$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/SOelvG7hlU9n-qMiJ1SYZRPLlXQ.roa File: SOelvG7hlU9n-qMiJ1SYZRPLlXQ.roa (raw, json) Hash identifier: YVnPbXBpFdspbuliBEOmlJ0W8MzB7joecZe4MIX8M8E= Subject key identifier: 48:E7:A5:BC:6E:E1:95:4F:67:FA:A3:22:27:54:98:65:13:CB:95:74 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 11E8 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/SOelvG7hlU9n-qMiJ1SYZRPLlXQ.roa Signing time: Fri 14 Mar 2025 09:37:10 +0000 ROA not before: Fri 14 Mar 2025 09:37:10 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.46.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4584 (0x11e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Mar 14 09:37:10 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=48E7A5BC6EE1954F67FAA3222754986513CB9574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:de:2a:ee:27:83:d7:62:d9:1b:53:c4:95:e6: e3:40:5e:8f:fe:8e:0d:00:70:39:24:75:1d:dc:92: db:1f:7f:c4:82:e7:0f:a5:2c:5b:a1:a1:b7:aa:60: 4b:76:88:45:46:eb:c6:66:f0:5a:79:8f:50:b6:3e: b5:a0:b2:7a:30:91:61:97:68:f1:53:4c:6c:f9:dd: cc:d2:8d:39:b1:91:99:b2:fa:44:7b:77:6a:92:8f: 5c:3e:bd:48:74:9a:50:2d:89:a6:3e:61:b5:fa:ba: 07:b3:2d:70:db:e2:78:91:2d:ba:35:99:44:5f:83: 43:21:3c:a6:7b:e2:6b:7e:44:a0:56:25:83:18:a3: 8e:28:c3:c8:a2:f7:ac:b9:2f:6c:30:14:d6:22:65: f9:9d:1c:a3:c8:32:5a:a6:96:9c:53:68:4d:a9:0a: 76:cc:b3:93:ab:4e:0f:6a:cc:dc:31:37:d6:74:c9: c9:5c:74:c0:fa:78:44:11:ff:e2:2f:2a:a6:c0:c3: 76:8e:8c:04:90:82:ec:b5:0b:07:8e:3d:ad:df:42: 9a:00:2f:53:09:e8:61:23:75:40:bf:7c:57:25:dc: 91:c0:3e:9c:75:30:1b:7d:82:11:99:2f:a4:40:04: f5:b2:23:60:ef:32:5a:2b:17:98:81:bc:d8:96:01: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E7:A5:BC:6E:E1:95:4F:67:FA:A3:22:27:54:98:65:13:CB:95:74 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/SOelvG7hlU9n-qMiJ1SYZRPLlXQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.46.32.0/19 Signature Algorithm: sha256WithRSAEncryption 3c:62:fd:54:3d:2c:41:49:c3:78:a2:1a:9e:be:95:21:9c:52: d0:64:aa:bf:15:1f:a9:41:c5:a3:eb:37:d1:46:b0:54:f5:fc: 54:d8:e3:50:24:d1:02:14:d9:84:57:2f:1b:e3:8e:b4:7b:cc: 1b:05:77:cd:77:fd:21:0c:76:20:0d:7e:a6:0d:c3:80:a6:ac: 46:6e:72:56:34:3f:f8:d0:70:4e:10:42:74:64:5d:02:5b:67: c6:a8:d9:03:02:6c:a7:03:fb:96:b5:43:2e:b9:2f:3b:dc:3b: 84:b8:3b:3c:60:ba:38:d6:85:35:b6:ca:0d:d0:fc:ff:c6:fe: e2:ab:7d:ae:41:92:67:79:a5:4f:d8:9f:7c:5d:3d:26:9e:2e: aa:02:c7:3e:49:c0:ec:b2:93:ed:b7:e2:e8:6e:1a:c1:96:f2: 6c:f5:d0:21:4b:59:be:49:58:57:81:f7:0c:f2:01:c0:e5:39: 64:16:97:7f:da:81:53:8e:3e:af:b3:03:a9:11:f5:e3:eb:35: 70:f8:da:c0:49:c3:34:76:eb:dd:e8:73:6f:5c:07:08:3f:e9: cc:a9:6c:ae:f6:33:fc:56:a2:13:1a:1a:89:29:cb:8f:32:c8: 3b:7e:58:6d:95:0a:69:74:41:82:8c:1c:90:aa:c3:11:95:c3: 72:8d:ef:6b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAzMTQw OTM3MTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ4RTdBNUJDNkVFMTk1 NEY2N0ZBQTMyMjI3NTQ5ODY1MTNDQjk1NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm3iruJ4PXYtkbU8SV5uNAXo/+jg0AcDkkdR3cktsff8SC5w+l LFuhobeqYEt2iEVG68Zm8Fp5j1C2PrWgsnowkWGXaPFTTGz53czSjTmxkZmy+kR7 d2qSj1w+vUh0mlAtiaY+YbX6ugezLXDb4niRLbo1mURfg0MhPKZ74mt+RKBWJYMY o44ow8ii96y5L2wwFNYiZfmdHKPIMlqmlpxTaE2pCnbMs5OrTg9qzNwxN9Z0yclc dMD6eEQR/+IvKqbAw3aOjASQguy1CweOPa3fQpoAL1MJ6GEjdUC/fFcl3JHAPpx1 MBt9ghGZL6RABPWyI2DvMlorF5iBvNiWAbyJAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUSOelvG7hlU9n+qMiJ1SYZRPLlXQwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvU09lbHZHN2hsVTlu LXFNaUoxU1laUlBMbFhRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXEuIDANBgkqhkiG9w0BAQsFAAOCAQEAPGL9VD0sQUnDeKIanr6VIZxS0GSq vxUfqUHFo+s30UawVPX8VNjjUCTRAhTZhFcvG+OOtHvMGwV3zXf9IQx2IA1+pg3D gKasRm5yVjQ/+NBwThBCdGRdAltnxqjZAwJspwP7lrVDLrkvO9w7hLg7PGC6ONaF NbbKDdD8/8b+4qt9rkGSZ3mlT9iffF09Jp4uqgLHPknA7LKT7bfi6G4awZbybPXQ IUtZvklYV4H3DPIBwOU5ZBaXf9qBU44+r7MDqRH14+s1cPjawEnDNHbr3ehzb1wH CD/pzKlsrvYz/FaiExoaiSnLjzLIO35YbZUKaXRBgowckKrDEZXDco3vaw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net