$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2522/a33rVkqEkwXEVLEyvvpVWR84y3M.roa File: a33rVkqEkwXEVLEyvvpVWR84y3M.roa (raw, json) Hash identifier: /TEQim2wP0MTrmnygOnE9S5AlRQLjub1jv2IHHNQ09I= Subject key identifier: 6B:7D:EB:56:4A:84:93:05:C4:54:B1:32:BE:FA:55:59:1F:38:CB:73 Certificate issuer: /CN=4087DAB67172836B082075CE18BE5E5FA45D5E95 Certificate serial: 231B Authority key identifier: 40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/a33rVkqEkwXEVLEyvvpVWR84y3M.roa Signing time: Mon 26 Jan 2026 06:56:00 +0000 ROA not before: Mon 26 Jan 2026 06:56:00 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 131567 IP address blocks: 103.96.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 07:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8987 (0x231b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4087DAB67172836B082075CE18BE5E5FA45D5E95 Validity Not Before: Jan 26 06:56:00 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=6B7DEB564A849305C454B132BEFA55591F38CB73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:ae:9e:d1:0a:e4:f1:b9:bb:5c:29:6d:60: e8:d1:41:7b:e1:88:44:91:09:08:83:cd:12:a3:50: ae:d8:9e:1c:f2:c7:0c:19:be:c3:c3:40:fe:ca:95: 38:58:0c:97:5e:7a:ad:8b:45:5c:85:3c:74:2e:2c: 14:8f:84:14:52:f1:32:2e:23:0c:0a:b4:8f:92:5c: 4c:11:64:95:16:fa:41:b7:19:25:33:95:7c:da:fa: 56:b6:8a:75:48:72:b5:e5:b1:f6:e0:0d:cb:1f:05: 1a:b2:78:88:86:7a:82:89:08:35:a3:78:30:80:b1: 99:38:46:b1:01:18:80:25:6b:36:75:a8:6f:1b:e6: 35:1a:8c:4e:13:1e:3b:77:13:73:cc:ba:58:84:7b: 04:bd:51:20:2c:d7:64:69:b0:0b:ff:fd:cb:9b:50: cb:35:27:e8:f2:36:fc:e1:4b:ee:4a:35:19:e4:f3: 97:c1:0f:a8:02:e3:c7:39:75:76:49:fb:d4:39:ff: 38:45:37:f0:0f:13:d5:7a:fc:8f:ef:c0:fd:49:01: 73:fe:b7:b7:70:e3:14:90:d7:a0:32:62:e8:af:d8: a3:23:eb:f1:74:61:7c:bb:8f:13:ac:d5:ef:b3:2d: 5f:e6:ff:62:59:4e:e1:b4:a6:ef:2a:84:c9:57:4a: 17:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7D:EB:56:4A:84:93:05:C4:54:B1:32:BE:FA:55:59:1F:38:CB:73 X509v3 Authority Key Identifier: keyid:40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/a33rVkqEkwXEVLEyvvpVWR84y3M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.96.10.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:14:52:b8:57:a5:be:03:9a:a1:c5:fd:7d:c4:5d:1e:1f:04: f6:65:b5:c6:fb:ec:11:c3:fd:74:db:55:4b:25:d8:c9:3d:c2: 58:a5:be:80:54:be:02:7c:1a:cb:20:ac:46:e9:6d:45:15:d1: e9:3c:b4:69:83:2c:c4:df:4c:60:ed:04:49:8c:ae:74:b2:c9: ec:f3:d7:11:f7:54:fc:4d:79:0d:42:e8:5f:47:a4:dd:fe:36: d1:b5:fc:e0:b9:28:3f:29:b7:b2:2d:d6:67:14:93:a6:d8:36: 72:57:71:95:db:45:b2:f0:e8:0a:f4:28:ad:35:01:04:ef:51: 8b:27:ec:a1:bf:f5:bd:ea:08:67:18:3c:37:e7:10:6f:5e:91: 0c:0a:e3:5c:e2:9b:a8:1a:da:55:83:8f:d3:11:76:20:48:c5: 1e:00:13:7d:78:6c:90:0e:6e:a9:b3:aa:b6:d8:a5:d0:5a:6e: 81:d4:f5:92:f3:2b:f0:07:7f:28:7b:c3:0c:ee:23:6c:fa:8b: 93:66:88:92:08:52:5b:4a:8f:f9:58:0b:61:7b:9f:dd:73:aa: db:05:17:4d:67:aa:96:4d:b3:8c:ad:56:b4:b5:47:68:9c:c5: bd:ab:b5:1e:c5:c6:f9:5c:89:8f:07:72:0f:84:a0:1b:91:87: 48:4c:7f:86 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIxswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA4 N0RBQjY3MTcyODM2QjA4MjA3NUNFMThCRTVFNUZBNDVENUU5NTAeFw0yNjAxMjYw NjU2MDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDZCN0RFQjU2NEE4NDkz MDVDNDU0QjEzMkJFRkE1NTU5MUYzOENCNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuma6e0Qrk8bm7XCltYOjRQXvhiESRCQiDzRKjUK7YnhzyxwwZ vsPDQP7KlThYDJdeeq2LRVyFPHQuLBSPhBRS8TIuIwwKtI+SXEwRZJUW+kG3GSUz lXza+la2inVIcrXlsfbgDcsfBRqyeIiGeoKJCDWjeDCAsZk4RrEBGIAlazZ1qG8b 5jUajE4THjt3E3PMuliEewS9USAs12RpsAv//cubUMs1J+jyNvzhS+5KNRnk85fB D6gC48c5dXZJ+9Q5/zhFN/APE9V6/I/vwP1JAXP+t7dw4xSQ16AyYuiv2KMj6/F0 YXy7jxOs1e+zLV/m/2JZTuG0pu8qhMlXShdrAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUa33rVkqEkwXEVLEyvvpVWR84y3MwHwYDVR0jBBgwFoAUQIfatnFyg2sIIHXO GL5eX6RdXpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy Mi9RSWZhdG5GeWcyc0lJSFhPR0w1ZVg2UmRYcFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1FJZmF0bkZ5ZzJzSUlIWE9HTDVlWDZSZFhwVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MjIvYTMzclZrcUVrd1hF VkxFeXZ2cFZXUjg0eTNNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdgCjANBgkqhkiG9w0BAQsFAAOCAQEADRRSuFelvgOaocX9fcRdHh8E9mW1 xvvsEcP9dNtVSyXYyT3CWKW+gFS+AnwayyCsRultRRXR6Ty0aYMsxN9MYO0ESYyu dLLJ7PPXEfdU/E15DULoX0ek3f420bX84LkoPym3si3WZxSTptg2cldxldtFsvDo CvQorTUBBO9Riyfsob/1veoIZxg8N+cQb16RDArjXOKbqBraVYOP0xF2IEjFHgAT fXhskA5uqbOqttil0FpugdT1kvMr8Ad/KHvDDO4jbPqLk2aIkghSW0qP+VgLYXuf 3XOq2wUXTWeqlk2zjK1WtLVHaJzFvau1HsXG+VyJjwdyD4SgG5GHSEx/hg== -----END CERTIFICATE-----Generated at Mon Feb 23 06:08:33 2026 by rpki-client