$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/3OR4LlmsoKVveYyzpz8HYa3YcXo.roa File: 3OR4LlmsoKVveYyzpz8HYa3YcXo.roa (raw, json) Hash identifier: /6H9DGp6L07kVB2GybxWV3iEWP+zaG8S27m5UDI4fmw= Subject key identifier: DC:E4:78:2E:59:AC:A0:A5:6F:79:8C:B3:A7:3F:07:61:AD:D8:71:7A Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Certificate serial: 14B7 Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/3OR4LlmsoKVveYyzpz8HYa3YcXo.roa Signing time: Fri 17 Jan 2025 01:27:23 +0000 ROA not before: Fri 17 Jan 2025 01:27:23 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 37963 IP address blocks: 112.124.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5303 (0x14b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Validity Not Before: Jan 17 01:27:23 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DCE4782E59ACA0A56F798CB3A73F0761ADD8717A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fa:2e:e5:fc:46:f2:2d:23:12:54:33:50:9b: 96:37:80:d3:95:1b:7c:44:11:3c:f4:66:3e:10:a2: 80:c4:18:6e:cc:8c:20:e9:d2:1f:7d:da:e8:d8:7c: 63:15:52:4d:2a:55:61:2f:fb:a2:88:22:40:06:fc: 6e:96:6f:37:03:ad:af:5d:71:d6:fe:09:dc:bc:90: 59:c9:bf:09:a3:2a:30:c4:9b:f8:1c:d3:26:7f:86: 0f:77:6c:04:01:6e:97:87:d9:81:fe:ff:65:25:81: c2:95:a6:c4:c6:ea:ab:46:21:a0:22:1e:0a:c0:56: 08:c6:60:ac:58:2d:66:b3:9c:74:88:9c:dd:c9:67: 0a:3d:1e:5e:fc:b6:9b:31:fa:81:28:c2:80:e4:c0: dc:60:0e:c5:5b:78:75:fb:a7:e3:f4:1e:62:0e:c3: 2b:a8:a1:c0:93:f8:a9:87:d8:f6:da:e7:ea:f3:a9: f3:e6:74:f1:23:e3:48:07:3b:ef:50:17:74:39:17: 73:8a:2e:5f:d4:8e:b5:26:e0:10:b7:8b:7e:d0:27: 9f:3d:5e:39:5e:4a:fd:4b:09:b0:91:08:87:2e:e4: 58:b2:65:3b:0c:36:56:be:12:17:fd:fb:82:e8:37: 36:a2:c2:44:7e:52:5c:72:08:3c:13:70:64:83:82: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E4:78:2E:59:AC:A0:A5:6F:79:8C:B3:A7:3F:07:61:AD:D8:71:7A X509v3 Authority Key Identifier: keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/3OR4LlmsoKVveYyzpz8HYa3YcXo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.124.0.0/15 Signature Algorithm: sha256WithRSAEncryption 2f:96:b4:9a:dd:18:74:88:0b:0e:b6:86:2b:fa:26:26:86:32: 70:51:08:47:68:aa:66:89:12:36:a5:82:ce:cc:8b:da:57:c4: 42:4f:7b:91:c5:34:af:70:7a:cd:25:e4:7d:df:7d:df:c3:5b: ae:99:10:ff:d9:fc:90:3d:a9:61:9e:67:35:57:ff:e6:4e:ea: a5:3b:05:b2:b6:fa:cd:9a:af:16:6d:5d:3e:60:0d:af:13:f7: 6c:b1:b2:a5:15:c2:ac:86:ab:d2:2c:38:40:21:b9:6a:11:f8: 3a:00:5a:e6:c2:41:31:6c:fb:57:45:26:70:26:29:9e:ac:82: 93:24:9c:14:69:bb:93:53:77:db:c7:48:52:f4:91:d5:23:95: 39:2e:a7:bf:08:b3:6b:39:e7:8f:8b:b2:ff:0c:b9:48:93:d8: 5f:65:8d:ce:1c:cc:55:57:62:06:c1:2c:d3:4f:06:5f:46:3e: 91:97:ff:64:8e:0a:87:fa:5e:78:93:9b:4c:c0:81:dd:e0:7a: c9:c9:9f:d1:f6:92:7a:74:0d:44:75:15:90:77:88:ae:bb:43: 0d:a5:9d:fd:63:69:b9:f4:ec:da:e7:18:77:87:64:e7:ac:d7: 58:a5:75:f4:2e:3f:87:97:af:dc:d2:c3:f9:b3:24:1d:12:c0: 67:e0:54:c1 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNTAxMTcw MTI3MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERDRTQ3ODJFNTlBQ0Ew QTU2Rjc5OENCM0E3M0YwNzYxQUREODcxN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDc+i7l/EbyLSMSVDNQm5Y3gNOVG3xEETz0Zj4QooDEGG7MjCDp 0h992ujYfGMVUk0qVWEv+6KIIkAG/G6WbzcDra9dcdb+Cdy8kFnJvwmjKjDEm/gc 0yZ/hg93bAQBbpeH2YH+/2UlgcKVpsTG6qtGIaAiHgrAVgjGYKxYLWaznHSInN3J Zwo9Hl78tpsx+oEowoDkwNxgDsVbeHX7p+P0HmIOwyuoocCT+KmH2Pba5+rzqfPm dPEj40gHO+9QF3Q5F3OKLl/UjrUm4BC3i37QJ589XjleSv1LCbCRCIcu5FiyZTsM Nla+Ehf9+4LoNzaiwkR+UlxyCDwTcGSDgtM1AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU3OR4LlmsoKVveYyzpz8HYa3YcXowHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0 OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3LzNPUjRMbG1zb0tWdmVZ eXpwejhIWWEzWWNYby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwFwfDANBgkqhkiG9w0BAQsFAAOCAQEAL5a0mt0YdIgLDraGK/omJoYycFEIR2iq ZokSNqWCzsyL2lfEQk97kcU0r3B6zSXkfd9938NbrpkQ/9n8kD2pYZ5nNVf/5k7q pTsFsrb6zZqvFm1dPmANrxP3bLGypRXCrIar0iw4QCG5ahH4OgBa5sJBMWz7V0Um cCYpnqyCkyScFGm7k1N328dIUvSR1SOVOS6nvwizaznnj4uy/wy5SJPYX2WNzhzM VVdiBsEs008GX0Y+kZf/ZI4Kh/peeJObTMCB3eB6ycmf0faSenQNRHUVkHeIrrtD DaWd/WNpufTs2ucYd4dk56zXWKV19C4/h5ev3NLD+bMkHRLAZ+BUwQ== -----END CERTIFICATE-----Generated at Thu May 15 21:55:49 2025 by rpki-client