$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/qsCwaakU-eUnX_rSpxh2R-rSnHc.roa File: qsCwaakU-eUnX_rSpxh2R-rSnHc.roa (raw, json) Hash identifier: WLid4nIAEdFXZg0aJzBF9Xq0xaE0KIHJaOm3IVQw9CY= Subject key identifier: AA:C0:B0:69:A9:14:F9:E5:27:5F:FA:D2:A7:18:76:47:EA:D2:9C:77 Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 230F Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qsCwaakU-eUnX_rSpxh2R-rSnHc.roa Signing time: Mon 26 Jan 2026 06:54:26 +0000 ROA not before: Mon 26 Jan 2026 06:54:26 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 139021 IP address blocks: 218.247.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8975 (0x230f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Jan 26 06:54:26 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=AAC0B069A914F9E5275FFAD2A7187647EAD29C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:41:bf:e6:b9:eb:eb:6e:4f:2f:3b:b1:22:d2: a0:15:c6:98:a0:47:6c:67:3c:ad:ad:83:9f:f5:8b: 51:37:26:95:de:ff:c4:e6:bf:87:70:55:5e:20:76: 58:f1:97:c3:e4:ec:ca:66:cf:74:3f:99:97:a8:b2: 71:52:a9:89:b6:31:61:88:c8:dd:9b:a0:61:6c:82: f5:c3:6e:4a:5f:e3:3a:5b:31:fc:9e:5a:ad:b0:82: 53:bb:0f:a1:6d:ef:84:52:a4:14:37:87:16:41:d1: d1:ba:77:2d:b6:2e:61:59:e5:13:d4:04:03:fb:60: 9b:bb:b5:5a:c8:54:d6:af:7e:f1:a2:8b:98:01:aa: 26:a3:59:7e:c2:58:ea:37:00:d2:00:41:80:84:5d: eb:9b:0c:09:fd:32:5a:da:52:ea:78:d1:3f:ac:89: 1e:00:7d:f1:da:68:49:b2:61:84:0e:4f:2c:fb:69: 55:44:ed:66:43:62:f3:70:5c:f3:03:6a:a3:98:61: 1e:b6:1a:43:f4:39:0b:2f:a5:f5:f6:15:0b:05:ad: fd:d1:a5:68:44:74:59:41:29:ab:40:cb:dd:13:3b: ad:11:37:a3:24:65:c0:24:05:68:53:17:1a:14:28: 3b:83:fc:c0:fb:5d:21:f8:a6:80:1d:6b:74:29:fa: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C0:B0:69:A9:14:F9:E5:27:5F:FA:D2:A7:18:76:47:EA:D2:9C:77 X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qsCwaakU-eUnX_rSpxh2R-rSnHc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.247.84.0/23 Signature Algorithm: sha256WithRSAEncryption 06:a7:96:ff:9d:e6:1c:66:a9:af:46:04:4e:70:f4:c8:59:4a: 47:6b:b1:0b:f9:2b:07:55:0f:99:0a:63:b6:2d:bf:d1:ba:69: 0c:e1:e9:aa:ff:90:a0:2b:d1:6d:16:47:8e:2e:08:9d:04:c7: 70:06:7a:7c:55:8f:7c:33:97:39:5f:95:fd:53:f8:b3:68:89: 29:c9:f4:8e:88:8e:f3:d0:bf:fd:8d:20:2f:bd:b9:d6:45:9c: 63:46:b5:27:28:f1:06:d0:60:e4:ac:af:48:94:dc:95:69:02: 9c:1c:32:e7:66:cf:15:53:e9:4d:2d:8e:b4:51:a0:93:72:db: ec:5b:71:6a:08:52:45:be:88:f2:75:db:29:94:04:11:7b:d4: 86:23:b2:c7:47:5f:75:d5:6e:d4:84:a4:e8:88:90:69:40:b7: 07:8e:7e:99:e0:a6:31:b9:ca:0f:bc:d7:47:78:e4:0d:6b:02: 02:52:ce:a1:fb:a3:4a:76:09:4b:07:1f:01:75:c2:07:c6:57: b5:ab:0b:54:3f:11:0c:6a:97:06:b3:7c:ab:2a:3a:c8:60:55: ed:cc:c9:a9:25:f6:a8:4e:16:7b:6d:fb:49:25:58:84:05:c6: 4a:90:ad:7c:5c:8d:c3:cd:f6:e9:81:9d:51:1e:38:a4:66:11: 47:62:54:82 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNjAxMjYw NjU0MjZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEFBQzBCMDY5QTkxNEY5 RTUyNzVGRkFEMkE3MTg3NjQ3RUFEMjlDNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD5Qb/muevrbk8vO7Ei0qAVxpigR2xnPK2tg5/1i1E3JpXe/8Tm v4dwVV4gdljxl8Pk7Mpmz3Q/mZeosnFSqYm2MWGIyN2boGFsgvXDbkpf4zpbMfye Wq2wglO7D6Ft74RSpBQ3hxZB0dG6dy22LmFZ5RPUBAP7YJu7tVrIVNavfvGii5gB qiajWX7CWOo3ANIAQYCEXeubDAn9MlraUup40T+siR4AffHaaEmyYYQOTyz7aVVE 7WZDYvNwXPMDaqOYYR62GkP0OQsvpfX2FQsFrf3RpWhEdFlBKatAy90TO60RN6Mk ZcAkBWhTFxoUKDuD/MD7XSH4poAda3Qp+lgDAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUqsCwaakU+eUnX/rSpxh2R+rSnHcwHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvcXNDd2Fha1UtZVVu WF9yU3B4aDJSLXJTbkhjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAdr3VDANBgkqhkiG9w0BAQsFAAOCAQEABqeW/53mHGapr0YETnD0yFlKR2ux C/krB1UPmQpjti2/0bppDOHpqv+QoCvRbRZHji4InQTHcAZ6fFWPfDOXOV+V/VP4 s2iJKcn0joiO89C//Y0gL7251kWcY0a1JyjxBtBg5KyvSJTclWkCnBwy52bPFVPp TS2OtFGgk3Lb7FtxaghSRb6I8nXbKZQEEXvUhiOyx0dfddVu1ISk6IiQaUC3B45+ meCmMbnKD7zXR3jkDWsCAlLOofujSnYJSwcfAXXCB8ZXtasLVD8RDGqXBrN8qyo6 yGBV7czJqSX2qE4We237SSVYhAXGSpCtfFyNw8326YGdUR44pGYRR2JUgg== -----END CERTIFICATE-----Generated at Fri Feb 20 01:49:19 2026 by rpki-client