$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/lUU9VdyhnT40lvxO7cwjESQacmk.roa File: lUU9VdyhnT40lvxO7cwjESQacmk.roa (raw, json) Hash identifier: dBHKedmYfwwN9CCpggiGn1QUz90iR+s787FT3wXJ3ow= Subject key identifier: 95:45:3D:55:DC:A1:9D:3E:34:96:FC:4E:ED:CC:23:11:24:1A:72:69 Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 2929 Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/lUU9VdyhnT40lvxO7cwjESQacmk.roa Signing time: Mon 26 Jan 2026 06:52:24 +0000 ROA not before: Mon 26 Jan 2026 06:52:24 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 139139 IP address blocks: 2406:3340:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10537 (0x2929) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Jan 26 06:52:24 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=95453D55DCA19D3E3496FC4EEDCC2311241A7269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d0:4d:1d:19:17:9b:a4:90:e0:15:9b:20:50: 0e:c6:e5:05:97:b4:d4:47:81:3d:ee:09:00:36:4a: 00:78:c2:64:a9:bf:e9:c9:d7:ec:95:e6:63:aa:70: 2b:2c:21:e5:03:68:c5:78:27:cd:ad:53:14:bf:e4: 4e:75:24:15:1e:b2:ed:4d:d8:4b:5f:74:cc:d4:c4: ff:46:45:b0:8d:e5:1f:b0:86:6e:8a:71:c2:10:d9: a8:c2:a9:23:01:1f:4f:e1:3a:99:af:29:ce:20:0b: 11:3f:a0:96:48:1e:ac:90:c7:d3:25:24:a5:30:f0: 17:3f:da:d1:ea:82:ac:b6:68:33:ed:e7:36:0b:70: 6d:c1:45:05:99:07:e6:e3:c9:60:52:65:f8:7e:3c: 59:75:5d:18:71:f3:e7:c1:bf:2d:27:19:69:f7:d4: 96:f6:74:5a:27:f7:a0:68:99:00:27:a9:7c:9e:2c: 88:0f:09:ac:97:a5:ec:b5:87:42:93:c9:61:79:29: 50:ab:6f:b5:e0:c2:e3:42:01:a0:41:8c:ee:68:f6: f2:3c:86:a4:ff:60:d7:f0:2d:f3:44:ed:5f:dc:84: 5b:95:79:77:29:8e:64:17:3f:c9:2e:44:2e:ec:81: 37:2f:0c:39:6f:56:81:3f:ad:fc:c9:19:68:24:64: cd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:45:3D:55:DC:A1:9D:3E:34:96:FC:4E:ED:CC:23:11:24:1A:72:69 X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/lUU9VdyhnT40lvxO7cwjESQacmk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3340:4000::/36 Signature Algorithm: sha256WithRSAEncryption 39:b4:ed:c0:42:9b:69:27:98:fa:5c:6a:c9:07:91:20:bc:8b: fc:5f:16:f5:ae:0c:44:50:51:51:ad:d0:7a:80:32:3e:53:01: f3:7e:f9:a1:dc:ef:7a:13:85:bd:2c:5d:0e:29:a3:98:50:5a: 85:bc:d7:c8:ac:67:4b:59:5e:d9:0f:b4:df:44:78:3e:0d:36: 63:38:ae:e1:5d:41:bc:d1:cb:b8:67:de:73:5f:92:0e:ec:1c: fe:a7:f9:6e:22:df:99:71:0f:01:2b:99:4e:c2:1b:f7:13:a0: bc:51:e9:16:41:85:67:e0:43:94:ef:51:a3:46:e7:06:5a:0c: 27:1d:20:f6:ed:f4:f9:2a:ca:3c:2a:48:5a:d5:d1:76:07:74: c9:d5:14:ae:af:7e:1c:ea:e8:04:93:36:24:be:d3:ba:d5:74: 78:c1:12:3c:98:b8:b4:32:86:51:c0:1f:4a:83:fa:80:a6:db: c9:00:49:76:b2:d6:58:01:c8:67:c5:b1:37:4a:05:10:fa:38: d2:52:89:04:7c:c2:9c:b3:a9:78:95:1b:ad:39:80:28:1a:4e: 72:f2:4b:f9:81:a8:db:d9:63:4a:d2:0b:3d:d9:4f:d6:16:b9: c5:b0:7e:df:ba:04:67:05:34:23:a2:c7:5e:d6:11:6d:42:79: 29:e9:3f:6a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICKSkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNjAxMjYw NjUyMjRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDk1NDUzRDU1RENBMTlE M0UzNDk2RkM0RUVEQ0MyMzExMjQxQTcyNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDx0E0dGRebpJDgFZsgUA7G5QWXtNRHgT3uCQA2SgB4wmSpv+nJ 1+yV5mOqcCssIeUDaMV4J82tUxS/5E51JBUesu1N2EtfdMzUxP9GRbCN5R+whm6K ccIQ2ajCqSMBH0/hOpmvKc4gCxE/oJZIHqyQx9MlJKUw8Bc/2tHqgqy2aDPt5zYL cG3BRQWZB+bjyWBSZfh+PFl1XRhx8+fBvy0nGWn31Jb2dFon96BomQAnqXyeLIgP CayXpey1h0KTyWF5KVCrb7XgwuNCAaBBjO5o9vI8hqT/YNfwLfNE7V/chFuVeXcp jmQXP8kuRC7sgTcvDDlvVoE/rfzJGWgkZM0BAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUlUU9VdyhnT40lvxO7cwjESQacmkwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvbFVVOVZkeWhuVDQw bHZ4Tzdjd2pFU1FhY21rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGBCQGM0BAMA0GCSqGSIb3DQEBCwUAA4IBAQA5tO3AQptpJ5j6XGrJB5EgvIv8 Xxb1rgxEUFFRrdB6gDI+UwHzfvmh3O96E4W9LF0OKaOYUFqFvNfIrGdLWV7ZD7Tf RHg+DTZjOK7hXUG80cu4Z95zX5IO7Bz+p/luIt+ZcQ8BK5lOwhv3E6C8UekWQYVn 4EOU71GjRucGWgwnHSD27fT5Kso8Kkha1dF2B3TJ1RSur34c6ugEkzYkvtO61XR4 wRI8mLi0MoZRwB9Kg/qAptvJAEl2stZYAchnxbE3SgUQ+jjSUokEfMKcs6l4lRut OYAoGk5y8kv5gajb2WNK0gs92U/WFrnFsH7fugRnBTQjosde1hFtQnkp6T9q -----END CERTIFICATE-----Generated at Fri Feb 20 05:35:06 2026 by rpki-client