$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/V_7hTWVFCqFCyXBTaJlyeP7nJEM.roa File: V_7hTWVFCqFCyXBTaJlyeP7nJEM.roa (raw, json) Hash identifier: cz4GgmIXHdIcCIecSCmWFQ5YJfIeBJwaw6JfOzuSyhw= Subject key identifier: 57:FE:E1:4D:65:45:0A:A1:42:C9:70:53:68:99:72:78:FE:E7:24:43 Certificate issuer: /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5 Certificate serial: 26AF Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/V_7hTWVFCqFCyXBTaJlyeP7nJEM.roa Signing time: Mon 26 Jan 2026 06:54:44 +0000 ROA not before: Mon 26 Jan 2026 06:54:44 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 131484 IP address blocks: 2406:d140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 07:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9903 (0x26af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5 Validity Not Before: Jan 26 06:54:44 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=57FEE14D65450AA142C9705368997278FEE72443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:98:13:65:62:dd:22:81:11:d8:83:5c:02: ce:50:c0:ba:df:17:0d:c5:57:a2:85:d0:83:90:ea: 36:a6:e5:98:36:60:af:81:fd:38:e8:99:9c:f0:83: 06:0d:6b:60:11:71:b3:27:66:a3:bc:60:dc:4d:12: cc:c4:ea:68:75:2f:0d:5a:8a:fe:5f:24:2d:3d:1e: cc:fe:df:fe:13:22:50:1d:12:d1:ec:d2:59:72:ce: de:b6:2d:2d:62:1d:95:28:8a:36:1e:62:12:5b:5a: 1e:0d:5f:53:85:35:a4:a3:89:3f:83:59:9d:82:f4: ab:69:c5:7b:28:36:c9:b0:11:64:81:5f:9f:2a:ff: 2e:83:91:6b:65:c7:9d:8f:35:00:d9:19:63:6f:d7: 9c:e3:ff:69:ad:dc:e9:f6:f7:fd:b7:61:7b:19:a3: b8:c0:76:a6:9f:83:9a:f6:d2:ed:02:e1:fb:f2:12: 85:35:c2:36:04:1d:80:67:89:13:1d:6e:19:10:a1: 76:1a:d7:75:1a:9a:74:a7:16:ba:23:b9:f0:0a:3a: 26:9d:27:c9:aa:f1:43:08:a1:25:32:7b:27:1a:16: 4a:54:80:81:aa:ca:9c:ce:fe:15:85:21:1b:43:4e: 43:0c:19:e6:83:62:c9:3c:9d:92:c1:a3:4f:a4:fe: 35:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FE:E1:4D:65:45:0A:A1:42:C9:70:53:68:99:72:78:FE:E7:24:43 X509v3 Authority Key Identifier: keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/V_7hTWVFCqFCyXBTaJlyeP7nJEM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:d140::/32 Signature Algorithm: sha256WithRSAEncryption 14:8c:89:ea:60:84:bc:f5:c9:33:4a:ca:7c:70:63:f2:89:a4: 5b:0a:38:f6:6b:a8:22:1e:50:37:e4:f4:91:0f:a1:6a:bd:fa: bd:f8:8c:5e:d5:6c:9a:58:e7:4a:2e:17:e2:73:b6:25:04:76: 98:87:4e:0d:12:f8:90:a6:4a:e2:68:e0:25:33:2a:1b:cf:b9: 1c:ef:c2:36:55:3d:4c:d9:dc:a1:8e:eb:8d:cb:47:73:97:ee: c0:59:61:04:1e:fd:54:bd:06:87:02:c8:01:4f:7d:4f:7a:8f: 13:f8:36:66:29:d7:32:90:01:21:06:3d:d5:06:72:18:6f:e1: b7:bd:e0:4b:7d:71:fc:41:11:2e:8e:b4:db:01:2f:d5:9a:f4: b7:11:9c:b4:8b:e9:0b:df:8c:15:47:c6:b2:ef:57:6a:6f:9e: 80:dd:2a:c9:2d:80:7d:44:15:3f:ef:aa:10:92:21:fd:b8:78: eb:41:7f:ed:91:a7:fd:df:91:48:df:47:23:d7:bc:3d:1f:54: 6d:3c:be:3e:3a:ae:fc:af:91:83:04:5b:9c:a8:76:5b:e7:4a: 7f:ae:f0:98:4d:8e:d5:40:cc:f3:45:85:eb:6a:b0:89:d4:40: a7:62:5b:c1:0c:8a:6a:cc:fc:18:f4:0c:ce:95:95:09:37:e0: dd:15:3b:04 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICJq8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDNG MDc1RDlDNkYxOERDMDlCREE2MkI3MDg3RUE4MERDNUI3MTFDNTAeFw0yNjAxMjYw NjU0NDRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDU3RkVFMTRENjU0NTBB QTE0MkM5NzA1MzY4OTk3Mjc4RkVFNzI0NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJspgTZWLdIoER2INcAs5QwLrfFw3FV6KF0IOQ6jam5Zg2YK+B /TjomZzwgwYNa2ARcbMnZqO8YNxNEszE6mh1Lw1aiv5fJC09Hsz+3/4TIlAdEtHs 0llyzt62LS1iHZUoijYeYhJbWh4NX1OFNaSjiT+DWZ2C9KtpxXsoNsmwEWSBX58q /y6DkWtlx52PNQDZGWNv15zj/2mt3On29/23YXsZo7jAdqafg5r20u0C4fvyEoU1 wjYEHYBniRMdbhkQoXYa13UamnSnFrojufAKOiadJ8mq8UMIoSUyeycaFkpUgIGq ypzO/hWFIRtDTkMMGeaDYsk8nZLBo0+k/jXTAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUV/7hTWVFCqFCyXBTaJlyeP7nJEMwHwYDVR0jBBgwFoAUA/B12cbxjcCb2mK3 CH6oDcW3EcUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 MC9BX0IxMmNieGpjQ2IybUszQ0g2b0RjVzNFY1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FfQjEyY2J4amNDYjJtSzNDSDZvRGNXM0VjVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDAvVl83aFRXVkZDcUZD eVhCVGFKbHllUDduSkVNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQG0UAwDQYJKoZIhvcNAQELBQADggEBABSMiepghLz1yTNKynxwY/KJpFsK OPZrqCIeUDfk9JEPoWq9+r34jF7VbJpY50ouF+JztiUEdpiHTg0S+JCmSuJo4CUz KhvPuRzvwjZVPUzZ3KGO643LR3OX7sBZYQQe/VS9BocCyAFPfU96jxP4NmYp1zKQ ASEGPdUGchhv4be94Et9cfxBES6OtNsBL9Wa9LcRnLSL6QvfjBVHxrLvV2pvnoDd KsktgH1EFT/vqhCSIf24eOtBf+2Rp/3fkUjfRyPXvD0fVG08vj46rvyvkYMEW5yo dlvnSn+u8JhNjtVAzPNFhetqsInUQKdiW8EMimrM/Bj0DM6VlQk34N0VOwQ= -----END CERTIFICATE-----Generated at Mon Feb 23 06:02:27 2026 by rpki-client