$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/Dspk-i7jbOO-ivUzTVNna83UTUU.roa File: Dspk-i7jbOO-ivUzTVNna83UTUU.roa (raw, json) Hash identifier: +X04l1TDB46s7GfSO8FWj7bZ7IeO6H75z2IBN0lElas= Subject key identifier: 0E:CA:64:FA:2E:E3:6C:E3:BE:8A:F5:33:4D:53:67:6B:CD:D4:4D:45 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 13 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Dspk-i7jbOO-ivUzTVNna83UTUU.roa Signing time: Thu 17 Apr 2025 11:22:52 +0000 ROA not before: Thu 17 Apr 2025 11:22:52 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 140869 IP address blocks: 103.119.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 01:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:22:52 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=0ECA64FA2EE36CE3BE8AF5334D53676BCDD44D45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:7d:a7:5c:84:a1:e8:58:d9:8d:f9:b1:af: 16:a7:dd:c6:6d:9e:35:bf:04:d5:cb:b9:b4:e1:1f: e1:5f:ce:ec:51:64:fe:5b:f8:37:bd:c1:e1:f0:11: ce:03:d9:cf:93:d0:2c:b2:3a:23:56:0d:a2:1a:ef: 53:4b:b5:0f:db:04:8f:8a:30:28:15:26:4d:3a:ee: 66:0b:9b:05:31:57:4d:7c:2e:b6:b9:64:eb:3a:e4: 54:f9:f0:31:e9:f6:45:1e:0e:20:42:c3:da:a4:1f: 07:c9:2b:83:0a:19:29:29:77:74:ec:d0:20:58:57: fc:89:fa:bd:7e:c5:f2:11:19:3d:be:14:b7:27:c7: 11:60:ad:96:71:75:26:6a:50:c1:38:cf:f1:f7:a8: 0b:d7:91:41:26:84:45:46:62:21:8d:b7:d6:99:02: f9:fd:98:01:14:b2:a4:45:54:e0:64:a8:df:84:68: 75:8e:a2:db:0c:f5:70:b1:63:f5:08:ea:f6:f5:90: 09:e4:28:71:ad:02:c4:4d:2a:8b:a4:60:f9:70:e5: b0:3e:95:ea:93:52:ad:25:fe:5f:01:84:15:c5:f2: 26:5f:08:8c:dd:96:68:d2:7c:14:97:f0:63:e5:39: 03:a6:0a:2b:33:7a:7b:0b:a0:a1:52:9f:63:8a:e6: 8f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CA:64:FA:2E:E3:6C:E3:BE:8A:F5:33:4D:53:67:6B:CD:D4:4D:45 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Dspk-i7jbOO-ivUzTVNna83UTUU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.119.12.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:42:10:f5:ea:fa:82:53:5e:09:53:70:d3:d5:e0:94:6f:37: b5:50:94:08:ac:f5:ad:ad:f6:19:18:fa:78:44:22:f5:d9:43: 76:da:a2:33:9f:44:9a:af:b0:be:c8:4c:6a:3c:d7:68:51:1b: 83:50:30:17:52:e6:bd:f1:0e:f6:64:02:ef:be:4f:97:9b:a9: 20:28:7f:08:0c:00:16:1b:6e:6d:9a:0f:6a:5c:d4:c7:fa:89: b2:2b:ce:fd:7f:68:75:1d:7c:46:fa:43:8e:f8:78:89:7b:62: ea:2b:d9:08:5a:2d:8c:18:10:70:dc:2b:f6:cf:16:76:64:60: c7:de:a5:2d:45:dd:0b:70:64:39:ab:62:99:b3:bd:fc:da:80: a6:c7:91:d0:97:42:be:6a:44:dd:d2:d3:c2:51:6c:a4:98:0c: bd:a4:a5:7a:dc:37:91:a5:c8:b2:aa:9f:3c:4d:27:6c:6f:31: 8d:9c:04:52:fe:79:99:e6:ad:ec:6c:c5:aa:15:07:fa:57:ef: d0:e9:73:59:56:39:58:d0:60:e9:24:ac:2d:02:a0:22:61:40: c1:de:8b:17:15:2f:b0:59:45:5c:4e:bc:6e:21:01:67:aa:6e: b1:a9:6d:b4:ba:d8:06:8c:39:a3:6f:19:a6:9a:98:86:c3:ef: 60:91:73:fc -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx MjI1MloXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoMEVDQTY0RkEyRUUzNkNF M0JFOEFGNTMzNEQ1MzY3NkJDREQ0NEQ0NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALdRfadchKHoWNmN+bGvFqfdxm2eNb8E1cu5tOEf4V/O7FFk/lv4 N73B4fARzgPZz5PQLLI6I1YNohrvU0u1D9sEj4owKBUmTTruZgubBTFXTXwutrlk 6zrkVPnwMen2RR4OIELD2qQfB8krgwoZKSl3dOzQIFhX/In6vX7F8hEZPb4UtyfH EWCtlnF1JmpQwTjP8feoC9eRQSaERUZiIY231pkC+f2YARSypEVU4GSo34RodY6i 2wz1cLFj9Qjq9vWQCeQoca0CxE0qi6Rg+XDlsD6V6pNSrSX+XwGEFcXyJl8IjN2W aNJ8FJfwY+U5A6YKKzN6ewugoVKfY4rmjzsCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQOymT6LuNs476K9TNNU2drzdRNRTAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9Ec3BrLWk3amJPTy1p dlV6VFZObmE4M1VUVVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3cMMA0GCSqGSIb3DQEBCwUAA4IBAQCMQhD16vqCU14JU3DT1eCUbze1UJQI rPWtrfYZGPp4RCL12UN22qIzn0Sar7C+yExqPNdoURuDUDAXUua98Q72ZALvvk+X m6kgKH8IDAAWG25tmg9qXNTH+omyK879f2h1HXxG+kOO+HiJe2LqK9kIWi2MGBBw 3Cv2zxZ2ZGDH3qUtRd0LcGQ5q2KZs7382oCmx5HQl0K+akTd0tPCUWykmAy9pKV6 3DeRpciyqp88TSdsbzGNnARS/nmZ5q3sbMWqFQf6V+/Q6XNZVjlY0GDpJKwtAqAi YUDB3osXFS+wWUVcTrxuIQFnqm6xqW20utgGjDmjbxmmmpiGw+9gkXP8 -----END CERTIFICATE-----Generated at Sun Apr 27 21:44:45 2025 by rpki-client on console.sobornost.net