$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/TqUsxCZOtR91IK5cVM1IBabFMTI.roa File: TqUsxCZOtR91IK5cVM1IBabFMTI.roa (raw, json) Hash identifier: 1UVRPZk4V+5z20cJ5objwmgZ+daQSnyOcXW4Aa0eOUI= Subject key identifier: 4E:A5:2C:C4:26:4E:B5:1F:75:20:AE:5C:54:CD:48:05:A6:C5:31:32 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18CE Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TqUsxCZOtR91IK5cVM1IBabFMTI.roa Signing time: Fri 17 Jan 2025 01:25:36 +0000 ROA not before: Fri 17 Jan 2025 01:25:36 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138527 IP address blocks: 103.221.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6350 (0x18ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:36 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4EA52CC4264EB51F7520AE5C54CD4805A6C53132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:a6:cd:dd:03:cc:b4:0d:7a:06:ee:22:82: 8d:0e:a3:a4:4b:42:4e:04:8f:6d:a2:3a:03:77:9d: d2:f3:b9:68:cd:22:21:be:75:c6:04:f2:5d:95:80: 76:f0:a6:d9:2e:b5:69:3d:1a:c8:d7:3e:cf:36:92: 9c:e3:98:39:9b:78:45:4c:d8:c3:20:64:3e:de:32: 56:a0:da:ba:87:d8:8b:c3:1a:80:46:58:07:fb:86: 10:04:1d:ec:eb:06:cc:ac:5b:4b:18:12:41:cb:57: 4f:a9:1a:33:a6:9d:91:44:b1:df:db:27:12:3c:64: 14:3b:2b:b5:db:31:61:23:43:6c:5b:e7:16:30:f5: f5:2d:2d:a0:4c:64:d0:30:70:18:9c:0c:e5:88:1f: 4b:b6:03:b2:9e:2f:0e:8a:ec:6f:28:d1:a1:05:22: 93:b1:39:cc:81:34:84:ee:db:c1:b7:bc:2b:05:25: 1d:8b:1a:b7:2d:a6:ee:f3:20:79:d2:d6:22:80:a7: 6d:87:27:cf:14:34:7c:f1:15:23:ea:63:d7:6e:fb: 9e:19:fe:a2:3e:e9:92:62:60:2f:89:8f:da:e2:4d: cf:f4:a4:6e:b5:a3:d6:9c:84:f9:c8:6b:16:95:23: 44:4e:50:7d:58:1b:b7:fa:a5:5e:bb:c6:e2:3f:8d: 71:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A5:2C:C4:26:4E:B5:1F:75:20:AE:5C:54:CD:48:05:A6:C5:31:32 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TqUsxCZOtR91IK5cVM1IBabFMTI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.0.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:88:d5:b2:8a:a9:ec:d8:fb:4b:f4:92:2b:4c:b8:be:d6:fe: e9:e7:f5:87:45:17:3b:15:5c:70:21:b6:c9:53:47:16:d3:44: 19:c1:6b:93:95:ef:b9:34:f4:24:d9:cc:6c:42:94:f8:a5:66: a1:df:4b:fc:1b:7c:f6:9c:26:01:87:6d:b9:b2:8f:62:58:c7: 03:82:81:cf:9b:28:e0:f9:7d:49:b0:7f:42:b4:c7:d8:30:b4: 44:76:13:94:43:41:93:76:53:4b:ab:cd:13:c7:7a:ef:a0:75: 52:cd:53:9b:c0:fc:3e:14:92:15:fe:24:af:7f:5a:eb:8f:bc: 3e:ed:c4:7e:84:a9:5a:5f:6b:98:2a:2a:fd:21:62:d8:2d:52: c4:ba:ed:77:40:96:62:bb:32:3f:5e:5c:5d:61:66:0e:a3:f4: 63:9e:ac:43:3c:f3:2d:f8:fb:1b:3d:b5:91:b7:9d:d4:12:52: 86:63:b6:21:a8:a3:3c:aa:97:1f:76:4a:02:5f:1a:0e:a3:37: 43:1a:51:73:5a:95:d0:20:50:cd:db:f3:97:53:1f:c9:35:57: 0f:70:d1:04:1c:d5:a3:8e:b2:80:d7:09:f5:48:5f:c3:92:c1: 3e:8c:72:e1:5f:fb:d2:eb:c6:16:df:44:85:a9:14:f8:b6:b8: 09:51:a9:67 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRFQTUyQ0M0MjY0RUI1 MUY3NTIwQUU1QzU0Q0Q0ODA1QTZDNTMxMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzx6bN3QPMtA16Bu4igo0Oo6RLQk4Ej22iOgN3ndLzuWjNIiG+ dcYE8l2VgHbwptkutWk9GsjXPs82kpzjmDmbeEVM2MMgZD7eMlag2rqH2IvDGoBG WAf7hhAEHezrBsysW0sYEkHLV0+pGjOmnZFEsd/bJxI8ZBQ7K7XbMWEjQ2xb5xYw 9fUtLaBMZNAwcBicDOWIH0u2A7KeLw6K7G8o0aEFIpOxOcyBNITu28G3vCsFJR2L Grctpu7zIHnS1iKAp22HJ88UNHzxFSPqY9du+54Z/qI+6ZJiYC+Jj9riTc/0pG61 o9achPnIaxaVI0ROUH1YG7f6pV67xuI/jXFZAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUTqUsxCZOtR91IK5cVM1IBabFMTIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1RxVXN4Q1pPdFI5MUlL NWNWTTFJQmFiRk1USS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QAwDQYJKoZIhvcNAQELBQADggEBAB+I1bKKqezY+0v0kitMuL7W/unn9YdF FzsVXHAhtslTRxbTRBnBa5OV77k09CTZzGxClPilZqHfS/wbfPacJgGHbbmyj2JY xwOCgc+bKOD5fUmwf0K0x9gwtER2E5RDQZN2U0urzRPHeu+gdVLNU5vA/D4UkhX+ JK9/WuuPvD7txH6EqVpfa5gqKv0hYtgtUsS67XdAlmK7Mj9eXF1hZg6j9GOerEM8 8y34+xs9tZG3ndQSUoZjtiGoozyqlx92SgJfGg6jN0MaUXNaldAgUM3b85dTH8k1 Vw9w0QQc1aOOsoDXCfVIX8OSwT6McuFf+9LrxhbfRIWpFPi2uAlRqWc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:28:51 2025 by rpki-client