$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/1sOdfTHAZwX6gT2g4_Y3k2Hj0YY.roa File: 1sOdfTHAZwX6gT2g4_Y3k2Hj0YY.roa (raw, json) Hash identifier: hN3VcX9uigZAqDDcQld3k19aWhY9rdnpg2Y8upyodIg= Subject key identifier: D6:C3:9D:7D:31:C0:67:05:FA:81:3D:A0:E3:F6:37:93:61:E3:D1:86 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 11D3 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/1sOdfTHAZwX6gT2g4_Y3k2Hj0YY.roa Signing time: Fri 14 Mar 2025 09:32:40 +0000 ROA not before: Fri 14 Mar 2025 09:32:40 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.47.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4563 (0x11d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Mar 14 09:32:40 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D6C39D7D31C06705FA813DA0E3F6379361E3D186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cc:ca:5a:15:e8:6a:59:1c:86:ed:72:15:46: 20:ee:79:1e:a8:45:86:be:e7:7b:ac:af:2a:31:9d: 7a:b5:30:91:95:79:89:f9:78:c5:a5:d4:79:58:18: 42:a6:cb:51:f1:85:96:b9:9b:bb:00:b2:2c:37:4c: 11:04:49:a4:13:ed:5e:9a:45:b0:12:d6:1c:19:ee: 4c:ea:13:da:bb:d3:cc:5d:17:01:3d:4c:e2:8a:b7: 45:0b:f2:25:0d:b6:c1:f5:bb:c5:c9:34:8d:d6:93: e5:ff:3d:fa:0f:f8:61:47:d4:d9:5b:f8:6e:7a:4e: 45:65:9e:db:75:a7:a7:08:42:87:21:84:d3:99:be: 33:95:30:8f:e7:dd:d6:89:ca:0a:4a:1a:75:89:67: ef:96:9b:51:20:28:df:48:38:6a:07:df:f3:22:0d: 97:d9:c4:36:8e:69:42:5c:c9:63:08:48:21:53:3d: 3e:71:d1:81:c6:4a:3f:51:e3:22:cd:66:a8:cf:ff: 71:49:1c:35:21:3e:7f:dc:c9:96:ce:49:32:d7:97: e5:46:8d:e6:de:be:e3:39:7f:aa:08:4a:0a:4d:15: c7:2a:81:c1:e7:32:25:31:b7:79:47:2d:1d:a3:a9: be:42:ec:64:2d:68:aa:ef:bd:79:8d:54:f4:44:12: b6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C3:9D:7D:31:C0:67:05:FA:81:3D:A0:E3:F6:37:93:61:E3:D1:86 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/1sOdfTHAZwX6gT2g4_Y3k2Hj0YY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.246.0/23 Signature Algorithm: sha256WithRSAEncryption af:80:39:b6:8e:57:02:52:c4:72:61:6d:00:c9:67:e6:a5:e8: 57:26:e1:55:cc:4e:44:a9:0a:cd:8b:f8:43:a3:fa:79:b2:d1: 11:ce:bf:09:5e:50:2d:6f:14:df:68:78:fe:9f:94:4a:44:2c: b5:31:a9:ec:12:34:fa:ed:35:0b:13:83:73:bc:98:15:5f:ef: e5:ef:40:bc:19:24:bf:6d:62:41:3f:99:b3:5f:60:04:c3:84: 0e:c9:bb:27:eb:af:82:64:ac:0f:43:a4:2c:60:78:11:4e:4e: e5:59:36:8b:96:ab:a2:a1:82:d1:c3:37:c0:49:65:35:50:b2: d5:ad:30:f8:38:54:10:13:33:e2:60:a1:9a:20:97:ee:1b:f8: 1f:a0:f0:6f:04:c0:e5:d6:0d:a0:4c:9a:9e:7a:17:0f:e5:e1: 7e:52:b3:f2:da:72:ba:de:e0:03:c8:b3:49:a2:f0:d3:a5:d3: 55:dd:09:14:fe:a0:d5:80:38:55:10:b9:3f:8e:fe:34:3a:52: f3:5b:e0:de:1a:b9:f5:0d:05:53:bf:ec:cd:9a:1b:69:58:8e: 09:2b:12:0b:ad:b2:6e:c2:81:80:85:83:92:bf:54:bb:56:44: 93:b8:45:14:64:8f:ba:63:29:d8:3b:67:f8:50:ec:68:05:f8: 44:e9:5e:15 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAzMTQw OTMyNDBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQ2QzM5RDdEMzFDMDY3 MDVGQTgxM0RBMEUzRjYzNzkzNjFFM0QxODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2zMpaFehqWRyG7XIVRiDueR6oRYa+53usryoxnXq1MJGVeYn5 eMWl1HlYGEKmy1HxhZa5m7sAsiw3TBEESaQT7V6aRbAS1hwZ7kzqE9q708xdFwE9 TOKKt0UL8iUNtsH1u8XJNI3Wk+X/PfoP+GFH1Nlb+G56TkVlntt1p6cIQochhNOZ vjOVMI/n3daJygpKGnWJZ++Wm1EgKN9IOGoH3/MiDZfZxDaOaUJcyWMISCFTPT5x 0YHGSj9R4yLNZqjP/3FJHDUhPn/cyZbOSTLXl+VGjebevuM5f6oISgpNFccqgcHn MiUxt3lHLR2jqb5C7GQtaKrvvXmNVPREEratAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU1sOdfTHAZwX6gT2g4/Y3k2Hj0YYwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvMXNPZGZUSEFad1g2 Z1QyZzRfWTNrMkhqMFlZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv9jANBgkqhkiG9w0BAQsFAAOCAQEAr4A5to5XAlLEcmFtAMln5qXoVybh VcxORKkKzYv4Q6P6ebLREc6/CV5QLW8U32h4/p+USkQstTGp7BI0+u01CxODc7yY FV/v5e9AvBkkv21iQT+Zs19gBMOEDsm7J+uvgmSsD0OkLGB4EU5O5Vk2i5aroqGC 0cM3wEllNVCy1a0w+DhUEBMz4mChmiCX7hv4H6DwbwTA5dYNoEyannoXD+XhflKz 8tpyut7gA8izSaLw06XTVd0JFP6g1YA4VRC5P47+NDpS81vg3hq59Q0FU7/szZob aViOCSsSC62ybsKBgIWDkr9Uu1ZEk7hFFGSPumMp2Dtn+FDsaAX4ROleFQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net