$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3258/S0yXltP6HWuPvlH2o5LUY6e6C-E.roa File: S0yXltP6HWuPvlH2o5LUY6e6C-E.roa (raw, json) Hash identifier: ZxI0XtujC5kBibN+ZbrqSCT9IjP9fwJPSQPDqzomie4= Subject key identifier: 4B:4C:97:96:D3:FA:1D:6B:8F:BE:51:F6:A3:92:D4:63:A7:BA:0B:E1 Certificate issuer: /CN=90F30E1DF327D103907F1BE08ED3EA64BFB778E3 Certificate serial: 0E40 Authority key identifier: 90:F3:0E:1D:F3:27:D1:03:90:7F:1B:E0:8E:D3:EA:64:BF:B7:78:E3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kPMOHfMn0QOQfxvgjtPqZL-3eOM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/S0yXltP6HWuPvlH2o5LUY6e6C-E.roa Signing time: Mon 26 Jan 2026 06:54:19 +0000 ROA not before: Mon 26 Jan 2026 06:54:19 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 21859 IP address blocks: 157.10.220.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/kPMOHfMn0QOQfxvgjtPqZL-3eOM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/kPMOHfMn0QOQfxvgjtPqZL-3eOM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kPMOHfMn0QOQfxvgjtPqZL-3eOM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 00:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3648 (0xe40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90F30E1DF327D103907F1BE08ED3EA64BFB778E3 Validity Not Before: Jan 26 06:54:19 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4B4C9796D3FA1D6B8FBE51F6A392D463A7BA0BE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:02:80:db:65:94:f8:d1:32:f1:70:62:8e:5b: fe:7c:92:f4:f1:47:0f:5e:9f:c7:24:08:ed:4b:ed: 3e:2c:88:f4:0f:ac:3f:37:bb:6e:6d:b6:84:e9:8c: f3:81:1b:bd:6f:2a:71:e0:7b:e3:9d:07:8a:b2:d1: 14:d5:e6:bd:50:35:52:d0:5a:b4:4a:11:9d:36:5b: 94:8a:9a:17:9e:e5:dc:54:2f:52:6d:fc:e6:d5:72: fa:79:9f:b3:2b:d3:bc:f4:09:22:b6:3e:c9:3c:b2: 58:75:89:d7:ae:68:ca:a2:98:bc:4c:aa:0a:f3:f5: cc:0f:51:72:4a:1c:f5:b3:44:e1:da:27:0e:e6:b5: eb:26:c9:e5:90:9a:5a:c8:d9:50:ca:eb:1c:8f:72: 4e:92:aa:57:8d:70:17:73:1c:c4:59:40:5c:c7:58: 7b:a6:84:09:cf:e3:3c:bd:a8:91:1f:3b:ac:5e:50: 02:32:4e:0a:04:24:96:79:1c:eb:cc:87:90:64:af: c3:ed:a3:e4:0b:9c:f7:6f:31:97:2e:7b:4c:2b:7c: 24:57:17:c4:01:34:44:79:27:ca:98:64:69:8f:f2: 68:72:41:20:89:b4:7f:69:ee:fb:b1:05:b0:7d:86: 11:b5:cf:c7:46:58:26:f2:8f:b4:7d:1e:8c:48:3c: 20:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4C:97:96:D3:FA:1D:6B:8F:BE:51:F6:A3:92:D4:63:A7:BA:0B:E1 X509v3 Authority Key Identifier: keyid:90:F3:0E:1D:F3:27:D1:03:90:7F:1B:E0:8E:D3:EA:64:BF:B7:78:E3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/kPMOHfMn0QOQfxvgjtPqZL-3eOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kPMOHfMn0QOQfxvgjtPqZL-3eOM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/S0yXltP6HWuPvlH2o5LUY6e6C-E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.10.220.0/24 