$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/4g8739mpozJIxnRfhbWhnj8lB8k.roa File: 4g8739mpozJIxnRfhbWhnj8lB8k.roa (raw, json) Hash identifier: kcncDA0b99k07O3DsPmGaHSpLdClY56C8y1NkIlu4JE= Subject key identifier: E2:0F:3B:DF:D9:A9:A3:32:48:C6:74:5F:85:B5:A1:9E:3F:25:07:C9 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 11DA Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/4g8739mpozJIxnRfhbWhnj8lB8k.roa Signing time: Fri 14 Mar 2025 09:33:49 +0000 ROA not before: Fri 14 Mar 2025 09:33:49 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.47.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4570 (0x11da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Mar 14 09:33:49 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E20F3BDFD9A9A33248C6745F85B5A19E3F2507C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a8:d1:4b:74:57:42:3a:f9:d4:ca:9e:25:e5: b9:82:f8:fc:8d:c5:d7:56:0a:3a:c0:8c:05:d1:64: 65:52:39:65:84:97:aa:b9:ad:cc:18:ed:f2:56:71: 13:20:ed:c1:24:03:4f:c0:62:17:c9:b6:f2:be:16: d5:86:bb:65:f9:f7:86:c2:ba:43:79:e7:b9:b1:fb: a3:30:57:fe:5d:e5:29:20:ca:82:0b:84:fd:c7:22: 00:18:b1:e1:70:d5:af:87:07:68:93:8b:ff:0b:1c: d9:27:a1:b7:df:75:31:a6:d1:9d:02:bb:9a:6f:63: 02:15:e6:e9:a9:df:ab:98:21:4a:9b:fa:d1:58:df: ca:fc:87:67:21:d8:0d:0b:67:73:bf:47:17:c2:81: 45:d0:3b:85:0a:25:cc:a2:87:c9:40:0a:42:80:43: 72:64:e8:b1:02:61:5d:bc:f4:98:7f:e1:f5:85:91: d3:4d:08:00:d6:51:02:da:92:d8:79:71:50:0d:4a: b5:94:99:33:a2:ee:f9:36:6b:cb:b8:dc:f0:cb:43: 82:2c:4b:84:f5:d0:3c:5a:76:04:81:d6:22:35:d3: ae:4c:40:fa:a0:ed:49:aa:f3:30:a4:4c:51:88:f0: 2a:1e:5a:1f:57:e2:51:be:7c:c3:c3:88:df:eb:ff: 07:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0F:3B:DF:D9:A9:A3:32:48:C6:74:5F:85:B5:A1:9E:3F:25:07:C9 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/4g8739mpozJIxnRfhbWhnj8lB8k.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.144.0/20 Signature Algorithm: sha256WithRSAEncryption 77:d3:3f:04:3b:ea:d8:4d:aa:d3:a3:83:3c:3d:f1:80:df:fc: 81:c2:d6:98:28:9b:25:cc:18:10:d7:3a:04:c6:76:46:d8:c1: 1b:06:c5:25:41:c7:8e:be:5a:d9:76:5c:fd:04:1e:cd:d0:91: 2e:62:8b:ca:e6:df:d9:a6:5c:0a:c3:37:88:d2:40:ed:47:73: 3b:11:3d:ef:22:58:8d:28:13:2d:6c:0d:df:e6:b5:6c:7b:e5: dc:10:16:76:34:23:02:23:4e:be:b9:9d:9e:2e:ac:27:a3:ea: 73:9b:99:f0:55:80:0c:c6:28:df:ca:a2:0d:db:3b:44:67:1d: d8:3f:e3:8b:7e:65:8a:d1:b1:60:ca:c3:25:3b:2b:85:26:47: 86:2c:14:3c:51:39:30:ad:e7:fd:98:46:b8:f7:43:89:48:3a: 8b:58:47:0a:78:2e:66:f6:c2:d4:07:d7:57:72:f5:75:90:f0: 4b:d6:b7:f4:6d:f4:2c:f9:c7:91:6c:9f:89:d0:7c:76:db:5e: d0:c7:21:09:22:dd:e2:6f:23:51:76:6d:86:9e:80:8c:97:af: 53:ce:dd:0f:92:7b:32:36:35:b5:ba:a8:0b:f5:29:67:b6:a8: 33:c5:7c:49:df:aa:8c:b0:45:e9:1c:f8:b2:a0:bb:58:9a:db: a1:00:82:95 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAzMTQw OTMzNDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEUyMEYzQkRGRDlBOUEz MzI0OEM2NzQ1Rjg1QjVBMTlFM0YyNTA3QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfqNFLdFdCOvnUyp4l5bmC+PyNxddWCjrAjAXRZGVSOWWEl6q5 rcwY7fJWcRMg7cEkA0/AYhfJtvK+FtWGu2X594bCukN557mx+6MwV/5d5SkgyoIL hP3HIgAYseFw1a+HB2iTi/8LHNknobffdTGm0Z0Cu5pvYwIV5ump36uYIUqb+tFY 38r8h2ch2A0LZ3O/RxfCgUXQO4UKJcyih8lACkKAQ3Jk6LECYV289Jh/4fWFkdNN CADWUQLakth5cVANSrWUmTOi7vk2a8u43PDLQ4IsS4T10DxadgSB1iI1065MQPqg 7Umq8zCkTFGI8CoeWh9X4lG+fMPDiN/r/wfRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU4g8739mpozJIxnRfhbWhnj8lB8kwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvNGc4NzM5bXBvekpJ eG5SZmhiV2huajhsQjhrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHEvkDANBgkqhkiG9w0BAQsFAAOCAQEAd9M/BDvq2E2q06ODPD3xgN/8gcLW mCibJcwYENc6BMZ2RtjBGwbFJUHHjr5a2XZc/QQezdCRLmKLyubf2aZcCsM3iNJA 7UdzOxE97yJYjSgTLWwN3+a1bHvl3BAWdjQjAiNOvrmdni6sJ6Pqc5uZ8FWADMYo 38qiDds7RGcd2D/ji35litGxYMrDJTsrhSZHhiwUPFE5MK3n/ZhGuPdDiUg6i1hH CnguZvbC1AfXV3L1dZDwS9a39G30LPnHkWyfidB8dtte0MchCSLd4m8jUXZthp6A jJevU87dD5J7MjY1tbqoC/UpZ7aoM8V8Sd+qjLBF6Rz4sqC7WJrboQCClQ== -----END CERTIFICATE-----Generated at Sat Apr 26 15:37:02 2025 by rpki-client