$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/kZ7okT2iuRiKRnTyHKlL9w8suR4.roa File: kZ7okT2iuRiKRnTyHKlL9w8suR4.roa (raw, json) Hash identifier: D3w0VtWVz0dQ3Gz6TcEqHhPmJxxA2QAfqzX36rDnMN4= Subject key identifier: 91:9E:E8:91:3D:A2:B9:18:8A:46:74:F2:1C:A9:4B:F7:0F:2C:B9:1E Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 0F98 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/kZ7okT2iuRiKRnTyHKlL9w8suR4.roa Signing time: Tue 26 Nov 2024 06:40:37 +0000 ROA not before: Tue 26 Nov 2024 06:40:37 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.46.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3992 (0xf98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Nov 26 06:40:37 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=919EE8913DA2B9188A4674F21CA94BF70F2CB91E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:8f:83:0e:bd:22:20:2a:c4:8c:db:3c:24: 32:96:0f:44:1d:5f:86:d3:b9:42:5d:ca:2b:54:32: 33:5e:7d:fc:71:12:cc:46:12:36:c0:d9:87:60:85: fb:f6:44:41:43:7b:d2:5c:21:f7:c7:57:97:07:c2: a1:3d:b9:67:09:98:4d:e9:44:f7:60:27:d4:0d:42: 45:d5:c7:55:b2:2a:08:25:76:00:f1:8e:6d:f3:0b: ef:51:31:98:12:22:46:1d:f1:47:e1:98:6e:89:26: 47:e5:56:b3:56:45:ec:dc:06:ca:6f:3f:c7:bd:eb: 9e:0e:ae:4e:27:df:45:2f:9c:d3:54:f4:31:99:0d: 30:d0:14:8b:6d:6c:67:6e:ee:44:be:f8:07:99:e4: 14:da:2b:dd:c0:de:c5:09:de:63:00:d8:73:c4:c6: 6e:48:b7:12:7b:2f:c1:50:af:08:e3:45:23:37:cc: 1e:88:9c:ee:18:a7:d1:4a:09:9c:d7:7c:3b:4b:f6: ed:05:2c:a5:90:b9:a9:9b:5b:1e:a6:30:dd:89:16: 99:ba:ba:4d:61:4e:5c:85:e9:d9:f8:83:4f:e7:6a: 08:a4:40:10:1b:c4:cb:39:4f:f1:1a:f0:0e:86:e7: 3f:17:87:cd:6f:a1:8b:b4:aa:54:b1:16:df:17:ea: ab:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9E:E8:91:3D:A2:B9:18:8A:46:74:F2:1C:A9:4B:F7:0F:2C:B9:1E X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/kZ7okT2iuRiKRnTyHKlL9w8suR4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.46.240.0/21 Signature Algorithm: sha256WithRSAEncryption 5f:0f:bf:71:e6:03:5b:b7:ce:4b:87:dd:25:e5:8d:18:bd:b1: d0:ed:f1:d5:84:3d:7e:f4:ee:0d:7b:01:da:94:2c:f0:c3:9c: 51:c1:4f:42:df:86:34:0f:90:04:e3:a8:7f:a2:09:f4:b3:a8: 3f:cb:f8:30:50:16:52:16:7c:76:c9:e2:68:df:fd:f0:44:79: 4f:99:3d:c3:fe:c0:99:31:9a:00:1f:4d:c0:57:b4:ee:92:a3: 8d:86:50:86:e1:16:90:35:c3:65:37:aa:b3:60:84:5d:43:b8: f7:75:1b:86:3e:ab:f7:f0:8c:9d:55:1b:ef:f6:6d:57:eb:58: d1:0e:77:2a:b9:81:03:6d:d8:0f:33:e5:b3:9c:92:cf:2a:3f: 7d:94:05:43:4c:eb:9a:95:b5:e7:9e:9c:4e:c1:bc:ff:69:49: 3c:a5:a0:f8:4d:6a:3c:75:37:6a:57:9a:ba:a0:fb:4c:64:b1: aa:e8:d2:04:01:ef:aa:d8:50:18:38:c6:16:54:f8:6c:68:24: 37:16:a8:35:02:e0:52:19:43:73:9f:cb:ba:17:49:dd:5b:71: 6b:c0:a9:e4:c5:13:ba:c0:0c:89:a1:57:2e:c3:4f:20:2f:49: dc:38:c2:38:f4:70:53:31:ce:8f:64:65:da:8a:16:48:5e:25: 5a:55:c9:5e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICD5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDExMjYw NjQwMzdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkxOUVFODkxM0RBMkI5 MTg4QTQ2NzRGMjFDQTk0QkY3MEYyQ0I5MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+I4+DDr0iICrEjNs8JDKWD0QdX4bTuUJdyitUMjNeffxxEsxG EjbA2Ydghfv2REFDe9JcIffHV5cHwqE9uWcJmE3pRPdgJ9QNQkXVx1WyKggldgDx jm3zC+9RMZgSIkYd8UfhmG6JJkflVrNWRezcBspvP8e9654Ork4n30UvnNNU9DGZ DTDQFIttbGdu7kS++AeZ5BTaK93A3sUJ3mMA2HPExm5ItxJ7L8FQrwjjRSM3zB6I nO4Yp9FKCZzXfDtL9u0FLKWQuambWx6mMN2JFpm6uk1hTlyF6dn4g0/nagikQBAb xMs5T/Ea8A6G5z8Xh81voYu0qlSxFt8X6qvvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUkZ7okT2iuRiKRnTyHKlL9w8suR4wHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQva1o3b2tUMml1UmlL Um5UeUhLbEw5dzhzdVI0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3Eu8DANBgkqhkiG9w0BAQsFAAOCAQEAXw+/ceYDW7fOS4fdJeWNGL2x0O3x 1YQ9fvTuDXsB2pQs8MOcUcFPQt+GNA+QBOOof6IJ9LOoP8v4MFAWUhZ8dsniaN/9 8ER5T5k9w/7AmTGaAB9NwFe07pKjjYZQhuEWkDXDZTeqs2CEXUO493Ubhj6r9/CM nVUb7/ZtV+tY0Q53KrmBA23YDzPls5ySzyo/fZQFQ0zrmpW1556cTsG8/2lJPKWg +E1qPHU3aleauqD7TGSxqujSBAHvqthQGDjGFlT4bGgkNxaoNQLgUhlDc5/LuhdJ 3Vtxa8Cp5MUTusAMiaFXLsNPIC9J3DjCOPRwUzHOj2Rl2ooWSF4lWlXJXg== -----END CERTIFICATE-----Generated at Sat Apr 26 15:30:58 2025 by rpki-client