$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/whguNaccYGQ0DQYqWUsHPpbnKFo.roa File: whguNaccYGQ0DQYqWUsHPpbnKFo.roa (raw, json) Hash identifier: /p7cvx/iZBkIOBRy0OIQy+7CcH+3vKg8J6YTwIalBMs= Subject key identifier: C2:18:2E:35:A7:1C:60:64:34:0D:06:2A:59:4B:07:3E:96:E7:28:5A Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1030 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/whguNaccYGQ0DQYqWUsHPpbnKFo.roa Signing time: Wed 25 Dec 2024 03:25:03 +0000 ROA not before: Wed 25 Dec 2024 03:25:03 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.46.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4144 (0x1030) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Dec 25 03:25:03 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C2182E35A71C6064340D062A594B073E96E7285A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:4b:7f:ff:81:04:54:0e:58:d2:43:6e:16: fb:16:cb:0e:e0:e4:86:1b:0a:f6:ee:3c:16:21:de: 37:34:11:0f:cb:ca:32:bc:ed:53:d0:d5:73:74:93: c1:b8:d6:64:95:13:c4:f8:4c:af:a1:9f:67:8a:35: 4b:b4:dc:4b:40:d6:71:49:1d:ae:e3:1c:6c:c6:6f: b8:21:96:7e:d0:28:5a:ea:fa:d2:97:94:b8:4e:d3: 72:2c:c0:e9:f5:b0:79:d9:17:4b:07:e9:3c:6a:5f: ec:6b:ea:d0:ed:54:23:c0:bc:d7:f1:e4:d4:b7:6e: 3c:9c:9d:52:fa:2d:0f:42:ad:79:f5:80:65:60:30: f5:8f:30:34:7f:4e:29:07:88:61:8b:7b:01:03:0b: da:d7:85:59:01:3d:28:b7:a8:88:b1:85:cc:29:36: b1:01:d0:05:1c:26:14:12:00:9f:87:b9:bb:b4:e5: 36:a2:1a:fe:f0:d6:88:90:3f:7f:68:b4:93:b1:7c: 04:49:3c:e8:e7:4c:90:72:f1:cd:5f:be:da:1a:0f: a1:c5:e7:d6:12:ff:e7:01:bb:63:22:fc:ec:f3:d6: 68:25:e3:38:6c:7a:6e:93:c9:9b:86:d3:69:f2:c5: b6:0c:f5:f4:ee:6c:ee:1b:d2:c9:c2:28:02:7c:43: 50:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:18:2E:35:A7:1C:60:64:34:0D:06:2A:59:4B:07:3E:96:E7:28:5A X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/whguNaccYGQ0DQYqWUsHPpbnKFo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.46.248.0/21 Signature Algorithm: sha256WithRSAEncryption 8e:aa:ce:0d:4b:37:e5:15:f1:ed:16:09:ae:44:5f:9c:60:e3: 60:15:52:61:90:dc:06:80:64:dc:19:d6:bd:55:84:09:ea:3c: bf:18:a5:65:ff:a2:22:18:5c:23:23:cb:a0:87:08:a7:8a:b6: ac:0c:c9:fd:f3:d6:6f:76:1d:10:09:96:1e:0b:9e:3c:22:2e: f0:24:a1:36:1e:d2:3e:d2:ac:05:6b:32:63:73:ac:1b:92:da: d2:64:42:b4:6b:c1:35:7c:7e:2d:51:06:d0:e8:88:33:13:b2: 09:85:97:9d:f0:ea:5a:39:53:31:45:a3:af:17:78:e5:b1:2a: 53:ce:14:78:09:d1:3f:3d:aa:6d:03:3f:6c:31:c6:7c:06:4c: a8:62:c2:94:d5:0e:89:9c:bf:53:c9:67:08:59:38:9b:fe:ec: b7:83:13:47:50:7b:e3:31:74:32:35:7d:3d:20:c3:da:60:97: 9e:57:6d:86:ce:df:87:70:e5:f5:4d:38:8a:68:0a:b0:63:46: da:63:04:b0:5d:d6:86:26:b5:3d:10:18:ef:0f:0d:58:61:f9: 20:eb:be:c5:4b:ac:a4:68:e1:5b:3e:a2:9d:97:9e:47:d1:2a: bb:17:73:f0:26:25:e7:0c:2b:49:93:8c:5f:4c:e7:0b:30:d6: e8:4a:fc:33 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEDAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDEyMjUw MzI1MDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEMyMTgyRTM1QTcxQzYw NjQzNDBEMDYyQTU5NEIwNzNFOTZFNzI4NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbNEt//4EEVA5Y0kNuFvsWyw7g5IYbCvbuPBYh3jc0EQ/LyjK8 7VPQ1XN0k8G41mSVE8T4TK+hn2eKNUu03EtA1nFJHa7jHGzGb7ghln7QKFrq+tKX lLhO03IswOn1sHnZF0sH6TxqX+xr6tDtVCPAvNfx5NS3bjycnVL6LQ9CrXn1gGVg MPWPMDR/TikHiGGLewEDC9rXhVkBPSi3qIixhcwpNrEB0AUcJhQSAJ+Hubu05Tai Gv7w1oiQP39otJOxfARJPOjnTJBy8c1fvtoaD6HF59YS/+cBu2Mi/Ozz1mgl4zhs em6TyZuG02nyxbYM9fTubO4b0snCKAJ8Q1CNAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUwhguNaccYGQ0DQYqWUsHPpbnKFowHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvd2hndU5hY2NZR1Ew RFFZcVdVc0hQcGJuS0ZvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3Eu+DANBgkqhkiG9w0BAQsFAAOCAQEAjqrODUs35RXx7RYJrkRfnGDjYBVS YZDcBoBk3BnWvVWECeo8vxilZf+iIhhcIyPLoIcIp4q2rAzJ/fPWb3YdEAmWHgue PCIu8CShNh7SPtKsBWsyY3OsG5La0mRCtGvBNXx+LVEG0OiIMxOyCYWXnfDqWjlT MUWjrxd45bEqU84UeAnRPz2qbQM/bDHGfAZMqGLClNUOiZy/U8lnCFk4m/7st4MT R1B74zF0MjV9PSDD2mCXnldths7fh3Dl9U04imgKsGNG2mMEsF3Whia1PRAY7w8N WGH5IOu+xUuspGjhWz6inZeeR9Equxdz8CYl5wwrSZOMX0znCzDW6Er8Mw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:26 2025 by rpki-client on console.sobornost.net