$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/CqUCcUpuxMX-gZ0lyYL51w1880U.roa File: CqUCcUpuxMX-gZ0lyYL51w1880U.roa (raw, json) Hash identifier: XdBEAfxC4fIN+tx5+KkFBNDp8UrIRt1R+RT9KaMFdFY= Subject key identifier: 0A:A5:02:71:4A:6E:C4:C5:FE:81:9D:25:C9:82:F9:D7:0D:7C:F3:45 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 11D1 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/CqUCcUpuxMX-gZ0lyYL51w1880U.roa Signing time: Fri 14 Mar 2025 09:32:39 +0000 ROA not before: Fri 14 Mar 2025 09:32:39 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.47.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4561 (0x11d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Mar 14 09:32:39 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0AA502714A6EC4C5FE819D25C982F9D70D7CF345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:70:59:45:f6:82:53:60:34:30:2d:a4:8d:ef: 24:75:29:13:19:d2:97:31:a9:e7:dd:c8:17:97:73: 6a:e3:eb:33:be:b2:78:e5:d4:0b:af:ea:90:62:d6: fe:52:1b:a8:1a:58:da:e1:4e:49:0b:7e:ba:23:ad: d7:b3:d3:ea:c0:ce:b5:6b:24:51:bb:9b:a6:42:50: 4e:2e:ff:72:44:35:e6:1d:ec:9c:9b:f1:4f:e6:5b: 1a:67:cf:62:58:50:ed:01:89:c6:99:33:45:f7:9e: f4:a0:95:15:55:b1:4a:cc:d3:cc:37:c3:c7:61:20: 42:89:77:2e:7c:47:48:eb:e9:58:b2:2c:63:7a:67: 71:b8:a1:3d:d5:23:4c:60:15:02:58:89:7a:83:fd: 30:b6:e2:6e:a8:70:a4:aa:ff:5f:6c:17:35:24:db: 71:70:50:f2:f1:f8:84:2b:3d:28:e8:f8:35:6b:fa: 3e:b9:46:11:43:30:43:83:c9:0d:5d:db:8d:a0:99: 17:1d:6b:28:b3:01:f9:11:fb:44:d3:1d:cc:2d:57: 9e:8a:84:8a:37:31:0a:76:10:76:30:1d:5d:18:2f: a1:d3:44:cb:95:97:84:1f:01:96:59:d2:03:4e:99: 5c:dc:aa:65:6d:59:cb:d3:c1:1b:08:70:ef:be:d0: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A5:02:71:4A:6E:C4:C5:FE:81:9D:25:C9:82:F9:D7:0D:7C:F3:45 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/CqUCcUpuxMX-gZ0lyYL51w1880U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.230.0/23 Signature Algorithm: sha256WithRSAEncryption 15:a7:52:f1:16:81:77:02:52:f5:e3:d2:cf:b9:e3:9f:bd:1e: e8:91:79:7f:a1:9b:e9:22:0d:30:bc:4c:19:f0:c8:95:76:e0: e1:a0:cf:44:5f:5d:d6:e3:45:8c:92:4c:42:d8:f9:81:48:93: 76:38:19:1f:84:3a:76:fa:54:4a:8a:c9:bb:c7:1e:ae:0c:4c: 0f:47:c1:8d:cb:4e:ef:89:2f:4b:26:22:f4:24:7f:20:73:a7: 12:ea:9a:f2:ef:6b:f4:e6:9a:bb:a1:de:92:2d:53:df:d5:df: 59:63:5c:f2:84:e9:0d:a6:34:63:cb:93:a1:77:16:59:b0:24: 99:22:2a:6f:41:9d:14:a1:f9:11:f4:67:b0:86:f0:6a:45:4a: 9b:2a:7c:85:81:4f:a9:df:07:69:cc:45:dc:50:d7:4b:5f:64: de:3c:0e:89:31:b9:9e:c8:32:46:4b:95:81:2f:90:cd:f0:c5: 7b:da:04:84:bb:38:05:3c:05:45:88:3f:c0:25:db:cf:f4:0b: ce:51:5d:f0:df:69:55:d1:14:97:a3:f4:5c:84:b6:b0:a6:31: 63:ad:aa:86:ef:04:62:df:9a:b2:5f:49:99:0e:06:a8:4a:c5: 8c:26:6f:d0:39:53:90:1c:cf:88:0e:b7:bb:7e:13:38:04:39: 7e:b6:10:e3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAzMTQw OTMyMzlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBBQTUwMjcxNEE2RUM0 QzVGRTgxOUQyNUM5ODJGOUQ3MEQ3Q0YzNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfcFlF9oJTYDQwLaSN7yR1KRMZ0pcxqefdyBeXc2rj6zO+snjl 1Auv6pBi1v5SG6gaWNrhTkkLfrojrdez0+rAzrVrJFG7m6ZCUE4u/3JENeYd7Jyb 8U/mWxpnz2JYUO0BicaZM0X3nvSglRVVsUrM08w3w8dhIEKJdy58R0jr6ViyLGN6 Z3G4oT3VI0xgFQJYiXqD/TC24m6ocKSq/19sFzUk23FwUPLx+IQrPSjo+DVr+j65 RhFDMEODyQ1d242gmRcdayizAfkR+0TTHcwtV56KhIo3MQp2EHYwHV0YL6HTRMuV l4QfAZZZ0gNOmVzcqmVtWcvTwRsIcO++0KqPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUCqUCcUpuxMX+gZ0lyYL51w1880UwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvQ3FVQ2NVcHV4TVgt Z1owbHlZTDUxdzE4ODBVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv5jANBgkqhkiG9w0BAQsFAAOCAQEAFadS8RaBdwJS9ePSz7njn70e6JF5 f6Gb6SINMLxMGfDIlXbg4aDPRF9d1uNFjJJMQtj5gUiTdjgZH4Q6dvpUSorJu8ce rgxMD0fBjctO74kvSyYi9CR/IHOnEuqa8u9r9Oaau6Heki1T39XfWWNc8oTpDaY0 Y8uToXcWWbAkmSIqb0GdFKH5EfRnsIbwakVKmyp8hYFPqd8HacxF3FDXS19k3jwO iTG5nsgyRkuVgS+QzfDFe9oEhLs4BTwFRYg/wCXbz/QLzlFd8N9pVdEUl6P0XIS2 sKYxY62qhu8EYt+asl9JmQ4GqErFjCZv0DlTkBzPiA63u34TOAQ5frYQ4w== -----END CERTIFICATE-----Generated at Fri Apr 4 18:36:25 2025 by rpki-client