$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/MLAeHR5_4BW4Dh_LrqZsiNcRZRY.roa File: MLAeHR5_4BW4Dh_LrqZsiNcRZRY.roa (raw, json) Hash identifier: 31o8rJwuwRvzMLyB+e/5mtJR0hM7k6lsviMrYudE+VQ= Subject key identifier: 30:B0:1E:1D:1E:7F:E0:15:B8:0E:1F:CB:AE:A6:6C:88:D7:11:65:16 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 11D9 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/MLAeHR5_4BW4Dh_LrqZsiNcRZRY.roa Signing time: Fri 14 Mar 2025 09:33:49 +0000 ROA not before: Fri 14 Mar 2025 09:33:49 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.47.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4569 (0x11d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Mar 14 09:33:49 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=30B01E1D1E7FE015B80E1FCBAEA66C88D7116516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:28:f7:ec:12:61:b6:2e:b4:ec:87:6c:8e:26: e9:26:48:f0:a4:28:c7:46:94:9b:b7:55:ea:e2:5f: 6c:4a:97:94:e7:7f:bc:e6:84:31:4d:41:9a:4c:20: b3:39:44:b8:3b:7d:88:c5:61:7b:c6:48:af:de:be: 98:c3:d1:36:d6:53:54:a8:3b:7f:4e:f9:62:2c:71: 62:05:5d:b7:8f:ed:b3:8e:78:29:1e:1f:a8:5e:87: b2:ca:e5:44:a8:8d:11:93:6f:43:b6:66:64:2c:15: ce:15:e0:f9:e6:74:b1:5c:8d:b6:56:76:4b:c0:fc: 55:63:ce:b4:9b:69:81:bb:6e:0d:6f:98:63:19:8f: 08:2b:64:8a:c4:40:64:62:64:36:66:75:1f:9d:e4: bd:bd:30:bd:f7:aa:4c:27:9d:2b:ac:f8:c3:8d:07: bc:7d:83:8e:c8:9e:ff:ae:48:44:33:90:0e:0c:2e: de:8c:0a:51:a5:68:dc:8f:90:95:f3:6e:75:c3:03: 10:19:6b:3c:04:52:dd:08:57:9c:eb:d2:68:44:f4: 0e:47:7b:be:22:69:57:37:14:5d:06:19:75:48:2a: 1a:b6:9e:0d:75:79:cb:57:5f:4c:76:44:9a:8e:ed: cc:76:8d:a6:cd:35:07:b8:54:04:f6:67:aa:4d:9b: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B0:1E:1D:1E:7F:E0:15:B8:0E:1F:CB:AE:A6:6C:88:D7:11:65:16 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/MLAeHR5_4BW4Dh_LrqZsiNcRZRY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.160.0/19 Signature Algorithm: sha256WithRSAEncryption a1:4f:36:5a:e7:3a:b9:82:5e:35:82:3e:aa:45:86:8b:d1:04: f0:dd:43:97:f1:9d:71:7d:42:78:aa:f5:36:cb:9b:16:d4:e8: 75:f3:54:42:d2:28:aa:65:4a:8d:fb:2c:0f:95:0f:fa:69:79: 13:3c:2a:ac:da:d7:0e:4b:90:a3:00:a9:b6:33:d9:ed:5d:be: ea:fb:e1:f5:5e:bd:b8:bf:2d:51:9d:08:6e:dd:54:c8:d2:a5: e6:f8:e3:7b:c1:21:54:90:8e:33:6a:29:6a:1f:58:cb:b2:2d: b9:ae:08:4e:c5:cd:bb:11:b9:89:71:c1:e6:13:af:cd:6e:9e: 9e:94:15:16:85:e4:1f:75:c0:33:67:07:76:91:7f:0d:79:23: f8:d1:66:ee:59:1b:cf:e9:33:0b:8d:45:72:af:ad:3b:72:1f: 71:73:9a:45:55:14:da:aa:34:88:05:d9:2e:ee:51:b9:8f:02: 1a:19:6b:2c:40:33:15:45:e4:a5:ba:23:54:32:93:c6:97:d4: 7b:ff:bb:e7:cf:b3:3d:a1:1f:df:53:92:92:19:5d:84:fd:13: 3f:65:be:49:88:a3:a4:c9:b9:23:5d:a4:13:a7:14:61:65:43: 73:ad:b4:99:5a:66:78:e9:80:a7:77:ec:76:b5:1d:86:6a:70: 34:58:dc:5f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAzMTQw OTMzNDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDMwQjAxRTFEMUU3RkUw MTVCODBFMUZDQkFFQTY2Qzg4RDcxMTY1MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiKPfsEmG2LrTsh2yOJukmSPCkKMdGlJu3VeriX2xKl5Tnf7zm hDFNQZpMILM5RLg7fYjFYXvGSK/evpjD0TbWU1SoO39O+WIscWIFXbeP7bOOeCke H6heh7LK5USojRGTb0O2ZmQsFc4V4PnmdLFcjbZWdkvA/FVjzrSbaYG7bg1vmGMZ jwgrZIrEQGRiZDZmdR+d5L29ML33qkwnnSus+MONB7x9g47Inv+uSEQzkA4MLt6M ClGlaNyPkJXzbnXDAxAZazwEUt0IV5zr0mhE9A5He74iaVc3FF0GGXVIKhq2ng11 ectXX0x2RJqO7cx2jabNNQe4VAT2Z6pNm/M9AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUMLAeHR5/4BW4Dh/LrqZsiNcRZRYwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvTUxBZUhSNV80Qlc0 RGhfTHJxWnNpTmNSWlJZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXEvoDANBgkqhkiG9w0BAQsFAAOCAQEAoU82Wuc6uYJeNYI+qkWGi9EE8N1D l/GdcX1CeKr1NsubFtTodfNUQtIoqmVKjfssD5UP+ml5EzwqrNrXDkuQowCptjPZ 7V2+6vvh9V69uL8tUZ0Ibt1UyNKl5vjje8EhVJCOM2opah9Yy7Itua4ITsXNuxG5 iXHB5hOvzW6enpQVFoXkH3XAM2cHdpF/DXkj+NFm7lkbz+kzC41Fcq+tO3IfcXOa RVUU2qo0iAXZLu5RuY8CGhlrLEAzFUXkpbojVDKTxpfUe/+758+zPaEf31OSkhld hP0TP2W+SYijpMm5I12kE6cUYWVDc620mVpmeOmAp3fsdrUdhmpwNFjcXw== -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:36 2025 by rpki-client