$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/flWTftPRRPlV7_loC_xCo-gcWjY.roa File: flWTftPRRPlV7_loC_xCo-gcWjY.roa (raw, json) Hash identifier: 8nVSzRzOhOCytqAcbzza2FP2A4PsSkJk8sgSN7CHxrA= Subject key identifier: 7E:55:93:7E:D3:D1:44:F9:55:EF:F9:68:0B:FC:42:A3:E8:1C:5A:36 Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 230D Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/flWTftPRRPlV7_loC_xCo-gcWjY.roa Signing time: Mon 26 Jan 2026 06:54:26 +0000 ROA not before: Mon 26 Jan 2026 06:54:26 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 139021 IP address blocks: 150.242.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8973 (0x230d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Jan 26 06:54:26 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=7E55937ED3D144F955EFF9680BFC42A3E81C5A36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:5d:94:8d:1b:27:b3:2e:20:a1:43:2c:6b:da: 7f:cb:47:2b:b8:fb:f2:f3:2b:5c:50:02:8f:03:19: 40:1b:3c:80:20:f4:a5:ba:58:8f:ab:1c:65:2e:66: 6e:90:dc:71:d7:ff:bf:2d:d4:9d:a9:f4:1a:b9:a3: f8:1e:22:29:28:bd:bc:f8:cf:91:02:26:d6:e1:97: 94:16:22:96:9c:09:c8:2e:59:3d:8b:fc:73:e1:8c: 25:c6:7e:6d:c4:16:db:67:db:e6:46:9c:b0:0f:40: 57:e8:72:22:9e:57:e4:c9:b0:19:e6:9b:69:16:1d: a3:88:e8:10:8a:7b:d6:cf:ff:27:2f:ce:d4:33:7a: 08:ef:c4:b9:fb:5d:38:d1:4b:24:f9:bd:12:51:5d: fe:aa:83:24:0f:69:57:d3:43:54:ce:4e:01:16:b8: 48:67:da:2c:a3:c5:4d:7e:96:79:ef:8b:56:4d:4d: 63:40:86:b5:0f:e7:b0:cd:7b:f0:e5:e9:fe:df:6b: 24:2d:db:c6:e8:45:00:4e:c6:61:54:25:37:b5:94: 62:82:8d:0c:5e:75:f5:90:fc:0a:d0:e6:84:2b:fe: 16:37:17:a8:01:41:14:66:81:a0:5e:d1:5a:9c:f3: 42:9b:8c:84:1d:c3:85:7d:07:0f:72:2b:13:b1:29: ce:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:55:93:7E:D3:D1:44:F9:55:EF:F9:68:0B:FC:42:A3:E8:1C:5A:36 X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/flWTftPRRPlV7_loC_xCo-gcWjY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.242.224.0/22 Signature Algorithm: sha256WithRSAEncryption a9:57:95:1a:f6:62:8c:53:45:5c:aa:3e:ec:60:3a:69:9d:32: 9a:90:d6:c8:c5:78:3a:b9:c8:82:fa:e9:c0:22:95:0c:8e:c4: bc:7c:14:79:8c:c8:c3:56:24:2b:3e:b3:6a:d2:e8:29:a0:a1: 7d:c0:c5:e8:58:e3:95:1e:6a:3c:a5:c1:9a:5f:4d:0d:a4:d3: 40:f9:9d:50:84:82:41:3e:6f:58:57:2d:54:d5:4e:c7:c7:43: 62:12:a1:d8:e9:01:0a:be:a9:a1:97:78:5d:2e:41:03:bb:85: 63:c1:1b:26:56:83:4c:7b:32:37:15:24:3c:67:31:c9:f7:5b: 1a:c2:de:2c:83:b6:9f:8a:e4:6e:84:e2:c4:6f:d7:18:a4:e5: 46:a2:6d:e5:f0:02:7b:ac:2d:13:82:19:41:6b:8a:62:77:28: f9:1f:ca:9f:5e:37:51:4e:f1:f1:70:6a:00:5d:4d:72:92:33: 3c:8a:86:70:07:1f:90:eb:66:13:fb:48:55:d7:33:3b:d0:6a: 47:e7:9b:c5:1f:00:3e:77:c1:ba:19:2b:3b:94:b8:5e:1e:b6: bc:9b:12:8e:d7:8a:52:02:16:68:55:b4:7c:96:87:8c:5a:db: a6:58:5a:21:36:01:99:91:e0:0a:a3:e2:e4:bd:1f:a5:75:66: 94:f4:bf:98 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIw0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNjAxMjYw NjU0MjZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDdFNTU5MzdFRDNEMTQ0 Rjk1NUVGRjk2ODBCRkM0MkEzRTgxQzVBMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD9XZSNGyezLiChQyxr2n/LRyu4+/LzK1xQAo8DGUAbPIAg9KW6 WI+rHGUuZm6Q3HHX/78t1J2p9Bq5o/geIikovbz4z5ECJtbhl5QWIpacCcguWT2L /HPhjCXGfm3EFttn2+ZGnLAPQFfociKeV+TJsBnmm2kWHaOI6BCKe9bP/ycvztQz egjvxLn7XTjRSyT5vRJRXf6qgyQPaVfTQ1TOTgEWuEhn2iyjxU1+lnnvi1ZNTWNA hrUP57DNe/Dl6f7fayQt28boRQBOxmFUJTe1lGKCjQxedfWQ/ArQ5oQr/hY3F6gB QRRmgaBe0Vqc80KbjIQdw4V9Bw9yKxOxKc5zAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUflWTftPRRPlV7/loC/xCo+gcWjYwHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvZmxXVGZ0UFJSUGxW N19sb0NfeENvLWdjV2pZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEApby4DANBgkqhkiG9w0BAQsFAAOCAQEAqVeVGvZijFNFXKo+7GA6aZ0ympDW yMV4OrnIgvrpwCKVDI7EvHwUeYzIw1YkKz6zatLoKaChfcDF6FjjlR5qPKXBml9N DaTTQPmdUISCQT5vWFctVNVOx8dDYhKh2OkBCr6poZd4XS5BA7uFY8EbJlaDTHsy NxUkPGcxyfdbGsLeLIO2n4rkboTixG/XGKTlRqJt5fACe6wtE4IZQWuKYnco+R/K n143UU7x8XBqAF1NcpIzPIqGcAcfkOtmE/tIVdczO9BqR+ebxR8APnfBuhkrO5S4 Xh62vJsSjteKUgIWaFW0fJaHjFrbplhaITYBmZHgCqPi5L0fpXVmlPS/mA== -----END CERTIFICATE-----Generated at Fri Feb 20 01:49:18 2026 by rpki-client