$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/DidIRSkw-WRcPi5FzKflyO7_D70.roa File: DidIRSkw-WRcPi5FzKflyO7_D70.roa (raw, json) Hash identifier: g8DB708QXq44Q/8NDczaROW/YsbIAjGxcxz91MAz1ho= Subject key identifier: 0E:27:48:45:29:30:F9:64:5C:3E:2E:45:CC:A7:E5:C8:EE:FF:0F:BD Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 291F Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/DidIRSkw-WRcPi5FzKflyO7_D70.roa Signing time: Mon 26 Jan 2026 06:52:22 +0000 ROA not before: Mon 26 Jan 2026 06:52:22 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 139139 IP address blocks: 2406:3340:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10527 (0x291f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Jan 26 06:52:22 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=0E2748452930F9645C3E2E45CCA7E5C8EEFF0FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:4f:2d:b6:44:0d:10:c8:01:62:5c:90:cc: cc:12:51:cb:58:d7:d8:62:87:f4:b7:62:8d:ac:f4: 86:c5:27:6f:b4:38:0a:e5:bf:df:6d:e5:c4:ed:d0: 41:f4:8d:38:f9:0b:fb:ac:5b:c5:c5:93:b6:9c:4c: c6:2f:c7:d5:2d:11:cf:2b:10:6f:ae:59:2c:12:b1: 47:19:9a:9b:0f:19:75:ca:ae:fa:df:46:da:63:84: f3:6c:44:d2:5c:4a:1f:df:67:92:a6:21:e7:74:f9: 50:ed:99:22:ac:61:1c:bb:60:1f:db:ec:f6:f1:0f: c0:7a:48:32:75:c9:f9:86:d3:dc:16:fc:33:f4:18: 46:ad:eb:32:bd:55:10:ba:44:7f:57:3a:2b:16:8d: b4:4b:8d:07:df:66:38:4b:6a:44:fe:fc:e5:ed:72: 10:dc:12:c8:7c:4b:00:8a:c1:09:db:0a:1e:c7:13: e9:c7:e2:51:44:23:54:e3:c5:fb:b4:6e:5e:79:41: 89:dc:33:e1:49:69:ce:86:05:fa:13:cb:84:0e:6c: 28:2b:4e:6c:79:c8:0c:76:0a:71:52:33:41:ff:73: 5e:24:d4:e0:43:3a:e9:63:e6:06:8f:04:05:ec:e4: cd:b8:a5:dd:32:6f:0a:a2:d8:83:e1:c7:a6:d7:1a: c3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:27:48:45:29:30:F9:64:5C:3E:2E:45:CC:A7:E5:C8:EE:FF:0F:BD X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/DidIRSkw-WRcPi5FzKflyO7_D70.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3340:5000::/36 Signature Algorithm: sha256WithRSAEncryption 5d:18:cc:b6:ae:a0:a4:8c:c9:f3:42:c2:ed:eb:d8:72:0e:0b: d4:e9:19:af:82:ce:52:79:93:c2:1e:f2:f7:84:38:b2:28:2f: 0f:c2:35:9c:be:a5:bf:67:21:3f:48:77:a3:b1:6e:b1:8b:eb: 5f:a4:d8:33:9d:0f:8a:61:a6:e2:7c:39:85:f6:2f:6c:36:5c: 2c:56:9d:bb:85:f6:07:39:13:b9:83:4a:40:47:86:a0:c4:bc: 07:81:36:8a:01:d6:3e:01:02:6c:6c:e8:a6:71:40:e6:06:51: 03:96:bc:cf:c1:95:60:40:04:73:db:05:31:1f:4e:a8:dd:8e: 2a:a3:76:a8:6f:39:60:4d:d9:6a:c3:a6:ce:57:b6:bb:0d:5c: 60:64:82:ba:f5:e2:a6:9d:83:e7:d3:d5:ce:44:fb:61:b0:c8: 02:2d:bb:b1:83:1f:bf:f5:10:8e:76:f5:0e:c6:e4:00:2a:2b: 43:10:81:8c:0e:1a:ff:92:ce:a3:ab:84:a1:6b:d2:71:cb:da: fe:89:94:37:c3:cf:41:49:b5:9f:a1:e2:66:44:06:7a:ee:9e: 85:f4:4e:bb:e8:08:4a:58:ce:58:60:39:65:ce:85:c5:3b:8e: 2d:7f:bf:50:4d:b1:87:5c:bb:32:9c:4a:c2:df:04:0e:7f:7d: c4:ad:7c:fd -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICKR8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNjAxMjYw NjUyMjJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDBFMjc0ODQ1MjkzMEY5 NjQ1QzNFMkU0NUNDQTdFNUM4RUVGRjBGQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC14E8ttkQNEMgBYlyQzMwSUctY19hih/S3Yo2s9IbFJ2+0OArl v99t5cTt0EH0jTj5C/usW8XFk7acTMYvx9UtEc8rEG+uWSwSsUcZmpsPGXXKrvrf RtpjhPNsRNJcSh/fZ5KmIed0+VDtmSKsYRy7YB/b7PbxD8B6SDJ1yfmG09wW/DP0 GEat6zK9VRC6RH9XOisWjbRLjQffZjhLakT+/OXtchDcEsh8SwCKwQnbCh7HE+nH 4lFEI1Tjxfu0bl55QYncM+FJac6GBfoTy4QObCgrTmx5yAx2CnFSM0H/c14k1OBD Oulj5gaPBAXs5M24pd0ybwqi2IPhx6bXGsMjAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUDidIRSkw+WRcPi5FzKflyO7/D70wHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvRGlkSVJTa3ctV1Jj UGk1RnpLZmx5TzdfRDcwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGBCQGM0BQMA0GCSqGSIb3DQEBCwUAA4IBAQBdGMy2rqCkjMnzQsLt69hyDgvU 6Rmvgs5SeZPCHvL3hDiyKC8PwjWcvqW/ZyE/SHejsW6xi+tfpNgznQ+KYabifDmF 9i9sNlwsVp27hfYHORO5g0pAR4agxLwHgTaKAdY+AQJsbOimcUDmBlEDlrzPwZVg QARz2wUxH06o3Y4qo3aobzlgTdlqw6bOV7a7DVxgZIK69eKmnYPn09XORPthsMgC Lbuxgx+/9RCOdvUOxuQAKitDEIGMDhr/ks6jq4Sha9Jxy9r+iZQ3w89BSbWfoeJm RAZ67p6F9E676AhKWM5YYDllzoXFO44tf79QTbGHXLsynErC3wQOf33ErXz9 -----END CERTIFICATE-----Generated at Fri Feb 20 05:34:48 2026 by rpki-client