$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/dzngq_QrVZ8FHFzC8N9OuaZnBkw.roa File: dzngq_QrVZ8FHFzC8N9OuaZnBkw.roa (raw, json) Hash identifier: J+wxu7PUXukwaqOd79OiV/+BrBdd6vjr69m461cuf2c= Subject key identifier: 77:39:E0:AB:F4:2B:55:9F:05:1C:5C:C2:F0:DF:4E:B9:A6:67:06:4C Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 230E Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/dzngq_QrVZ8FHFzC8N9OuaZnBkw.roa Signing time: Mon 26 Jan 2026 06:54:26 +0000 ROA not before: Mon 26 Jan 2026 06:54:26 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 139021 IP address blocks: 218.247.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8974 (0x230e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Jan 26 06:54:26 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=7739E0ABF42B559F051C5CC2F0DF4EB9A667064C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:6f:fd:b2:78:c4:93:8b:35:fc:59:f5:56: fd:10:41:dc:04:8f:2e:df:eb:3c:b5:7e:b3:2c:a1: 6b:8e:d2:89:68:ad:4c:df:a0:df:d0:11:ed:97:52: b6:42:6e:8c:2b:de:ea:45:86:86:61:d4:76:dd:71: 76:40:ba:8a:52:8e:7f:f3:16:05:9a:3b:d6:dc:84: 5b:8a:d5:bf:a4:d5:d9:7b:db:0e:92:56:94:1e:2e: 6c:bd:86:77:8a:f5:61:16:12:f1:75:b4:82:f6:14: 7a:4e:95:56:d9:6c:6b:ec:07:53:19:24:e8:a1:dc: 7d:96:6a:6a:99:7d:b3:35:e0:30:64:02:05:1a:e9: 24:24:fe:f1:22:6b:d2:f8:3c:27:d1:42:b3:43:4f: db:ea:a9:4a:fc:b6:ac:e4:3f:f6:20:24:9d:d2:56: a1:5b:98:01:d4:8f:cf:49:29:52:b8:ef:cd:2a:d9: af:33:a2:16:d8:ad:5f:2f:ab:0b:f7:3c:f0:33:fb: 9e:3e:1d:90:5f:8a:2b:c1:f7:69:36:cb:00:e4:10: cd:be:2d:be:45:09:eb:71:59:47:e2:e3:6c:14:c1: d2:79:3b:26:ae:09:72:29:9c:2b:14:61:5c:6c:1f: 8d:bb:97:44:40:15:e9:40:20:1b:db:2c:56:d9:87: ba:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:39:E0:AB:F4:2B:55:9F:05:1C:5C:C2:F0:DF:4E:B9:A6:67:06:4C X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/dzngq_QrVZ8FHFzC8N9OuaZnBkw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.247.88.0/21 Signature Algorithm: sha256WithRSAEncryption 42:ef:22:4f:c7:f8:b2:c9:0b:0e:48:62:9d:94:0e:0b:9d:91: da:43:c3:b3:ff:39:e2:5f:f4:9b:a2:f5:0f:2b:bd:bf:04:35: e6:36:65:99:a6:f4:c9:ba:59:81:76:1a:94:53:47:6b:67:c3: 98:10:e2:f2:42:51:53:c5:aa:74:bb:fd:80:6b:47:c8:5c:74: 6e:17:43:ee:e0:91:3c:21:7b:96:82:e5:c5:93:d3:c6:ed:32: 7f:e3:51:9e:9d:7f:3d:50:88:89:9a:95:b0:c6:48:81:d0:8f: 66:c6:5e:b8:8f:27:de:87:58:9e:4b:ca:79:12:88:59:83:3c: 2e:66:f9:3f:38:2a:3e:84:ff:62:2e:d5:d7:e8:5d:45:ce:eb: eb:cb:b4:74:25:4f:6c:f2:92:e3:b2:d3:d9:b2:d2:41:79:a5: 3b:ab:a9:18:ed:ac:5f:92:d6:c0:5a:2f:9f:33:d4:16:d4:2d: 92:39:e8:93:1e:0e:19:0e:35:00:94:83:1b:f0:ea:b2:a0:01: b5:9e:ae:21:d4:9f:84:12:b7:08:56:61:30:85:5b:22:47:f0: ba:6d:6c:24:f2:16:e5:2f:fc:33:5e:a5:37:1b:b3:fd:de:5f: 1f:e9:14:9a:2a:57:1e:5c:69:1c:0c:83:19:7e:58:8e:3a:58: bd:7b:c1:1c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIw4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNjAxMjYw NjU0MjZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDc3MzlFMEFCRjQyQjU1 OUYwNTFDNUNDMkYwREY0RUI5QTY2NzA2NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJhW/9snjEk4s1/Fn1Vv0QQdwEjy7f6zy1frMsoWuO0olorUzf oN/QEe2XUrZCbowr3upFhoZh1HbdcXZAuopSjn/zFgWaO9bchFuK1b+k1dl72w6S VpQeLmy9hneK9WEWEvF1tIL2FHpOlVbZbGvsB1MZJOih3H2WamqZfbM14DBkAgUa 6SQk/vEia9L4PCfRQrNDT9vqqUr8tqzkP/YgJJ3SVqFbmAHUj89JKVK4780q2a8z ohbYrV8vqwv3PPAz+54+HZBfiivB92k2ywDkEM2+Lb5FCetxWUfi42wUwdJ5Oyau CXIpnCsUYVxsH427l0RAFelAIBvbLFbZh7pTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUdzngq/QrVZ8FHFzC8N9OuaZnBkwwHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvZHpuZ3FfUXJWWjhG SEZ6QzhOOU91YVpuQmt3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9r3WDANBgkqhkiG9w0BAQsFAAOCAQEAQu8iT8f4sskLDkhinZQOC52R2kPD s/854l/0m6L1Dyu9vwQ15jZlmab0ybpZgXYalFNHa2fDmBDi8kJRU8WqdLv9gGtH yFx0bhdD7uCRPCF7loLlxZPTxu0yf+NRnp1/PVCIiZqVsMZIgdCPZsZeuI8n3odY nkvKeRKIWYM8Lmb5PzgqPoT/Yi7V1+hdRc7r68u0dCVPbPKS47LT2bLSQXmlO6up GO2sX5LWwFovnzPUFtQtkjnokx4OGQ41AJSDG/DqsqABtZ6uIdSfhBK3CFZhMIVb Ikfwum1sJPIW5S/8M16lNxuz/d5fH+kUmipXHlxpHAyDGX5YjjpYvXvBHA== -----END CERTIFICATE-----Generated at Fri Feb 20 01:49:10 2026 by rpki-client