$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/7oLS56oLVWQFgDJ7G_OKBqedppA.roa File: 7oLS56oLVWQFgDJ7G_OKBqedppA.roa (raw, json) Hash identifier: Xli3CG3IdoQFF03jX9bVA/eHMfGcRvd4jeO2i69pgdY= Subject key identifier: EE:82:D2:E7:AA:0B:55:64:05:80:32:7B:1B:F3:8A:06:A7:9D:A6:90 Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 2310 Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/7oLS56oLVWQFgDJ7G_OKBqedppA.roa Signing time: Mon 26 Jan 2026 06:54:26 +0000 ROA not before: Mon 26 Jan 2026 06:54:26 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 139021 IP address blocks: 219.234.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8976 (0x2310) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Jan 26 06:54:26 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=EE82D2E7AA0B55640580327B1BF38A06A79DA690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:4c:bf:6b:18:8f:25:21:cd:8b:d5:ee:19: b6:7e:c9:74:85:02:e0:95:dd:a8:86:11:66:1e:7e: 5d:a3:ef:90:c0:a5:01:85:24:27:da:ee:aa:95:b6: ae:1e:0d:b4:00:32:d8:6a:d4:fc:f9:b5:78:2f:df: cf:a3:cb:09:cb:16:f8:8a:a4:96:aa:b1:5b:9e:23: 3c:a3:7f:30:79:06:1e:66:6b:ea:80:d8:3b:8a:e7: 28:bf:55:84:3f:96:b9:17:db:63:e4:f0:01:3e:21: 18:7a:c1:60:81:5c:4c:74:6e:9c:20:0b:cc:91:75: ef:d9:8b:e1:d3:ee:2c:6c:a3:2f:6b:e4:48:a2:4e: 3b:0e:cc:a4:ef:47:8e:b5:9e:32:ff:e6:52:5f:06: 18:84:b2:a4:be:b4:e8:6a:71:c0:12:1b:7d:aa:96: b2:00:76:26:62:7e:de:64:7c:6b:ce:17:14:74:36: d5:ca:cf:e4:b3:c6:78:02:46:ff:dd:80:a8:60:7e: d1:43:2c:23:23:48:98:ad:95:f1:8b:96:38:22:4e: 45:b3:c1:35:19:3a:b1:50:cd:bf:42:23:a4:a2:78: a9:c3:35:04:41:a4:01:88:33:76:84:c9:2a:dd:38: 24:fe:fc:2d:94:09:fe:b4:7b:a8:87:d1:dd:cc:cb: 6e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:82:D2:E7:AA:0B:55:64:05:80:32:7B:1B:F3:8A:06:A7:9D:A6:90 X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/7oLS56oLVWQFgDJ7G_OKBqedppA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.234.16.0/21 Signature Algorithm: sha256WithRSAEncryption 79:e4:e4:89:e1:c8:de:49:26:8d:ba:d4:ad:c8:89:fe:86:b1: 10:e3:ef:10:59:bf:57:c7:48:20:e4:ff:34:24:e4:6f:d8:fd: 59:37:85:48:e4:96:f7:89:9c:c8:5a:af:f3:71:70:07:33:2e: 52:bc:78:df:a2:0c:1c:91:37:65:88:57:ae:48:ed:1e:de:7f: 86:b2:ca:39:bf:07:a1:6f:21:55:1e:cb:93:b8:b5:3a:20:1c: 96:94:a8:b6:28:96:f4:72:eb:c6:25:ae:b7:b2:ca:56:44:6a: da:bc:44:0b:78:b4:2f:df:bb:87:92:f9:fe:9c:22:58:34:f7: 8d:44:85:42:c1:18:41:76:89:e3:77:61:28:22:c0:12:18:02: 99:36:ad:34:cf:bf:d8:ed:45:7b:ed:81:54:9b:1c:3b:ea:99: e2:2e:25:d4:de:fc:16:3d:df:b5:11:40:7a:c8:44:82:d1:82: f5:60:1b:28:51:45:99:e5:f3:d4:26:2f:88:8b:74:f6:7e:85: ca:39:25:91:c4:e5:82:a7:3b:c7:1e:dd:8a:07:22:67:ee:6a: 15:90:44:8c:4d:d1:d0:ac:9e:90:c6:03:e4:21:91:8e:29:c8: 74:18:67:e7:9c:4d:95:74:47:c1:bf:f6:7b:10:5d:12:ef:00: 04:82:7a:5a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNjAxMjYw NjU0MjZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEVFODJEMkU3QUEwQjU1 NjQwNTgwMzI3QjFCRjM4QTA2QTc5REE2OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzBky/axiPJSHNi9XuGbZ+yXSFAuCV3aiGEWYefl2j75DApQGF JCfa7qqVtq4eDbQAMthq1Pz5tXgv38+jywnLFviKpJaqsVueIzyjfzB5Bh5ma+qA 2DuK5yi/VYQ/lrkX22Pk8AE+IRh6wWCBXEx0bpwgC8yRde/Zi+HT7ixsoy9r5Eii TjsOzKTvR461njL/5lJfBhiEsqS+tOhqccASG32qlrIAdiZift5kfGvOFxR0NtXK z+SzxngCRv/dgKhgftFDLCMjSJitlfGLljgiTkWzwTUZOrFQzb9CI6SieKnDNQRB pAGIM3aEySrdOCT+/C2UCf60e6iH0d3My24vAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU7oLS56oLVWQFgDJ7G/OKBqedppAwHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvN29MUzU2b0xWV1FG Z0RKN0dfT0tCcWVkcHBBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9vqEDANBgkqhkiG9w0BAQsFAAOCAQEAeeTkieHI3kkmjbrUrciJ/oaxEOPv EFm/V8dIIOT/NCTkb9j9WTeFSOSW94mcyFqv83FwBzMuUrx436IMHJE3ZYhXrkjt Ht5/hrLKOb8HoW8hVR7Lk7i1OiAclpSotiiW9HLrxiWut7LKVkRq2rxEC3i0L9+7 h5L5/pwiWDT3jUSFQsEYQXaJ43dhKCLAEhgCmTatNM+/2O1Fe+2BVJscO+qZ4i4l 1N78Fj3ftRFAeshEgtGC9WAbKFFFmeXz1CYviIt09n6FyjklkcTlgqc7xx7digci Z+5qFZBEjE3R0KyekMYD5CGRjinIdBhn55xNlXRHwb/2exBdEu8ABIJ6Wg== -----END CERTIFICATE-----Generated at Fri Feb 20 01:49:17 2026 by rpki-client