$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/qPTdKAqShrGpfL0vzX2Thwykdz4.roa File: qPTdKAqShrGpfL0vzX2Thwykdz4.roa (raw, json) Hash identifier: G5XyzrC9DKKQXTNoqtUT55LljRWAhx2tEjRJFr4VKkg= Subject key identifier: A8:F4:DD:28:0A:92:86:B1:A9:7C:BD:2F:CD:7D:93:87:0C:A4:77:3E Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 1D0D Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/qPTdKAqShrGpfL0vzX2Thwykdz4.roa Signing time: Fri 17 Jan 2025 01:26:48 +0000 ROA not before: Fri 17 Jan 2025 01:26:48 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 17621 IP address blocks: 106.75.208.0/20 maxlen: 20 106.75.224.0/20 maxlen: 20 106.75.240.0/20 maxlen: 20 113.31.96.0/20 maxlen: 20 113.31.112.0/20 maxlen: 20 113.31.144.0/20 maxlen: 20 113.31.160.0/20 maxlen: 20 113.31.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7437 (0x1d0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Jan 17 01:26:48 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=A8F4DD280A9286B1A97CBD2FCD7D93870CA4773E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:0f:6c:99:ba:ee:cd:58:c3:92:50:4f:ad: 79:36:4b:eb:08:6b:bc:e4:86:ee:6f:06:be:88:26: 46:05:fa:fb:22:d3:37:11:88:6c:17:10:e6:ff:94: 40:b0:91:9f:98:3b:2d:ea:49:fd:3a:fa:e7:47:8d: c4:2a:0f:1d:2e:59:3c:58:7e:81:2a:87:e2:2f:03: 8e:63:fd:6a:77:77:a8:65:51:51:f0:11:4c:c7:bb: 8d:99:54:99:1f:b7:ad:35:bf:bc:1d:5f:ce:9c:0d: 76:3b:ca:da:bb:36:b6:79:58:cf:49:79:93:91:4a: 68:ca:29:7f:f6:4e:33:7b:e9:95:6e:a5:5f:d5:d2: 9a:90:42:6a:80:1d:fa:fd:d8:60:05:22:96:37:00: c4:02:81:b3:d6:49:d9:ea:59:a4:6d:35:06:95:a1: 9a:6e:42:04:e2:10:43:38:e1:24:eb:6f:c6:e4:fc: 9e:9e:7b:46:b4:aa:bc:45:36:a6:89:7c:b0:e5:dc: a6:5d:06:d4:29:fa:10:74:c1:72:42:e5:17:28:ab: 65:6b:43:fd:d9:5d:d7:3f:0e:da:9d:bf:09:0a:ae: be:29:4d:8e:a2:ee:1c:23:35:62:db:69:25:72:2f: 46:ce:eb:8c:2e:21:f8:e2:bd:6a:62:d0:25:55:be: 7e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F4:DD:28:0A:92:86:B1:A9:7C:BD:2F:CD:7D:93:87:0C:A4:77:3E X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/qPTdKAqShrGpfL0vzX2Thwykdz4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.208.0-106.75.255.255 113.31.96.0/19 113.31.144.0-113.31.191.255 Signature Algorithm: sha256WithRSAEncryption 94:53:a8:9c:2f:01:0f:2f:aa:e8:12:8b:2b:7d:53:f8:ea:29: 1e:13:28:a9:4e:be:2d:b7:06:8d:48:fb:9e:4e:db:e1:9c:b2: c5:0c:81:1d:aa:a3:b8:51:4a:f9:ce:99:93:8d:35:bb:58:ce: 0f:4a:76:b7:60:64:9d:be:a5:91:04:13:b8:b6:89:7a:96:1c: 6d:aa:c8:91:0a:44:14:30:85:a9:08:24:40:49:1f:ed:ba:3a: 96:76:ac:99:62:cc:3b:bd:0b:c3:fd:2b:ff:95:61:01:99:90: e5:5c:6d:5c:ac:1d:02:e4:a3:6e:d0:af:27:ae:3a:0b:c8:4d: a6:1d:c1:07:e3:e0:b5:81:50:05:94:1b:1b:f7:5a:14:2b:cc: 9a:dc:8a:2a:ef:2b:12:d0:0a:ab:8f:a1:b7:c5:d7:41:ae:0e: 54:80:83:e4:3d:ac:2f:e4:d3:2f:90:4e:71:08:b1:d1:2a:21: d1:87:02:2f:5d:9e:ab:8b:b8:f1:47:80:c0:27:05:90:81:e2: f5:55:1f:83:72:c7:c4:87:16:90:ac:23:d6:f3:98:cc:fd:b9: 90:7c:1d:8a:79:56:78:be:76:62:f9:cf:f9:34:1d:e1:e9:98: 99:5d:23:66:39:86:ef:c1:16:76:bc:33:af:de:5a:09:65:f4: c4:30:cb:c4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTAxMTcw MTI2NDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEE4RjRERDI4MEE5Mjg2 QjFBOTdDQkQyRkNEN0Q5Mzg3MENBNDc3M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtMA9smbruzVjDklBPrXk2S+sIa7zkhu5vBr6IJkYF+vsi0zcR iGwXEOb/lECwkZ+YOy3qSf06+udHjcQqDx0uWTxYfoEqh+IvA45j/Wp3d6hlUVHw EUzHu42ZVJkft601v7wdX86cDXY7ytq7NrZ5WM9JeZORSmjKKX/2TjN76ZVupV/V 0pqQQmqAHfr92GAFIpY3AMQCgbPWSdnqWaRtNQaVoZpuQgTiEEM44STrb8bk/J6e e0a0qrxFNqaJfLDl3KZdBtQp+hB0wXJC5Rcoq2VrQ/3ZXdc/DtqdvwkKrr4pTY6i 7hwjNWLbaSVyL0bO64wuIfjivWpi0CVVvn6jAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUqPTdKAqShrGpfL0vzX2Thwykdz4wHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L3FQVGRLQXFTaHJHcGZM MHZ6WDJUaHd5a2R6NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwOgYIKwYBBQUHAQcBAf8EKzApMCcEAgABMCEw CwMEBGpL0AMDAmpIAwQFcR9gMAwDBARxH5ADBAZxH4AwDQYJKoZIhvcNAQELBQAD ggEBAJRTqJwvAQ8vqugSiyt9U/jqKR4TKKlOvi23Bo1I+55O2+GcssUMgR2qo7hR SvnOmZONNbtYzg9KdrdgZJ2+pZEEE7i2iXqWHG2qyJEKRBQwhakIJEBJH+26OpZ2 rJlizDu9C8P9K/+VYQGZkOVcbVysHQLko27QryeuOgvITaYdwQfj4LWBUAWUGxv3 WhQrzJrciirvKxLQCquPobfF10GuDlSAg+Q9rC/k0y+QTnEIsdEqIdGHAi9dnquL uPFHgMAnBZCB4vVVH4Nyx8SHFpCsI9bzmMz9uZB8HYp5Vni+dmL5z/k0HeHpmJld I2Y5hu/BFna8M6/eWgll9MQwy8Q= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:30 2025 by rpki-client on console.sobornost.net