS4HbotJRQ5/GhRWt9jAb8IEQHDwwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L1M0SGJvdEpSUTVfR2hS V3Q5akFiOElFUUhEdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD BgQkATSAMDANBgkqhkiG9w0BAQsFAAOCAQEApUTy+C6pK2SF68y3mb2gLIGWVKE0 K+FT8B2lfCf7ces3ToNK9fhIawJej5v5SzfWtRjopza0dl0jb5ca9aqmPwMVDsGj CQaOEd5kLdfCe1kjRMi+pP5U0ZOVC0RUiBEVYXT3CHNKNkgGhi+pMjFgzd1srt1D vc8DC90vpJft89NmpuJQQsqP7JAuZo3GZZMCDeAMgmQOURjH6rCbedqcZyJdZGDZ MymE0tTf51WRz7KpT23bq3jh8fp0eKnMqzSShAD/uEwkPq7DHYvVFyTFf78A7UEH E6AG8gLj7z7l9Yy5K/g77jMcdyIeAKOG4Si36dhzjrEJZoK4m4euz9QgGw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:30 2025 by rpki-client on console.sobornost.net