$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/eL_cQNMdx8ke62McUVucsqRgH70.roa File: eL_cQNMdx8ke62McUVucsqRgH70.roa (raw, json) Hash identifier: AOV+eur1Wl2JiydvezeQLiPQZUCx1E3CGtNkexfR+A8= Subject key identifier: 78:BF:DC:40:D3:1D:C7:C9:1E:EB:63:1C:51:5B:9C:B2:A4:60:1F:BD Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 11E1 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/eL_cQNMdx8ke62McUVucsqRgH70.roa Signing time: Fri 14 Mar 2025 09:37:08 +0000 ROA not before: Fri 14 Mar 2025 09:37:08 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.46.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 23:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4577 (0x11e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Mar 14 09:37:08 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=78BFDC40D31DC7C91EEB631C515B9CB2A4601FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:87:d7:72:82:05:01:26:e4:92:b6:72:e2: 20:8b:be:2a:a4:cd:b1:b0:4f:72:b3:5f:17:54:13: bd:58:f0:2f:f9:e9:6e:86:9a:87:95:e3:a2:c9:ad: 52:11:43:21:25:65:4b:3d:86:ee:4e:4f:b8:4e:b8: ae:31:44:72:01:49:fe:68:d4:67:80:eb:92:37:bf: be:62:40:af:1d:26:09:9e:09:36:fc:c8:07:2d:f8: f9:9f:ae:d6:d1:7c:70:7f:6a:a1:7b:82:62:97:62: 4e:dc:55:35:09:a3:52:49:75:5c:a9:34:6e:40:dd: 58:35:22:c2:5c:69:01:c4:ef:72:d8:5c:db:e7:6d: e9:1e:ef:6b:e5:f4:20:cc:dc:dd:86:a7:1a:3e:ea: 57:e2:02:ba:49:7e:3c:fd:3f:c1:86:ab:33:8e:ab: c3:9e:81:c1:10:1d:d1:37:77:ca:23:5c:b5:98:d5: 3b:a7:ed:96:0e:96:fa:23:53:98:ad:7f:6e:5d:3f: 5b:ae:fd:93:ff:8c:c1:e0:23:90:27:fa:95:69:3b: bf:89:59:d8:ef:b7:a9:fd:9b:9b:1c:43:8c:ed:12: 49:8d:d6:fb:cc:ab:85:d8:c0:32:c9:1d:fd:78:55: 58:c5:09:25:83:e7:6d:5b:ac:97:af:ae:a1:e4:3b: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BF:DC:40:D3:1D:C7:C9:1E:EB:63:1C:51:5B:9C:B2:A4:60:1F:BD X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/eL_cQNMdx8ke62McUVucsqRgH70.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.46.66.0/23 Signature Algorithm: sha256WithRSAEncryption 71:31:fc:11:c4:88:60:99:71:ba:f6:62:a0:e5:0f:48:54:3f: ee:90:94:9a:a1:07:a8:35:15:f4:0d:cb:69:82:fc:38:48:ac: d4:3d:ca:ab:ef:70:a3:ac:74:28:d4:00:0a:5f:20:00:ab:c4: 35:0a:2a:62:9e:1b:97:43:77:f0:a8:ef:92:9b:e6:6a:89:fe: fe:24:92:58:eb:00:70:4e:91:ed:f8:91:a0:6f:bf:3c:34:b0: df:29:a9:6a:0c:93:de:1b:ac:e2:a9:70:7e:4f:82:7a:03:7f: 87:74:ec:71:0e:d2:ff:f6:2f:d9:2a:8c:48:47:63:ba:e5:47: 23:8b:d8:dd:00:ba:0e:d1:b2:de:d6:49:b3:0d:7c:38:73:ea: be:09:77:4e:68:ff:9a:18:ab:85:65:73:da:63:c3:27:8c:49: a1:a1:9a:02:85:59:a0:d4:da:ea:32:92:5c:19:e4:18:ce:92: 25:9e:9b:7c:48:a3:c0:ea:13:2d:49:a2:f4:df:58:26:42:ae: 51:8c:d3:6d:50:13:e6:9d:49:db:03:96:91:d6:6e:37:c3:0a: 4f:0a:34:f7:99:f8:24:cf:80:58:98:f3:9b:d9:96:49:5b:c1: bd:96:44:74:0b:3d:9b:5a:b8:df:0c:48:c4:ad:f8:7b:51:ff: 64:98:32:e6 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEeEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAzMTQw OTM3MDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc4QkZEQzQwRDMxREM3 QzkxRUVCNjMxQzUxNUI5Q0IyQTQ2MDFGQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUAYfXcoIFASbkkrZy4iCLviqkzbGwT3KzXxdUE71Y8C/56W6G moeV46LJrVIRQyElZUs9hu5OT7hOuK4xRHIBSf5o1GeA65I3v75iQK8dJgmeCTb8 yAct+PmfrtbRfHB/aqF7gmKXYk7cVTUJo1JJdVypNG5A3Vg1IsJcaQHE73LYXNvn beke72vl9CDM3N2Gpxo+6lfiArpJfjz9P8GGqzOOq8OegcEQHdE3d8ojXLWY1Tun 7ZYOlvojU5itf25dP1uu/ZP/jMHgI5An+pVpO7+JWdjvt6n9m5scQ4ztEkmN1vvM q4XYwDLJHf14VVjFCSWD521brJevrqHkO4n1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUeL/cQNMdx8ke62McUVucsqRgH70wHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvZUxfY1FOTWR4OGtl NjJNY1VWdWNzcVJnSDcwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEuQjANBgkqhkiG9w0BAQsFAAOCAQEAcTH8EcSIYJlxuvZioOUPSFQ/7pCU mqEHqDUV9A3LaYL8OEis1D3Kq+9wo6x0KNQACl8gAKvENQoqYp4bl0N38Kjvkpvm aon+/iSSWOsAcE6R7fiRoG+/PDSw3ympagyT3hus4qlwfk+CegN/h3TscQ7S//Yv 2SqMSEdjuuVHI4vY3QC6DtGy3tZJsw18OHPqvgl3Tmj/mhirhWVz2mPDJ4xJoaGa AoVZoNTa6jKSXBnkGM6SJZ6bfEijwOoTLUmi9N9YJkKuUYzTbVAT5p1J2wOWkdZu N8MKTwo095n4JM+AWJjzm9mWSVvBvZZEdAs9m1q43wxIxK34e1H/ZJgy5g== -----END CERTIFICATE-----Generated at Mon Apr 14 22:24:50 2025 by rpki-client