$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/TH97nQHChQX5H7CxwraX6lRGFc4.roa File: TH97nQHChQX5H7CxwraX6lRGFc4.roa (raw, json) Hash identifier: b0g/y3gAKXPdIowesfeufALlUIhZbHg9IU5iceu3smU= Subject key identifier: 4C:7F:7B:9D:01:C2:85:05:F9:1F:B0:B1:C2:B6:97:EA:54:46:15:CE Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 181B Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TH97nQHChQX5H7CxwraX6lRGFc4.roa Signing time: Fri 17 Jan 2025 01:24:35 +0000 ROA not before: Fri 17 Jan 2025 01:24:35 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6171 (0x181b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:35 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4C7F7B9D01C28505F91FB0B1C2B697EA544615CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:ae:8f:4f:51:89:7b:e8:91:7d:03:5c:de: b5:2a:91:eb:58:28:60:e3:9d:a0:98:02:0e:77:24: 69:c8:4c:dc:04:1a:35:db:22:81:be:b7:e9:58:dd: c2:be:ad:98:88:ef:71:8c:60:ef:9c:8e:ae:f9:2c: a3:59:e4:b2:73:c3:79:eb:ab:1e:36:e8:a1:1d:bf: 0a:91:f7:0e:c2:45:e6:ca:8e:48:04:41:24:99:03: bc:c3:49:76:dd:22:b3:d7:7f:25:be:2f:57:94:5f: 26:f2:4a:37:24:57:7f:4a:d0:d2:85:3a:bb:8c:d0: 55:db:37:03:0c:e0:df:66:6c:bd:ec:0e:9e:58:e9: 3d:86:5c:b8:4e:09:5b:31:9b:38:b1:36:8c:f8:9c: e9:19:df:9e:19:13:ca:f5:20:de:f3:ec:bf:2d:55: 23:1d:d6:66:ef:b4:f0:61:9b:2c:fd:d8:3b:4d:a7: 86:3d:5c:13:30:15:5c:8a:8c:ea:b5:47:02:0f:1a: d2:56:3a:90:14:e1:16:27:5e:0e:12:e1:52:5b:5b: 43:5d:47:dd:34:18:d6:26:48:ca:fd:30:71:ad:8d: 13:27:11:54:1d:46:1a:96:6f:32:34:26:1b:09:a0: d6:98:f7:06:73:6f:be:95:21:0a:3c:c6:8a:2c:c4: 47:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7F:7B:9D:01:C2:85:05:F9:1F:B0:B1:C2:B6:97:EA:54:46:15:CE X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TH97nQHChQX5H7CxwraX6lRGFc4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.95.0/24 Signature Algorithm: sha256WithRSAEncryption 22:0d:73:09:0f:3e:89:fb:60:4e:0d:9c:9c:ba:25:a4:d2:36: f3:be:31:ac:a2:f5:87:0d:60:d1:b6:2b:2e:3f:c7:53:8c:02: d4:56:2d:10:7d:ff:31:f8:99:ee:0f:5b:4b:87:16:ac:44:0b: 51:36:79:56:0b:74:c9:d0:11:eb:85:d1:93:57:65:d2:02:3d: a5:d6:13:b5:0c:e2:46:14:be:76:bd:4a:8e:16:34:ee:eb:81: 51:48:3f:6e:09:c0:eb:26:9f:a5:fd:1c:38:73:30:d5:93:1f: ab:8d:2a:95:9b:eb:f6:98:26:57:1e:ae:1c:90:8a:17:1b:5f: 23:7b:b5:e7:26:56:8f:9c:64:58:54:db:5f:49:c8:c2:fc:5f: 3c:f5:91:ff:c3:79:5c:17:23:76:7f:a8:e3:2d:bc:7c:4b:4e: 91:bf:f2:71:a7:4c:b6:b7:21:7b:2f:76:ca:03:1d:14:6b:9f: 5f:17:51:b8:fe:b3:19:c9:5d:53:6a:93:35:11:73:53:4c:8a: 72:41:8a:65:44:ee:46:4c:05:ca:91:0e:53:21:67:79:1b:00: 75:5d:f3:ff:a2:d7:96:99:bb:0a:db:67:a9:10:16:08:1c:68: ac:ec:62:18:98:68:8a:70:78:87:84:3f:14:1d:d9:28:4a:38: ce:ee:5b:8a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGBswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MzVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRDN0Y3QjlEMDFDMjg1 MDVGOTFGQjBCMUMyQjY5N0VBNTQ0NjE1Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHpa6PT1GJe+iRfQNc3rUqketYKGDjnaCYAg53JGnITNwEGjXb IoG+t+lY3cK+rZiI73GMYO+cjq75LKNZ5LJzw3nrqx426KEdvwqR9w7CRebKjkgE QSSZA7zDSXbdIrPXfyW+L1eUXybySjckV39K0NKFOruM0FXbNwMM4N9mbL3sDp5Y 6T2GXLhOCVsxmzixNoz4nOkZ354ZE8r1IN7z7L8tVSMd1mbvtPBhmyz92DtNp4Y9 XBMwFVyKjOq1RwIPGtJWOpAU4RYnXg4S4VJbW0NdR900GNYmSMr9MHGtjRMnEVQd RhqWbzI0JhsJoNaY9wZzb76VIQo8xoosxEfxAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUTH97nQHChQX5H7CxwraX6lRGFc4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1RIOTduUUhDaFFYNUg3 Q3h3cmFYNmxSR0ZjNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3V8wDQYJKoZIhvcNAQELBQADggEBACINcwkPPon7YE4NnJy6JaTSNvO+Mayi 9YcNYNG2Ky4/x1OMAtRWLRB9/zH4me4PW0uHFqxEC1E2eVYLdMnQEeuF0ZNXZdIC PaXWE7UM4kYUvna9So4WNO7rgVFIP24JwOsmn6X9HDhzMNWTH6uNKpWb6/aYJlce rhyQihcbXyN7tecmVo+cZFhU219JyML8Xzz1kf/DeVwXI3Z/qOMtvHxLTpG/8nGn TLa3IXsvdsoDHRRrn18XUbj+sxnJXVNqkzURc1NMinJBimVE7kZMBcqRDlMhZ3kb AHVd8/+i15aZuwrbZ6kQFggcaKzsYhiYaIpweIeEPxQd2ShKOM7uW4o= -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:53 2025 by rpki-client