$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/HUQvQUp-9FbgZqoHgDQxEwzmaQo.roa File: HUQvQUp-9FbgZqoHgDQxEwzmaQo.roa (raw, json) Hash identifier: w0ZRCgfdit6MOPF+N7lFqXPpA/C9/7CAhJNsNngPVEo= Subject key identifier: 1D:44:2F:41:4A:7E:F4:56:E0:66:AA:07:80:34:31:13:0C:E6:69:0A Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 10AF Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/HUQvQUp-9FbgZqoHgDQxEwzmaQo.roa Signing time: Fri 17 Jan 2025 01:28:54 +0000 ROA not before: Fri 17 Jan 2025 01:28:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 110.41.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4271 (0x10af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Jan 17 01:28:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=1D442F414A7EF456E066AA07803431130CE6690A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:42:97:ef:c3:9a:af:3b:f9:54:84:df:b7: 5b:54:27:df:26:be:48:c7:4b:19:81:d4:62:12:14: 26:06:fc:51:26:e7:42:19:e5:07:bd:49:6b:b5:4a: 24:00:57:09:3d:04:75:32:96:7e:ee:96:2a:e9:4f: 9c:10:9b:c1:c3:2e:db:5a:35:1e:7f:f2:e5:7e:6a: 8c:83:47:14:6c:79:d2:06:5a:7a:8d:21:9e:ba:87: 9d:1d:b9:6c:be:43:c1:0d:0a:c3:2a:18:62:2c:cc: 9e:a3:78:c1:8d:12:9b:7c:04:6e:29:b2:f0:12:19: 83:0f:4d:cc:4f:de:4a:c1:0b:06:c0:a0:1d:e7:91: 1f:2e:ff:10:3a:19:e3:e3:4e:fe:a9:27:b8:99:c3: f1:56:f6:e7:d0:93:7c:bc:10:77:02:07:8b:43:68: 83:fc:45:af:c5:7f:37:2e:13:a5:23:60:4b:a9:e9: 27:4a:25:42:59:be:ef:f0:09:b0:0d:25:99:3d:a7: 1b:cc:a3:cc:9f:25:0c:b4:44:f5:66:7a:f0:ac:2c: ea:e6:45:a1:bc:fc:e7:21:b4:67:a9:13:21:26:14: cd:04:cd:c8:2a:e3:4e:18:95:77:d4:70:7a:ed:47: b3:73:62:70:16:7b:16:a4:b8:1f:db:c5:43:ef:f8: aa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:44:2F:41:4A:7E:F4:56:E0:66:AA:07:80:34:31:13:0C:E6:69:0A X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/HUQvQUp-9FbgZqoHgDQxEwzmaQo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.41.210.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:e8:7d:fe:45:8e:db:73:aa:ef:51:39:61:29:da:0b:16:4e: 4b:c0:a5:f5:4c:af:cd:aa:e6:25:60:6a:85:d9:b3:e6:12:05: b0:80:7e:d9:3c:77:b1:25:64:e9:d5:00:c4:a1:9b:17:dc:fe: a4:6f:56:7f:ca:cd:7c:6f:36:41:91:1c:bc:31:59:5d:9a:ef: 84:ce:12:18:aa:b8:d9:ce:f0:fb:42:0e:cb:7c:e7:ac:9f:07: 54:bd:a2:59:b0:13:7e:c0:83:d7:8d:81:30:cb:a6:75:09:92: b1:16:a7:be:3f:6b:93:70:a6:33:16:ec:c9:f7:36:84:fa:c1: b8:bb:37:f5:3f:bb:72:92:7f:1c:98:92:3c:2b:8c:a8:fb:0b: d5:16:cd:e5:e5:25:b0:39:f4:38:c2:97:99:55:db:a9:7a:55: eb:7a:6b:bf:32:70:ac:c5:58:21:19:0a:f3:60:e2:5b:54:65: e7:37:d0:af:b1:ae:f4:4b:67:6e:86:20:c1:62:95:80:3b:40: 67:38:d2:26:b0:75:11:5f:bd:bc:94:75:55:26:3f:78:c8:39: 03:c8:a7:51:ac:ed:07:2d:ee:f6:8e:b7:b8:c1:40:49:58:f2: 42:d8:29:72:1b:6d:3e:0f:c2:a4:98:03:11:bc:e9:e1:29:0f: e6:22:e2:3d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAxMTcw MTI4NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDFENDQyRjQxNEE3RUY0 NTZFMDY2QUEwNzgwMzQzMTEzMENFNjY5MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaLkKX78Oarzv5VITft1tUJ98mvkjHSxmB1GISFCYG/FEm50IZ 5Qe9SWu1SiQAVwk9BHUyln7ulirpT5wQm8HDLttaNR5/8uV+aoyDRxRsedIGWnqN IZ66h50duWy+Q8ENCsMqGGIszJ6jeMGNEpt8BG4psvASGYMPTcxP3krBCwbAoB3n kR8u/xA6GePjTv6pJ7iZw/FW9ufQk3y8EHcCB4tDaIP8Ra/FfzcuE6UjYEup6SdK JUJZvu/wCbANJZk9pxvMo8yfJQy0RPVmevCsLOrmRaG8/OchtGepEyEmFM0Ezcgq 404YlXfUcHrtR7NzYnAWexakuB/bxUPv+KprAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUHUQvQUp+9FbgZqoHgDQxEwzmaQowHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvSFVRdlFVcC05RmJn WnFvSGdEUXhFd3ptYVFvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG4p0jANBgkqhkiG9w0BAQsFAAOCAQEAKuh9/kWO23Oq71E5YSnaCxZOS8Cl 9UyvzarmJWBqhdmz5hIFsIB+2Tx3sSVk6dUAxKGbF9z+pG9Wf8rNfG82QZEcvDFZ XZrvhM4SGKq42c7w+0IOy3znrJ8HVL2iWbATfsCD142BMMumdQmSsRanvj9rk3Cm Mxbsyfc2hPrBuLs39T+7cpJ/HJiSPCuMqPsL1RbN5eUlsDn0OMKXmVXbqXpV63pr vzJwrMVYIRkK82DiW1Rl5zfQr7Gu9EtnboYgwWKVgDtAZzjSJrB1EV+9vJR1VSY/ eMg5A8inUaztBy3u9o63uMFASVjyQtgpchttPg/CpJgDEbzp4SkP5iLiPQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net