$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/hC1yd7Z1V1yR6zcGwks9HqiNcEw.roa File: hC1yd7Z1V1yR6zcGwks9HqiNcEw.roa (raw, json) Hash identifier: dsIbbt1WpMRyY2vfj41ypWdhMqPHTfHT9+aLc67/SxI= Subject key identifier: 84:2D:72:77:B6:75:57:5C:91:EB:37:06:C2:4B:3D:1E:A8:8D:70:4C Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 11CE Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/hC1yd7Z1V1yR6zcGwks9HqiNcEw.roa Signing time: Fri 14 Mar 2025 09:32:38 +0000 ROA not before: Fri 14 Mar 2025 09:32:38 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.47.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 21:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4558 (0x11ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Mar 14 09:32:38 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=842D7277B675575C91EB3706C24B3D1EA88D704C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:57:e8:45:0f:ce:1f:3d:b0:cd:7c:70:16: 8c:82:2e:4f:95:7c:96:55:91:54:5a:93:36:c6:f4: 33:3c:48:6b:d3:f3:d2:28:96:f5:20:69:69:6e:53: 34:40:f9:46:c7:4c:9c:42:d5:76:01:e8:4e:52:94: 78:2e:03:9b:3d:ed:e1:21:72:0f:05:56:ad:09:a6: ed:37:cb:43:23:fa:5a:4d:f8:7e:8a:bf:03:08:c2: 3b:5c:67:e0:4f:e4:82:b3:52:88:cb:24:6f:39:f9: 0d:e8:40:06:ed:d2:88:a0:55:e3:57:b9:05:c7:20: bc:70:a8:5b:e0:74:df:41:7d:3c:fa:0c:bb:77:97: b9:be:6b:86:e3:d9:5a:6b:36:b3:56:de:90:c3:94: da:d0:87:52:03:80:ee:2e:c1:12:fe:51:84:85:12: bd:29:85:c9:ca:eb:cb:d9:e2:4e:ae:b5:e0:49:da: 3d:1e:66:6a:9b:07:bd:a6:b8:03:ff:d6:e8:5c:5e: a4:f5:ab:54:10:a0:41:1c:0b:21:50:15:2f:da:95: 1d:ce:22:03:e8:53:42:bd:85:92:d6:7a:6c:42:5a: d8:5a:b5:bb:2c:00:b8:72:9b:58:45:87:d6:f3:34: 43:15:5a:ed:75:5c:5e:d7:5c:01:3e:a8:2a:9f:96: 8e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2D:72:77:B6:75:57:5C:91:EB:37:06:C2:4B:3D:1E:A8:8D:70:4C X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/hC1yd7Z1V1yR6zcGwks9HqiNcEw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.228.0/23 Signature Algorithm: sha256WithRSAEncryption 57:ae:25:3d:9b:f7:9b:40:76:ec:39:a0:cf:77:a6:8e:e6:59: 9c:a8:20:0d:42:25:f4:39:f7:b4:64:21:93:90:1c:58:c1:cc: a8:1a:8a:ed:5a:1a:52:82:30:44:61:ab:38:55:b7:83:9d:42: e9:c1:ee:a4:fc:59:34:24:0a:f2:98:f1:62:2e:65:12:aa:fa: e6:b1:43:14:69:25:af:74:ec:1b:5b:db:58:1f:5e:d1:5b:cc: 48:ce:fa:97:12:4b:04:67:cb:1e:e4:05:9b:8c:c7:e5:76:b6: f2:0d:9f:cc:9e:4c:57:39:9a:07:04:65:0d:c6:5f:83:00:7c: b1:b6:dd:eb:1f:69:52:b4:50:98:92:ad:59:44:bc:35:49:8e: 9a:9a:fa:93:db:19:1c:09:8d:e6:c4:ea:52:af:9d:8a:64:04: d4:9b:8b:bf:59:68:dc:22:79:4d:65:8e:f0:80:da:9f:a4:87: b6:21:10:28:13:59:a4:c0:5e:8b:9f:dd:93:e0:08:77:94:fa: 8c:cd:cd:65:b5:35:3b:0d:55:36:cd:59:cb:e7:9d:3b:44:bc: 95:c0:39:b8:79:e4:5a:6c:3a:47:cc:79:bf:33:3b:35:38:a1: 7b:0d:93:57:93:9a:09:7a:33:6f:78:ae:8b:99:51:4f:b8:e5: 76:ad:48:ed -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAzMTQw OTMyMzhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDg0MkQ3Mjc3QjY3NTU3 NUM5MUVCMzcwNkMyNEIzRDFFQTg4RDcwNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAjlfoRQ/OHz2wzXxwFoyCLk+VfJZVkVRakzbG9DM8SGvT89Io lvUgaWluUzRA+UbHTJxC1XYB6E5SlHguA5s97eEhcg8FVq0Jpu03y0Mj+lpN+H6K vwMIwjtcZ+BP5IKzUojLJG85+Q3oQAbt0oigVeNXuQXHILxwqFvgdN9BfTz6DLt3 l7m+a4bj2VprNrNW3pDDlNrQh1IDgO4uwRL+UYSFEr0phcnK68vZ4k6uteBJ2j0e ZmqbB72muAP/1uhcXqT1q1QQoEEcCyFQFS/alR3OIgPoU0K9hZLWemxCWthatbss ALhym1hFh9bzNEMVWu11XF7XXAE+qCqflo5RAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUhC1yd7Z1V1yR6zcGwks9HqiNcEwwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvaEMxeWQ3WjFWMXlS NnpjR3drczlIcWlOY0V3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv5DANBgkqhkiG9w0BAQsFAAOCAQEAV64lPZv3m0B27Dmgz3emjuZZnKgg DUIl9Dn3tGQhk5AcWMHMqBqK7VoaUoIwRGGrOFW3g51C6cHupPxZNCQK8pjxYi5l Eqr65rFDFGklr3TsG1vbWB9e0VvMSM76lxJLBGfLHuQFm4zH5Xa28g2fzJ5MVzma BwRlDcZfgwB8sbbd6x9pUrRQmJKtWUS8NUmOmpr6k9sZHAmN5sTqUq+dimQE1JuL v1lo3CJ5TWWO8IDan6SHtiEQKBNZpMBei5/dk+AId5T6jM3NZbU1Ow1VNs1Zy+ed O0S8lcA5uHnkWmw6R8x5vzM7NTihew2TV5OaCXozb3iui5lRT7jldq1I7Q== -----END CERTIFICATE-----Generated at Sat Apr 26 17:34:26 2025 by rpki-client