$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/JXBvtyiel8g5EFEAPwcrGCUlCkk.roa File: JXBvtyiel8g5EFEAPwcrGCUlCkk.roa (raw, json) Hash identifier: LTgYpvl1WYnm27KZkGoPowwvAQ+ZX3pfeCO1+mhQKxA= Subject key identifier: 25:70:6F:B7:28:9E:97:C8:39:10:51:00:3F:07:2B:18:25:25:0A:49 Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 2313 Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/JXBvtyiel8g5EFEAPwcrGCUlCkk.roa Signing time: Mon 26 Jan 2026 06:54:27 +0000 ROA not before: Mon 26 Jan 2026 06:54:27 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 139021 IP address blocks: 103.108.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8979 (0x2313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Jan 26 06:54:27 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=25706FB7289E97C8391051003F072B1825250A49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:42:e3:6b:6a:ae:69:f1:28:a1:79:26:0a:2e: 63:48:6f:b9:65:47:84:3e:02:0c:36:12:10:58:ca: 7e:c5:46:e2:f9:a2:49:25:4d:67:a2:89:94:b1:bd: 8b:e9:64:b0:5f:61:bc:a4:1f:15:8b:9d:2b:44:ad: 9a:c5:bf:3b:41:81:3d:a7:06:28:33:d9:db:82:fb: f6:a2:36:74:a8:08:85:4b:2a:e6:f4:6a:61:35:07: 9c:b0:1b:31:b8:42:4f:47:97:f4:cc:56:6c:f9:18: 1c:d4:8d:b6:b8:77:dd:94:66:31:17:fd:d5:87:c7: 8c:7b:2d:d9:fa:1a:51:bd:0b:0b:bb:cc:cd:2a:9d: 82:c5:6b:bf:e2:14:2a:48:6a:33:e5:7b:91:18:be: ee:cf:b7:ae:0a:f8:c2:e1:88:60:a4:28:84:9d:05: 4f:c0:7e:ba:65:a8:22:06:0f:0f:a1:f0:55:6f:a7: 17:cc:0b:d2:5b:30:3d:c0:2c:df:0e:65:40:73:f0: 15:0a:94:cd:03:f1:ac:26:26:d8:91:62:7c:e5:1c: 36:84:b3:6a:13:94:be:54:1b:c1:c1:6e:7b:0f:f8: 42:a1:2a:3d:82:6d:ca:65:c1:78:24:ba:99:c9:1e: 84:fa:26:97:6a:ed:4b:38:e9:70:02:87:a9:d0:f7: 85:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:70:6F:B7:28:9E:97:C8:39:10:51:00:3F:07:2B:18:25:25:0A:49 X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/JXBvtyiel8g5EFEAPwcrGCUlCkk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.108.192.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:56:e1:c6:d2:8c:83:af:42:b9:09:1b:6c:fd:a3:06:57:d6: ff:b9:4b:9d:71:6a:69:9c:f6:a8:b7:db:5e:89:a9:8d:9d:97: dc:ac:e0:a1:15:b1:50:18:d1:e9:4e:20:95:15:6b:db:5d:fb: 82:df:e5:39:9d:ca:65:00:6f:4a:cc:64:ae:f1:34:e4:eb:78: a3:be:72:88:be:33:0f:d7:1d:6e:0e:41:d7:13:d0:33:8d:72: 18:9a:a0:b9:57:58:0d:e3:1e:4e:96:11:17:ff:ee:39:4a:35: 8a:93:80:6d:63:05:55:2e:81:29:9d:54:01:c5:fd:64:c2:d2: 33:0a:83:a2:9b:c6:fb:8e:10:91:b2:f6:e0:1b:a0:f5:64:09: 90:52:cd:19:19:63:1e:4f:47:14:44:7d:de:e5:07:7e:ac:38: 08:66:93:03:4c:0b:5f:e7:7c:a2:d2:24:9e:f4:b6:32:e3:57: 02:6f:92:83:10:bc:7d:59:d0:91:ce:37:bd:7f:7e:9a:25:35: 1c:e7:52:de:6c:6e:22:58:ca:df:ee:89:70:b3:f4:44:68:5b: 11:1a:0d:52:21:46:0a:2e:66:22:a5:0a:1a:c4:b4:88:b4:a3: 2d:ff:a3:c5:d8:64:4f:ee:9a:5a:23:1d:86:21:0b:bc:e1:1b: 41:05:bd:36 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNjAxMjYw NjU0MjdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDI1NzA2RkI3Mjg5RTk3 QzgzOTEwNTEwMDNGMDcyQjE4MjUyNTBBNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbQuNraq5p8SiheSYKLmNIb7llR4Q+Agw2EhBYyn7FRuL5okkl TWeiiZSxvYvpZLBfYbykHxWLnStErZrFvztBgT2nBigz2duC+/aiNnSoCIVLKub0 amE1B5ywGzG4Qk9Hl/TMVmz5GBzUjba4d92UZjEX/dWHx4x7Ldn6GlG9Cwu7zM0q nYLFa7/iFCpIajPle5EYvu7Pt64K+MLhiGCkKISdBU/AfrplqCIGDw+h8FVvpxfM C9JbMD3ALN8OZUBz8BUKlM0D8awmJtiRYnzlHDaEs2oTlL5UG8HBbnsP+EKhKj2C bcplwXgkupnJHoT6Jpdq7Us46XACh6nQ94VfAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUJXBvtyiel8g5EFEAPwcrGCUlCkkwHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvSlhCdnR5aWVsOGc1 RUZFQVB3Y3JHQ1VsQ2trLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdswDANBgkqhkiG9w0BAQsFAAOCAQEAGlbhxtKMg69CuQkbbP2jBlfW/7lL nXFqaZz2qLfbXompjZ2X3KzgoRWxUBjR6U4glRVr2137gt/lOZ3KZQBvSsxkrvE0 5Ot4o75yiL4zD9cdbg5B1xPQM41yGJqguVdYDeMeTpYRF//uOUo1ipOAbWMFVS6B KZ1UAcX9ZMLSMwqDopvG+44QkbL24Bug9WQJkFLNGRljHk9HFER93uUHfqw4CGaT A0wLX+d8otIknvS2MuNXAm+SgxC8fVnQkc43vX9+miU1HOdS3mxuIljK3+6JcLP0 RGhbERoNUiFGCi5mIqUKGsS0iLSjLf+jxdhkT+6aWiMdhiELvOEbQQW9Ng== -----END CERTIFICATE-----Generated at Fri Feb 20 01:49:19 2026 by rpki-client