$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/xfZD-tVIT0pq7Bp13VfF5CRYmvw.roa File: xfZD-tVIT0pq7Bp13VfF5CRYmvw.roa (raw, json) Hash identifier: dALwqyjBUdwVle+qUQNQTDOuYrdy5Rb9aGIhuX+SCj4= Subject key identifier: C5:F6:43:FA:D5:48:4F:4A:6A:EC:1A:75:DD:57:C5:E4:24:58:9A:FC Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 230B Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/xfZD-tVIT0pq7Bp13VfF5CRYmvw.roa Signing time: Mon 26 Jan 2026 06:54:25 +0000 ROA not before: Mon 26 Jan 2026 06:54:25 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 139021 IP address blocks: 219.234.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8971 (0x230b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Jan 26 06:54:25 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=C5F643FAD5484F4A6AEC1A75DD57C5E424589AFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8a:03:64:f2:b3:d2:d6:40:89:bb:3f:ed:3b: de:62:b2:18:f0:91:d0:19:e7:c2:67:12:a4:fd:42: 17:b3:ca:7e:a2:65:e8:d1:ec:84:29:ad:21:4e:64: e1:33:97:5b:cc:e2:91:fd:76:97:4c:18:c3:90:48: 4c:40:5c:a9:a5:2b:2d:e2:db:e1:90:0f:1c:7a:12: a0:8f:27:83:ef:ed:3d:82:04:d8:9b:e5:65:62:c2: db:f4:fd:66:f9:08:29:b9:87:fc:1f:b1:90:5e:22: 07:be:e6:ab:7f:68:e1:14:b3:02:87:ac:bf:74:f8: f3:e2:23:d8:20:88:3d:57:2e:ec:bb:e9:5b:74:fc: c2:51:fb:1a:c5:0f:13:24:29:a8:31:c0:db:cb:71: 6f:b6:7d:34:e6:60:df:db:b6:ff:64:f7:19:86:9d: 93:4d:fe:20:0d:c9:9f:08:f0:92:0c:d0:e6:f7:94: 2b:3a:55:51:39:8b:8b:7e:34:c2:40:3d:98:3c:38: 1a:f3:29:e5:a3:9d:cf:70:dc:d6:7a:5f:2e:d0:e3: ad:b1:6d:fa:9e:fd:90:2d:8d:8e:7f:c9:17:29:37: 5d:b4:50:81:2f:e3:40:3b:4b:fa:e8:04:7c:d3:96: e5:4d:e1:28:cc:3d:a5:c9:83:2e:a6:0f:93:e1:72: 64:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F6:43:FA:D5:48:4F:4A:6A:EC:1A:75:DD:57:C5:E4:24:58:9A:FC X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/xfZD-tVIT0pq7Bp13VfF5CRYmvw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.234.8.0/21 Signature Algorithm: sha256WithRSAEncryption b2:7c:5b:36:03:65:ae:61:24:59:cb:52:38:24:41:31:8b:f4: de:43:12:71:21:d4:39:7d:52:10:67:d0:8b:47:5a:76:a2:fd: d1:c6:c5:92:0b:70:43:4f:83:c8:b8:79:53:1c:26:6a:de:d5: e6:9e:3e:a0:a7:a5:5c:41:0a:3b:75:1d:19:78:2b:7a:60:67: 2e:de:cf:aa:e1:de:12:f2:60:8b:d3:20:bf:9f:b9:5a:5f:2b: 10:55:ac:5e:7d:37:19:96:c1:26:31:94:ed:34:a2:49:03:cd: 3e:fc:43:dc:35:f0:a6:b0:70:45:58:7b:1e:a9:4f:f5:99:da: c3:9b:cc:b0:ed:2b:f8:a9:6f:ba:98:a6:ed:59:30:b4:14:16: 41:5f:b5:3d:f5:53:33:38:ba:e0:58:19:20:5b:88:73:bc:bf: 12:aa:db:48:9a:a2:05:45:59:59:0f:49:ad:cf:6f:4d:0b:54: 45:01:52:70:49:fe:43:bf:ae:0a:40:b1:db:0d:4b:12:41:ff: 57:6b:c8:39:c9:33:c9:fc:de:3c:c7:10:cf:f7:ae:b2:61:ed: 21:a6:97:d7:4c:40:a6:8a:3a:b2:46:9b:98:a7:4a:66:01:4a: 1a:2e:24:4f:9d:ac:d1:5a:78:d1:4f:df:d9:fb:d0:46:d1:28: 2c:ec:07:a2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIwswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNjAxMjYw NjU0MjVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEM1RjY0M0ZBRDU0ODRG NEE2QUVDMUE3NURENTdDNUU0MjQ1ODlBRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxigNk8rPS1kCJuz/tO95ishjwkdAZ58JnEqT9Qhezyn6iZejR 7IQprSFOZOEzl1vM4pH9dpdMGMOQSExAXKmlKy3i2+GQDxx6EqCPJ4Pv7T2CBNib 5WViwtv0/Wb5CCm5h/wfsZBeIge+5qt/aOEUswKHrL90+PPiI9ggiD1XLuy76Vt0 /MJR+xrFDxMkKagxwNvLcW+2fTTmYN/btv9k9xmGnZNN/iANyZ8I8JIM0Ob3lCs6 VVE5i4t+NMJAPZg8OBrzKeWjnc9w3NZ6Xy7Q462xbfqe/ZAtjY5/yRcpN120UIEv 40A7S/roBHzTluVN4SjMPaXJgy6mD5PhcmQVAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUxfZD+tVIT0pq7Bp13VfF5CRYmvwwHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkveGZaRC10VklUMHBx N0JwMTNWZkY1Q1JZbXZ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAsnxbNgNlrmEkWctSOCRBMYv03kMS cSHUOX1SEGfQi0dadqL90cbFkgtwQ0+DyLh5Uxwmat7V5p4+oKelXEEKO3UdGXgr emBnLt7PquHeEvJgi9Mgv5+5Wl8rEFWsXn03GZbBJjGU7TSiSQPNPvxD3DXwprBw RVh7HqlP9Znaw5vMsO0r+Klvupim7VkwtBQWQV+1PfVTMzi64FgZIFuIc7y/Eqrb SJqiBUVZWQ9Jrc9vTQtURQFScEn+Q7+uCkCx2w1LEkH/V2vIOckzyfzePMcQz/eu smHtIaaX10xApoo6skabmKdKZgFKGi4kT52s0Vp40U/f2fvQRtEoLOwHog== -----END CERTIFICATE-----Generated at Fri Feb 20 01:49:16 2026 by rpki-client