$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3396/4nqQEbmG5-tk2PmgeC70UF2Ux80.roa File: 4nqQEbmG5-tk2PmgeC70UF2Ux80.roa (raw, json) Hash identifier: grvjlGV4OM3wanOWcRcLJfzdxkeMU6EBUZZZ+Tz/55Y= Subject key identifier: E2:7A:90:11:B9:86:E7:EB:64:D8:F9:A0:78:2E:F4:50:5D:94:C7:CD Certificate issuer: /CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Certificate serial: 02B2 Authority key identifier: B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/4nqQEbmG5-tk2PmgeC70UF2Ux80.roa Signing time: Tue 10 Feb 2026 16:15:23 +0000 ROA not before: Tue 10 Feb 2026 16:15:23 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 201770 IP address blocks: 202.58.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 07:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Validity Not Before: Feb 10 16:15:23 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=E27A9011B986E7EB64D8F9A0782EF4505D94C7CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0d:7b:78:ef:a4:97:b8:3a:95:a6:78:a1:73: 1c:e8:d7:c2:fb:31:56:a1:e3:5a:79:51:6b:37:29: 05:d6:ff:20:50:7c:54:9e:54:16:af:38:7b:e0:93: 6b:54:2c:bd:3b:f3:fc:b5:d9:a6:18:f3:ba:be:b5: 4f:4e:70:53:30:d0:a6:0d:23:25:68:e1:7c:81:22: b9:0e:d3:26:6a:3a:9a:fb:0c:3d:26:2b:53:fe:29: d4:a0:60:a0:25:d2:05:66:a4:ca:e1:90:9e:44:74: cb:1d:8a:ca:1c:42:36:6e:1b:71:97:53:94:f5:10: 55:71:61:03:11:d1:d6:63:fc:38:d5:cb:45:ab:80: 3b:50:0d:cc:9c:f2:66:83:1b:a4:4e:cc:1d:5a:58: 34:41:0a:82:de:89:69:01:dc:79:86:4b:e8:fd:fa: a7:3f:e5:26:f5:ef:54:46:4b:d3:ba:ac:8f:76:d7: e7:66:48:3f:89:28:f9:76:c0:06:f1:e2:cb:e6:2b: 21:0c:da:aa:7a:54:8d:fd:4a:a4:8a:36:f8:b2:4c: d6:69:ff:b0:9a:20:91:45:13:dc:5a:64:96:3e:5f: a5:e7:bc:4d:84:45:9e:76:39:93:ef:7e:6a:31:15: 5f:68:ad:c6:07:77:b3:62:2d:84:3b:e3:c5:0d:f9: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7A:90:11:B9:86:E7:EB:64:D8:F9:A0:78:2E:F4:50:5D:94:C7:CD X509v3 Authority Key Identifier: keyid:B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/4nqQEbmG5-tk2PmgeC70UF2Ux80.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.58.122.0/23 Signature Algorithm: sha256WithRSAEncryption 34:2c:f0:5f:41:fc:76:31:32:76:5f:d9:c7:2d:80:b1:3e:9d: a3:66:f8:c1:b2:7e:58:94:39:a7:b4:4c:db:6f:13:4b:c5:a0: d9:cb:86:46:9e:19:ee:9a:69:b1:89:f7:69:14:53:27:90:cd: 82:d1:05:a5:c0:1c:51:93:f4:77:67:05:0c:17:a7:c7:ca:a9: b8:aa:a5:46:46:3f:43:f0:f5:55:37:9e:e6:aa:15:bf:06:b5: 96:1a:79:55:60:e8:1f:fc:0d:70:9d:51:a1:0a:28:bf:af:ac: 20:48:70:96:be:85:24:5e:4a:51:e1:11:32:a1:4b:0e:c6:37: 0b:12:c0:f2:3b:97:5b:76:f3:b2:87:1f:74:6d:c7:22:47:f0: bc:44:40:0e:96:4d:b8:1f:b7:cf:05:a4:b7:dc:72:62:a5:61: 18:1d:01:82:e6:37:cb:bc:96:51:8d:3d:bc:de:c0:85:0d:50: ce:29:3b:1a:d4:66:59:d7:2a:b8:c3:54:3d:33:69:13:73:44: a9:43:81:4a:f1:79:8e:b8:e9:02:22:04:8c:58:e8:96:36:f8: 27:6f:a0:7c:2c:15:28:38:e9:3e:eb:a7:01:cd:d0:28:76:72: fe:24:3f:d3:5e:8c:d5:2a:ec:cb:b9:d6:54:0d:d7:0e:f8:55: 1e:d1:97:b5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICArIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjZD MTBENzI4QTM4MjQzMUJBQzFGMTQ5MzBEMEZDMUUwNzU5NTNBNjAeFw0yNjAyMTAx NjE1MjNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEUyN0E5MDExQjk4NkU3 RUI2NEQ4RjlBMDc4MkVGNDUwNUQ5NEM3Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwDXt476SXuDqVpnihcxzo18L7MVah41p5UWs3KQXW/yBQfFSe VBavOHvgk2tULL078/y12aYY87q+tU9OcFMw0KYNIyVo4XyBIrkO0yZqOpr7DD0m K1P+KdSgYKAl0gVmpMrhkJ5EdMsdisocQjZuG3GXU5T1EFVxYQMR0dZj/DjVy0Wr gDtQDcyc8maDG6ROzB1aWDRBCoLeiWkB3HmGS+j9+qc/5Sb171RGS9O6rI921+dm SD+JKPl2wAbx4svmKyEM2qp6VI39SqSKNviyTNZp/7CaIJFFE9xaZJY+X6XnvE2E RZ52OZPvfmoxFV9orcYHd7NiLYQ748UN+Uj7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU4nqQEbmG5+tk2PmgeC70UF2Ux80wHwYDVR0jBBgwFoAUtsENcoo4JDG6wfFJ MND8HgdZU6YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 Ni90c0VOY29vNEpERzZ3ZkZKTU5EOEhnZFpVNlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3RzRU5jb280SkRHNndmRkpNTkQ4SGdkWlU2WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTYvNG5xUUVibUc1LXRr MlBtZ2VDNzBVRjJVeDgwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAco6ejANBgkqhkiG9w0BAQsFAAOCAQEANCzwX0H8djEydl/Zxy2AsT6do2b4 wbJ+WJQ5p7RM228TS8Wg2cuGRp4Z7pppsYn3aRRTJ5DNgtEFpcAcUZP0d2cFDBen x8qpuKqlRkY/Q/D1VTee5qoVvwa1lhp5VWDoH/wNcJ1RoQoov6+sIEhwlr6FJF5K UeERMqFLDsY3CxLA8juXW3bzsocfdG3HIkfwvERADpZNuB+3zwWkt9xyYqVhGB0B guY3y7yWUY09vN7AhQ1Qzik7GtRmWdcquMNUPTNpE3NEqUOBSvF5jrjpAiIEjFjo ljb4J2+gfCwVKDjpPuunAc3QKHZy/iQ/016M1Srsy7nWVA3XDvhVHtGXtQ== -----END CERTIFICATE-----Generated at Mon Feb 23 06:38:42 2026 by rpki-client