$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/lXX4gh7tknBr7XQgGL8pPeSJgqI.roa File: lXX4gh7tknBr7XQgGL8pPeSJgqI.roa (raw, json) Hash identifier: xi7l+22iykmx2LNz4gCL+HpW6VJRRv+xdvSF07vxhis= Subject key identifier: 95:75:F8:82:1E:ED:92:70:6B:ED:74:20:18:BF:29:3D:E4:89:82:A2 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 11D5 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/lXX4gh7tknBr7XQgGL8pPeSJgqI.roa Signing time: Fri 14 Mar 2025 09:32:41 +0000 ROA not before: Fri 14 Mar 2025 09:32:41 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.47.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4565 (0x11d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Mar 14 09:32:41 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9575F8821EED92706BED742018BF293DE48982A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:8e:9e:1e:05:7e:63:20:54:97:e8:d0:cc: 91:84:3e:1f:18:d5:3a:fe:a1:f0:12:2a:bc:59:79: 7f:db:d9:a4:5e:2c:7c:04:11:a6:51:48:dd:14:31: 12:ae:d6:1a:dc:5e:82:41:68:7b:9c:9e:cf:57:86: ae:28:21:78:7c:d5:d3:c7:42:ad:6c:48:70:7d:e3: 8e:42:39:c3:eb:75:d0:12:00:5f:4d:0a:bb:9a:1b: e9:bb:a4:f0:66:fc:99:a9:28:df:44:43:84:67:7f: ce:f2:cd:3e:5d:ce:5d:b1:af:0a:1a:e6:3f:36:cb: 3b:87:62:ef:20:be:58:75:83:62:1a:ed:78:a2:24: 8a:3b:c0:71:dd:0d:a9:a3:e4:93:8f:ac:43:5e:ee: de:33:23:bc:b6:f7:c0:00:e4:da:a0:39:72:ff:b9: 94:be:9c:9d:78:7f:0d:47:7c:99:4a:9f:9b:81:81: 88:84:2f:d0:e4:e8:9a:68:23:cb:d1:e0:9b:26:a9: 50:c0:b2:6e:0c:9e:51:46:0a:25:73:c8:6e:c8:79: a9:5e:a1:95:4c:fa:3d:b7:13:bf:db:1f:dc:fb:2c: c4:8c:5a:e0:3f:23:ed:f0:82:8d:74:0d:9d:fb:53: 90:5a:4d:e0:ae:bc:a4:7a:76:fd:54:43:b7:eb:89: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:75:F8:82:1E:ED:92:70:6B:ED:74:20:18:BF:29:3D:E4:89:82:A2 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/lXX4gh7tknBr7XQgGL8pPeSJgqI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.224.0/23 Signature Algorithm: sha256WithRSAEncryption af:c6:cb:3d:48:71:58:7b:b9:60:bb:b4:a7:a9:6c:18:15:08: 36:82:4b:73:32:ec:f4:f2:53:15:4b:68:f7:b7:36:02:4f:41: f6:d7:da:d7:22:c0:38:a8:47:9f:c4:31:1f:97:5c:83:9a:59: 3f:fe:77:6b:73:bb:f8:27:e4:be:fd:d2:5d:e5:73:26:f0:2f: ef:88:4d:c0:ab:a8:38:ad:34:da:78:f7:aa:04:9f:80:9a:bd: 34:14:5c:ce:d8:63:38:27:af:4d:a5:7b:3c:4f:1f:30:6f:13: f2:19:ce:6f:6f:f6:f6:d2:fa:fa:af:92:ab:28:7d:c0:e8:5e: ce:3d:33:81:4e:5f:a8:48:8a:34:9e:dc:62:70:27:16:49:0d: de:08:46:dc:ac:a3:7d:87:85:dc:ac:9f:d9:1b:81:a7:c3:3b: fc:0d:3d:92:b8:f1:10:c9:c3:b5:c5:57:e0:6e:9c:b1:29:1b: ac:b7:b7:b0:9b:bb:e3:4b:c3:b1:40:a5:81:b5:31:46:37:ac: 30:97:54:04:29:3b:e3:c9:bf:1a:43:f0:39:70:7e:15:5a:2c: 42:c0:b9:9a:7f:f6:b7:11:26:fb:c1:f8:61:c4:76:84:f7:66: f0:d4:bc:48:5f:f1:11:e2:ca:7c:74:54:fa:8d:26:0d:b0:67: f2:05:12:58 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEdUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAzMTQw OTMyNDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk1NzVGODgyMUVFRDky NzA2QkVENzQyMDE4QkYyOTNERTQ4OTgyQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUPo6eHgV+YyBUl+jQzJGEPh8Y1Tr+ofASKrxZeX/b2aReLHwE EaZRSN0UMRKu1hrcXoJBaHucns9Xhq4oIXh81dPHQq1sSHB9445COcPrddASAF9N CruaG+m7pPBm/JmpKN9EQ4Rnf87yzT5dzl2xrwoa5j82yzuHYu8gvlh1g2Ia7Xii JIo7wHHdDamj5JOPrENe7t4zI7y298AA5NqgOXL/uZS+nJ14fw1HfJlKn5uBgYiE L9Dk6JpoI8vR4JsmqVDAsm4MnlFGCiVzyG7IealeoZVM+j23E7/bH9z7LMSMWuA/ I+3wgo10DZ37U5BaTeCuvKR6dv1UQ7friQmVAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUlXX4gh7tknBr7XQgGL8pPeSJgqIwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvbFhYNGdoN3RrbkJy N1hRZ0dMOHBQZVNKZ3FJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv4DANBgkqhkiG9w0BAQsFAAOCAQEAr8bLPUhxWHu5YLu0p6lsGBUINoJL czLs9PJTFUto97c2Ak9B9tfa1yLAOKhHn8QxH5dcg5pZP/53a3O7+Cfkvv3SXeVz JvAv74hNwKuoOK002nj3qgSfgJq9NBRczthjOCevTaV7PE8fMG8T8hnOb2/29tL6 +q+Sqyh9wOhezj0zgU5fqEiKNJ7cYnAnFkkN3ghG3KyjfYeF3Kyf2RuBp8M7/A09 krjxEMnDtcVX4G6csSkbrLe3sJu740vDsUClgbUxRjesMJdUBCk748m/GkPwOXB+ FVosQsC5mn/2txEm+8H4YcR2hPdm8NS8SF/xEeLKfHRU+o0mDbBn8gUSWA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net