
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2841/ezOO06_iD-bkUiK6a-jQQGyReTA.roa
File: ezOO06_iD-bkUiK6a-jQQGyReTA.roa (raw, json)
Hash identifier: ffFfC37zZTiTuY/DyHhesVn6JkVaEASjK4B14hmOzoM=
Subject key identifier: 7B:33:8E:D3:AF:E2:0F:E6:E4:52:22:BA:6B:E8:D0:40:6C:91:79:30
Certificate issuer: /CN=51A5666D323BF842F6044CE71059773E2271B013
Certificate serial: 22FC
Authority key identifier: 51:A5:66:6D:32:3B:F8:42:F6:04:4C:E7:10:59:77:3E:22:71:B0:13
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/ezOO06_iD-bkUiK6a-jQQGyReTA.roa
Signing time: Mon 26 Jan 2026 06:53:53 +0000
ROA not before: Mon 26 Jan 2026 06:53:53 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 137571
IP address blocks: 103.126.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 07:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8956 (0x22fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51A5666D323BF842F6044CE71059773E2271B013
Validity
Not Before: Jan 26 06:53:53 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=7B338ED3AFE20FE6E45222BA6BE8D0406C917930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:4c:dd:90:91:e5:52:80:46:c3:a3:b3:13:
bb:95:22:96:6b:69:e0:76:0e:ed:c9:82:87:74:10:
e4:b0:76:4c:00:90:d8:c9:a3:67:ca:c7:3f:e7:c3:
3f:f1:ee:ce:37:76:fb:81:f2:d1:23:13:89:e0:dc:
20:f9:1b:92:6a:93:e0:9e:72:6c:47:93:6d:a0:c4:
40:a1:74:5a:21:6a:e9:10:b3:40:e2:fb:2e:55:b9:
3c:b3:d4:21:bd:35:e7:ba:a3:10:6f:f2:53:cd:05:
3b:cf:df:7d:93:cb:87:24:2b:d6:22:05:43:5d:cd:
c0:2f:f7:05:7d:65:6a:15:8a:d0:a1:f0:7c:19:f6:
78:07:92:2a:46:d2:ec:27:84:13:21:90:40:28:f4:
67:fc:76:48:e8:00:8f:50:39:d8:e6:57:d1:e0:42:
88:05:16:d8:fd:fe:61:38:f9:eb:29:5f:67:de:e9:
b6:93:3f:c1:e0:d3:83:64:e1:ea:43:c6:04:ba:e5:
06:57:16:5e:32:1c:1b:7f:b9:cf:27:45:91:17:bf:
67:7f:27:4a:a5:5f:4e:a7:d7:b6:21:8b:bd:98:1c:
59:0c:3d:ad:11:c5:a6:eb:08:d8:2e:80:c2:db:0e:
96:d7:13:fa:3f:65:12:25:60:6e:9d:cd:d8:2b:d3:
be:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:33:8E:D3:AF:E2:0F:E6:E4:52:22:BA:6B:E8:D0:40:6C:91:79:30
X509v3 Authority Key Identifier:
keyid:51:A5:66:6D:32:3B:F8:42:F6:04:4C:E7:10:59:77:3E:22:71:B0:13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/ezOO06_iD-bkUiK6a-jQQGyReTA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.102.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ed:5b:a6:4b:6a:22:d1:d8:19:f1:f5:5c:0a:11:c1:74:ec:
36:c0:59:e8:29:d7:4f:78:17:6b:a9:6d:3f:9c:a3:38:6d:d1:
08:46:98:c8:59:57:fc:4c:5e:e5:ed:fc:24:f1:a3:9b:8f:b3:
82:4b:29:bf:fd:5d:a9:98:62:71:c5:1b:53:fa:97:46:1b:fd:
31:74:15:23:69:91:75:aa:dc:74:55:63:71:e1:63:fe:16:d8:
86:3f:19:2e:48:a1:72:b9:df:3d:1b:1d:3b:e4:00:03:76:9d:
c1:41:13:4b:b1:d9:16:4a:be:f5:30:3c:4a:d2:3b:c1:67:96:
f4:cb:d2:bc:02:fa:e9:a4:7e:ba:e6:20:3b:13:5b:80:84:7c:
b5:62:b5:5a:4b:6b:fc:6f:a0:df:a5:90:1c:94:08:f0:04:e7:
10:30:05:50:22:7a:0e:72:87:48:8f:6a:65:9c:d0:38:c2:f9:
db:f0:5f:5c:3e:20:f6:f1:8f:83:08:f8:66:86:61:ec:fc:0f:
f3:a1:03:7a:55:c1:ec:1e:87:35:de:63:4e:a1:38:2a:1e:9a:
84:99:e7:9b:9f:99:2e:ea:58:12:b0:07:2e:92:9a:5a:d4:53:
e9:a3:2b:18:26:ba:f1:2c:33:a5:81:b1:2c:74:a8:e1:de:dc:
52:62:6a:21
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICIvwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTFB
NTY2NkQzMjNCRjg0MkY2MDQ0Q0U3MTA1OTc3M0UyMjcxQjAxMzAeFw0yNjAxMjYw
NjUzNTNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDdCMzM4RUQzQUZFMjBG
RTZFNDUyMjJCQTZCRThEMDQwNkM5MTc5MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxUEzdkJHlUoBGw6OzE7uVIpZraeB2Du3Jgod0EOSwdkwAkNjJ
o2fKxz/nwz/x7s43dvuB8tEjE4ng3CD5G5Jqk+CecmxHk22gxEChdFohaukQs0Di
+y5VuTyz1CG9Nee6oxBv8lPNBTvP332Ty4ckK9YiBUNdzcAv9wV9ZWoVitCh8HwZ
9ngHkipG0uwnhBMhkEAo9Gf8dkjoAI9QOdjmV9HgQogFFtj9/mE4+espX2fe6baT
P8Hg04Nk4epDxgS65QZXFl4yHBt/uc8nRZEXv2d/J0qlX06n17Yhi72YHFkMPa0R
xabrCNgugMLbDpbXE/o/ZRIlYG6dzdgr074LAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUezOO06/iD+bkUiK6a+jQQGyReTAwHwYDVR0jBBgwFoAUUaVmbTI7+EL2BEzn
EFl3PiJxsBMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg0
MS9VYVZtYlRJNy1FTDJCRXpuRUZsM1BpSnhzQk0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1VhVm1iVEk3LUVMMkJFem5FRmwzUGlKeHNCTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4NDEvZXpPTzA2X2lELWJr
VWlLNmEtalFRR3lSZVRBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGd+ZjANBgkqhkiG9w0BAQsFAAOCAQEAeO1bpktqItHYGfH1XAoRwXTsNsBZ
6CnXT3gXa6ltP5yjOG3RCEaYyFlX/Exe5e38JPGjm4+zgkspv/1dqZhiccUbU/qX
Rhv9MXQVI2mRdarcdFVjceFj/hbYhj8ZLkihcrnfPRsdO+QAA3adwUETS7HZFkq+
9TA8StI7wWeW9MvSvAL66aR+uuYgOxNbgIR8tWK1Wktr/G+g36WQHJQI8ATnEDAF
UCJ6DnKHSI9qZZzQOML52/BfXD4g9vGPgwj4ZoZh7PwP86EDelXB7B6HNd5jTqE4
Kh6ahJnnm5+ZLupYErAHLpKaWtRT6aMrGCa68SwzpYGxLHSo4d7cUmJqIQ==
-----END CERTIFICATE-----
Generated at Mon Feb 23 06:07:07 2026 by rpki-client