$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/8XuaQYWqAosk5TuaOf6-1JtuKSA.roa File: 8XuaQYWqAosk5TuaOf6-1JtuKSA.roa (raw, json) Hash identifier: pxCC0uWdsQUNhiPuaSwbuV4Q37Ms9JGXEfduetoli9Y= Subject key identifier: F1:7B:9A:41:85:AA:02:8B:24:E5:3B:9A:39:FE:BE:D4:9B:6E:29:20 Certificate issuer: /CN=F07EA8449694AA3572EE15A0D86B5E0EB4A08504 Certificate serial: 1F35 Authority key identifier: F0:7E:A8:44:96:94:AA:35:72:EE:15:A0:D8:6B:5E:0E:B4:A0:85:04 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8H6oRJaUqjVy7hWg2GteDrSghQQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8XuaQYWqAosk5TuaOf6-1JtuKSA.roa Signing time: Fri 21 Mar 2025 03:28:11 +0000 ROA not before: Fri 21 Mar 2025 03:28:11 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59000 IP address blocks: 2401:5180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8H6oRJaUqjVy7hWg2GteDrSghQQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8H6oRJaUqjVy7hWg2GteDrSghQQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8H6oRJaUqjVy7hWg2GteDrSghQQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7989 (0x1f35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07EA8449694AA3572EE15A0D86B5E0EB4A08504 Validity Not Before: Mar 21 03:28:11 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F17B9A4185AA028B24E53B9A39FEBED49B6E2920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:ae:c6:9c:28:16:24:8b:a8:0e:a3:82:33: 8e:66:5f:bc:29:a7:df:a8:0f:f7:90:29:8f:6e:df: 6c:b6:61:22:b3:f7:e9:50:30:a0:47:71:07:26:31: 65:f9:95:51:8a:1b:c5:19:97:bb:2c:e8:9d:e8:95: 71:11:a1:d9:8d:2b:9c:f4:19:41:a6:e9:75:d8:48: da:c8:4a:84:62:9b:75:cd:96:a4:a7:b7:b7:dc:f9: 52:44:ca:8c:c7:e6:89:3e:6e:36:da:f2:0f:be:84: 6d:70:68:7b:1b:32:0d:62:c6:93:26:32:b7:f2:36: 82:22:c0:4e:06:ae:e4:f4:2a:13:f9:9a:eb:83:99: 6a:9f:e2:ee:ed:20:10:62:b0:c2:05:2a:5d:84:4a: b6:fa:d1:16:c2:5c:ee:80:d8:88:a4:4e:a4:0b:e4: 22:ba:a2:7a:53:ea:b2:a5:a2:03:47:bb:d6:87:27: a6:b6:37:59:87:96:4e:b9:ef:64:fb:04:fb:5d:89: 62:2c:f1:f4:da:05:ef:ea:1a:38:25:96:63:1a:08: 73:c3:eb:bf:a9:a7:1b:69:44:31:f3:ac:ad:da:82: 95:be:1e:99:cf:c6:df:a0:38:a8:15:b8:51:37:d5: a0:31:ca:a9:cb:d1:77:5c:4a:93:e6:07:df:4c:41: b8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7B:9A:41:85:AA:02:8B:24:E5:3B:9A:39:FE:BE:D4:9B:6E:29:20 X509v3 Authority Key Identifier: keyid:F0:7E:A8:44:96:94:AA:35:72:EE:15:A0:D8:6B:5E:0E:B4:A0:85:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8H6oRJaUqjVy7hWg2GteDrSghQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8H6oRJaUqjVy7hWg2GteDrSghQQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8XuaQYWqAosk5TuaOf6-1JtuKSA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:5180::/32 