$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/rNbhpF6JOM-PAVoZ7VIa6VbBLRY.roa File: rNbhpF6JOM-PAVoZ7VIa6VbBLRY.roa (raw, json) Hash identifier: LqZmlAzo2UwwyaV+mc2KW6vnM59p5fyFcgl+c2cZId4= Subject key identifier: AC:D6:E1:A4:5E:89:38:CF:8F:01:5A:19:ED:52:1A:E9:56:C1:2D:16 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 11E6 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/rNbhpF6JOM-PAVoZ7VIa6VbBLRY.roa Signing time: Fri 14 Mar 2025 09:37:09 +0000 ROA not before: Fri 14 Mar 2025 09:37:09 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.46.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4582 (0x11e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Mar 14 09:37:09 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=ACD6E1A45E8938CF8F015A19ED521AE956C12D16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:56:84:25:66:ae:38:0b:f6:a2:1f:42:b1:a8: cc:3a:c9:75:36:8f:86:e9:53:dc:cc:7f:40:2b:61: 93:40:59:d5:34:c8:15:46:84:10:a1:07:f5:64:e7: d9:c0:58:3d:b4:87:e8:34:de:93:de:a1:5f:82:64: 56:0d:2a:fb:1f:aa:9a:58:05:c4:9b:46:61:62:5a: e5:7f:d6:62:52:95:ff:78:1a:7c:44:8f:41:40:18: 6a:bc:11:9e:c1:c6:09:da:34:99:a2:0a:65:8b:58: 52:c3:74:e6:ae:97:b2:e7:da:17:24:44:86:02:46: 66:87:5a:c6:24:18:f0:6b:ec:b2:81:1a:2a:28:01: 9f:c0:57:b3:49:7f:67:4f:22:d8:09:a9:66:09:7f: 5f:96:75:be:cc:2d:27:49:c3:f1:61:04:55:36:a0: e1:1b:f6:e2:51:1b:24:50:62:a5:bd:b5:25:94:ea: da:5a:3b:94:ac:cf:d7:2c:c8:db:1b:b2:80:6c:6a: a2:d1:c0:b0:73:70:ae:9e:d2:c0:80:37:34:61:3a: 27:5c:b5:50:2e:2b:07:e3:6d:c0:db:84:4e:a3:17: 81:45:5a:b2:50:36:85:b8:1b:1d:56:27:7a:fd:78: a2:f5:21:13:d8:76:0c:23:9e:3b:f6:77:7b:6c:4e: 27:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D6:E1:A4:5E:89:38:CF:8F:01:5A:19:ED:52:1A:E9:56:C1:2D:16 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/rNbhpF6JOM-PAVoZ7VIa6VbBLRY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.46.92.0/23 Signature Algorithm: sha256WithRSAEncryption 02:d0:b1:6a:d7:60:e2:27:5b:89:0b:9a:0d:73:76:56:eb:58: e7:6d:1e:6d:a5:58:c0:7f:00:0b:fd:cf:f6:dc:aa:27:15:c1: 37:6d:ea:fd:f3:2b:42:12:39:60:19:e8:f0:e9:71:fe:5c:a7: 62:3c:e9:fa:77:c0:72:b7:1b:ad:20:b3:2a:ec:d4:d8:3e:c6: a0:a9:ae:b3:7d:12:e6:be:da:a0:ac:ad:4a:e4:99:8d:5a:0a: 79:57:eb:b4:ee:f1:fc:54:0e:13:b5:99:a1:bd:97:38:ab:34: 71:92:8b:1d:41:23:5a:f2:3c:36:bb:39:88:02:a1:99:f4:93: 6a:25:17:66:21:ff:c6:21:88:39:09:9e:f0:e1:b1:0b:6f:62: 66:5d:6f:4f:77:b8:2d:12:00:79:de:cc:95:f1:5b:6d:73:d1: b7:c8:ae:f1:80:ed:56:6a:18:f0:30:e7:ed:d4:37:29:02:8a: f6:c1:f4:22:1d:dc:f1:75:b8:81:8c:98:30:97:1a:45:f2:02: d9:09:41:52:28:79:e5:b4:e4:72:9b:07:78:f3:f8:c4:6f:72: 50:34:eb:2e:d4:f2:3c:eb:51:58:97:66:80:b8:4b:a3:ca:dc: b8:18:ea:bc:e3:cf:1b:f8:ac:39:f0:10:c6:56:76:8b:33:7b: bc:54:ca:a0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEeYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAzMTQw OTM3MDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFDRDZFMUE0NUU4OTM4 Q0Y4RjAxNUExOUVENTIxQUU5NTZDMTJEMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiVoQlZq44C/aiH0KxqMw6yXU2j4bpU9zMf0ArYZNAWdU0yBVG hBChB/Vk59nAWD20h+g03pPeoV+CZFYNKvsfqppYBcSbRmFiWuV/1mJSlf94GnxE j0FAGGq8EZ7BxgnaNJmiCmWLWFLDdOaul7Ln2hckRIYCRmaHWsYkGPBr7LKBGioo AZ/AV7NJf2dPItgJqWYJf1+Wdb7MLSdJw/FhBFU2oOEb9uJRGyRQYqW9tSWU6tpa O5Ssz9csyNsbsoBsaqLRwLBzcK6e0sCANzRhOidctVAuKwfjbcDbhE6jF4FFWrJQ NoW4Gx1WJ3r9eKL1IRPYdgwjnjv2d3tsTidzAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUrNbhpF6JOM+PAVoZ7VIa6VbBLRYwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvck5iaHBGNkpPTS1Q QVZvWjdWSWE2VmJCTFJZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEuXDANBgkqhkiG9w0BAQsFAAOCAQEAAtCxatdg4idbiQuaDXN2VutY520e baVYwH8AC/3P9tyqJxXBN23q/fMrQhI5YBno8Olx/lynYjzp+nfAcrcbrSCzKuzU 2D7GoKmus30S5r7aoKytSuSZjVoKeVfrtO7x/FQOE7WZob2XOKs0cZKLHUEjWvI8 Nrs5iAKhmfSTaiUXZiH/xiGIOQme8OGxC29iZl1vT3e4LRIAed7MlfFbbXPRt8iu 8YDtVmoY8DDn7dQ3KQKK9sH0Ih3c8XW4gYyYMJcaRfIC2QlBUih55bTkcpsHePP4 xG9yUDTrLtTyPOtRWJdmgLhLo8rcuBjqvOPPG/isOfAQxlZ2izN7vFTKoA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net