$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/qOLhgoeMZdL-R63125U-Km2EXxw.roa File: qOLhgoeMZdL-R63125U-Km2EXxw.roa (raw, json) Hash identifier: vf5E/o4i2S9UWzveKFEsoCO9l+wgDrWyLO9Az9PNUeI= Subject key identifier: A8:E2:E1:82:87:8C:65:D2:FE:47:AD:F5:DB:95:3E:2A:6D:84:5F:1C Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 2311 Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qOLhgoeMZdL-R63125U-Km2EXxw.roa Signing time: Mon 26 Jan 2026 06:54:26 +0000 ROA not before: Mon 26 Jan 2026 06:54:26 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 139021 IP address blocks: 218.247.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8977 (0x2311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Jan 26 06:54:26 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=A8E2E182878C65D2FE47ADF5DB953E2A6D845F1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:da:39:b2:6a:73:5c:a2:1f:4c:ee:05:1d:13: cc:ad:48:41:68:ab:75:02:62:30:1f:74:65:a9:9f: ac:47:2b:fa:68:f5:7b:03:cf:c7:13:d3:99:75:01: 99:6d:d8:5a:04:cd:7f:31:ce:7a:ef:26:80:65:ec: d0:69:30:db:a5:f7:b0:81:30:c5:65:6f:dc:48:51: 7b:da:00:24:39:8b:0d:da:b7:3d:ec:87:52:d2:6f: e2:3c:8d:b6:2b:1c:0d:30:67:0b:e7:49:53:99:df: 1c:3f:99:79:8a:e6:9a:7b:72:a5:ea:5c:0f:fb:c7: 3c:8e:6f:45:10:55:2a:69:f1:f4:2c:4e:42:8a:31: be:48:8d:49:93:22:ea:41:6f:e1:9e:38:41:35:b6: 5a:33:d3:88:b1:bc:19:ba:bf:6e:5e:d2:5f:4c:f3: 56:01:9f:d2:09:1d:fc:59:4d:fd:b2:84:79:7a:36: cc:1c:3b:54:d9:8d:90:3d:ef:e2:b8:ab:8e:a3:9d: db:da:e4:a8:37:25:4e:b9:91:1a:2f:0f:41:3e:78: 33:f6:d3:26:48:5c:ed:32:56:4b:87:32:04:8c:7d: 5e:7b:60:f5:56:7e:77:4a:f6:b1:e0:6a:79:b6:bd: 63:4a:b0:54:db:a4:6a:b2:af:93:2e:31:2f:80:4e: db:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E2:E1:82:87:8C:65:D2:FE:47:AD:F5:DB:95:3E:2A:6D:84:5F:1C X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qOLhgoeMZdL-R63125U-Km2EXxw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.247.86.0/23 Signature Algorithm: sha256WithRSAEncryption 89:6c:23:ef:3f:72:a1:ad:1d:1f:ef:03:1f:5a:99:de:b5:3f: d6:81:54:64:8d:26:33:65:98:65:f7:eb:12:dd:73:53:b2:9a: d3:88:13:5c:89:91:70:1e:53:ae:ff:c8:3a:d5:ba:37:55:55: ad:c8:fe:9c:2b:69:1e:09:15:9f:8b:ed:66:85:27:4e:8e:6f: 34:7c:48:40:51:bd:95:54:15:25:ca:40:63:77:db:be:52:1a: f0:39:4b:a7:a5:b9:86:fe:64:11:e4:37:cd:dd:d8:fd:99:b8: ee:73:82:43:43:50:34:17:32:66:af:ae:80:b8:01:d3:8d:b2: 79:45:69:21:06:14:0d:db:45:6f:97:de:98:94:83:78:55:36: 86:49:d2:36:10:22:89:13:26:4a:a5:66:c8:51:c0:e3:ca:6c: db:8b:a4:13:05:58:d9:ad:44:1a:c4:38:0d:6e:61:dd:57:0a: a5:a0:a3:ba:00:8d:c9:70:fc:71:73:de:50:04:d0:93:58:b0: 41:77:35:38:83:c4:83:f0:25:e6:f0:9d:cb:db:bb:0a:61:24: 92:71:7e:1b:cc:e7:27:a1:f5:68:ea:83:d5:ec:ac:dc:9a:bd: ab:0b:37:54:c0:e6:22:7d:46:17:7d:94:e3:fc:81:10:20:b3: d9:13:27:89 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIxEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNjAxMjYw NjU0MjZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEE4RTJFMTgyODc4QzY1 RDJGRTQ3QURGNURCOTUzRTJBNkQ4NDVGMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDt2jmyanNcoh9M7gUdE8ytSEFoq3UCYjAfdGWpn6xHK/po9XsD z8cT05l1AZlt2FoEzX8xznrvJoBl7NBpMNul97CBMMVlb9xIUXvaACQ5iw3atz3s h1LSb+I8jbYrHA0wZwvnSVOZ3xw/mXmK5pp7cqXqXA/7xzyOb0UQVSpp8fQsTkKK Mb5IjUmTIupBb+GeOEE1tloz04ixvBm6v25e0l9M81YBn9IJHfxZTf2yhHl6Nswc O1TZjZA97+K4q46jndva5Kg3JU65kRovD0E+eDP20yZIXO0yVkuHMgSMfV57YPVW fndK9rHganm2vWNKsFTbpGqyr5MuMS+ATtudAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUqOLhgoeMZdL+R63125U+Km2EXxwwHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvcU9MaGdvZU1aZEwt UjYzMTI1VS1LbTJFWHh3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAdr3VjANBgkqhkiG9w0BAQsFAAOCAQEAiWwj7z9yoa0dH+8DH1qZ3rU/1oFU ZI0mM2WYZffrEt1zU7Ka04gTXImRcB5Trv/IOtW6N1VVrcj+nCtpHgkVn4vtZoUn To5vNHxIQFG9lVQVJcpAY3fbvlIa8DlLp6W5hv5kEeQ3zd3Y/Zm47nOCQ0NQNBcy Zq+ugLgB042yeUVpIQYUDdtFb5femJSDeFU2hknSNhAiiRMmSqVmyFHA48ps24uk EwVY2a1EGsQ4DW5h3VcKpaCjugCNyXD8cXPeUATQk1iwQXc1OIPEg/Al5vCdy9u7 CmEkknF+G8znJ6H1aOqD1eys3Jq9qws3VMDmIn1GF32U4/yBECCz2RMniQ== -----END CERTIFICATE-----Generated at Fri Feb 20 01:49:19 2026 by rpki-client