$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/krEkJUKiojR4w7ASvi77HR1oxkk.roa File: krEkJUKiojR4w7ASvi77HR1oxkk.roa (raw, json) Hash identifier: 3vTZcwCZsaZScxBDMgZrBBxgcgdvwSLvKHRICIHqYVo= Subject key identifier: 92:B1:24:25:42:A2:A2:34:78:C3:B0:12:BE:2E:FB:1D:1D:68:C6:49 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 0F97 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/krEkJUKiojR4w7ASvi77HR1oxkk.roa Signing time: Tue 26 Nov 2024 06:40:36 +0000 ROA not before: Tue 26 Nov 2024 06:40:36 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.46.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3991 (0xf97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Nov 26 06:40:36 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=92B1242542A2A23478C3B012BE2EFB1D1D68C649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fb:57:62:91:90:7e:56:7b:94:01:37:16:e5: ce:57:c9:47:4e:b6:b4:7f:39:5d:2c:62:4f:73:d4: a9:dc:fc:dd:c1:0a:23:c5:6d:a9:59:4d:f0:f1:00: b1:76:85:5b:a8:04:a0:e1:f6:db:3f:3d:69:09:3c: a8:1f:4a:7f:49:ec:fb:d2:01:6b:3c:a0:a0:05:29: 07:c1:ae:5a:18:7d:1d:75:5e:6e:e1:75:99:08:5a: 87:9b:7e:86:e8:dd:3a:92:b8:6a:12:ea:0a:24:e8: 53:5b:21:fe:18:c3:49:ca:0b:a9:ad:34:2d:17:25: e7:4d:1d:1b:9b:e5:3e:93:fe:6c:b9:ab:7a:d3:27: 6c:26:28:c3:3d:86:06:96:97:7f:e5:be:4b:e3:70: 12:c4:1f:4c:b7:a2:e6:21:5c:a9:56:83:d7:d7:6d: e2:d5:8c:e0:0e:45:a3:d5:fd:a3:10:45:8c:bf:40: 82:45:84:b3:16:ec:ca:19:51:e4:29:19:3a:87:7c: e2:f4:a9:0f:5c:0d:09:c1:10:03:2b:f5:cf:ef:39: 25:3c:5a:36:62:68:bf:57:c7:03:fe:59:c0:d6:ba: 70:01:0a:2e:5b:42:eb:2a:9e:9d:a1:53:5e:42:89: 65:c7:55:10:86:4f:22:84:78:99:6a:9c:57:86:77: 62:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B1:24:25:42:A2:A2:34:78:C3:B0:12:BE:2E:FB:1D:1D:68:C6:49 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/krEkJUKiojR4w7ASvi77HR1oxkk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.46.192.0/19 Signature Algorithm: sha256WithRSAEncryption 2c:e4:77:86:53:48:58:55:f0:33:84:89:51:c6:92:9c:c6:4e: 40:45:d4:34:41:09:58:e2:ad:e9:fa:79:91:c8:87:8b:53:4d: 1b:01:88:e8:35:6e:20:60:10:9c:a3:89:99:d5:51:91:0a:0c: 89:3d:c9:0c:62:50:2f:74:0c:75:1b:4f:09:7b:cc:39:5c:78: 62:91:a5:5e:f7:e0:d8:b6:e5:bb:20:97:9f:4a:eb:5a:ef:1b: cb:3a:21:55:11:93:28:b0:af:90:0e:5a:b7:cd:dd:96:0a:bf: 8e:6c:57:ea:57:77:98:c5:55:03:e6:b0:31:5e:5e:7a:8f:c1: e0:81:36:49:06:4b:2f:8d:68:34:4d:f9:73:fb:15:46:8b:d3: 9b:ce:b4:40:7e:70:2a:c3:2b:51:1f:c3:07:6e:57:ea:55:e8: e1:03:dc:b6:7b:aa:d4:76:62:7f:5b:57:52:12:57:eb:b3:26: fc:dd:f8:fe:e5:f6:37:7d:03:c2:3f:6e:af:ec:1a:46:25:ed: 13:d9:22:61:46:9d:f9:6d:9d:ef:4a:c3:6f:fa:04:45:c7:65: 56:c8:7d:28:c0:59:d3:c2:7c:ff:a7:d0:ce:a7:a7:5f:d9:25: 70:3d:1e:dc:7e:28:85:d0:cd:b8:33:0a:f3:49:08:14:5f:03: af:3a:9d:31 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICD5cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDExMjYw NjQwMzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkyQjEyNDI1NDJBMkEy MzQ3OEMzQjAxMkJFMkVGQjFEMUQ2OEM2NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCS+1dikZB+VnuUATcW5c5XyUdOtrR/OV0sYk9z1Knc/N3BCiPF balZTfDxALF2hVuoBKDh9ts/PWkJPKgfSn9J7PvSAWs8oKAFKQfBrloYfR11Xm7h dZkIWoebfobo3TqSuGoS6gok6FNbIf4Yw0nKC6mtNC0XJedNHRub5T6T/my5q3rT J2wmKMM9hgaWl3/lvkvjcBLEH0y3ouYhXKlWg9fXbeLVjOAORaPV/aMQRYy/QIJF hLMW7MoZUeQpGTqHfOL0qQ9cDQnBEAMr9c/vOSU8WjZiaL9XxwP+WcDWunABCi5b Qusqnp2hU15CiWXHVRCGTyKEeJlqnFeGd2LPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUkrEkJUKiojR4w7ASvi77HR1oxkkwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQva3JFa0pVS2lvalI0 dzdBU3ZpNzdIUjFveGtrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXEuwDANBgkqhkiG9w0BAQsFAAOCAQEALOR3hlNIWFXwM4SJUcaSnMZOQEXU NEEJWOKt6fp5kciHi1NNGwGI6DVuIGAQnKOJmdVRkQoMiT3JDGJQL3QMdRtPCXvM OVx4YpGlXvfg2LbluyCXn0rrWu8byzohVRGTKLCvkA5at83dlgq/jmxX6ld3mMVV A+awMV5eeo/B4IE2SQZLL41oNE35c/sVRovTm860QH5wKsMrUR/DB25X6lXo4QPc tnuq1HZif1tXUhJX67Mm/N34/uX2N30Dwj9ur+waRiXtE9kiYUad+W2d70rDb/oE RcdlVsh9KMBZ08J8/6fQzqenX9klcD0e3H4ohdDNuDMK80kIFF8DrzqdMQ== -----END CERTIFICATE-----Generated at Sat Apr 26 15:12:42 2025 by rpki-client