$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/xV8ygWjfpKQ9Oad95gT5LAdGa10.roa File: xV8ygWjfpKQ9Oad95gT5LAdGa10.roa (raw, json) Hash identifier: u57mFXwZsJ/ZGyKdm3KF3eMYd8r+NX1Rduny/5/lc9o= Subject key identifier: C5:5F:32:81:68:DF:A4:A4:3D:39:A7:7D:E6:04:F9:2C:07:46:6B:5D Certificate issuer: /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5 Certificate serial: 26B2 Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/xV8ygWjfpKQ9Oad95gT5LAdGa10.roa Signing time: Mon 26 Jan 2026 06:54:45 +0000 ROA not before: Mon 26 Jan 2026 06:54:45 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 49544 IP address blocks: 2406:d140:8000::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 11:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9906 (0x26b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5 Validity Not Before: Jan 26 06:54:45 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=C55F328168DFA4A43D39A77DE604F92C07466B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:64:b4:e8:1d:ca:2d:0e:a8:41:63:a1:65:a5: f1:2e:44:cc:42:0d:29:3c:23:17:72:6b:63:0a:4f: 52:b9:3f:c4:81:6d:65:52:6d:d5:59:65:64:11:22: cf:fa:0b:0a:89:fd:3a:81:7d:1a:2f:1c:3b:58:0e: 7d:18:f5:11:c7:68:f8:cf:1e:48:29:7d:e6:2b:38: 45:4c:4c:99:4b:af:3e:8d:45:89:7e:9b:44:3d:5f: ad:e3:c4:ab:64:9e:c1:29:6a:ea:02:e7:fa:84:53: 6c:d5:3e:ab:2d:af:9c:47:50:bb:2c:7d:3b:9f:e0: c4:17:26:d0:13:17:43:52:11:81:d9:08:df:2a:f0: 5e:9f:c7:70:0c:45:8b:f8:66:7c:eb:8b:19:10:ae: 3b:36:73:ac:4d:b3:67:0b:06:81:f6:95:f5:7e:a7: 22:20:88:77:ef:43:97:18:bd:a8:ba:cf:10:7c:58: 93:9f:e6:8f:57:5b:50:2c:df:4e:a3:be:a8:65:6c: 5a:73:23:22:83:b0:fa:a9:ad:7e:2c:6e:71:84:0e: 58:30:ad:9e:05:e6:10:48:ee:63:ee:ff:24:e3:eb: b5:26:8a:a8:76:d4:38:06:70:b7:26:ba:25:6d:3b: 0b:ee:bb:b6:04:13:8b:c5:f3:74:07:20:ec:30:27: 41:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5F:32:81:68:DF:A4:A4:3D:39:A7:7D:E6:04:F9:2C:07:46:6B:5D X509v3 Authority Key Identifier: keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/xV8ygWjfpKQ9Oad95gT5LAdGa10.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:d140:8000::/34 Signature Algorithm: sha256WithRSAEncryption 94:db:4e:06:53:3b:de:50:4a:f0:d5:74:e9:4f:45:58:36:e2: b8:bf:59:dc:54:6f:b5:08:72:95:de:44:b5:49:8b:aa:14:23: 8b:a4:4a:5b:01:a4:81:63:58:1b:47:ac:0c:83:10:10:a4:b0: 83:b1:7b:79:84:19:98:5e:ff:31:0b:de:1d:14:51:55:76:79: eb:5b:8e:23:cf:c4:b3:eb:b7:2b:cf:7d:c3:8a:b2:20:39:90: 21:d3:97:a5:8f:7f:80:b6:08:ac:f1:f9:57:0e:4b:85:b1:85: 6b:f7:4d:2f:51:8c:0f:18:58:4f:9e:47:d3:a9:89:ae:3b:35: 65:28:73:98:05:9d:2e:7f:30:0e:af:bb:4b:93:8f:d2:ef:e5: 60:72:31:cb:e3:8a:f5:5e:aa:b3:4f:31:67:f1:d6:76:81:7c: 5a:b4:83:62:a5:d4:5c:5f:56:ac:8b:90:29:4f:bc:93:ad:76: 92:d6:ae:9f:e2:87:ca:6a:42:27:2a:63:ed:b6:f2:4e:63:e2: 4b:5a:39:dc:f2:ca:15:ab:2b:07:6b:91:89:1b:d5:bb:fd:57: c4:39:25:50:a0:bf:21:5c:e6:70:ca:4d:42:c9:61:2a:28:3c: 15:b2:fe:fc:5a:0a:2d:8e:e0:f7:e7:77:b1:16:35:d4:5c:c4: 24:a5:dc:46 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICJrIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDNG MDc1RDlDNkYxOERDMDlCREE2MkI3MDg3RUE4MERDNUI3MTFDNTAeFw0yNjAxMjYw NjU0NDVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEM1NUYzMjgxNjhERkE0 QTQzRDM5QTc3REU2MDRGOTJDMDc0NjZCNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgZLToHcotDqhBY6FlpfEuRMxCDSk8Ixdya2MKT1K5P8SBbWVS bdVZZWQRIs/6CwqJ/TqBfRovHDtYDn0Y9RHHaPjPHkgpfeYrOEVMTJlLrz6NRYl+ m0Q9X63jxKtknsEpauoC5/qEU2zVPqstr5xHULssfTuf4MQXJtATF0NSEYHZCN8q 8F6fx3AMRYv4ZnzrixkQrjs2c6xNs2cLBoH2lfV+pyIgiHfvQ5cYvai6zxB8WJOf 5o9XW1As306jvqhlbFpzIyKDsPqprX4sbnGEDlgwrZ4F5hBI7mPu/yTj67Umiqh2 1DgGcLcmuiVtOwvuu7YEE4vF83QHIOwwJ0F5AgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUxV8ygWjfpKQ9Oad95gT5LAdGa10wHwYDVR0jBBgwFoAUA/B12cbxjcCb2mK3 CH6oDcW3EcUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 MC9BX0IxMmNieGpjQ2IybUszQ0g2b0RjVzNFY1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FfQjEyY2J4amNDYjJtSzNDSDZvRGNXM0VjVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDAveFY4eWdXamZwS1E5 T2FkOTVnVDVMQWRHYTEwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGBiQG0UCAMA0GCSqGSIb3DQEBCwUAA4IBAQCU204GUzveUErw1XTpT0VYNuK4 v1ncVG+1CHKV3kS1SYuqFCOLpEpbAaSBY1gbR6wMgxAQpLCDsXt5hBmYXv8xC94d FFFVdnnrW44jz8Sz67crz33DirIgOZAh05elj3+Atgis8flXDkuFsYVr900vUYwP GFhPnkfTqYmuOzVlKHOYBZ0ufzAOr7tLk4/S7+VgcjHL44r1XqqzTzFn8dZ2gXxa tINipdRcX1asi5ApT7yTrXaS1q6f4ofKakInKmPttvJOY+JLWjnc8soVqysHa5GJ G9W7/VfEOSVQoL8hXOZwyk1CyWEqKDwVsv78WgotjuD353exFjXUXMQkpdxG -----END CERTIFICATE-----Generated at Mon Feb 23 08:32:31 2026 by rpki-client