$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/CmiHCiNmmmHBexs1jUHSE3JAvLE.roa File: CmiHCiNmmmHBexs1jUHSE3JAvLE.roa (raw, json) Hash identifier: UqE1EI1bLQq/OA/HiPE/kaJMKPccyTK0ZKWfNVv4bFM= Subject key identifier: 0A:68:87:0A:23:66:9A:61:C1:7B:1B:35:8D:41:D2:13:72:40:BC:B1 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 102F Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/CmiHCiNmmmHBexs1jUHSE3JAvLE.roa Signing time: Wed 25 Dec 2024 03:25:03 +0000 ROA not before: Wed 25 Dec 2024 03:25:03 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 115.175.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4143 (0x102f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Dec 25 03:25:03 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0A68870A23669A61C17B1B358D41D2137240BCB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:b9:26:ff:0f:2b:a3:28:bb:c1:30:c8:33: b0:cc:53:16:39:69:e1:ff:e6:c3:b3:21:a6:b5:9b: 66:67:6a:0b:cd:62:a9:c9:59:52:ef:e5:02:ed:62: 6b:e8:c9:bd:6e:c7:64:62:31:20:ea:06:ac:a3:98: c3:9a:53:9d:ba:69:d0:25:1f:d1:66:63:93:58:53: 67:46:38:73:fd:e1:08:42:ea:2a:20:71:99:8f:83: 36:f6:fa:b8:37:21:8a:7c:3b:b6:77:0d:ff:fc:ed: 53:79:35:07:ee:50:60:14:21:f9:bf:38:b4:f9:70: e1:8e:f0:68:7b:8a:e8:13:94:05:41:60:57:b5:c0: 1d:76:60:46:01:3c:0d:08:e9:c7:3b:ac:b0:ee:52: bc:f7:0d:6b:17:5b:6e:51:39:a5:be:c6:4b:1b:d8: df:4d:45:8d:7c:e2:7b:2d:ef:15:ea:d5:65:b8:96: bc:3d:ce:30:ce:b3:32:5d:f4:02:58:1f:01:fa:6b: 1d:0b:21:08:05:c6:79:10:f8:8a:c4:b0:1d:3a:94: 4e:fd:9c:2f:43:fe:ec:6f:08:e8:f8:3b:e7:50:6f: 68:36:0f:55:06:6c:9e:d6:9a:dd:7f:55:ae:7d:97: ec:78:0a:3d:7e:52:75:fb:7a:84:1a:b3:b1:6d:64: 9e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:68:87:0A:23:66:9A:61:C1:7B:1B:35:8D:41:D2:13:72:40:BC:B1 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/CmiHCiNmmmHBexs1jUHSE3JAvLE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.175.0.0/19 Signature Algorithm: sha256WithRSAEncryption 62:ff:65:a1:73:14:5f:53:15:73:07:45:eb:5b:a8:75:c4:8d: 47:e7:d3:e0:bd:a0:9b:7c:26:b2:d7:9a:a1:cc:42:49:29:d8: 8b:2d:24:c5:13:15:14:ce:98:07:1d:31:4e:e2:d0:de:b7:9e: 6f:7a:b2:4d:7a:9e:d9:6f:fc:19:79:80:12:a5:8f:04:db:5b: 5c:fe:3e:3c:5d:56:bd:96:1d:53:16:9b:00:2d:b9:34:35:40: 2e:80:7c:af:ce:af:de:04:60:05:55:02:55:ae:2a:57:47:53: fc:23:03:34:7e:6e:ba:eb:90:aa:9d:9d:db:b1:2a:11:71:df: 91:b3:ba:7c:7d:cb:3f:99:a7:0a:90:06:cf:2d:4e:10:c2:fd: d1:4b:e7:f0:0f:42:80:68:92:c2:40:ca:bd:1e:b5:f0:df:be: 3f:fb:de:b8:52:0d:44:82:57:d0:78:ec:10:97:e4:b0:5f:82: 39:e9:30:b1:1a:e4:12:c8:be:99:b1:b7:a2:fc:cb:ae:76:a0: 4b:04:de:5d:9a:40:8a:5e:ce:bd:84:c6:db:b4:85:06:10:6d: 1d:5c:ea:56:a8:80:a6:d7:8c:33:6a:64:83:cf:f5:33:65:5c: 98:38:85:0f:62:de:b7:46:df:31:b1:35:2d:12:bc:c2:d9:7a: af:75:66:16 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDEyMjUw MzI1MDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBBNjg4NzBBMjM2NjlB NjFDMTdCMUIzNThENDFEMjEzNzI0MEJDQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB47km/w8royi7wTDIM7DMUxY5aeH/5sOzIaa1m2ZnagvNYqnJ WVLv5QLtYmvoyb1ux2RiMSDqBqyjmMOaU526adAlH9FmY5NYU2dGOHP94QhC6iog cZmPgzb2+rg3IYp8O7Z3Df/87VN5NQfuUGAUIfm/OLT5cOGO8Gh7iugTlAVBYFe1 wB12YEYBPA0I6cc7rLDuUrz3DWsXW25ROaW+xksb2N9NRY184nst7xXq1WW4lrw9 zjDOszJd9AJYHwH6ax0LIQgFxnkQ+IrEsB06lE79nC9D/uxvCOj4O+dQb2g2D1UG bJ7Wmt1/Va59l+x4Cj1+UnX7eoQas7FtZJ5rAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUCmiHCiNmmmHBexs1jUHSE3JAvLEwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvQ21pSENpTm1tbUhC ZXhzMWpVSFNFM0pBdkxFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXOvADANBgkqhkiG9w0BAQsFAAOCAQEAYv9loXMUX1MVcwdF61uodcSNR+fT 4L2gm3wmsteaocxCSSnYiy0kxRMVFM6YBx0xTuLQ3reeb3qyTXqe2W/8GXmAEqWP BNtbXP4+PF1WvZYdUxabAC25NDVALoB8r86v3gRgBVUCVa4qV0dT/CMDNH5uuuuQ qp2d27EqEXHfkbO6fH3LP5mnCpAGzy1OEML90Uvn8A9CgGiSwkDKvR618N++P/ve uFINRIJX0HjsEJfksF+COekwsRrkEsi+mbG3ovzLrnagSwTeXZpAil7OvYTG27SF BhBtHVzqVqiApteMM2pkg8/1M2VcmDiFD2Let0bfMbE1LRK8wtl6r3VmFg== -----END CERTIFICATE-----Generated at Fri Apr 4 21:56:10 2025 by rpki-client