$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/TR61iSvQzkqW7Z1S8TzDdy9ZDNg.roa File: TR61iSvQzkqW7Z1S8TzDdy9ZDNg.roa (raw, json) Hash identifier: xlBHF1dITs9sNZu2hg1HjAXmXb0C2AKHFZzRvpp9O8o= Subject key identifier: 4D:1E:B5:89:2B:D0:CE:4A:96:ED:9D:52:F1:3C:C3:77:2F:59:0C:D8 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1CAE Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TR61iSvQzkqW7Z1S8TzDdy9ZDNg.roa Signing time: Thu 17 Jul 2025 03:51:37 +0000 ROA not before: Thu 17 Jul 2025 03:51:37 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 25734 IP address blocks: 103.221.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 13:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7342 (0x1cae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:51:37 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4D1EB5892BD0CE4A96ED9D52F13CC3772F590CD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:a0:da:4f:00:b1:a8:34:5d:80:d0:fe:93: 75:f1:30:8e:85:74:e1:14:24:1c:23:c6:d6:04:04: 61:7c:15:4b:58:43:8a:89:6f:84:e7:73:fb:8d:6a: f9:3e:e5:66:3e:7a:14:91:ff:34:04:40:67:a8:f0: 7e:f9:af:94:84:a3:b8:ce:bd:67:fd:9c:15:a0:02: 47:01:67:ce:45:f7:24:c3:29:8e:b9:f2:50:ab:75: f2:a5:a9:82:46:12:ba:2a:4f:91:af:07:cc:21:16: 2a:c5:88:b8:dc:29:79:26:35:78:f7:91:40:af:ca: 07:b8:43:3c:bf:5d:98:da:86:74:5d:8f:46:b6:76: 33:77:24:ed:30:aa:8f:8a:9d:23:4f:d5:2a:ba:fd: 28:93:18:0b:7a:d8:fb:35:50:98:d7:30:91:1a:3b: 0e:40:7f:44:90:67:f8:da:9e:bc:97:71:eb:dc:05: 46:0f:d3:24:16:13:25:10:93:b0:7d:55:0c:c1:26: bb:e7:54:84:c7:37:bf:b1:27:86:00:98:98:fc:76: 93:ba:7e:5e:cc:3f:07:83:96:72:35:33:ca:65:2a: d5:1d:ed:ad:f0:33:0d:e1:af:a8:ee:51:bb:c1:ae: e3:a8:da:00:dd:ad:5b:7d:6e:cd:23:ca:07:1e:b4: 5e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1E:B5:89:2B:D0:CE:4A:96:ED:9D:52:F1:3C:C3:77:2F:59:0C:D8 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TR61iSvQzkqW7Z1S8TzDdy9ZDNg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.20.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:9d:fd:5e:9b:e8:14:2d:1a:0d:28:b2:c7:37:72:54:8a:f5: 0a:e1:b0:89:62:0a:14:58:1a:26:48:59:83:99:53:79:66:94: d9:0d:a7:b5:3f:b4:4c:5e:b7:e0:5c:ce:ce:79:53:87:71:f9: c7:ac:13:5d:e5:57:e7:f1:b2:92:3c:1f:37:ec:8f:06:36:14: 19:18:1a:77:9f:77:62:7f:fc:bc:ef:df:8e:1f:88:11:1b:cc: 43:35:bc:a6:3e:a5:4a:5d:4a:fc:10:48:ad:26:7a:33:47:01: 76:bf:b0:5f:ad:cc:86:a5:b4:04:cd:bc:84:9f:fb:52:bd:32: cf:8f:83:5d:29:28:00:b4:db:7c:74:7f:be:d3:61:95:dd:4e: c6:85:c6:5d:82:6f:c6:20:be:72:ac:53:f5:56:3e:5b:fb:5b: 8c:53:68:b7:f3:77:0d:1a:1e:5d:0c:8c:33:dc:e1:9c:ec:1b: dd:ea:30:10:bb:bf:42:6f:47:20:be:5f:eb:21:2d:b9:a2:df: 16:fc:22:7c:20:cc:84:3c:b8:4e:4b:c2:03:1a:15:83:56:b6: 40:58:2b:46:ec:98:73:5e:6c:78:76:df:fe:63:e6:39:21:8b: 50:7b:e6:8d:30:61:d0:99:82:1f:cf:9a:11:0d:51:f6:48:e9: 1b:9a:d8:13 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzUxMzdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDREMUVCNTg5MkJEMENF NEE5NkVEOUQ1MkYxM0NDMzc3MkY1OTBDRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC326DaTwCxqDRdgND+k3XxMI6FdOEUJBwjxtYEBGF8FUtYQ4qJ b4Tnc/uNavk+5WY+ehSR/zQEQGeo8H75r5SEo7jOvWf9nBWgAkcBZ85F9yTDKY65 8lCrdfKlqYJGEroqT5GvB8whFirFiLjcKXkmNXj3kUCvyge4Qzy/XZjahnRdj0a2 djN3JO0wqo+KnSNP1Sq6/SiTGAt62Ps1UJjXMJEaOw5Af0SQZ/janryXcevcBUYP 0yQWEyUQk7B9VQzBJrvnVITHN7+xJ4YAmJj8dpO6fl7MPweDlnI1M8plKtUd7a3w Mw3hr6juUbvBruOo2gDdrVt9bs0jygcetF6hAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUTR61iSvQzkqW7Z1S8TzDdy9ZDNgwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1RSNjFpU3ZRemtxVzda MVM4VHpEZHk5WkROZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3RQwDQYJKoZIhvcNAQELBQADggEBAHyd/V6b6BQtGg0ossc3clSK9QrhsIli ChRYGiZIWYOZU3lmlNkNp7U/tExet+Bczs55U4dx+cesE13lV+fxspI8HzfsjwY2 FBkYGnefd2J//Lzv344fiBEbzEM1vKY+pUpdSvwQSK0mejNHAXa/sF+tzIaltATN vISf+1K9Ms+Pg10pKAC023x0f77TYZXdTsaFxl2Cb8YgvnKsU/VWPlv7W4xTaLfz dw0aHl0MjDPc4ZzsG93qMBC7v0JvRyC+X+shLbmi3xb8InwgzIQ8uE5LwgMaFYNW tkBYK0bsmHNebHh23/5j5jkhi1B75o0wYdCZgh/PmhENUfZI6Rua2BM= -----END CERTIFICATE-----Generated at Mon Jul 21 13:28:09 2025 by rpki-client