$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/0kpSitwevETeTUkzZBW0NW7e4RE.roa File: 0kpSitwevETeTUkzZBW0NW7e4RE.roa (raw, json) Hash identifier: 9g8RLRE0/aBezFBQJGy1PFHLP4WTQMttNXc7SZaKHK0= Subject key identifier: D2:4A:52:8A:DC:1E:BC:44:DE:4D:49:33:64:15:B4:35:6E:DE:E1:11 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 0E8D Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/0kpSitwevETeTUkzZBW0NW7e4RE.roa Signing time: Tue 08 Oct 2024 07:24:41 +0000 ROA not before: Tue 08 Oct 2024 07:24:41 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.45.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3725 (0xe8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Oct 8 07:24:41 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D24A528ADC1EBC44DE4D49336415B4356EDEE111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c1:1d:c4:be:fb:9f:fc:77:e3:f1:ca:75:b9: 09:ad:17:98:9a:e3:10:fd:9b:f7:06:06:62:42:16: df:8f:83:87:b4:82:a0:71:56:45:cd:47:70:6c:89: f9:4a:89:e8:3e:02:19:1b:39:01:0c:6f:24:4b:9d: cd:a8:48:29:46:0c:ab:49:06:10:2c:43:8a:fc:f7: 8f:0f:d1:d1:42:1b:ee:4b:8f:ad:d8:cf:e2:14:5a: 3c:2a:64:b0:af:ec:c5:ae:7c:c1:41:e1:62:e6:fd: 95:6b:c5:fd:92:a8:88:e5:f5:70:fa:92:4b:d8:2e: c5:5f:df:f3:7f:3d:7c:3a:d6:21:f7:45:36:d9:ba: 0d:ff:eb:db:c6:43:13:48:53:ea:89:2d:b0:1e:8d: 23:8e:a8:44:55:4f:36:b8:43:68:af:98:d0:1c:27: cc:3e:80:70:fc:2d:07:e2:a7:c8:0c:0b:16:aa:c9: 91:53:e9:fe:43:cd:d1:b1:bb:1f:58:f8:6e:68:1c: 5b:f4:8d:e2:ac:57:16:5f:6f:36:f7:4c:28:08:6e: 41:4c:19:75:16:bf:ef:64:d0:a6:c8:32:e0:27:97: ab:e1:b0:99:db:db:82:12:f9:30:2b:99:00:43:da: bb:81:c1:e8:7e:8f:20:3e:3f:a9:d9:9b:e9:bc:37: 99:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4A:52:8A:DC:1E:BC:44:DE:4D:49:33:64:15:B4:35:6E:DE:E1:11 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/0kpSitwevETeTUkzZBW0NW7e4RE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.45.127.0/24 Signature Algorithm: sha256WithRSAEncryption 84:3a:73:88:8b:8b:96:f5:d6:20:bf:f0:c7:b6:85:84:3f:88: 29:06:fa:22:e2:8e:b1:7e:12:a9:4a:9e:d8:dc:c9:8e:da:16: 4a:31:54:02:14:6c:0a:52:14:eb:be:78:a0:8a:9b:61:08:68: fb:57:af:0f:af:59:f3:b0:79:08:35:f6:da:19:ab:75:1d:ee: 35:68:9d:3d:79:c2:56:7a:4e:bb:fd:d7:fe:ba:4f:fd:72:13: 6c:bf:0f:79:fb:76:03:90:9b:3e:b4:c5:00:b1:16:d1:e1:ab: 19:3b:f3:90:87:d5:25:ef:05:ed:71:4e:66:3b:ee:0d:1d:f2: 70:94:9b:3f:ac:f3:9d:18:61:7e:c6:48:18:7d:46:4c:42:20: ba:36:34:a4:20:7e:0b:e7:89:44:91:4a:09:af:e7:fe:33:05: ae:31:51:26:e8:fb:fb:b8:0e:fe:96:80:b6:de:3f:d7:9f:e2: 1e:55:f1:79:e8:73:0e:2c:0a:4a:60:df:8a:e1:8e:f9:c4:74: ed:89:30:ac:90:89:4f:75:d2:bf:be:b8:c2:14:26:9a:b6:45: 4b:2e:a2:f9:2a:7c:fd:be:6f:00:d3:e5:41:18:e6:f4:2d:ce: 73:34:21:4b:2a:74:bb:3d:69:a7:08:d4:be:5e:54:5b:e0:66: f2:31:0a:ce -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDo0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDEwMDgw NzI0NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQyNEE1MjhBREMxRUJD NDRERTRENDkzMzY0MTVCNDM1NkVERUUxMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfwR3Evvuf/Hfj8cp1uQmtF5ia4xD9m/cGBmJCFt+Pg4e0gqBx VkXNR3BsiflKieg+AhkbOQEMbyRLnc2oSClGDKtJBhAsQ4r8948P0dFCG+5Lj63Y z+IUWjwqZLCv7MWufMFB4WLm/ZVrxf2SqIjl9XD6kkvYLsVf3/N/PXw61iH3RTbZ ug3/69vGQxNIU+qJLbAejSOOqERVTza4Q2ivmNAcJ8w+gHD8LQfip8gMCxaqyZFT 6f5DzdGxux9Y+G5oHFv0jeKsVxZfbzb3TCgIbkFMGXUWv+9k0KbIMuAnl6vhsJnb 24IS+TArmQBD2ruBweh+jyA+P6nZm+m8N5mZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU0kpSitwevETeTUkzZBW0NW7e4REwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvMGtwU2l0d2V2RVRl VFVrelpCVzBOVzdlNFJFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHEtfzANBgkqhkiG9w0BAQsFAAOCAQEAhDpziIuLlvXWIL/wx7aFhD+IKQb6 IuKOsX4SqUqe2NzJjtoWSjFUAhRsClIU6754oIqbYQho+1evD69Z87B5CDX22hmr dR3uNWidPXnCVnpOu/3X/rpP/XITbL8Peft2A5CbPrTFALEW0eGrGTvzkIfVJe8F 7XFOZjvuDR3ycJSbP6zznRhhfsZIGH1GTEIgujY0pCB+C+eJRJFKCa/n/jMFrjFR Juj7+7gO/paAtt4/15/iHlXxeehzDiwKSmDfiuGO+cR07YkwrJCJT3XSv764whQm mrZFSy6i+Sp8/b5vANPlQRjm9C3OczQhSyp0uz1ppwjUvl5UW+Bm8jEKzg== -----END CERTIFICATE-----Generated at Mon Nov 25 21:48:22 2024 by rpki-client on console-ams.rpki-client.org