$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/40/3bPM0E9E-YvPCpRumCwgHuoVd7Y.roa File: 3bPM0E9E-YvPCpRumCwgHuoVd7Y.roa (raw, json) Hash identifier: 5Xe7buIekzESyvD5O72oL4yGa325tDms4nLYtZz27LQ= Subject key identifier: DD:B3:CC:D0:4F:44:F9:8B:CF:0A:94:6E:98:2C:20:1E:EA:15:77:B6 Certificate issuer: /CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847 Certificate serial: 1F83 Authority key identifier: AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/3bPM0E9E-YvPCpRumCwgHuoVd7Y.roa Signing time: Mon 26 Jan 2026 06:55:26 +0000 ROA not before: Mon 26 Jan 2026 06:55:26 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 17429 IP address blocks: 43.247.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 07:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8067 (0x1f83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847 Validity Not Before: Jan 26 06:55:26 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DDB3CCD04F44F98BCF0A946E982C201EEA1577B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f8:f6:fc:ca:c6:0c:c2:8d:7c:33:d6:28:a7: 03:d5:f8:88:8c:52:f9:b5:6c:f4:b6:2d:40:b8:7e: 48:0b:08:0b:ce:5c:e6:2b:0c:30:ec:3c:d6:eb:4d: 12:5d:a6:d8:22:e2:21:34:cb:b8:0b:52:d7:20:d9: 6b:ea:bb:8e:7f:0d:34:20:57:7f:0d:c1:95:80:0a: e9:e1:18:22:a0:60:19:3d:30:60:94:a8:8a:57:d4: 6b:87:06:3a:39:1a:6a:4b:12:e5:e1:cc:c9:90:1d: c8:a3:a6:f5:d3:ed:04:1d:4a:27:20:d0:00:43:92: d9:6a:cc:21:20:f3:cd:40:15:ae:24:19:61:0b:9e: 78:4c:7a:00:df:4b:b6:ba:e9:52:57:82:66:43:de: 5b:d1:b5:e1:3e:3d:24:a6:f6:cb:0f:1d:e1:e2:5e: 0c:97:c2:17:34:47:d7:01:aa:28:d4:6a:ed:2d:e3: a4:6c:b5:92:0c:4f:d9:26:fc:f9:88:74:06:a7:3c: 2b:46:8a:a4:90:52:0f:50:45:7b:66:1d:87:3d:6d: 22:b2:c7:ab:9c:75:0d:f7:52:f1:ea:2f:7e:eb:5a: 30:db:9f:ae:94:32:b9:8a:81:7f:0c:6c:10:81:a8: 19:7f:c8:12:fe:c9:6c:4f:32:9b:dc:26:5d:0a:57: be:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B3:CC:D0:4F:44:F9:8B:CF:0A:94:6E:98:2C:20:1E:EA:15:77:B6 X509v3 Authority Key Identifier: keyid:AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/3bPM0E9E-YvPCpRumCwgHuoVd7Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.247.236.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:28:10:c6:c1:b1:0d:26:01:ed:12:fa:31:32:e7:2a:5d:11: 28:a2:fd:f4:bd:6f:30:ee:eb:db:3e:45:7d:55:e4:dd:45:c1: d0:d5:9f:7c:44:bd:db:eb:34:f5:43:fa:49:79:1a:fb:2c:28: 09:a4:23:2f:02:66:fa:50:59:31:3c:bd:58:0a:8b:9b:d6:fb: 26:3f:4e:ca:54:52:da:8e:6f:97:20:77:96:f3:88:8e:5d:66: 0d:87:d5:c2:49:38:8c:76:a1:e5:33:1c:7c:3e:08:81:c1:38: 64:08:16:48:84:de:19:67:8f:be:dd:08:21:4a:4b:de:e5:bc: 39:fd:d4:9e:4e:2a:10:c7:4d:69:05:53:4a:58:af:e5:da:75: 95:19:6a:fe:f9:d6:f4:13:c8:01:57:13:f8:17:10:53:cd:8f: 25:84:3c:48:f5:6f:02:98:68:93:6e:2a:69:e5:7a:1d:d3:f5: bb:5d:f0:f7:d7:5a:81:47:71:1b:fc:23:82:cc:c8:68:c7:ad: d4:ad:64:58:88:a8:12:9a:c8:6d:d5:8d:46:c7:66:c5:61:bb: 5a:8b:8c:56:ed:e2:dd:26:c3:79:b2:f6:a8:ab:34:5f:fc:79: 7f:a6:b7:04:87:b1:ba:0f:4a:4d:63:4f:c2:3b:db:28:82:d4: a0:84:5b:88 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICH4MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUVD Q0NDQjc5REZFNkM0NjZDQ0FEQjM5ODk2NzEwRUNBQzM3Qjg0NzAeFw0yNjAxMjYw NjU1MjZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEREQjNDQ0QwNEY0NEY5 OEJDRjBBOTQ2RTk4MkMyMDFFRUExNTc3QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ+Pb8ysYMwo18M9YopwPV+IiMUvm1bPS2LUC4fkgLCAvOXOYr DDDsPNbrTRJdptgi4iE0y7gLUtcg2Wvqu45/DTQgV38NwZWACunhGCKgYBk9MGCU qIpX1GuHBjo5GmpLEuXhzMmQHcijpvXT7QQdSicg0ABDktlqzCEg881AFa4kGWEL nnhMegDfS7a66VJXgmZD3lvRteE+PSSm9ssPHeHiXgyXwhc0R9cBqijUau0t46Rs tZIMT9km/PmIdAanPCtGiqSQUg9QRXtmHYc9bSKyx6ucdQ33UvHqL37rWjDbn66U MrmKgX8MbBCBqBl/yBL+yWxPMpvcJl0KV759AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU3bPM0E9E+YvPCpRumCwgHuoVd7YwHwYDVR0jBBgwFoAUrszMt53+bEZsyts5 iWcQ7Kw3uEcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDAv cnN6TXQ1My1iRVpzeXRzNWlXY1E3S3czdUVjLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9yc3pNdDUzLWJFWnN5dHM1aVdjUTdLdzN1RWMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC80MC8zYlBNMEU5RS1ZdlBDcFJ1 bUN3Z0h1b1ZkN1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC K/fsMA0GCSqGSIb3DQEBCwUAA4IBAQAsKBDGwbENJgHtEvoxMucqXREoov30vW8w 7uvbPkV9VeTdRcHQ1Z98RL3b6zT1Q/pJeRr7LCgJpCMvAmb6UFkxPL1YCoub1vsm P07KVFLajm+XIHeW84iOXWYNh9XCSTiMdqHlMxx8PgiBwThkCBZIhN4ZZ4++3Qgh Skve5bw5/dSeTioQx01pBVNKWK/l2nWVGWr++db0E8gBVxP4FxBTzY8lhDxI9W8C mGiTbipp5Xod0/W7XfD311qBR3Eb/COCzMhox63UrWRYiKgSmsht1Y1Gx2bFYbta i4xW7eLdJsN5svaoqzRf/Hl/prcEh7G6D0pNY0/CO9sogtSghFuI -----END CERTIFICATE-----Generated at Mon Feb 23 06:24:17 2026 by rpki-client