$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/1vtEcAc1EazV0vA1A0YAXOuqCcA.roa File: 1vtEcAc1EazV0vA1A0YAXOuqCcA.roa (raw, json) Hash identifier: tJMy03d8P6VVSOOtMdM2cNaDfwzqgoBtH/L5esNADK0= Subject key identifier: D6:FB:44:70:07:35:11:AC:D5:D2:F0:35:03:46:00:5C:EB:AA:09:C0 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 11DE Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/1vtEcAc1EazV0vA1A0YAXOuqCcA.roa Signing time: Fri 14 Mar 2025 09:37:08 +0000 ROA not before: Fri 14 Mar 2025 09:37:08 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.46.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4574 (0x11de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Mar 14 09:37:08 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D6FB4470073511ACD5D2F0350346005CEBAA09C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8d:7d:f2:0f:39:81:b2:08:32:b0:c1:34:f8: 38:83:bc:35:18:36:b2:49:ae:23:74:51:54:fb:30: cb:10:ce:f7:ce:9e:39:91:b0:30:38:3f:47:ae:0c: 6a:ee:6c:15:9f:b9:99:25:8a:e1:6d:fd:58:81:ab: 10:ff:22:71:3a:17:56:af:c5:de:a6:d9:4c:50:68: 2d:a5:a0:d2:ab:ce:33:01:d1:2a:b1:04:c1:73:e4: 0c:84:b8:af:f1:6e:d0:69:20:9d:20:3c:1b:91:6c: 21:76:61:ba:9a:19:db:45:9a:c8:ec:e8:74:99:a1: 43:f5:56:10:61:60:00:45:8b:d0:33:1c:fd:b6:72: 09:f6:73:90:27:fa:d3:cc:a3:e6:e7:84:bd:05:d1: f8:7d:a6:e0:3c:18:15:d2:60:a3:bd:d4:93:f7:d5: e2:c3:47:3a:16:bd:4e:14:26:0b:cf:90:cc:99:37: da:6c:6f:2a:e7:58:5c:01:91:ac:a9:8e:42:e1:df: f0:da:26:25:6b:88:7d:b1:8b:2f:98:86:54:6b:73: 7f:44:4f:05:30:24:81:0f:d4:f1:e4:e8:db:43:8e: 30:c4:9c:87:9f:c7:b8:ff:53:bc:1f:8f:5b:e5:43: dc:42:15:92:6c:f2:f4:d1:88:67:a7:64:16:18:42: e2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FB:44:70:07:35:11:AC:D5:D2:F0:35:03:46:00:5C:EB:AA:09:C0 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/1vtEcAc1EazV0vA1A0YAXOuqCcA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.46.88.0/22 Signature Algorithm: sha256WithRSAEncryption 38:b3:3c:07:14:5e:14:02:d7:75:a1:88:af:b3:13:0c:fb:87: 7c:94:c6:8b:bb:34:93:fa:41:4e:77:2c:99:c1:fa:0f:3e:7a: 20:ba:22:5a:28:56:61:2e:02:3f:3d:fc:10:09:f2:23:f1:24: 1b:5e:6b:84:93:ea:80:36:cb:19:00:42:77:89:e4:8b:a0:c9: 2b:2d:bb:54:d8:d5:5e:1e:64:80:a6:04:70:ad:4e:9c:a4:78: 0e:5e:8d:66:16:1a:49:c8:46:9e:50:21:b1:33:00:cb:a4:bb: 98:06:c4:ba:0e:49:a2:8c:4a:87:d5:df:cc:39:6b:8b:0c:47: 85:38:71:32:70:c9:74:d7:4f:b5:b1:ec:27:5f:62:c9:1e:f8: 84:f3:6c:3a:66:08:0e:bc:dc:0c:5d:7d:9c:95:7b:67:ff:91: 19:43:f1:e4:c0:8a:57:82:d3:d0:cf:ec:37:48:6e:d8:a5:75: 54:43:f5:e9:cf:f7:1f:b4:1d:eb:82:3f:50:e0:2a:6c:e0:5a: c9:2c:68:b6:a8:27:9d:04:12:fa:f9:dd:12:56:d0:a6:0a:ba: a5:cc:38:a2:2d:85:d7:11:1d:a7:58:bf:4b:c6:15:6e:e4:a3: 98:82:42:6a:86:9f:91:5f:b8:98:53:1f:10:a9:47:b0:83:ab: a5:4e:60:f5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAzMTQw OTM3MDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQ2RkI0NDcwMDczNTEx QUNENUQyRjAzNTAzNDYwMDVDRUJBQTA5QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbjX3yDzmBsggysME0+DiDvDUYNrJJriN0UVT7MMsQzvfOnjmR sDA4P0euDGrubBWfuZkliuFt/ViBqxD/InE6F1avxd6m2UxQaC2loNKrzjMB0Sqx BMFz5AyEuK/xbtBpIJ0gPBuRbCF2YbqaGdtFmsjs6HSZoUP1VhBhYABFi9AzHP22 cgn2c5An+tPMo+bnhL0F0fh9puA8GBXSYKO91JP31eLDRzoWvU4UJgvPkMyZN9ps byrnWFwBkaypjkLh3/DaJiVriH2xiy+YhlRrc39ETwUwJIEP1PHk6NtDjjDEnIef x7j/U7wfj1vlQ9xCFZJs8vTRiGenZBYYQuKnAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU1vtEcAc1EazV0vA1A0YAXOuqCcAwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvMXZ0RWNBYzFFYXpW MHZBMUEwWUFYT3VxQ2NBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAnEuWDANBgkqhkiG9w0BAQsFAAOCAQEAOLM8BxReFALXdaGIr7MTDPuHfJTG i7s0k/pBTncsmcH6Dz56ILoiWihWYS4CPz38EAnyI/EkG15rhJPqgDbLGQBCd4nk i6DJKy27VNjVXh5kgKYEcK1OnKR4Dl6NZhYaSchGnlAhsTMAy6S7mAbEug5JooxK h9XfzDlriwxHhThxMnDJdNdPtbHsJ19iyR74hPNsOmYIDrzcDF19nJV7Z/+RGUPx 5MCKV4LT0M/sN0hu2KV1VEP16c/3H7Qd64I/UOAqbOBaySxotqgnnQQS+vndElbQ pgq6pcw4oi2F1xEdp1i/S8YVbuSjmIJCaoafkV+4mFMfEKlHsIOrpU5g9Q== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net