$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/rN5X1L8tl_GX_nzqwu1OyA5bT10.roa File: rN5X1L8tl_GX_nzqwu1OyA5bT10.roa (raw, json) Hash identifier: Gdm71Ynfr1CK1VYWBpYU6mNFZ9abPsblKlI3Q/vvryI= Subject key identifier: AC:DE:57:D4:BF:2D:97:F1:97:FE:7C:EA:C2:ED:4E:C8:0E:5B:4F:5D Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 1D03 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/rN5X1L8tl_GX_nzqwu1OyA5bT10.roa Signing time: Fri 17 Jan 2025 01:26:45 +0000 ROA not before: Fri 17 Jan 2025 01:26:45 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 23724 IP address blocks: 2401:3480::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7427 (0x1d03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Jan 17 01:26:45 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=ACDE57D4BF2D97F197FE7CEAC2ED4EC80E5B4F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:9e:05:4f:96:7f:e7:ef:21:57:1f:34:47: 29:d9:cf:51:d0:34:4e:43:43:9e:26:67:f6:25:3b: 0c:c0:2a:f8:e1:03:cf:68:c8:af:71:b3:42:24:2b: 7b:d1:77:49:76:52:63:67:2e:c0:aa:1c:e8:3f:d6: eb:24:50:31:e7:f8:d5:b9:3a:1c:3b:78:89:cb:42: bb:13:8f:55:a5:b3:b1:b9:0f:55:e9:23:d2:0e:5f: 2f:a8:4c:bc:87:73:b2:0e:23:b1:b4:77:b1:66:07: 1f:29:29:0b:0d:d5:c0:97:36:2e:f1:93:03:d6:b0: 06:f5:79:e7:f4:d2:4b:0d:9a:bf:6c:be:82:b4:8d: f2:a1:1d:f7:77:b0:e4:7b:97:dd:05:f9:77:16:2f: f5:a5:8e:5c:fa:0d:84:66:97:fd:97:f6:ae:13:47: f2:41:d9:ae:64:0e:eb:02:8d:dc:3a:a1:8a:5a:cd: fd:97:95:97:1c:d6:b4:e5:31:7f:3e:f4:07:4e:23: d5:c9:24:c0:97:fc:56:0a:70:29:01:4a:5f:83:c2: 56:27:d0:4b:57:d2:5a:c6:e9:db:7a:78:59:b2:83: f1:00:85:ef:ea:a7:f2:0a:8b:da:27:ea:a0:d0:b5: d4:7d:4f:46:75:e6:19:dd:9b:f0:45:6b:0e:4d:3b: 92:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DE:57:D4:BF:2D:97:F1:97:FE:7C:EA:C2:ED:4E:C8:0E:5B:4F:5D X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/rN5X1L8tl_GX_nzqwu1OyA5bT10.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:3480::/36 Signature Algorithm: sha256WithRSAEncryption b7:90:c1:6e:22:9a:20:6b:d7:c5:98:ec:65:9b:35:9e:a0:a1: 96:33:27:f2:b1:28:98:59:a2:ca:68:74:b3:43:2c:dd:72:df: a7:11:c8:30:f3:f9:04:fa:99:4f:4d:f0:72:89:df:5f:7d:7d: 9a:fa:ab:45:c8:0f:b7:1b:37:4f:0e:99:6d:0d:bc:76:87:98: fb:71:f6:6a:72:1c:a3:aa:04:3b:29:20:df:90:b0:62:e8:94: 1e:2e:c3:45:4c:a2:f6:e7:a0:07:a1:d5:ff:c3:da:2a:e6:26: 4f:a7:9c:18:55:bc:17:83:2c:37:7a:f3:03:84:09:25:9b:b7: a7:bf:40:e4:94:db:f9:c8:8c:b8:d2:1f:36:71:ee:15:99:ed: 0e:b1:ef:85:ab:6a:7a:85:24:b0:42:a1:ce:5d:ef:2f:7c:ed: f4:8b:e5:15:54:0f:93:da:d2:6c:dc:df:ef:a6:41:ba:87:28: eb:af:38:45:1f:aa:3b:c0:90:94:8b:a1:03:9e:5a:23:24:a0: 56:a0:a9:4e:3c:7a:92:25:15:f2:08:e4:ef:7d:9f:8f:41:82: 84:c2:5a:1d:1e:6e:c4:cd:9f:8e:95:7c:4e:db:26:77:f6:98: 94:c8:ee:8f:7f:96:d2:db:cf:9c:ed:17:b6:2b:65:73:d4:dd: db:6d:3f:ce -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTAxMTcw MTI2NDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFDREU1N0Q0QkYyRDk3 RjE5N0ZFN0NFQUMyRUQ0RUM4MEU1QjRGNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtX54FT5Z/5+8hVx80RynZz1HQNE5DQ54mZ/YlOwzAKvjhA89o yK9xs0IkK3vRd0l2UmNnLsCqHOg/1uskUDHn+NW5Ohw7eInLQrsTj1Wls7G5D1Xp I9IOXy+oTLyHc7IOI7G0d7FmBx8pKQsN1cCXNi7xkwPWsAb1eef00ksNmr9svoK0 jfKhHfd3sOR7l90F+XcWL/Wljlz6DYRml/2X9q4TR/JB2a5kDusCjdw6oYpazf2X lZcc1rTlMX8+9AdOI9XJJMCX/FYKcCkBSl+DwlYn0EtX0lrG6dt6eFmyg/EAhe/q p/IKi9on6qDQtdR9T0Z15hndm/BFaw5NO5JnAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUrN5X1L8tl/GX/nzqwu1OyA5bT10wHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L3JONVgxTDh0bF9HWF9u enF3dTFPeUE1YlQxMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD BgQkATSAADANBgkqhkiG9w0BAQsFAAOCAQEAt5DBbiKaIGvXxZjsZZs1nqChljMn 8rEomFmiymh0s0Ms3XLfpxHIMPP5BPqZT03wconfX319mvqrRcgPtxs3Tw6ZbQ28 doeY+3H2anIco6oEOykg35CwYuiUHi7DRUyi9uegB6HV/8PaKuYmT6ecGFW8F4Ms N3rzA4QJJZu3p79A5JTb+ciMuNIfNnHuFZntDrHvhatqeoUksEKhzl3vL3zt9Ivl FVQPk9rSbNzf76ZBuoco6684RR+qO8CQlIuhA55aIySgVqCpTjx6kiUV8gjk732f j0GChMJaHR5uxM2fjpV8Ttsmd/aYlMjuj3+W0tvPnO0Xtitlc9Td220/zg== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:30 2025 by rpki-client on console.sobornost.net