$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/7hHzsjGRem5YfKeERjzAMwmmaXc.roa File: 7hHzsjGRem5YfKeERjzAMwmmaXc.roa (raw, json) Hash identifier: WG0CmlXDQycv77kgTDckt+dNJAZ4I331GDHmnvavTl8= Subject key identifier: EE:11:F3:B2:31:91:7A:6E:58:7C:A7:84:46:3C:C0:33:09:A6:69:77 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 0E8E Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/7hHzsjGRem5YfKeERjzAMwmmaXc.roa Signing time: Tue 08 Oct 2024 07:24:42 +0000 ROA not before: Tue 08 Oct 2024 07:24:42 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.45.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Feb 2025 22:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3726 (0xe8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Oct 8 07:24:42 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=EE11F3B231917A6E587CA784463CC03309A66977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:40:b3:f2:a4:5d:19:c6:4e:39:56:3f:a8:38: 08:6b:c2:de:4b:ca:8e:c5:06:d2:30:3c:31:5d:28: d6:bc:45:37:e8:17:5a:39:d1:d4:c2:e0:3e:23:69: 1f:26:a3:f1:94:e9:0f:d4:0d:ee:59:1a:f2:df:71: 51:3b:66:95:55:27:f3:0e:76:f9:6f:a0:77:79:9f: f7:42:2f:91:ad:56:a9:68:e0:36:38:7f:3e:f1:6b: dd:09:86:48:6d:0b:0e:fa:92:be:16:88:8b:00:1f: 9c:f9:19:f1:ba:50:a5:70:c1:a1:9c:14:1a:34:f7: fc:36:7b:d5:f1:4f:88:8b:88:f6:e4:f9:a1:eb:ac: ef:e8:26:7b:a6:a5:5b:93:8c:fa:79:d6:4d:82:60: b4:77:25:11:e7:e3:5e:e8:02:51:b9:27:d7:b9:af: 64:96:42:92:00:fb:7a:ca:cf:ec:21:98:86:59:ee: d3:c9:46:ae:25:4b:82:e7:0e:89:49:12:eb:91:e9: 49:ea:51:70:d8:b9:0a:a7:88:0c:d0:c5:ee:a3:24: 39:a8:8f:38:cc:5b:3d:7d:8a:3d:af:c1:26:9b:a5: 40:06:8b:43:2a:f3:96:7d:dc:e2:f1:d0:66:c4:91: d2:30:8a:bd:34:e2:77:21:4f:e8:66:6e:07:86:09: 6c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:11:F3:B2:31:91:7A:6E:58:7C:A7:84:46:3C:C0:33:09:A6:69:77 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/7hHzsjGRem5YfKeERjzAMwmmaXc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.45.112.0/23 Signature Algorithm: sha256WithRSAEncryption 41:36:80:8b:8f:30:a9:ef:12:97:aa:d6:58:fd:85:c2:03:02: d0:2c:1a:37:23:b3:61:02:22:49:f5:8c:5b:77:20:8f:83:2e: 43:f5:78:be:27:83:ed:ca:f1:81:b0:49:cf:da:25:51:3b:e8: 35:90:fd:1a:7b:99:49:ae:50:13:cc:cd:9f:72:59:73:ef:18: d4:d4:bd:83:19:e7:78:74:de:93:27:68:10:f4:d4:1f:bb:57: 98:3d:34:61:e3:1e:dd:93:f0:e4:80:31:f3:2b:88:d6:95:8a: df:46:9c:03:22:39:fc:00:e7:4a:91:6f:8c:ab:91:df:2e:e9: 58:f1:b8:a2:f0:92:52:71:26:a9:83:12:7e:88:37:5e:9f:f7: 53:fb:55:2d:b0:c3:be:68:e7:af:23:bf:13:2b:ff:7f:cd:a5: 6a:12:6e:9f:b0:2f:0a:94:6a:34:d3:9f:ef:66:c9:d1:42:c6: bd:57:27:e1:2a:d5:e0:78:e7:dd:f0:92:89:05:02:26:1d:f6: 2a:ad:bf:ee:09:c8:9b:44:c3:c3:a1:4b:93:a2:7a:f4:2c:8a: 0f:e7:62:63:f5:9a:17:ff:8e:86:0f:68:6f:8f:22:61:2e:84: 79:8d:cb:4e:92:b3:22:9e:61:d9:83:b5:07:32:1e:9f:a9:5d: 69:c5:12:4a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDo4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDEwMDgw NzI0NDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVFMTFGM0IyMzE5MTdB NkU1ODdDQTc4NDQ2M0NDMDMzMDlBNjY5NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOQLPypF0Zxk45Vj+oOAhrwt5Lyo7FBtIwPDFdKNa8RTfoF1o5 0dTC4D4jaR8mo/GU6Q/UDe5ZGvLfcVE7ZpVVJ/MOdvlvoHd5n/dCL5GtVqlo4DY4 fz7xa90JhkhtCw76kr4WiIsAH5z5GfG6UKVwwaGcFBo09/w2e9XxT4iLiPbk+aHr rO/oJnumpVuTjPp51k2CYLR3JRHn417oAlG5J9e5r2SWQpIA+3rKz+whmIZZ7tPJ Rq4lS4LnDolJEuuR6UnqUXDYuQqniAzQxe6jJDmojzjMWz19ij2vwSabpUAGi0Mq 85Z93OLx0GbEkdIwir004nchT+hmbgeGCWyRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU7hHzsjGRem5YfKeERjzAMwmmaXcwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvN2hIenNqR1JlbTVZ ZktlRVJqekFNd21tYVhjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEtcDANBgkqhkiG9w0BAQsFAAOCAQEAQTaAi48wqe8Sl6rWWP2FwgMC0Cwa NyOzYQIiSfWMW3cgj4MuQ/V4vieD7crxgbBJz9olUTvoNZD9GnuZSa5QE8zNn3JZ c+8Y1NS9gxnneHTekydoEPTUH7tXmD00YeMe3ZPw5IAx8yuI1pWK30acAyI5/ADn SpFvjKuR3y7pWPG4ovCSUnEmqYMSfog3Xp/3U/tVLbDDvmjnryO/Eyv/f82lahJu n7AvCpRqNNOf72bJ0ULGvVcn4SrV4Hjn3fCSiQUCJh32Kq2/7gnIm0TDw6FLk6J6 9CyKD+diY/WaF/+Ohg9ob48iYS6EeY3LTpKzIp5h2YO1BzIen6ldacUSSg== -----END CERTIFICATE-----Generated at Sun Feb 16 21:48:12 2025 by rpki-client