$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/Yld0PLcu0kDFCM8FFa_e7PUkDBs.roa File: Yld0PLcu0kDFCM8FFa_e7PUkDBs.roa (raw, json) Hash identifier: Weph8XosCTlgY4xUw8VOwWRpLaXRiZ0P1fwqSL0Cp+s= Subject key identifier: 62:57:74:3C:B7:2E:D2:40:C5:08:CF:05:15:AF:DE:EC:F5:24:0C:1B Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 1D07 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Yld0PLcu0kDFCM8FFa_e7PUkDBs.roa Signing time: Fri 17 Jan 2025 01:26:46 +0000 ROA not before: Fri 17 Jan 2025 01:26:46 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 135377 IP address blocks: 106.75.192.0/24 maxlen: 24 106.75.193.0/24 maxlen: 24 106.75.194.0/24 maxlen: 24 106.75.195.0/24 maxlen: 24 106.75.196.0/24 maxlen: 24 106.75.197.0/24 maxlen: 24 106.75.198.0/24 maxlen: 24 106.75.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7431 (0x1d07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Jan 17 01:26:46 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6257743CB72ED240C508CF0515AFDEECF5240C1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:72:47:0d:98:43:c3:d3:4c:bf:a7:78:46: b5:4f:16:09:7a:d2:74:25:a0:52:3d:17:0c:fa:9f: 18:23:30:3e:22:19:79:51:50:7c:a6:05:a3:af:bf: 92:62:20:e5:00:59:8a:a5:af:ee:e0:7a:67:b8:de: 60:12:cd:62:38:a2:2c:15:a0:40:dd:eb:f5:c4:26: 53:c4:30:a7:fa:68:4e:b9:42:5e:9b:12:4f:4d:39: ee:c0:cc:f5:c9:ad:24:12:28:e1:84:f1:07:20:88: 2d:ab:4b:20:10:2a:bb:f5:f4:0e:36:d1:1f:54:48: e5:bd:a8:d0:0b:cf:89:0c:5a:e5:3d:ef:57:ce:ea: b6:8d:ce:cc:bc:16:df:7c:5b:06:dc:25:c2:d4:57: ee:0d:5b:ff:15:80:ff:e2:d0:56:ec:fb:c5:00:0a: 91:6b:7a:ff:45:0a:bb:bb:50:58:06:c3:43:40:d5: 7a:ff:34:77:02:bd:8a:81:df:e1:f8:ad:9c:ac:c8: 57:53:89:a6:6d:82:51:3d:52:82:86:2b:97:9a:85: b2:5c:ab:2d:d2:bb:5a:61:0d:76:44:9f:0d:39:a8: 9e:04:ea:2e:1d:c8:d0:d4:3e:ea:02:28:ba:e2:d8: 29:94:d7:66:51:00:63:f1:60:18:6b:38:3b:0f:e1: 62:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:57:74:3C:B7:2E:D2:40:C5:08:CF:05:15:AF:DE:EC:F5:24:0C:1B X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Yld0PLcu0kDFCM8FFa_e7PUkDBs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.192.0/21 Signature Algorithm: sha256WithRSAEncryption af:a1:6f:7f:3d:9d:ac:32:f4:a2:c3:9d:35:5b:22:e6:34:c7: 1b:7d:70:af:3a:71:c5:33:55:22:80:5e:2a:c5:d4:de:d6:19: 91:1a:35:2d:12:89:6e:4d:2a:4d:2c:20:c7:e7:2f:5d:45:9f: 69:ce:00:c7:2d:97:66:f2:af:da:c2:02:18:08:e4:13:fb:70: 3b:39:4d:39:4c:26:53:4b:3e:96:24:4a:6e:eb:59:91:c7:79: dd:62:c4:3d:46:93:e3:e8:99:5f:a4:33:4b:a2:6f:10:69:fa: a4:c0:c4:58:e5:53:6c:4e:8a:3c:c5:0d:70:de:c2:a2:c5:8f: 5a:75:b2:02:47:9d:f7:93:47:d9:49:ea:54:50:28:dc:a1:ba: 71:41:fc:87:f2:ff:cd:ea:06:aa:65:c6:08:60:b3:da:1b:76: 7a:18:ad:74:04:0e:55:c3:a8:5f:b7:3b:04:d2:54:c2:bf:92: 01:3d:db:f2:0d:80:91:8a:c5:18:72:2e:e4:06:81:e9:b2:d9: 38:e5:ef:fe:31:06:4a:dd:44:04:99:38:e3:87:20:08:95:de: 3c:77:cf:3d:79:6b:88:7e:1a:b4:75:12:77:e3:f1:a6:9b:2b: 09:8d:da:f8:7d:f6:f4:49:09:f8:a3:56:f9:e9:b6:90:f1:b7: e8:ab:c1:ef -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTAxMTcw MTI2NDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYyNTc3NDNDQjcyRUQy NDBDNTA4Q0YwNTE1QUZERUVDRjUyNDBDMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvtnJHDZhDw9NMv6d4RrVPFgl60nQloFI9Fwz6nxgjMD4iGXlR UHymBaOvv5JiIOUAWYqlr+7geme43mASzWI4oiwVoEDd6/XEJlPEMKf6aE65Ql6b Ek9NOe7AzPXJrSQSKOGE8QcgiC2rSyAQKrv19A420R9USOW9qNALz4kMWuU971fO 6raNzsy8Ft98WwbcJcLUV+4NW/8VgP/i0Fbs+8UACpFrev9FCru7UFgGw0NA1Xr/ NHcCvYqB3+H4rZysyFdTiaZtglE9UoKGK5eahbJcqy3Su1phDXZEnw05qJ4E6i4d yNDUPuoCKLri2CmU12ZRAGPxYBhrODsP4WKjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYld0PLcu0kDFCM8FFa/e7PUkDBswHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L1lsZDBQTGN1MGtERkNN OEZGYV9lN1BVa0RCcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BANqS8AwDQYJKoZIhvcNAQELBQADggEBAK+hb389nawy9KLDnTVbIuY0xxt9cK86 ccUzVSKAXirF1N7WGZEaNS0SiW5NKk0sIMfnL11Fn2nOAMctl2byr9rCAhgI5BP7 cDs5TTlMJlNLPpYkSm7rWZHHed1ixD1Gk+PomV+kM0uibxBp+qTAxFjlU2xOijzF DXDewqLFj1p1sgJHnfeTR9lJ6lRQKNyhunFB/Ify/83qBqplxghgs9obdnoYrXQE DlXDqF+3OwTSVMK/kgE92/INgJGKxRhyLuQGgemy2Tjl7/4xBkrdRASZOOOHIAiV 3jx3zz15a4h+GrR1Enfj8aabKwmN2vh99vRJCfijVvnptpDxt+irwe8= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:30 2025 by rpki-client on console.sobornost.net