Signature Algorithm: sha256WithRSAEncryption 9d:dc:2d:df:29:c3:36:4b:7f:2c:ee:c7:2c:ca:89:78:70:09: 7d:ec:15:26:66:3f:8e:ff:3d:38:c2:b0:6d:3f:a0:2c:81:ef: 4f:f4:fa:40:6d:08:07:d3:3e:ef:62:71:1e:6c:57:de:70:a3: cf:fc:dc:0b:aa:05:ae:94:3c:c8:81:64:4f:89:07:9d:81:9c: 4d:af:cd:2a:1a:c3:68:50:8f:04:bc:e5:48:eb:4a:c1:33:a5: 39:2f:5d:b0:0e:02:74:be:0d:41:ef:62:4a:af:af:81:be:46: 71:bd:8e:ae:b8:b3:9a:3a:8f:6c:78:36:ce:15:f5:82:83:63: 6f:48:04:91:90:cb:6b:52:b7:6d:4b:1e:97:ab:3f:b7:20:e8: 01:0a:34:6c:15:eb:e6:c3:35:10:92:e9:18:a8:22:28:e8:6f: 36:ac:a8:cd:30:45:df:8b:48:71:21:9a:f0:23:8c:eb:e6:5b: e4:4a:16:0f:9a:53:13:52:b8:04:4d:77:4b:9e:da:e6:e5:17: 8a:74:ad:d5:35:00:01:50:7a:c5:2d:0f:5a:d6:54:3a:36:55: d1:85:8d:14:d3:ad:60:bd:64:a0:e0:7d:e9:aa:77:33:08:36: 54:9b:42:26:3e:48:8c:36:2a:e8:c7:75:7c:54:96:6f:2a:88: 61:8e:79:dd -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICHzUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjA3 RUE4NDQ5Njk0QUEzNTcyRUUxNUEwRDg2QjVFMEVCNEEwODUwNDAeFw0yNTAzMjEw MzI4MTFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEYxN0I5QTQxODVBQTAy OEIyNEU1M0I5QTM5RkVCRUQ0OUI2RTI5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyLa7GnCgWJIuoDqOCM45mX7wpp9+oD/eQKY9u32y2YSKz9+lQ MKBHcQcmMWX5lVGKG8UZl7ss6J3olXERodmNK5z0GUGm6XXYSNrISoRim3XNlqSn t7fc+VJEyozH5ok+bjba8g++hG1waHsbMg1ixpMmMrfyNoIiwE4GruT0KhP5muuD mWqf4u7tIBBisMIFKl2ESrb60RbCXO6A2IikTqQL5CK6onpT6rKlogNHu9aHJ6a2 N1mHlk6572T7BPtdiWIs8fTaBe/qGjgllmMaCHPD67+ppxtpRDHzrK3agpW+HpnP xt+gOKgVuFE31aAxyqnL0XdcSpPmB99MQbghAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU8XuaQYWqAosk5TuaOf6+1JtuKSAwHwYDVR0jBBgwFoAU8H6oRJaUqjVy7hWg 2GteDrSghQQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ4 LzhINm9SSmFVcWpWeTdoV2cyR3RlRHJTZ2hRUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOEg2b1JKYVVxalZ5N2hXZzJHdGVEclNnaFFRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ4LzhYdWFRWVdxQW9zazVU dWFPZjYtMUp0dUtTQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAVGAMA0GCSqGSIb3DQEBCwUAA4IBAQCd3C3fKcM2S38s7scsyol4cAl97BUm Zj+O/z04wrBtP6Asge9P9PpAbQgH0z7vYnEebFfecKPP/NwLqgWulDzIgWRPiQed gZxNr80qGsNoUI8EvOVI60rBM6U5L12wDgJ0vg1B72JKr6+BvkZxvY6uuLOaOo9s eDbOFfWCg2NvSASRkMtrUrdtSx6Xqz+3IOgBCjRsFevmwzUQkukYqCIo6G82rKjN MEXfi0hxIZrwI4zr5lvkShYPmlMTUrgETXdLntrm5ReKdK3VNQABUHrFLQ9a1lQ6 NlXRhY0U061gvWSg4H3pqnczCDZUm0ImPkiMNirox3V8VJZvKohhjnnd -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:30 2025 by rpki-client on console.sobornost.net