$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/TxfJXT52BIx7Swm-I5Vzk3Av1x8.roa File: TxfJXT52BIx7Swm-I5Vzk3Av1x8.roa (raw, json) Hash identifier: PMqG2j7cSyk9legwF8JTXvh955bYJE0OqCF25RVUO7I= Subject key identifier: 4F:17:C9:5D:3E:76:04:8C:7B:4B:09:BE:23:95:73:93:70:2F:D7:1F Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1CA8 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TxfJXT52BIx7Swm-I5Vzk3Av1x8.roa Signing time: Thu 17 Jul 2025 03:51:35 +0000 ROA not before: Thu 17 Jul 2025 03:51:35 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 394881 IP address blocks: 103.221.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 23:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7336 (0x1ca8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:51:35 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4F17C95D3E76048C7B4B09BE23957393702FD71F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:65:04:cd:7f:38:11:d5:b5:95:4c:a1:03: 6c:76:66:e0:9b:e2:50:fd:bb:0d:e7:d7:6d:d0:53: a2:b0:d7:5d:8f:e0:f2:1e:db:be:8e:2a:f0:2d:ec: b3:20:3d:3b:5d:84:73:49:6a:0a:9c:14:65:99:71: 65:08:34:c6:49:52:f4:8d:ca:f8:df:e5:ec:d3:54: 77:7b:2a:45:b8:27:55:dc:0a:e4:6e:a7:aa:59:df: a0:7b:0b:f7:f1:89:f3:b7:c9:b2:05:67:0b:c0:b7: 8e:b4:ed:db:ac:c3:db:65:44:96:b6:e1:39:7c:b9: 1a:c9:ca:fe:f4:0c:aa:39:b0:43:21:46:de:a1:12: b6:a9:0e:49:23:b1:8f:cb:2d:10:64:ca:3c:0f:5e: f3:70:7f:31:da:ae:2c:f2:d8:be:0d:8d:8a:e5:3b: 99:c7:cd:c8:8f:9b:b3:62:87:40:01:3e:24:50:6a: 8e:1b:50:f6:17:27:df:9e:66:a7:c7:0b:71:62:9c: 3b:2d:af:d4:04:f4:28:24:69:fe:0c:af:69:b3:5f: bc:20:8f:f4:64:54:37:53:6d:1d:1e:c8:75:7f:a3: fe:9a:4c:26:af:57:55:63:da:f3:bd:ba:62:4e:4b: 37:72:d2:6f:1d:63:39:90:e6:6e:1b:e9:60:3b:c6: 4e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:17:C9:5D:3E:76:04:8C:7B:4B:09:BE:23:95:73:93:70:2F:D7:1F X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TxfJXT52BIx7Swm-I5Vzk3Av1x8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.20.0/22 Signature Algorithm: sha256WithRSAEncryption 84:43:54:b1:cd:6e:df:7e:52:8d:8d:80:ae:f9:d0:6c:72:56: 5a:f8:5e:cb:9f:8d:02:2e:ac:28:64:c3:4a:ee:63:d1:f4:83: bc:f9:27:98:de:01:9c:0d:d8:a5:7b:91:ad:ff:67:d3:c8:bb: ce:ec:c5:69:44:02:ea:27:8f:29:c9:56:82:ab:37:80:56:bc: f8:1b:37:86:c2:16:03:a5:8a:6d:35:d6:52:97:07:30:56:14: 8d:91:86:ff:99:6a:17:b9:13:86:bb:ce:e8:d6:7f:8e:ee:a0: 7d:6c:67:f0:d5:34:f0:e4:15:01:55:c8:fb:06:f0:6d:7c:50: 9b:01:4b:5a:2e:f3:1b:06:7c:af:13:d4:79:8b:28:20:08:38: 62:96:c0:a5:4e:28:1b:84:87:a7:3a:e8:72:d0:63:27:03:09: 64:a6:7d:c9:dd:76:15:2f:54:67:03:38:84:d0:50:47:d7:98: 3c:65:a0:80:08:67:dc:99:1a:5a:3b:4c:8a:a1:f0:bd:c6:c4: 82:a7:48:02:1c:b8:31:28:f7:5d:a8:05:a9:9a:d6:50:03:46: a2:11:0a:17:0b:43:fc:0f:4b:02:71:fd:bf:77:de:a3:e1:9d: a1:7a:43:e1:48:df:09:31:af:1f:79:24:8b:42:1d:8b:fc:7b: 89:2c:4f:fe -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHKgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzUxMzVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDRGMTdDOTVEM0U3NjA0 OEM3QjRCMDlCRTIzOTU3MzkzNzAyRkQ3MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5dWUEzX84EdW1lUyhA2x2ZuCb4lD9uw3n123QU6Kw112P4PIe 276OKvAt7LMgPTtdhHNJagqcFGWZcWUINMZJUvSNyvjf5ezTVHd7KkW4J1XcCuRu p6pZ36B7C/fxifO3ybIFZwvAt4607dusw9tlRJa24Tl8uRrJyv70DKo5sEMhRt6h ErapDkkjsY/LLRBkyjwPXvNwfzHarizy2L4NjYrlO5nHzciPm7Nih0ABPiRQao4b UPYXJ9+eZqfHC3FinDstr9QE9Cgkaf4Mr2mzX7wgj/RkVDdTbR0eyHV/o/6aTCav V1Vj2vO9umJOSzdy0m8dYzmQ5m4b6WA7xk6lAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUTxfJXT52BIx7Swm+I5Vzk3Av1x8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1R4ZkpYVDUyQkl4N1N3 bS1JNVZ6azNBdjF4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3RQwDQYJKoZIhvcNAQELBQADggEBAIRDVLHNbt9+Uo2NgK750GxyVlr4Xsuf jQIurChkw0ruY9H0g7z5J5jeAZwN2KV7ka3/Z9PIu87sxWlEAuonjynJVoKrN4BW vPgbN4bCFgOlim011lKXBzBWFI2Rhv+Zahe5E4a7zujWf47uoH1sZ/DVNPDkFQFV yPsG8G18UJsBS1ou8xsGfK8T1HmLKCAIOGKWwKVOKBuEh6c66HLQYycDCWSmfcnd dhUvVGcDOITQUEfXmDxloIAIZ9yZGlo7TIqh8L3GxIKnSAIcuDEo912oBama1lAD RqIRChcLQ/wPSwJx/b933qPhnaF6Q+FI3wkxrx95JItCHYv8e4ksT/4= -----END CERTIFICATE-----Generated at Sun Jul 20 19:07:33 2025 by rpki-client