$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/AMsZswWK7O-X-DZlVodR1j6bKgE.roa File: AMsZswWK7O-X-DZlVodR1j6bKgE.roa (raw, json) Hash identifier: gZ/vAOiZ4ghzLpY/d54TAnLwdYCKR44e6XsJZDWHOuI= Subject key identifier: 00:CB:19:B3:05:8A:EC:EF:97:F8:36:65:56:87:51:D6:3E:9B:2A:01 Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 292C Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AMsZswWK7O-X-DZlVodR1j6bKgE.roa Signing time: Mon 26 Jan 2026 06:52:25 +0000 ROA not before: Mon 26 Jan 2026 06:52:25 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 4538 IP address blocks: 2406:3340:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10540 (0x292c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Jan 26 06:52:25 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=00CB19B3058AECEF97F83665568751D63E9B2A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:82:8b:5c:3c:70:39:24:dd:79:22:8d:96: 27:8d:3d:66:c4:95:9d:d5:dd:53:c4:13:b3:34:fb: bd:8a:de:8f:1b:fe:63:b9:70:2e:ec:49:ee:3a:0d: 8b:bb:b1:10:46:4b:e4:15:5c:c3:bc:9a:c0:0d:c2: bf:97:52:25:94:56:9e:44:76:71:6a:f4:6a:82:a0: 90:46:3b:74:0b:fd:2b:f5:3c:c1:20:dc:db:d9:f7: 7d:4b:a7:bb:8d:b2:a9:c2:c2:9c:91:4f:b7:4b:19: 0e:4c:28:ba:e0:6e:68:5c:86:b2:1f:d5:1c:2e:1d: f9:7b:4b:f4:29:18:25:b1:29:a6:0a:89:ef:48:2c: 23:d0:d3:a0:f4:6d:b6:f2:48:43:67:82:fb:3f:31: d0:6c:8c:62:69:e1:97:f2:30:41:95:4f:5a:44:e1: 84:7c:1f:06:51:5a:6a:7a:ce:99:ae:93:8b:04:d9: ca:32:48:15:51:3e:3b:3f:10:3c:87:61:5f:c1:d6: 58:3b:3c:0c:7c:18:e6:08:30:d5:92:b3:d0:b1:51: 1f:6b:e4:a5:20:09:70:e9:13:d7:8a:9e:d1:2d:b7: 0f:5b:b9:4d:3d:37:f5:21:ea:b9:28:5d:97:01:23: 1b:9a:fe:b8:b6:28:49:e5:bc:b5:60:60:0f:cd:6c: d7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CB:19:B3:05:8A:EC:EF:97:F8:36:65:56:87:51:D6:3E:9B:2A:01 X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AMsZswWK7O-X-DZlVodR1j6bKgE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3340:2000::/36 Signature Algorithm: sha256WithRSAEncryption 7b:fb:89:34:98:3b:31:8d:78:bf:b5:72:41:fa:2f:ea:83:8c: 8c:46:b6:f1:d8:53:84:c5:67:37:b4:4f:e5:81:a5:37:cd:b1: d8:f1:fb:c3:51:1e:24:8d:d1:f2:ce:3f:33:9f:3c:6d:c2:d8: 7c:bf:b0:56:95:26:34:ca:96:e9:d8:8b:21:75:a4:2e:59:b1: 33:69:6a:58:b6:80:8a:c7:5a:77:45:84:31:30:a0:2a:c4:5f: 90:09:44:04:19:d4:2b:54:76:59:7b:2a:dd:a8:bc:b9:34:7c: b8:f9:ce:9a:14:cc:1a:30:59:2d:75:7a:0b:4e:8c:cd:88:1f: 78:8b:1e:ac:51:4e:4f:dd:58:ef:5d:89:ee:a9:14:bc:f7:1c: 2d:32:93:d9:e1:23:f4:e5:8f:8d:48:57:6d:d8:01:e0:5d:fc: 11:bf:58:62:fc:39:b9:af:17:5e:eb:ca:2b:7e:1e:34:b2:7c: 68:e7:73:c9:43:a4:e4:ba:98:15:b8:6b:af:0f:37:0f:f7:c0: d5:12:f0:bc:52:ec:6f:12:ca:66:b8:0a:5b:e2:4a:86:80:f5: 2a:ba:5b:41:c1:a3:f3:de:61:d4:c7:c9:24:e8:69:69:d6:ac: c7:b0:15:dc:8b:b1:52:0d:c2:cf:78:a8:d8:83:be:f2:5f:f8: ee:95:79:4a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICKSwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNjAxMjYw NjUyMjVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDAwQ0IxOUIzMDU4QUVD RUY5N0Y4MzY2NTU2ODc1MUQ2M0U5QjJBMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDENIKLXDxwOSTdeSKNlieNPWbElZ3V3VPEE7M0+72K3o8b/mO5 cC7sSe46DYu7sRBGS+QVXMO8msANwr+XUiWUVp5EdnFq9GqCoJBGO3QL/Sv1PMEg 3NvZ931Lp7uNsqnCwpyRT7dLGQ5MKLrgbmhchrIf1RwuHfl7S/QpGCWxKaYKie9I LCPQ06D0bbbySENngvs/MdBsjGJp4ZfyMEGVT1pE4YR8HwZRWmp6zpmuk4sE2coy SBVRPjs/EDyHYV/B1lg7PAx8GOYIMNWSs9CxUR9r5KUgCXDpE9eKntEttw9buU09 N/Uh6rkoXZcBIxua/ri2KEnlvLVgYA/NbNdnAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUAMsZswWK7O+X+DZlVodR1j6bKgEwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvQU1zWnN3V0s3Ty1Y LURabFZvZFIxajZiS2dFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGBCQGM0AgMA0GCSqGSIb3DQEBCwUAA4IBAQB7+4k0mDsxjXi/tXJB+i/qg4yM Rrbx2FOExWc3tE/lgaU3zbHY8fvDUR4kjdHyzj8znzxtwth8v7BWlSY0ypbp2Ish daQuWbEzaWpYtoCKx1p3RYQxMKAqxF+QCUQEGdQrVHZZeyrdqLy5NHy4+c6aFMwa MFktdXoLTozNiB94ix6sUU5P3VjvXYnuqRS89xwtMpPZ4SP05Y+NSFdt2AHgXfwR v1hi/Dm5rxde68orfh40snxo53PJQ6TkupgVuGuvDzcP98DVEvC8UuxvEspmuApb 4kqGgPUqultBwaPz3mHUx8kk6Glp1qzHsBXci7FSDcLPeKjYg77yX/julXlK -----END CERTIFICATE-----Generated at Fri Feb 20 03:29:41 2026 by rpki-client