$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2894/_vFV8ryPmXcDJSKKYiefz7qeDoo.roa File: _vFV8ryPmXcDJSKKYiefz7qeDoo.roa (raw, json) Hash identifier: nDSiEHblnogOTH0vtmprpOOXzeXtDGxFQg1r57ivxU4= Subject key identifier: FE:F1:55:F2:BC:8F:99:77:03:25:22:8A:62:27:9F:CF:BA:9E:0E:8A Certificate issuer: /CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8 Certificate serial: 1C10 Authority key identifier: 83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/_vFV8ryPmXcDJSKKYiefz7qeDoo.roa Signing time: Sun 15 Feb 2026 03:16:47 +0000 ROA not before: Sun 15 Feb 2026 03:16:47 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 21859 IP address blocks: 116.199.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Feb 2026 23:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7184 (0x1c10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8 Validity Not Before: Feb 15 03:16:47 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=FEF155F2BC8F99770325228A62279FCFBA9E0E8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:a1:86:13:31:9b:91:fe:c1:e1:c5:e9:0d: 8d:05:63:68:37:be:38:7e:c0:9b:fc:ad:a6:af:03: 48:c3:62:83:1c:3d:4a:7c:29:0b:df:8a:cb:19:25: 42:ac:0c:3e:ca:dc:fd:ba:b1:83:21:5b:2f:d6:e8: 6d:06:5a:af:80:7b:d6:ae:c4:8f:88:22:ff:14:2c: 45:9e:4f:cc:36:c1:8c:c8:51:a9:b2:98:8a:a2:07: 55:14:03:e6:b0:c9:87:66:b0:5e:6c:1c:b0:85:e8: 2e:40:48:1c:42:9a:96:81:a8:f2:75:dc:6c:25:86: b9:a9:14:ff:68:23:b8:2c:6d:9e:93:b0:51:54:de: c8:91:d2:0e:a0:7d:44:4b:92:8b:e4:e2:28:56:62: 66:02:3c:fc:28:a2:09:84:7b:89:ff:c3:d4:8f:09: a0:7f:50:68:e1:6e:21:70:e0:c9:70:da:ac:36:25: ec:b4:67:a0:8e:dd:f5:54:af:6d:dc:4c:c9:5a:51: 3d:87:3a:5f:a0:a2:f0:b5:f1:b4:e8:ec:3e:29:75: 30:eb:23:88:c8:27:33:d5:73:4f:8d:83:41:ad:2b: bc:2e:98:9b:f9:67:d7:68:e4:94:14:68:74:19:e1: bd:ad:24:8c:e6:95:b7:da:87:20:50:32:28:6c:52: f0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F1:55:F2:BC:8F:99:77:03:25:22:8A:62:27:9F:CF:BA:9E:0E:8A X509v3 Authority Key Identifier: keyid:83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/_vFV8ryPmXcDJSKKYiefz7qeDoo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 116.199.152.0/22 Signature Algorithm: sha256WithRSAEncryption 14:d5:dc:03:25:b9:ff:13:37:27:c8:e5:ab:73:08:5d:af:72: 39:cc:06:22:a4:d9:46:2e:d4:c1:2b:5f:45:03:72:11:7d:2f: e9:8d:f6:d6:48:37:61:97:33:a1:91:95:25:2a:9b:4d:1c:4d: 5e:ef:81:27:75:50:4d:80:d2:60:38:42:9c:ee:3a:ce:17:42: f6:17:e9:0d:8e:af:21:9a:28:5b:fe:89:e7:d0:5b:3a:46:61: b8:15:d7:e7:46:f7:82:b5:9e:cb:08:dc:2f:d9:cd:cb:62:f4: 1d:a6:95:5a:85:7c:02:ad:50:b8:4c:7c:cd:cc:33:df:c5:13: 74:6c:85:b1:8e:a9:1c:ee:ef:2a:16:5d:5e:f3:86:d8:6a:d0: 51:21:ff:7d:04:45:52:d7:24:ce:ef:2c:52:38:2d:e6:9e:e4: 7c:aa:f4:9f:f9:ac:20:05:36:b0:2b:15:ea:13:00:48:71:35: 8d:84:16:03:db:a8:c3:08:f3:c1:03:5d:0c:62:54:63:4a:51: 90:92:42:1a:18:fd:00:7e:68:5e:cb:ec:3a:cd:84:a9:84:7f: 86:5e:c1:4e:92:bf:71:c8:ee:ef:f5:6f:7c:0e:e4:73:8e:0f: 39:de:31:05:e6:ea:49:51:fe:ea:fc:af:e3:e7:08:69:37:5a: fa:97:20:a0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODM5 RjU1N0I5RjlGMkY2Q0RENzVBRkI0QUJBOEEyQTc5NkM2MTBFODAeFw0yNjAyMTUw MzE2NDdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEZFRjE1NUYyQkM4Rjk5 NzcwMzI1MjI4QTYyMjc5RkNGQkE5RTBFOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTsKGGEzGbkf7B4cXpDY0FY2g3vjh+wJv8raavA0jDYoMcPUp8 KQvfissZJUKsDD7K3P26sYMhWy/W6G0GWq+Ae9auxI+IIv8ULEWeT8w2wYzIUamy mIqiB1UUA+awyYdmsF5sHLCF6C5ASBxCmpaBqPJ13GwlhrmpFP9oI7gsbZ6TsFFU 3siR0g6gfURLkovk4ihWYmYCPPwoogmEe4n/w9SPCaB/UGjhbiFw4Mlw2qw2Jey0 Z6CO3fVUr23cTMlaUT2HOl+govC18bTo7D4pdTDrI4jIJzPVc0+Ng0GtK7wumJv5 Z9do5JQUaHQZ4b2tJIzmlbfahyBQMihsUvBhAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU/vFV8ryPmXcDJSKKYiefz7qeDoowHwYDVR0jBBgwFoAUg59Ve5+fL2zdda+0 q6iip5bGEOgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5 NC9nNTlWZTUtZkwyemRkYS0wcTZpaXA1YkdFT2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2c1OVZlNS1mTDJ6ZGRhLTBxNmlpcDViR0VPZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTQvX3ZGVjhyeVBtWGNE SlNLS1lpZWZ6N3FlRG9vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAnTHmDANBgkqhkiG9w0BAQsFAAOCAQEAFNXcAyW5/xM3J8jlq3MIXa9yOcwG IqTZRi7UwStfRQNyEX0v6Y321kg3YZczoZGVJSqbTRxNXu+BJ3VQTYDSYDhCnO46 zhdC9hfpDY6vIZooW/6J59BbOkZhuBXX50b3grWeywjcL9nNy2L0HaaVWoV8Aq1Q uEx8zcwz38UTdGyFsY6pHO7vKhZdXvOG2GrQUSH/fQRFUtckzu8sUjgt5p7kfKr0 n/msIAU2sCsV6hMASHE1jYQWA9uowwjzwQNdDGJUY0pRkJJCGhj9AH5oXsvsOs2E qYR/hl7BTpK/ccju7/VvfA7kc44POd4xBebqSVH+6vyv4+cIaTda+pcgoA== -----END CERTIFICATE-----Generated at Sun Feb 22 22:00:54 2026 by rpki-client