$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/27bgjmmwbF59YVqphftbVMyneb8.roa File: 27bgjmmwbF59YVqphftbVMyneb8.roa (raw, json) Hash identifier: 1uD3TZNTINDyYUqPmv22HJqMul/KVpchJuhXdJl2eeQ= Subject key identifier: DB:B6:E0:8E:69:B0:6C:5E:7D:61:5A:A9:85:FB:5B:54:CC:A7:79:BF Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 292D Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/27bgjmmwbF59YVqphftbVMyneb8.roa Signing time: Mon 26 Jan 2026 06:52:25 +0000 ROA not before: Mon 26 Jan 2026 06:52:25 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 4538 IP address blocks: 2406:3340:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10541 (0x292d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Jan 26 06:52:25 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=DBB6E08E69B06C5E7D615AA985FB5B54CCA779BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bd:68:b7:c6:ec:45:14:6e:90:37:da:cf:cc: f5:36:e3:a6:39:60:a0:aa:7c:92:ee:96:b2:fd:a6: 1a:11:e8:49:2a:d8:72:a0:0c:bb:10:b6:6a:9e:8a: fc:34:1c:8c:88:40:66:c2:35:5b:1f:ac:cf:30:b1: 40:a6:49:c6:ad:6a:ea:d9:2d:72:cf:e3:64:58:4e: 53:f9:3b:6e:5d:38:1d:64:08:f5:9a:06:6b:27:e3: 91:47:87:15:30:a4:ee:42:b0:12:75:b0:22:9e:94: ab:08:93:2e:73:79:00:1e:9a:1c:4a:4d:de:0d:bd: 71:ea:30:e8:16:8e:46:a8:74:96:0c:39:b7:f0:56: ff:dd:9d:0e:21:b8:7f:97:a7:c2:77:b6:14:98:bb: 3d:18:45:7b:6b:0a:b1:59:95:ba:bb:86:e4:3c:b4: c2:c9:13:ee:be:ca:06:69:b0:4a:73:2d:72:a7:8c: 0a:6f:dc:a3:9f:6c:1a:23:60:a8:b9:0f:af:6a:c6: e9:e8:a4:7e:5b:57:9d:ab:2b:72:ec:14:bf:dc:e3: 0a:a6:56:76:79:43:2a:37:ee:38:ad:d3:bc:31:eb: 84:2a:9a:8f:df:50:77:f0:20:80:42:0b:a0:57:f1: da:d1:90:a1:04:f2:f7:c6:d0:63:50:0c:0d:7d:f4: ff:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B6:E0:8E:69:B0:6C:5E:7D:61:5A:A9:85:FB:5B:54:CC:A7:79:BF X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/27bgjmmwbF59YVqphftbVMyneb8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3340:3000::/36 Signature Algorithm: sha256WithRSAEncryption 8e:3b:01:c3:70:3f:90:78:54:52:54:8d:50:1d:c4:f3:18:dd: 05:62:d7:09:7d:7f:33:c0:ce:5d:1e:f2:ae:ec:9d:d3:9e:7e: a0:63:13:af:ae:b2:90:0f:f3:af:e0:e4:c9:7f:ba:dc:e2:9c: c6:b0:8c:85:2b:63:26:d6:de:40:4e:41:0c:5f:7e:58:c5:e9: a5:2a:7f:fa:e2:27:c8:2a:20:7e:01:06:4a:97:e4:0d:59:15: b2:00:2b:55:93:48:5d:15:02:b9:60:2f:37:f3:6c:3d:df:ba: b7:7c:76:d4:d5:7e:47:17:0b:32:ca:99:ec:2e:4d:88:56:a5: 22:93:a0:d8:2d:9e:5c:a2:28:c4:ad:a2:5b:b4:07:4b:0f:46: a0:a3:60:53:c1:5f:bb:6e:a9:3f:c8:37:df:85:c9:99:3f:e5: 9a:b5:0e:e0:eb:25:70:95:66:82:88:66:84:81:07:b3:2d:4e: 00:b7:c4:48:ff:cb:f4:97:74:f4:bb:a2:80:2e:fc:ec:f8:7f: 0e:71:15:92:d6:49:f0:49:21:f1:12:63:a2:df:cc:f4:b5:90: 41:68:b3:57:b6:27:9f:5c:f8:b4:37:3c:07:fb:89:0a:08:62: 77:7a:1e:97:c6:6c:6a:8a:e3:0b:93:80:34:4c:89:fd:97:54: fe:06:df:80 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICKS0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNjAxMjYw NjUyMjVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKERCQjZFMDhFNjlCMDZD NUU3RDYxNUFBOTg1RkI1QjU0Q0NBNzc5QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDivWi3xuxFFG6QN9rPzPU246Y5YKCqfJLulrL9phoR6Ekq2HKg DLsQtmqeivw0HIyIQGbCNVsfrM8wsUCmScataurZLXLP42RYTlP5O25dOB1kCPWa Bmsn45FHhxUwpO5CsBJ1sCKelKsIky5zeQAemhxKTd4NvXHqMOgWjkaodJYMObfw Vv/dnQ4huH+Xp8J3thSYuz0YRXtrCrFZlbq7huQ8tMLJE+6+ygZpsEpzLXKnjApv 3KOfbBojYKi5D69qxunopH5bV52rK3LsFL/c4wqmVnZ5Qyo37jit07wx64Qqmo/f UHfwIIBCC6BX8drRkKEE8vfG0GNQDA199P8nAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQU27bgjmmwbF59YVqphftbVMyneb8wHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvMjdiZ2ptbXdiRjU5 WVZxcGhmdGJWTXluZWI4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGBCQGM0AwMA0GCSqGSIb3DQEBCwUAA4IBAQCOOwHDcD+QeFRSVI1QHcTzGN0F YtcJfX8zwM5dHvKu7J3Tnn6gYxOvrrKQD/Ov4OTJf7rc4pzGsIyFK2Mm1t5ATkEM X35YxemlKn/64ifIKiB+AQZKl+QNWRWyACtVk0hdFQK5YC8382w937q3fHbU1X5H FwsyypnsLk2IVqUik6DYLZ5coijEraJbtAdLD0ago2BTwV+7bqk/yDffhcmZP+Wa tQ7g6yVwlWaCiGaEgQezLU4At8RI/8v0l3T0u6KALvzs+H8OcRWS1knwSSHxEmOi 38z0tZBBaLNXtiefXPi0NzwH+4kKCGJ3eh6XxmxqiuMLk4A0TIn9l1T+Bt+A -----END CERTIFICATE-----Generated at Fri Feb 20 03:29:17 2026 by rpki-client