$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/oC4avwmuZIC9LFCMixwyyWycwnE.roa File: oC4avwmuZIC9LFCMixwyyWycwnE.roa (raw, json) Hash identifier: lBEl/f+66+3Y8T654Saa4kb2JaQs4QSTJWg76ytUbjg= Subject key identifier: A0:2E:1A:BF:09:AE:64:80:BD:2C:50:8C:8B:1C:32:C9:6C:9C:C2:71 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1034 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/oC4avwmuZIC9LFCMixwyyWycwnE.roa Signing time: Wed 25 Dec 2024 03:25:05 +0000 ROA not before: Wed 25 Dec 2024 03:25:05 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.47.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4148 (0x1034) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Dec 25 03:25:05 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=A02E1ABF09AE6480BD2C508C8B1C32C96C9CC271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:42:99:45:a4:f4:68:b4:8e:82:94:20:f3: 0f:c5:db:b1:a0:94:e4:e1:25:16:22:41:22:f8:bd: ff:62:95:01:d4:7e:a5:3f:f7:22:5f:b1:78:21:46: a9:3b:61:e5:89:1a:a1:12:15:96:34:f1:4e:a7:cb: 67:b8:0c:48:3d:e6:3b:0a:a5:ee:45:51:00:fb:c1: 10:6c:ac:6f:0a:38:05:0c:60:ed:36:47:d6:1a:f8: b1:ae:f8:f8:05:16:85:f0:09:7e:fa:41:44:fe:05: a0:35:ef:ae:f7:c1:96:29:1e:8d:87:66:ed:17:36: d9:5d:1b:ed:f8:a9:19:c3:e8:5f:0d:bd:ca:98:67: 76:39:54:87:f1:5b:21:24:d5:04:1a:ef:ca:85:a0: 97:17:37:8b:72:a3:7d:a9:9e:ea:21:98:be:ed:71: 06:20:aa:7b:7e:19:58:ac:83:ca:f2:2a:ad:1b:e0: 40:5f:4e:b3:c1:6c:5b:ec:ce:86:01:44:9d:d4:5f: 9a:01:04:43:9c:27:31:66:84:10:a1:c6:68:45:c0: ee:e8:3f:0a:46:29:c5:6c:af:fd:72:de:09:b2:13: 85:70:d5:3b:09:dd:73:44:7a:76:ed:81:d2:a9:2c: 6c:46:11:a6:35:dc:32:b9:2c:9c:bd:2e:1c:82:86: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2E:1A:BF:09:AE:64:80:BD:2C:50:8C:8B:1C:32:C9:6C:9C:C2:71 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/oC4avwmuZIC9LFCMixwyyWycwnE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.0.0/19 Signature Algorithm: sha256WithRSAEncryption 68:aa:84:87:2a:ef:35:c2:2b:27:2c:c6:bb:e1:a6:50:fb:1f: 63:22:bd:a4:0a:bb:62:d3:85:5c:7a:d8:86:aa:5b:bd:74:94: 5a:7c:18:ed:60:31:03:0e:1e:97:6f:5f:52:fc:ba:24:a1:ed: f7:8b:ad:db:38:15:50:49:79:21:40:15:d5:7a:df:77:60:c6: f7:a7:3f:bc:1f:72:81:f1:25:bf:b7:8e:f3:cc:c8:f4:c9:10: 95:64:96:71:e2:ed:14:c1:de:3a:a1:71:b9:5b:97:5e:1d:8a: 10:36:de:1a:45:4a:9e:cc:72:e1:0c:cd:8c:10:a3:be:ec:ea: 1d:4d:4e:1c:ed:a4:80:ac:df:50:b4:ff:5e:f1:63:37:e2:37: 0c:67:ca:23:72:da:ae:de:c3:fa:1a:cc:d6:9b:a1:e3:40:92: 25:50:2f:e6:05:f7:6f:10:cb:d3:39:a7:aa:a1:f2:ce:e8:62: 13:45:80:03:9d:bd:29:5b:c5:65:57:91:31:22:d7:fd:2c:12: 7b:ea:74:08:d7:79:99:15:0c:ae:7d:11:3a:d4:b2:3c:c6:8d: 21:1a:6c:01:1c:77:1f:1c:a0:d5:fd:2e:9e:82:dc:b3:83:b4: 08:63:9e:62:e9:f7:1d:21:8d:e4:13:ff:79:92:c7:d3:13:ea: ec:44:3c:9f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEDQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDEyMjUw MzI1MDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEEwMkUxQUJGMDlBRTY0 ODBCRDJDNTA4QzhCMUMzMkM5NkM5Q0MyNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCngUKZRaT0aLSOgpQg8w/F27GglOThJRYiQSL4vf9ilQHUfqU/ 9yJfsXghRqk7YeWJGqESFZY08U6ny2e4DEg95jsKpe5FUQD7wRBsrG8KOAUMYO02 R9Ya+LGu+PgFFoXwCX76QUT+BaA17673wZYpHo2HZu0XNtldG+34qRnD6F8NvcqY Z3Y5VIfxWyEk1QQa78qFoJcXN4tyo32pnuohmL7tcQYgqnt+GVisg8ryKq0b4EBf TrPBbFvszoYBRJ3UX5oBBEOcJzFmhBChxmhFwO7oPwpGKcVsr/1y3gmyE4Vw1TsJ 3XNEenbtgdKpLGxGEaY13DK5LJy9LhyChuK1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUoC4avwmuZIC9LFCMixwyyWycwnEwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvb0M0YXZ3bXVaSUM5 TEZDTWl4d3l5V3ljd25FLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXEvADANBgkqhkiG9w0BAQsFAAOCAQEAaKqEhyrvNcIrJyzGu+GmUPsfYyK9 pAq7YtOFXHrYhqpbvXSUWnwY7WAxAw4el29fUvy6JKHt94ut2zgVUEl5IUAV1Xrf d2DG96c/vB9ygfElv7eO88zI9MkQlWSWceLtFMHeOqFxuVuXXh2KEDbeGkVKnsxy 4QzNjBCjvuzqHU1OHO2kgKzfULT/XvFjN+I3DGfKI3Lart7D+hrM1puh40CSJVAv 5gX3bxDL0zmnqqHyzuhiE0WAA529KVvFZVeRMSLX/SwSe+p0CNd5mRUMrn0ROtSy PMaNIRpsARx3Hxyg1f0unoLcs4O0CGOeYun3HSGN5BP/eZLH0xPq7EQ8nw== -----END CERTIFICATE-----Generated at Sat Apr 26 15:32:42 2025 by rpki-client