$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/YHnUdnTrOmO0s5VhesM4TIEMR84.roa File: YHnUdnTrOmO0s5VhesM4TIEMR84.roa (raw, json) Hash identifier: CG8vpQFxQT3XBEFkQ9xRlkNoQw7KKgbIoAdWgVM1R9Y= Subject key identifier: 60:79:D4:76:74:EB:3A:63:B4:B3:95:61:7A:C3:38:4C:81:0C:47:CE Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 10B0 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/YHnUdnTrOmO0s5VhesM4TIEMR84.roa Signing time: Fri 17 Jan 2025 01:28:54 +0000 ROA not before: Fri 17 Jan 2025 01:28:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 110.41.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4272 (0x10b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Jan 17 01:28:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6079D47674EB3A63B4B395617AC3384C810C47CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:82:58:9e:9f:ce:a9:07:31:31:fd:eb:9f:e8: 2b:0d:02:c5:5b:53:d9:c8:1c:da:b9:f8:35:e2:c8: 29:73:89:00:1e:b1:c5:90:e6:2f:88:4a:de:6d:ee: 0e:91:19:b4:63:e4:e0:cb:62:28:87:1f:03:fb:fd: a0:d3:ec:8b:2f:8f:c7:6b:f4:73:e3:53:a0:de:d4: 14:08:b8:ab:8a:6a:01:f5:a0:fd:d9:ad:51:94:79: 63:63:d7:06:67:59:4a:82:71:df:f1:cd:77:02:a7: f5:99:a0:15:e5:b0:09:7b:fa:f2:21:31:e2:48:bb: 99:be:c1:02:bb:78:bd:8d:b0:f4:59:74:7a:e8:51: b2:96:ef:fc:9a:2c:72:92:a2:55:d0:87:ed:73:fc: df:04:b1:a1:79:7f:e7:1b:ee:a1:a9:0b:24:59:fa: fb:f2:ee:52:ae:2a:a9:07:e9:7a:64:dc:93:58:b1: e8:04:c2:81:5c:0e:be:32:35:ee:4a:91:de:37:8e: 25:89:d9:fb:92:08:28:23:a6:bd:74:7c:d6:78:2d: 92:06:29:68:51:e7:3a:85:6e:89:de:d8:c2:a0:37: d5:1b:74:4e:40:c0:ca:13:f4:c7:8b:be:5c:1c:62: 67:11:61:58:5e:38:ef:90:9c:b6:f4:76:2e:b4:0f: 12:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:79:D4:76:74:EB:3A:63:B4:B3:95:61:7A:C3:38:4C:81:0C:47:CE X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/YHnUdnTrOmO0s5VhesM4TIEMR84.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.41.209.0/24 Signature Algorithm: sha256WithRSAEncryption 81:85:72:1e:39:3e:cf:b7:11:75:e8:19:8e:7c:2b:8d:56:18: 14:b2:e0:fd:3d:27:e9:ca:f0:07:47:73:a8:40:37:4c:89:c0: 02:ce:3a:6c:7d:ea:8b:35:a2:0f:c2:c4:df:b8:f7:32:60:dd: 7c:ae:7b:8d:18:56:f5:a6:f1:68:b7:e0:12:c7:7b:5d:dd:68: 71:ee:32:2d:30:e2:70:be:7a:86:96:9f:1d:fb:9f:5b:15:24: 94:76:ea:f3:6b:b0:9a:fb:8a:63:d6:05:39:a9:ec:19:cf:98: 08:96:b1:47:a4:6d:cb:72:20:6f:78:e6:64:09:e2:0a:f7:90: 2b:03:a3:70:e4:c8:4f:38:4e:0d:0f:f6:57:9a:58:2b:51:3a: c5:ba:e4:a7:40:74:19:31:cf:0b:48:42:fd:30:4c:6b:ed:cc: 8e:4d:d9:44:c3:f0:26:0b:72:b3:c4:76:85:66:21:e6:5b:5a: 2e:6c:2e:3f:17:ff:14:69:95:57:02:de:16:c1:c7:b4:35:06: 86:c6:f0:9c:a0:c6:ca:b2:e1:38:34:90:70:f6:d3:fb:07:b5: 7b:ce:02:1b:1e:69:05:66:43:57:1c:27:1f:88:6a:52:a0:47: 2f:ea:c0:5d:99:1d:59:ea:83:aa:a4:99:fc:82:5b:1e:c8:91: 6b:3d:bb:2c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICELAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAxMTcw MTI4NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYwNzlENDc2NzRFQjNB NjNCNEIzOTU2MTdBQzMzODRDODEwQzQ3Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXglien86pBzEx/euf6CsNAsVbU9nIHNq5+DXiyClziQAescWQ 5i+ISt5t7g6RGbRj5ODLYiiHHwP7/aDT7Isvj8dr9HPjU6De1BQIuKuKagH1oP3Z rVGUeWNj1wZnWUqCcd/xzXcCp/WZoBXlsAl7+vIhMeJIu5m+wQK7eL2NsPRZdHro UbKW7/yaLHKSolXQh+1z/N8EsaF5f+cb7qGpCyRZ+vvy7lKuKqkH6Xpk3JNYsegE woFcDr4yNe5Kkd43jiWJ2fuSCCgjpr10fNZ4LZIGKWhR5zqFbone2MKgN9UbdE5A wMoT9MeLvlwcYmcRYVheOO+QnLb0di60DxIxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUYHnUdnTrOmO0s5VhesM4TIEMR84wHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvWUhuVWRuVHJPbU8w czVWaGVzTTRUSUVNUjg0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG4p0TANBgkqhkiG9w0BAQsFAAOCAQEAgYVyHjk+z7cRdegZjnwrjVYYFLLg /T0n6crwB0dzqEA3TInAAs46bH3qizWiD8LE37j3MmDdfK57jRhW9abxaLfgEsd7 Xd1oce4yLTDicL56hpafHfufWxUklHbq82uwmvuKY9YFOansGc+YCJaxR6Rty3Ig b3jmZAniCveQKwOjcOTITzhODQ/2V5pYK1E6xbrkp0B0GTHPC0hC/TBMa+3Mjk3Z RMPwJgtys8R2hWYh5ltaLmwuPxf/FGmVVwLeFsHHtDUGhsbwnKDGyrLhODSQcPbT +we1e84CGx5pBWZDVxwnH4hqUqBHL+rAXZkdWeqDqqSZ/IJbHsiRaz27LA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net