$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/9yPSB-5HRoSHqJSmEAOHGxFz2jQ.roa File: 9yPSB-5HRoSHqJSmEAOHGxFz2jQ.roa (raw, json) Hash identifier: 7fpEo72xVWsTXdQ08RLuiMacVL4oX9ZxFxBl4Vabug8= Subject key identifier: F7:23:D2:07:EE:47:46:84:87:A8:94:A6:10:03:87:1B:11:73:DA:34 Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 2314 Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/9yPSB-5HRoSHqJSmEAOHGxFz2jQ.roa Signing time: Mon 26 Jan 2026 06:54:27 +0000 ROA not before: Mon 26 Jan 2026 06:54:27 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 139021 IP address blocks: 219.234.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8980 (0x2314) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Jan 26 06:54:27 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=F723D207EE47468487A894A61003871B1173DA34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:30:9d:ff:d4:b0:2b:bc:1b:2a:87:b3:52: fa:e9:13:96:da:71:c5:b7:64:ea:2b:dc:be:6f:2b: 30:28:15:02:77:2f:32:43:ae:11:49:3b:47:73:3c: 5a:0d:d8:26:c0:ba:9e:7f:bd:03:c1:41:f4:ea:e4: 3d:af:28:b6:23:aa:78:54:ab:29:f9:f1:30:7b:15: 66:ac:5e:9e:93:41:52:70:22:a1:4d:fc:cc:34:cf: 8e:65:40:5a:e3:d0:03:e9:33:92:b5:a7:7e:c1:b4: 8c:74:ad:7e:3a:ec:86:5d:d3:21:75:bd:0e:20:4e: 28:58:1e:7e:0b:99:43:ea:d8:64:03:59:29:c7:29: e4:47:ba:44:b1:f2:c1:52:7d:9a:c2:bb:98:47:0e: 58:cc:82:81:04:42:0a:d4:0d:4d:2b:79:98:d3:b6: c0:63:37:f6:ba:98:72:83:e1:fb:81:95:93:e5:ad: 22:49:9b:f8:8a:56:b4:f9:bb:f7:98:56:6b:5d:80: ed:d1:d7:6b:de:f7:c6:95:1f:69:bb:34:61:2f:c8: 54:48:e7:89:04:33:94:5f:1d:be:5f:a7:67:90:2e: 1e:d6:b4:32:5a:f3:c6:5f:7b:3d:ed:f5:07:3c:3b: c4:01:4b:49:cc:33:9d:34:4c:bb:9f:19:db:46:92: 63:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:23:D2:07:EE:47:46:84:87:A8:94:A6:10:03:87:1B:11:73:DA:34 X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/9yPSB-5HRoSHqJSmEAOHGxFz2jQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.234.0.0/21 Signature Algorithm: sha256WithRSAEncryption 18:28:09:24:3f:2b:f8:5c:7e:0f:c9:4b:b4:47:00:6c:a4:41: c1:f9:e9:2a:1e:ee:75:c5:49:ea:c9:da:fe:af:28:a9:40:c5: 41:d9:7f:4b:90:8b:fa:61:dd:ba:2a:20:1d:72:4f:0f:ec:51: e1:b7:36:26:9e:c2:d7:0e:1f:5b:88:88:3f:4d:91:6e:27:9c: e0:1a:b3:47:7e:d3:65:86:92:77:d1:66:c5:62:9c:91:3a:3c: 89:dc:26:06:dc:41:87:e6:7a:fa:6d:40:a8:1b:de:d9:97:65: 47:4c:dd:55:0e:e4:71:8a:be:9d:5c:71:b1:52:e5:f4:b3:ec: 0a:a6:52:f4:e2:ff:1b:60:61:70:37:7c:20:83:7d:82:c5:89: c2:19:dc:e9:8f:ef:dd:e0:53:d5:28:60:42:11:90:b7:42:8e: f9:8e:0d:0a:fe:aa:5d:51:cc:41:c0:c6:cc:47:cc:18:3f:73: 06:33:d1:20:bd:94:29:22:f7:60:b8:73:1d:41:49:fc:11:50: be:c8:8a:14:0a:20:0e:c9:e5:d4:43:ea:89:db:f5:e7:98:b6: d6:38:37:ab:7b:83:61:07:97:f0:44:29:b8:6a:67:fc:ff:87: 4a:38:b0:b2:05:4e:b0:16:f8:6a:54:de:af:31:b7:2e:ff:d9: 60:c3:8b:22 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIxQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNjAxMjYw NjU0MjdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEY3MjNEMjA3RUU0NzQ2 ODQ4N0E4OTRBNjEwMDM4NzFCMTE3M0RBMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxSTCd/9SwK7wbKoezUvrpE5baccW3ZOor3L5vKzAoFQJ3LzJD rhFJO0dzPFoN2CbAup5/vQPBQfTq5D2vKLYjqnhUqyn58TB7FWasXp6TQVJwIqFN /Mw0z45lQFrj0APpM5K1p37BtIx0rX467IZd0yF1vQ4gTihYHn4LmUPq2GQDWSnH KeRHukSx8sFSfZrCu5hHDljMgoEEQgrUDU0reZjTtsBjN/a6mHKD4fuBlZPlrSJJ m/iKVrT5u/eYVmtdgO3R12ve98aVH2m7NGEvyFRI54kEM5RfHb5fp2eQLh7WtDJa 88Zfez3t9Qc8O8QBS0nMM500TLufGdtGkmO/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU9yPSB+5HRoSHqJSmEAOHGxFz2jQwHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvOXlQU0ItNUhSb1NI cUpTbUVBT0hHeEZ6MmpRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9vqADANBgkqhkiG9w0BAQsFAAOCAQEAGCgJJD8r+Fx+D8lLtEcAbKRBwfnp Kh7udcVJ6sna/q8oqUDFQdl/S5CL+mHduiogHXJPD+xR4bc2Jp7C1w4fW4iIP02R biec4BqzR37TZYaSd9FmxWKckTo8idwmBtxBh+Z6+m1AqBve2ZdlR0zdVQ7kcYq+ nVxxsVLl9LPsCqZS9OL/G2BhcDd8IIN9gsWJwhnc6Y/v3eBT1ShgQhGQt0KO+Y4N Cv6qXVHMQcDGzEfMGD9zBjPRIL2UKSL3YLhzHUFJ/BFQvsiKFAogDsnl1EPqidv1 55i21jg3q3uDYQeX8EQpuGpn/P+HSjiwsgVOsBb4alTerzG3Lv/ZYMOLIg== -----END CERTIFICATE-----Generated at Fri Feb 20 01:49:16 2026 by rpki-client