$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/26nfclt7wbiQRG1tuar1edqlPuQ.roa File: 26nfclt7wbiQRG1tuar1edqlPuQ.roa (raw, json) Hash identifier: 7bRbPfslXEs3TjEM4CrcO8B9RJYVR53bUL6SReCjYeg= Subject key identifier: DB:A9:DF:72:5B:7B:C1:B8:90:44:6D:6D:B9:AA:F5:79:DA:A5:3E:E4 Certificate issuer: /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5 Certificate serial: 26B1 Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/26nfclt7wbiQRG1tuar1edqlPuQ.roa Signing time: Mon 26 Jan 2026 06:54:44 +0000 ROA not before: Mon 26 Jan 2026 06:54:44 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 49544 IP address blocks: 2406:d140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 11:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9905 (0x26b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5 Validity Not Before: Jan 26 06:54:44 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=DBA9DF725B7BC1B890446D6DB9AAF579DAA53EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c9:2d:0e:46:91:ec:e3:12:ae:f4:ce:cc:6a: 94:4d:af:06:b8:4f:98:4b:3f:9e:3d:d9:1d:7a:14: c2:8a:f7:8f:92:08:ad:3d:9d:c6:60:ad:93:32:e5: 71:cf:3f:f4:a1:23:ac:dd:82:e6:7b:41:7f:b4:a8: 6b:f9:ab:8f:89:88:00:b2:bb:24:61:26:c9:63:32: df:2d:8e:23:9a:54:f1:3c:29:8c:9b:8d:9e:a0:4b: e3:43:85:60:c9:bb:c4:68:f8:3b:d2:54:8f:9e:59: 05:aa:f1:f3:69:c2:a0:3e:c0:c3:7c:bd:04:b8:d5: 24:7f:ac:50:94:32:39:36:f7:dc:b4:1e:8a:13:ed: d2:c3:20:5e:b3:a5:7b:c9:75:9f:36:fc:91:14:3e: fc:56:9a:b2:cb:5b:e7:e1:9a:8e:2e:cc:8a:49:1a: f7:55:74:2f:e9:b0:ae:e8:b8:b4:73:ca:92:75:14: 67:ec:5c:63:be:c0:07:bd:2d:1e:e3:c5:5c:9b:b1: 17:77:41:6a:8f:d1:50:5b:6d:a8:5d:07:11:6b:cc: e2:fb:74:bd:46:c5:95:ec:dd:8f:96:83:a9:49:a7: b2:15:b4:e9:1a:03:71:42:d4:17:d3:2a:80:d6:54: 85:f4:64:ef:dd:9d:6e:6e:d0:64:71:16:1f:26:2f: 3a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A9:DF:72:5B:7B:C1:B8:90:44:6D:6D:B9:AA:F5:79:DA:A5:3E:E4 X509v3 Authority Key Identifier: keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/26nfclt7wbiQRG1tuar1edqlPuQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:d140::/32 Signature Algorithm: sha256WithRSAEncryption 13:95:52:02:b7:bf:36:a0:e4:38:40:e5:6a:a0:ed:7b:2a:ce: fd:3b:05:34:94:0f:43:b8:54:3e:06:eb:4c:42:5c:75:8d:00: 62:3a:a9:44:68:df:1e:57:4d:b7:ab:c4:f3:c0:08:36:1a:c4: 8c:24:29:b6:cd:2a:5e:6c:d5:e1:03:2c:48:b8:a5:4f:8c:b8: b9:74:a7:0d:88:83:fe:2d:0e:f7:36:df:47:16:ad:be:e3:e2: 99:51:f1:0e:c7:fe:0e:30:08:7f:51:c5:7c:58:5e:73:ff:db: 09:e5:7e:2b:c6:4d:d8:f1:5e:c1:2a:5a:58:87:02:d1:1b:78: 34:ea:94:e8:f9:31:ee:41:33:48:eb:3b:c2:5a:1c:db:1c:0e: 65:af:c2:01:9f:dd:49:37:9a:e5:c3:e3:72:e5:1e:20:d6:64: 35:a1:21:97:3b:26:35:d7:52:98:d3:d0:83:46:a6:45:bc:5e: 26:54:d3:c0:32:32:d8:ec:89:b2:54:6f:27:51:6f:8f:03:95: 07:43:aa:48:90:db:2c:6a:4c:ff:cb:c7:fd:76:b3:b4:50:d5: a0:e3:d0:26:4d:54:39:5b:27:14:30:76:2f:13:0c:c5:20:15: 56:4e:32:71:dc:94:18:ee:84:06:df:2b:95:42:8e:7e:32:c7: d9:67:1a:ca -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICJrEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDNG MDc1RDlDNkYxOERDMDlCREE2MkI3MDg3RUE4MERDNUI3MTFDNTAeFw0yNjAxMjYw NjU0NDRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKERCQTlERjcyNUI3QkMx Qjg5MDQ0NkQ2REI5QUFGNTc5REFBNTNFRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwyS0ORpHs4xKu9M7MapRNrwa4T5hLP5492R16FMKK94+SCK09 ncZgrZMy5XHPP/ShI6zdguZ7QX+0qGv5q4+JiACyuyRhJsljMt8tjiOaVPE8KYyb jZ6gS+NDhWDJu8Ro+DvSVI+eWQWq8fNpwqA+wMN8vQS41SR/rFCUMjk299y0HooT 7dLDIF6zpXvJdZ82/JEUPvxWmrLLW+fhmo4uzIpJGvdVdC/psK7ouLRzypJ1FGfs XGO+wAe9LR7jxVybsRd3QWqP0VBbbahdBxFrzOL7dL1GxZXs3Y+Wg6lJp7IVtOka A3FC1BfTKoDWVIX0ZO/dnW5u0GRxFh8mLzp/AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU26nfclt7wbiQRG1tuar1edqlPuQwHwYDVR0jBBgwFoAUA/B12cbxjcCb2mK3 CH6oDcW3EcUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 MC9BX0IxMmNieGpjQ2IybUszQ0g2b0RjVzNFY1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FfQjEyY2J4amNDYjJtSzNDSDZvRGNXM0VjVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDAvMjZuZmNsdDd3YmlR UkcxdHVhcjFlZHFsUHVRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQG0UAwDQYJKoZIhvcNAQELBQADggEBABOVUgK3vzag5DhA5Wqg7Xsqzv07 BTSUD0O4VD4G60xCXHWNAGI6qURo3x5XTberxPPACDYaxIwkKbbNKl5s1eEDLEi4 pU+MuLl0pw2Ig/4tDvc230cWrb7j4plR8Q7H/g4wCH9RxXxYXnP/2wnlfivGTdjx XsEqWliHAtEbeDTqlOj5Me5BM0jrO8JaHNscDmWvwgGf3Uk3muXD43LlHiDWZDWh IZc7JjXXUpjT0INGpkW8XiZU08AyMtjsibJUbydRb48DlQdDqkiQ2yxqTP/Lx/12 s7RQ1aDj0CZNVDlbJxQwdi8TDMUgFVZOMnHclBjuhAbfK5VCjn4yx9lnGso= -----END CERTIFICATE-----Generated at Mon Feb 23 08:32:31 2026 by rpki-client