$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/dbIHTyVCCNZ6zZX7pCtWraClN7o.roa File: dbIHTyVCCNZ6zZX7pCtWraClN7o.roa (raw, json) Hash identifier: Qa4hYzFLGjvelXezHJzWzu+yjzs0V8VNFVbkDfcWerE= Subject key identifier: 75:B2:07:4F:25:42:08:D6:7A:CD:95:FB:A4:2B:56:AD:A0:A5:37:BA Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 10B2 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/dbIHTyVCCNZ6zZX7pCtWraClN7o.roa Signing time: Fri 17 Jan 2025 01:28:55 +0000 ROA not before: Fri 17 Jan 2025 01:28:55 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 110.41.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4274 (0x10b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Jan 17 01:28:55 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=75B2074F254208D67ACD95FBA42B56ADA0A537BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f9:40:69:06:7f:fe:5c:71:b1:1e:c5:ea:90: 27:77:80:9c:f3:be:2a:4a:e2:82:18:5f:d7:5c:3b: 2f:33:68:4a:9f:bf:ef:24:e0:20:76:3d:6c:85:f0: 2b:6e:16:aa:d8:e7:ca:49:d7:40:ec:14:36:b2:e0: ce:e3:bc:a2:c6:99:fd:aa:b4:df:0c:5e:05:71:7f: 1a:c2:5c:35:bc:ca:ec:72:7f:0a:e4:88:33:56:03: 60:39:f4:3b:cc:f2:d9:8c:7a:9c:6a:a8:d3:51:65: eb:63:f4:81:7a:91:f0:7b:8a:98:e1:b5:0e:62:69: 95:26:92:3d:65:6f:44:9a:8c:55:d0:6c:7c:8e:a5: 58:07:98:6c:38:fe:d0:0e:fe:a2:54:43:40:b8:1d: 80:a8:92:3a:43:8c:1b:10:61:2f:c5:eb:cb:c1:73: 34:71:ec:f4:37:68:bb:c6:c4:56:0a:0b:94:e2:3e: 50:3e:fb:7a:29:bc:94:56:25:1a:09:68:fc:fe:a2: 10:9d:e3:c0:b8:c1:65:cf:e1:dc:47:e1:5f:da:f4: 58:02:e4:6e:68:a9:56:ba:b2:34:b1:90:1a:5a:cc: f4:ae:76:34:ec:8b:66:3d:56:a0:8b:e2:5f:c8:fd: 16:c3:ed:f0:98:5c:f2:02:73:9c:be:9a:70:7e:77: 7c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B2:07:4F:25:42:08:D6:7A:CD:95:FB:A4:2B:56:AD:A0:A5:37:BA X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/dbIHTyVCCNZ6zZX7pCtWraClN7o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.41.90.0/24 Signature Algorithm: sha256WithRSAEncryption 33:f4:c5:70:92:fd:cc:15:99:95:be:50:0d:49:2e:fa:9e:57: f4:eb:43:18:36:dd:50:0e:56:3c:df:b3:c2:18:34:50:80:a9: ce:97:fe:71:1a:8e:2e:da:c4:65:22:8f:8d:98:94:8f:73:79: 87:13:26:be:65:29:01:bd:53:be:29:cd:35:1e:e0:53:68:43: 8a:ae:ce:82:ed:0f:45:5c:db:24:9e:2f:90:a9:a9:41:5d:87: 30:cb:1f:55:95:5b:05:7e:6c:c7:0e:bd:01:ff:25:14:e9:f6: 18:81:54:bc:7e:e1:fe:bf:d6:b1:7e:80:d4:81:ef:50:c5:41: a2:0d:42:39:66:68:0e:17:47:7d:d8:aa:7d:5d:9a:44:a3:5a: 68:ad:1b:ca:4d:b2:54:fa:00:eb:2b:e9:9e:7d:95:6e:59:53: 4c:a3:72:37:cc:b9:d2:4f:d4:dc:19:41:82:0c:3e:5a:fc:bc: 56:03:9d:98:9f:50:f5:40:b2:39:f9:bd:10:b0:66:ef:46:26: b9:a9:d1:c8:69:2a:97:64:8f:b3:73:5b:0b:3e:22:81:7a:9e: 99:97:a6:51:18:49:a5:23:94:ae:f1:1d:0f:a8:b7:51:8a:bc: a7:31:b8:96:8b:0c:93:a2:02:91:15:44:8c:0d:2f:79:bf:14: a0:c0:f2:2b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICELIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAxMTcw MTI4NTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc1QjIwNzRGMjU0MjA4 RDY3QUNEOTVGQkE0MkI1NkFEQTBBNTM3QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH+UBpBn/+XHGxHsXqkCd3gJzzvipK4oIYX9dcOy8zaEqfv+8k 4CB2PWyF8CtuFqrY58pJ10DsFDay4M7jvKLGmf2qtN8MXgVxfxrCXDW8yuxyfwrk iDNWA2A59DvM8tmMepxqqNNRZetj9IF6kfB7ipjhtQ5iaZUmkj1lb0SajFXQbHyO pVgHmGw4/tAO/qJUQ0C4HYCokjpDjBsQYS/F68vBczRx7PQ3aLvGxFYKC5TiPlA+ +3opvJRWJRoJaPz+ohCd48C4wWXP4dxH4V/a9FgC5G5oqVa6sjSxkBpazPSudjTs i2Y9VqCL4l/I/RbD7fCYXPICc5y+mnB+d3zzAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUdbIHTyVCCNZ6zZX7pCtWraClN7owHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvZGJJSFR5VkNDTlo2 elpYN3BDdFdyYUNsTjdvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG4pWjANBgkqhkiG9w0BAQsFAAOCAQEAM/TFcJL9zBWZlb5QDUku+p5X9OtD GDbdUA5WPN+zwhg0UICpzpf+cRqOLtrEZSKPjZiUj3N5hxMmvmUpAb1TvinNNR7g U2hDiq7Ogu0PRVzbJJ4vkKmpQV2HMMsfVZVbBX5sxw69Af8lFOn2GIFUvH7h/r/W sX6A1IHvUMVBog1COWZoDhdHfdiqfV2aRKNaaK0byk2yVPoA6yvpnn2VbllTTKNy N8y50k/U3BlBggw+Wvy8VgOdmJ9Q9UCyOfm9ELBm70YmuanRyGkql2SPs3NbCz4i gXqemZemURhJpSOUrvEdD6i3UYq8pzG4losMk6ICkRVEjA0veb8UoMDyKw== -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:40 2025 by rpki-client