$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/DyDUrzKup5E4PYrcq4Z0EI_okOA.roa File: DyDUrzKup5E4PYrcq4Z0EI_okOA.roa (raw, json) Hash identifier: PBkly3NXSO7l09ZuEp8m5/3/k94W/F2A0MXohz+pPyA= Subject key identifier: 0F:20:D4:AF:32:AE:A7:91:38:3D:8A:DC:AB:86:74:10:8F:E8:90:E0 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 0F6A Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/DyDUrzKup5E4PYrcq4Z0EI_okOA.roa Signing time: Mon 18 Nov 2024 08:37:17 +0000 ROA not before: Mon 18 Nov 2024 08:37:17 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.47.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3946 (0xf6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Nov 18 08:37:17 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0F20D4AF32AEA791383D8ADCAB8674108FE890E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ac:2c:70:88:da:54:fd:07:82:ca:42:d5:34: 60:94:d4:79:c0:df:fe:0a:0b:f4:26:ee:9e:d2:c7: 7e:86:26:40:ec:04:c8:25:6c:57:34:f8:f6:d3:ef: f7:23:7a:76:79:bf:33:30:a1:fa:8c:ea:6c:43:4c: ba:46:23:68:0a:5c:fa:9d:56:43:33:65:71:89:8e: 4d:76:1d:d5:25:ec:84:23:1a:a3:a5:0e:ee:4d:31: c3:af:a8:2a:7e:69:f2:df:46:96:fc:dc:31:1a:6b: f2:f2:82:a9:dc:f4:02:ae:e0:cf:5b:b7:9f:0d:f4: 9a:56:1a:51:5e:8d:b7:16:60:cf:c9:79:c1:88:00: aa:63:1d:af:4c:a3:89:b1:f5:51:8d:05:8b:1a:25: d7:32:dd:9d:82:49:44:85:22:4e:ae:7e:dc:f6:14: 38:4f:d6:0c:18:25:a5:58:c0:39:a1:93:8e:f6:d1: 5e:a0:6c:0d:3e:72:73:fc:23:df:21:fe:32:f9:f6: 3d:1f:2a:04:1e:9f:96:ce:3b:47:7a:0c:bd:82:6c: c8:10:5b:2d:77:e5:22:61:b5:c6:fb:a6:eb:21:45: 93:2c:3f:e0:74:63:75:e8:18:e4:75:34:04:0d:50: 84:38:e3:8e:39:2e:a7:25:62:40:91:8f:4a:45:c9: 3c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:20:D4:AF:32:AE:A7:91:38:3D:8A:DC:AB:86:74:10:8F:E8:90:E0 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/DyDUrzKup5E4PYrcq4Z0EI_okOA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.236.0/23 Signature Algorithm: sha256WithRSAEncryption 06:a5:9d:bd:8c:5b:1b:9d:f5:5a:f8:bd:d5:31:4d:86:de:95: 02:f9:c1:8a:4f:ca:01:9b:27:df:05:28:15:a8:b1:86:26:93: f1:0b:58:99:d8:d9:99:e6:c7:5f:d1:79:05:b9:d5:70:53:2e: b1:42:41:3b:d4:91:ed:18:e3:e6:1b:a5:4a:04:aa:c5:52:2e: 83:03:2a:07:ed:72:2b:e4:61:62:4d:89:83:28:73:5d:e1:5d: 01:b4:b0:98:e6:4d:db:0c:1e:ce:7c:50:bd:4d:f4:6d:08:f4: e1:d2:34:13:67:48:e3:0d:50:6e:36:16:f1:2b:9d:00:1c:70: 74:5f:a4:28:d6:91:e1:61:92:d1:94:00:46:e4:33:a8:b3:0c: c7:b8:fd:78:49:ad:3e:64:f6:17:ff:69:58:e1:88:8f:f7:d4: e2:cc:0f:89:6e:03:4c:8f:62:4c:e4:28:d9:b3:42:6f:a2:0d: 55:b4:52:0b:2e:a1:db:3b:f0:0b:9e:7f:63:e2:07:39:a5:ac: 08:1d:df:30:b3:e3:b8:82:32:bf:7e:19:b9:10:f1:02:3b:94: 46:cc:ee:d8:1c:a0:c9:a3:e3:b9:c5:e7:09:cc:35:8d:50:ba: 01:e7:24:e2:70:c1:a9:e9:62:4a:b6:ac:01:75:4c:fb:5d:73: b3:04:14:96 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICD2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDExMTgw ODM3MTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBGMjBENEFGMzJBRUE3 OTEzODNEOEFEQ0FCODY3NDEwOEZFODkwRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSrCxwiNpU/QeCykLVNGCU1HnA3/4KC/Qm7p7Sx36GJkDsBMgl bFc0+PbT7/cjenZ5vzMwofqM6mxDTLpGI2gKXPqdVkMzZXGJjk12HdUl7IQjGqOl Du5NMcOvqCp+afLfRpb83DEaa/Lygqnc9AKu4M9bt58N9JpWGlFejbcWYM/JecGI AKpjHa9Mo4mx9VGNBYsaJdcy3Z2CSUSFIk6uftz2FDhP1gwYJaVYwDmhk4720V6g bA0+cnP8I98h/jL59j0fKgQen5bOO0d6DL2CbMgQWy135SJhtcb7pushRZMsP+B0 Y3XoGOR1NAQNUIQ44445LqclYkCRj0pFyTwrAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUDyDUrzKup5E4PYrcq4Z0EI/okOAwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvRHlEVXJ6S3VwNUU0 UFlyY3E0WjBFSV9va09BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv7DANBgkqhkiG9w0BAQsFAAOCAQEABqWdvYxbG531Wvi91TFNht6VAvnB ik/KAZsn3wUoFaixhiaT8QtYmdjZmebHX9F5BbnVcFMusUJBO9SR7Rjj5hulSgSq xVIugwMqB+1yK+RhYk2JgyhzXeFdAbSwmOZN2wweznxQvU30bQj04dI0E2dI4w1Q bjYW8SudABxwdF+kKNaR4WGS0ZQARuQzqLMMx7j9eEmtPmT2F/9pWOGIj/fU4swP iW4DTI9iTOQo2bNCb6INVbRSCy6h2zvwC55/Y+IHOaWsCB3fMLPjuIIyv34ZuRDx AjuURszu2BygyaPjucXnCcw1jVC6Aeck4nDBqeliSrasAXVM+11zswQUlg== -----END CERTIFICATE-----Generated at Mon Nov 25 20:22:05 2024 by rpki-client on console-fra.rpki-client.org