$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/mdm3JWaXWFCLYq1nQK2JE2gyw54.roa File: mdm3JWaXWFCLYq1nQK2JE2gyw54.roa (raw, json) Hash identifier: BlFpfQYp1qwbE7Al8ocdDbwTf56ufQowpVeVIWQKpbg= Subject key identifier: 99:D9:B7:25:66:97:58:50:8B:62:AD:67:40:AD:89:13:68:32:C3:9E Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 0F99 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/mdm3JWaXWFCLYq1nQK2JE2gyw54.roa Signing time: Tue 26 Nov 2024 06:40:37 +0000 ROA not before: Tue 26 Nov 2024 06:40:37 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.46.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3993 (0xf99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Nov 26 06:40:37 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=99D9B725669758508B62AD6740AD89136832C39E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:27:76:39:46:2d:88:e1:a6:b2:61:1b:e4:14: 70:9f:24:33:ef:e2:86:13:c4:5d:2e:a2:9b:7e:23: 60:dd:08:f9:1f:40:58:56:a2:1d:82:5d:5e:76:52: 86:a2:6e:df:f3:7f:0f:02:28:68:d1:e1:e8:21:0f: 01:d8:b9:e9:fd:46:27:aa:82:00:28:c4:29:cc:b2: b2:60:9b:58:e4:50:a8:fd:d4:3c:67:2c:3b:c2:3b: 61:2b:68:63:69:8d:ab:53:5d:2f:ad:ae:4d:4e:67: 7c:92:d2:75:f4:95:11:83:f1:3d:9f:4d:4c:ee:85: d7:3c:2a:03:a2:87:24:e2:e0:3f:f0:dd:ec:30:7f: 9f:cd:38:18:13:cf:ad:54:99:fc:27:54:60:24:11: 3c:7f:a3:91:6a:6d:58:ba:b7:69:59:13:88:b9:ba: 21:53:38:2b:e4:12:ba:4b:7a:05:bc:6d:17:a4:e0: dd:f3:be:c3:2e:20:4f:94:09:6b:1e:a1:0b:6c:d2: 7c:f8:c0:b1:2b:cb:7e:b9:9c:97:06:93:a1:6d:29: b5:41:cd:c3:ca:cb:de:48:a1:2c:88:1a:ee:42:c7: 99:d4:4c:e2:32:d0:b2:31:c0:5d:d0:a6:8a:d3:a2: e9:3c:1e:c5:31:b9:06:db:5a:b5:ce:97:fd:6f:e4: fd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D9:B7:25:66:97:58:50:8B:62:AD:67:40:AD:89:13:68:32:C3:9E X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/mdm3JWaXWFCLYq1nQK2JE2gyw54.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.46.224.0/20 Signature Algorithm: sha256WithRSAEncryption 48:e3:60:99:25:ab:91:3b:d9:3a:b3:1f:01:04:d8:c2:0f:d9: aa:96:40:88:bf:7f:92:71:90:31:45:38:a8:b8:d2:07:56:10: 68:fa:84:ab:49:6b:e7:d3:d6:04:58:24:e5:44:c3:44:06:b2: 81:60:9c:01:2a:4b:8b:0a:84:b0:e7:2d:44:74:5a:64:35:bf: c7:89:03:53:44:a9:42:24:51:96:04:5e:b9:d8:1d:97:df:73: 4a:77:ec:90:58:76:dd:ea:77:1c:ca:4f:f7:78:75:ee:2b:04: 48:8e:49:d6:54:b5:f2:3a:cb:55:a4:b3:f2:8f:96:c0:49:c3: ac:88:7d:6c:e2:b4:94:8d:ae:75:44:3e:f8:e4:e6:8f:84:b4: 89:6b:33:32:13:f3:c5:3e:ab:c3:10:56:9c:ad:cc:75:3d:90: 75:a8:4b:9a:55:ca:a5:74:d5:24:3f:11:cf:f9:56:36:0d:b5: 00:49:96:2d:c3:9e:22:9a:7c:5a:62:4e:b0:54:f7:5b:8a:cb: d2:3e:74:ac:8f:d0:69:f7:d9:a3:10:a7:60:12:36:21:76:a4: c5:82:c9:fc:8f:46:cc:d4:eb:95:98:d4:16:6d:5c:65:fd:d6: f3:a3:59:b9:bd:fa:ed:77:cc:9b:81:da:4b:93:9f:1e:aa:80: 83:e9:3e:e9 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICD5kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDExMjYw NjQwMzdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk5RDlCNzI1NjY5NzU4 NTA4QjYyQUQ2NzQwQUQ4OTEzNjgzMkMzOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjJ3Y5Ri2I4aayYRvkFHCfJDPv4oYTxF0uopt+I2DdCPkfQFhW oh2CXV52Uoaibt/zfw8CKGjR4eghDwHYuen9RieqggAoxCnMsrJgm1jkUKj91Dxn LDvCO2EraGNpjatTXS+trk1OZ3yS0nX0lRGD8T2fTUzuhdc8KgOihyTi4D/w3eww f5/NOBgTz61UmfwnVGAkETx/o5FqbVi6t2lZE4i5uiFTOCvkErpLegW8bRek4N3z vsMuIE+UCWseoQts0nz4wLEry365nJcGk6FtKbVBzcPKy95IoSyIGu5Cx5nUTOIy 0LIxwF3QporTouk8HsUxuQbbWrXOl/1v5P1vAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUmdm3JWaXWFCLYq1nQK2JE2gyw54wHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvbWRtM0pXYVhXRkNM WXExblFLMkpFMmd5dzU0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHEu4DANBgkqhkiG9w0BAQsFAAOCAQEASONgmSWrkTvZOrMfAQTYwg/ZqpZA iL9/knGQMUU4qLjSB1YQaPqEq0lr59PWBFgk5UTDRAaygWCcASpLiwqEsOctRHRa ZDW/x4kDU0SpQiRRlgReudgdl99zSnfskFh23ep3HMpP93h17isESI5J1lS18jrL VaSz8o+WwEnDrIh9bOK0lI2udUQ++OTmj4S0iWszMhPzxT6rwxBWnK3MdT2QdahL mlXKpXTVJD8Rz/lWNg21AEmWLcOeIpp8WmJOsFT3W4rL0j50rI/QaffZoxCnYBI2 IXakxYLJ/I9GzNTrlZjUFm1cZf3W86NZub367XfMm4HaS5OfHqqAg+k+6Q== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net