$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/0wKnIyHvpa--iEv_L3renDCAgT8.roa File: 0wKnIyHvpa--iEv_L3renDCAgT8.roa (raw, json) Hash identifier: uj/GurZ0qjYVKzqfziLaKGT30H6iKhzlEVbKTikKMbk= Subject key identifier: D3:02:A7:23:21:EF:A5:AF:BE:88:4B:FF:2F:7A:DE:9C:30:80:81:3F Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 2312 Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/0wKnIyHvpa--iEv_L3renDCAgT8.roa Signing time: Mon 26 Jan 2026 06:54:27 +0000 ROA not before: Mon 26 Jan 2026 06:54:27 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 139021 IP address blocks: 219.234.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8978 (0x2312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Jan 26 06:54:27 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=D302A72321EFA5AFBE884BFF2F7ADE9C3080813F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:b7:1e:a0:fd:97:a7:68:8f:20:9f:aa:11: f5:3d:5d:98:9f:a7:7f:3e:f8:ba:d9:db:a5:3b:a2: e4:5b:90:51:38:50:b5:8f:39:37:f2:d4:31:fd:56: 5f:fd:24:7d:e9:ef:fe:1d:ba:cc:26:ef:db:ef:4d: e6:eb:7e:e9:f7:9a:e6:ab:8a:c9:be:57:72:57:11: e7:b5:16:bf:5f:5f:a6:2c:f6:2f:4c:e3:5d:ea:bb: a0:a3:1e:15:18:2e:e2:26:4d:07:66:9a:ad:a8:70: e2:78:80:b7:5b:be:9a:c6:d9:f8:22:48:60:4b:c8: ed:b9:91:4f:ee:ad:5a:b6:fe:b7:b1:61:1e:57:55: 66:10:f1:9d:39:18:a3:ed:f8:dd:16:9a:a3:a1:de: 8f:5d:12:b5:a5:bf:36:f7:32:43:9c:7e:70:d7:06: 77:06:82:8e:d7:cc:cf:96:71:08:06:1c:56:18:57: 3a:a3:3f:9c:ee:47:2b:b6:25:3f:cd:17:c3:ae:6c: b3:a4:15:25:3f:d4:60:f1:c2:06:1e:e6:c3:af:ac: c0:88:fb:33:12:34:27:35:57:d8:dc:4a:29:08:3e: ca:26:89:45:64:f6:53:47:5f:95:09:93:99:03:89: 87:27:10:fb:b1:5c:ea:90:f5:72:8c:51:bb:68:a5: dc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:02:A7:23:21:EF:A5:AF:BE:88:4B:FF:2F:7A:DE:9C:30:80:81:3F X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/0wKnIyHvpa--iEv_L3renDCAgT8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.234.16.0/20 Signature Algorithm: sha256WithRSAEncryption b5:9e:5a:01:ce:e3:c2:aa:e0:0b:d3:71:04:51:77:fb:f2:1a: 26:a3:76:89:c4:15:82:53:0e:5d:2b:0d:1e:d7:8b:a3:fb:f4: 3e:05:57:57:f3:8d:be:77:37:da:bf:01:a3:9c:c0:74:69:2e: 0b:e6:d7:aa:f6:cc:2d:bc:57:74:14:79:d6:1b:54:a3:a8:f1: d7:fc:65:70:a6:82:4c:92:0a:3c:4b:be:b0:ac:49:74:eb:79: d9:70:2e:29:40:e0:15:86:ca:0b:83:51:74:23:79:27:53:24: b8:e5:76:4b:aa:b3:3e:e0:fc:ac:82:f2:72:b2:29:b7:72:3d: 4f:db:9e:41:de:b4:f1:ac:81:c6:0f:62:7b:32:21:db:42:fc: 94:5a:f6:db:9a:a5:92:86:77:a3:0e:e9:ae:81:00:81:8f:cf: 24:11:b7:ad:83:c8:b0:d6:34:64:85:a0:3f:f8:1c:79:91:f5: 35:ae:3b:1f:ad:78:a1:42:cd:01:a3:1f:51:49:1f:33:5c:c0: 11:eb:16:ba:de:53:ef:0f:aa:c9:3a:35:01:c9:06:1d:5d:1f: d9:b6:0e:0f:cb:cb:d1:34:46:28:3f:a2:ba:f2:eb:c9:fd:bf: 45:6f:00:42:12:a2:33:a9:57:cc:8e:51:c7:3c:86:66:2c:b9: 54:ca:6d:c7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIxIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNjAxMjYw NjU0MjdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEQzMDJBNzIzMjFFRkE1 QUZCRTg4NEJGRjJGN0FERTlDMzA4MDgxM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwS7ceoP2Xp2iPIJ+qEfU9XZifp38++LrZ26U7ouRbkFE4ULWP OTfy1DH9Vl/9JH3p7/4duswm79vvTebrfun3muarism+V3JXEee1Fr9fX6Ys9i9M 413qu6CjHhUYLuImTQdmmq2ocOJ4gLdbvprG2fgiSGBLyO25kU/urVq2/rexYR5X VWYQ8Z05GKPt+N0WmqOh3o9dErWlvzb3MkOcfnDXBncGgo7XzM+WcQgGHFYYVzqj P5zuRyu2JT/NF8OubLOkFSU/1GDxwgYe5sOvrMCI+zMSNCc1V9jcSikIPsomiUVk 9lNHX5UJk5kDiYcnEPuxXOqQ9XKMUbtopdw1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU0wKnIyHvpa++iEv/L3renDCAgT8wHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvMHdLbkl5SHZwYS0t aUV2X0wzcmVuRENBZ1Q4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNvqEDANBgkqhkiG9w0BAQsFAAOCAQEAtZ5aAc7jwqrgC9NxBFF3+/IaJqN2 icQVglMOXSsNHteLo/v0PgVXV/ONvnc32r8Bo5zAdGkuC+bXqvbMLbxXdBR51htU o6jx1/xlcKaCTJIKPEu+sKxJdOt52XAuKUDgFYbKC4NRdCN5J1MkuOV2S6qzPuD8 rILycrIpt3I9T9ueQd608ayBxg9iezIh20L8lFr225qlkoZ3ow7proEAgY/PJBG3 rYPIsNY0ZIWgP/gceZH1Na47H614oULNAaMfUUkfM1zAEesWut5T7w+qyTo1AckG HV0f2bYOD8vL0TRGKD+iuvLryf2/RW8AQhKiM6lXzI5RxzyGZiy5VMptxw== -----END CERTIFICATE-----Generated at Fri Feb 20 01:49:13 2026 by rpki-client