$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/E5rrpTcp4QpOr2uPHGEhn1Hlmbs.roa File: E5rrpTcp4QpOr2uPHGEhn1Hlmbs.roa (raw, json) Hash identifier: Y+H659Wn505VmvMUt+ex0RXKT191zw2X4BeCi4C38jo= Subject key identifier: 13:9A:EB:A5:37:29:E1:0A:4E:AF:6B:8F:1C:61:21:9F:51:E5:99:BB Certificate issuer: /CN=FB653B26775041687D362D4CEF768E58F99EC075 Certificate serial: 0EE4 Authority key identifier: FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/E5rrpTcp4QpOr2uPHGEhn1Hlmbs.roa Signing time: Mon 26 Jan 2026 06:53:49 +0000 ROA not before: Mon 26 Jan 2026 06:53:49 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 152092 IP address blocks: 103.97.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3812 (0xee4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB653B26775041687D362D4CEF768E58F99EC075 Validity Not Before: Jan 26 06:53:49 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=139AEBA53729E10A4EAF6B8F1C61219F51E599BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:21:a3:82:0f:ed:50:2b:0b:04:c6:be:da: fe:cd:4d:8d:88:e9:db:64:c1:f6:24:f5:40:82:2c: 87:c6:79:dc:73:36:8f:f4:d4:cc:a4:35:8a:1b:bd: c6:80:cd:42:6b:0a:f8:1d:d7:95:42:dd:27:d6:c3: 99:fe:d2:69:c7:b7:8c:83:57:08:81:76:8d:ab:c8: a1:bd:16:51:a4:94:67:de:e3:95:ad:19:6f:fc:80: 9d:4b:6d:d8:d6:2c:75:34:af:10:30:95:55:97:7d: bd:50:be:b8:56:46:85:b8:44:0d:20:b9:66:25:d1: ed:90:52:34:53:db:9e:13:c6:ce:7a:24:0b:1a:85: 56:50:fc:94:e1:f1:73:3d:e6:ca:b6:9c:81:7d:d1: 66:bf:f2:1f:11:45:eb:f6:74:b4:e1:3b:7e:c6:69: 6c:b8:cb:ed:cd:de:50:83:d8:0d:75:bc:a0:62:f1: 0a:35:f9:3b:84:4a:61:1c:d3:65:06:cc:ac:4a:72: d5:c0:8b:fd:f8:ac:35:60:b9:fd:5f:80:ca:bf:a0: 68:72:f8:d3:eb:b2:c0:b6:b9:a1:ba:ed:b4:23:2b: d5:79:1b:e8:8b:f5:f7:64:bc:4a:1e:79:07:17:f4: 67:0c:ae:b9:49:1d:e3:16:15:60:c1:a6:f8:5e:e7: 25:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9A:EB:A5:37:29:E1:0A:4E:AF:6B:8F:1C:61:21:9F:51:E5:99:BB X509v3 Authority Key Identifier: keyid:FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/E5rrpTcp4QpOr2uPHGEhn1Hlmbs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.97.58.0/24 Signature Algorithm: sha256WithRSAEncryption c1:e5:a7:2a:96:44:0a:36:cf:47:9c:db:a2:8d:4b:80:a0:69: cf:6b:f3:f0:8e:83:d2:7c:c2:72:cb:b7:a7:30:16:1d:2b:e1: 60:76:39:ef:d0:e8:61:27:70:e5:d1:82:5f:00:eb:6d:85:1c: e6:7b:19:e7:97:14:f5:5b:c0:ac:1d:ae:38:bc:4b:db:68:51: dc:8e:a1:a9:66:0d:19:38:43:21:06:bb:3b:fa:f7:55:eb:79: f5:e7:34:d1:79:00:b1:47:65:b4:46:ea:ce:34:3e:b3:03:43: e5:c8:e1:7b:ba:cd:87:36:1d:ab:11:46:34:ee:76:74:2f:dc: c9:f0:14:10:fa:4c:a1:1b:40:41:7c:85:9b:a1:35:ed:d1:cf: 7e:6e:a2:cd:c1:9b:91:ce:c6:d2:73:59:16:96:4e:6b:dd:44: 1d:cf:a7:74:d5:6e:63:fd:d0:7d:a2:7f:a4:fc:fc:f4:ed:1d: 6d:76:25:78:5d:b5:88:95:03:46:8f:9a:59:93:43:83:46:fe: 96:18:38:ed:59:d7:7f:d2:ba:a1:7a:f0:22:d2:3f:78:9f:d2: e0:07:9f:44:19:6c:02:d0:0d:d2:6f:08:51:e1:eb:f5:5c:f4: 50:09:47:15:51:1d:a1:db:ea:f4:c7:cd:a3:cb:c0:c3:8d:eb: 0c:f7:1e:2e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDuQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkI2 NTNCMjY3NzUwNDE2ODdEMzYyRDRDRUY3NjhFNThGOTlFQzA3NTAeFw0yNjAxMjYw NjUzNDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDEzOUFFQkE1MzcyOUUx MEE0RUFGNkI4RjFDNjEyMTlGNTFFNTk5QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7RiGjgg/tUCsLBMa+2v7NTY2I6dtkwfYk9UCCLIfGedxzNo/0 1MykNYobvcaAzUJrCvgd15VC3SfWw5n+0mnHt4yDVwiBdo2ryKG9FlGklGfe45Wt GW/8gJ1LbdjWLHU0rxAwlVWXfb1QvrhWRoW4RA0guWYl0e2QUjRT254Txs56JAsa hVZQ/JTh8XM95sq2nIF90Wa/8h8RRev2dLThO37GaWy4y+3N3lCD2A11vKBi8Qo1 +TuESmEc02UGzKxKctXAi/34rDVguf1fgMq/oGhy+NPrssC2uaG67bQjK9V5G+iL 9fdkvEoeeQcX9GcMrrlJHeMWFWDBpvhe5yWTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUE5rrpTcp4QpOr2uPHGEhn1HlmbswHwYDVR0jBBgwFoAU+2U7JndQQWh9Ni1M 73aOWPmewHUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUz Ny8tMlU3Sm5kUVFXaDlOaTFNNzNhT1dQbWV3SFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy0yVTdKbmRRUVdoOU5pMU03M2FPV1BtZXdIVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MzcvRTVycnBUY3A0UXBP cjJ1UEhHRWhuMUhsbWJzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdhOjANBgkqhkiG9w0BAQsFAAOCAQEAweWnKpZECjbPR5zboo1LgKBpz2vz 8I6D0nzCcsu3pzAWHSvhYHY579DoYSdw5dGCXwDrbYUc5nsZ55cU9VvArB2uOLxL 22hR3I6hqWYNGThDIQa7O/r3Vet59ec00XkAsUdltEbqzjQ+swND5cjhe7rNhzYd qxFGNO52dC/cyfAUEPpMoRtAQXyFm6E17dHPfm6izcGbkc7G0nNZFpZOa91EHc+n dNVuY/3QfaJ/pPz89O0dbXYleF21iJUDRo+aWZNDg0b+lhg47VnXf9K6oXrwItI/ eJ/S4AefRBlsAtAN0m8IUeHr9Vz0UAlHFVEdodvq9MfNo8vAw43rDPceLg== -----END CERTIFICATE-----Generated at Fri Feb 20 03:48:23 2026 by rpki-client