Signature Algorithm: sha256WithRSAEncryption 01:a3:07:36:94:bc:a0:1f:66:f0:ce:53:e4:a7:8f:8f:18:3c: 6e:88:54:de:d4:0c:da:cc:0f:99:7b:d3:a7:bb:b3:7c:77:c7: df:04:2d:bb:e2:a8:62:b4:b4:b0:f6:2a:5c:4a:09:26:ca:2f: 28:80:75:9d:ba:20:ce:1f:ea:b6:7c:ae:1f:45:10:2e:4a:5e: 70:41:18:b8:f6:c9:1b:ed:51:45:b9:3b:9f:06:53:b7:c4:64: bd:55:e9:c7:a5:b2:3f:af:23:33:75:eb:eb:b3:f7:b3:3f:06: 9d:36:38:ab:0f:95:9e:0a:1d:01:bd:80:96:3d:81:17:fa:a3: 21:86:cb:4d:74:2a:68:d9:09:73:47:80:0c:fd:be:7d:1b:d1: dc:44:57:7d:ed:28:56:32:33:2c:1e:1c:f8:46:87:95:f2:e6: 9c:6e:44:17:6a:7f:9a:e6:e6:c7:84:fe:4d:a5:db:a4:26:35: 92:ce:df:e6:de:d1:57:2b:b4:6a:99:5c:c0:a1:41:cc:b0:0c: 46:f0:f2:af:56:13:53:35:d1:ef:3b:05:1c:62:1c:de:1b:cc: d3:56:c5:4d:5b:18:2c:01:9f:4a:a9:ea:33:a6:25:7d:1f:0e: e0:95:8b:b3:d6:d8:6e:78:94:48:06:2f:51:3f:a5:79:7b:9b: 21:04:3b:8a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTBG MzBFMURGMzI3RDEwMzkwN0YxQkUwOEVEM0VBNjRCRkI3NzhFMzAeFw0yNjAxMjYw NjU0MTlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDRCNEM5Nzk2RDNGQTFE NkI4RkJFNTFGNkEzOTJENDYzQTdCQTBCRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7AoDbZZT40TLxcGKOW/58kvTxRw9en8ckCO1L7T4siPQPrD83 u25ttoTpjPOBG71vKnHge+OdB4qy0RTV5r1QNVLQWrRKEZ02W5SKmhee5dxUL1Jt /ObVcvp5n7Mr07z0CSK2Psk8slh1ideuaMqimLxMqgrz9cwPUXJKHPWzROHaJw7m tesmyeWQmlrI2VDK6xyPck6SqleNcBdzHMRZQFzHWHumhAnP4zy9qJEfO6xeUAIy TgoEJJZ5HOvMh5Bkr8Pto+QLnPdvMZcue0wrfCRXF8QBNER5J8qYZGmP8mhyQSCJ tH9p7vuxBbB9hhG1z8dGWCbyj7R9HoxIPCBpAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUS0yXltP6HWuPvlH2o5LUY6e6C+EwHwYDVR0jBBgwFoAUkPMOHfMn0QOQfxvg jtPqZL+3eOMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 OC9rUE1PSGZNbjBRT1FmeHZnanRQcVpMLTNlT00uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2tQTU9IZk1uMFFPUWZ4dmdqdFBxWkwtM2VPTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTgvUzB5WGx0UDZIV3VQ dmxIMm81TFVZNmU2Qy1FLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJ0K3DANBgkqhkiG9w0BAQsFAAOCAQEAAaMHNpS8oB9m8M5T5KePjxg8bohU 3tQM2swPmXvTp7uzfHfH3wQtu+KoYrS0sPYqXEoJJsovKIB1nbogzh/qtnyuH0UQ LkpecEEYuPbJG+1RRbk7nwZTt8RkvVXpx6WyP68jM3Xr67P3sz8GnTY4qw+Vngod Ab2Alj2BF/qjIYbLTXQqaNkJc0eADP2+fRvR3ERXfe0oVjIzLB4c+EaHlfLmnG5E F2p/mubmx4T+TaXbpCY1ks7f5t7RVyu0aplcwKFBzLAMRvDyr1YTUzXR7zsFHGIc 3hvM01bFTVsYLAGfSqnqM6YlfR8O4JWLs9bYbniUSAYvUT+leXubIQQ7ig== -----END CERTIFICATE-----Generated at Sun Feb 22 22:00:53 2026 by rpki-client