$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/k5EVxIxw2DDHyBZg1_vbtujAN6g.roa File: k5EVxIxw2DDHyBZg1_vbtujAN6g.roa (raw, json) Hash identifier: DlDC238ILgWAWLdbpVjrPkg4P8et02PbFDbNHXdWj/s= Subject key identifier: 93:91:15:C4:8C:70:D8:30:C7:C8:16:60:D7:FB:DB:B6:E8:C0:37:A8 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 0F66 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/k5EVxIxw2DDHyBZg1_vbtujAN6g.roa Signing time: Mon 18 Nov 2024 08:37:16 +0000 ROA not before: Mon 18 Nov 2024 08:37:16 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 113.47.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3942 (0xf66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Nov 18 08:37:16 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=939115C48C70D830C7C81660D7FBDBB6E8C037A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:45:aa:6b:a9:1f:93:ca:ab:3f:d3:ef:0c: e1:7f:90:76:a7:31:67:0d:b3:65:05:9c:5a:20:e4: 67:c9:bf:e9:01:93:6b:79:b0:ac:44:f7:67:be:00: dd:92:b3:ea:e6:bd:81:ce:b9:70:e4:2c:fa:0d:b8: fc:87:d8:f4:43:eb:65:1a:2e:2b:8e:53:3e:f5:ce: 28:cd:71:42:c9:e3:08:52:c5:15:ae:2a:4d:c9:7a: 7f:9c:59:0f:95:bd:92:21:81:49:e0:f3:f8:f2:ff: 34:4e:e2:1a:a5:37:f8:33:e7:25:a3:81:8f:22:fa: bd:2a:59:04:c0:b9:22:ca:c1:9f:f7:9e:1d:33:51: 62:58:94:67:aa:08:3f:84:82:b0:f6:07:19:33:9d: b3:29:e9:31:fc:5c:9e:e5:6c:b7:a4:de:63:a2:fc: d3:59:ff:ae:ab:7d:45:ca:e1:a9:fb:56:c9:f3:fb: f6:3e:2d:4a:10:f8:3e:63:ec:04:f0:6c:9d:f8:64: a4:01:f8:67:13:dd:e8:63:42:17:eb:0d:20:6a:d9: 54:97:b6:9a:60:0d:70:32:c5:03:eb:3f:3a:ca:e7: 16:2b:66:77:35:65:65:a7:31:74:29:62:8d:ec:18: d9:2e:4c:a6:19:bc:cb:51:10:c3:96:c2:e6:08:39: 36:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:91:15:C4:8C:70:D8:30:C7:C8:16:60:D7:FB:DB:B6:E8:C0:37:A8 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/k5EVxIxw2DDHyBZg1_vbtujAN6g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.252.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:1f:fb:48:2e:f2:bd:d9:08:f3:9d:93:04:45:68:eb:95:3a: 2e:e4:59:ef:6d:1e:6f:56:66:e4:a8:73:53:8f:3a:df:a8:96: 82:c1:92:ff:29:14:2b:5b:8b:80:2c:ee:9e:2d:e0:b5:de:b9: 07:75:5b:2f:11:e2:b2:ce:3d:4e:03:50:71:a9:7c:67:df:ad: 22:ef:08:1d:f1:78:8f:e0:e3:82:c1:45:5e:9c:dd:33:ec:78: a4:c4:8c:41:20:ee:85:48:ec:73:17:9b:ef:12:a1:6d:1e:4b: 28:76:22:52:71:96:3a:77:a1:e5:72:54:3d:bd:1e:55:37:60: 07:e0:f5:72:94:a9:74:92:6d:d7:9d:8c:f2:80:7d:2a:56:63: c2:af:f3:4b:25:22:ee:cd:f4:6a:82:b0:d1:aa:d7:5a:be:78: b4:16:28:10:f4:12:44:6b:8b:90:88:cb:4a:d7:74:b2:01:83: 04:c2:fa:8c:02:22:ba:df:66:16:2e:a4:f4:bc:de:76:c7:0f: 37:ad:2b:aa:bd:e2:55:d6:74:89:75:0b:dc:b6:c0:bc:91:b7: 14:4a:dd:a4:b2:20:8d:c0:9a:a9:bc:13:36:d9:23:12:73:09: 5b:75:41:3b:c5:c9:c1:3d:0a:b0:14:8d:0f:af:e9:34:a2:4a: ab:db:df:19 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICD2YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDExMTgw ODM3MTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkzOTExNUM0OEM3MEQ4 MzBDN0M4MTY2MEQ3RkJEQkI2RThDMDM3QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC81UWqa6kfk8qrP9PvDOF/kHanMWcNs2UFnFog5GfJv+kBk2t5 sKxE92e+AN2Ss+rmvYHOuXDkLPoNuPyH2PRD62UaLiuOUz71zijNcULJ4whSxRWu Kk3Jen+cWQ+VvZIhgUng8/jy/zRO4hqlN/gz5yWjgY8i+r0qWQTAuSLKwZ/3nh0z UWJYlGeqCD+EgrD2BxkznbMp6TH8XJ7lbLek3mOi/NNZ/66rfUXK4an7Vsnz+/Y+ LUoQ+D5j7ATwbJ34ZKQB+GcT3ehjQhfrDSBq2VSXtppgDXAyxQPrPzrK5xYrZnc1 ZWWnMXQpYo3sGNkuTKYZvMtREMOWwuYIOTZDAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUk5EVxIxw2DDHyBZg1/vbtujAN6gwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvazVFVnhJeHcyRERI eUJaZzFfdmJ0dWpBTjZnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv/DANBgkqhkiG9w0BAQsFAAOCAQEAbR/7SC7yvdkI852TBEVo65U6LuRZ 720eb1Zm5KhzU48636iWgsGS/ykUK1uLgCzuni3gtd65B3VbLxHiss49TgNQcal8 Z9+tIu8IHfF4j+DjgsFFXpzdM+x4pMSMQSDuhUjscxeb7xKhbR5LKHYiUnGWOneh 5XJUPb0eVTdgB+D1cpSpdJJt152M8oB9KlZjwq/zSyUi7s30aoKw0arXWr54tBYo EPQSRGuLkIjLStd0sgGDBML6jAIiut9mFi6k9LzedscPN60rqr3iVdZ0iXUL3LbA vJG3FErdpLIgjcCaqbwTNtkjEnMJW3VBO8XJwT0KsBSND6/pNKJKq9vfGQ== -----END CERTIFICATE-----Generated at Fri Nov 22 14:30:52 2024 by rpki-client on console-ams.rpki-client.org