$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/656/iyCtgLATBr-8gEhFHD1b0vfv7t4.roa File: iyCtgLATBr-8gEhFHD1b0vfv7t4.roa (raw, json) Hash identifier: YaX4PtckpLCUwZm5/XbE9HZsB8cS4SKoWtvEWpN5Z7w= Subject key identifier: 8B:20:AD:80:B0:13:06:BF:BC:80:48:45:1C:3D:5B:D2:F7:EF:EE:DE Certificate issuer: /CN=64DC20D9612C5B77499A6D223A652B2E38B11647 Certificate serial: 1EBF Authority key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/iyCtgLATBr-8gEhFHD1b0vfv7t4.roa Signing time: Mon 26 Jan 2026 06:55:36 +0000 ROA not before: Mon 26 Jan 2026 06:55:36 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 45090 IP address blocks: 124.220.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7871 (0x1ebf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64DC20D9612C5B77499A6D223A652B2E38B11647 Validity Not Before: Jan 26 06:55:36 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=8B20AD80B01306BFBC8048451C3D5BD2F7EFEEDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8f:02:a7:de:85:04:19:f6:15:80:75:86:85: 19:9a:33:1f:23:e9:88:89:0a:b0:cb:ff:17:e2:93: 48:3e:ff:dd:98:92:a2:ec:96:f4:2b:47:2b:10:dd: 8b:8c:b6:0f:ec:98:d9:0d:17:cf:e1:52:4b:90:6c: cb:67:4e:b2:f6:86:15:ce:aa:42:61:66:af:99:2d: 1b:df:2f:36:17:44:ec:53:ac:c7:36:4b:6b:6f:6b: 94:43:60:6f:b3:84:70:ee:9d:04:e2:7a:32:ac:29: 16:96:9c:05:67:0a:e4:24:0b:38:4a:6d:6a:04:63: d3:cb:dd:74:5d:25:13:64:38:80:38:9c:58:48:7c: 26:64:45:91:9b:14:de:59:00:b4:5f:7c:eb:02:87: a3:9c:19:28:e7:1d:f3:d0:27:d3:83:69:70:c4:ea: 3c:ed:83:c3:c1:05:ea:1b:22:28:0c:d1:e2:56:e5: 92:9f:91:93:ca:e5:e4:59:60:ee:79:29:35:09:d2: 20:73:56:07:d1:78:c7:f2:ca:be:03:40:cb:ee:04: 88:1b:d9:00:f5:74:58:70:87:8c:2f:d5:ab:c4:82: 64:7b:8f:4a:62:8f:d0:90:33:3e:fe:45:46:45:95: cd:29:6c:f8:de:d6:ed:1b:94:f3:e7:b0:11:b3:99: c4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:20:AD:80:B0:13:06:BF:BC:80:48:45:1C:3D:5B:D2:F7:EF:EE:DE X509v3 Authority Key Identifier: keyid:64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/iyCtgLATBr-8gEhFHD1b0vfv7t4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.220.0.0/14 Signature Algorithm: sha256WithRSAEncryption b3:95:18:a8:26:9f:2a:32:5c:12:57:da:66:e9:a8:2e:8b:e2: c4:a4:c5:b0:eb:82:fa:11:76:48:e6:87:2d:8d:a9:2a:26:55: d1:4b:69:a9:3d:f6:c6:d7:f1:8e:05:09:6f:45:5d:44:9f:dd: a1:f1:1a:d0:38:9d:28:7c:8d:f5:aa:09:41:e9:cf:2a:a0:5b: 0a:76:ee:c3:f6:66:49:2f:25:bf:dc:06:ff:77:d0:3c:58:7c: c0:43:18:5f:4c:db:39:c9:b4:b9:f8:4b:80:90:bc:46:f6:1a: 01:2d:55:90:8e:5e:e5:8f:46:27:a5:d3:d0:c7:38:73:5a:e3: 6b:11:c2:5a:12:16:b3:23:d2:96:20:20:6e:c6:a9:e1:80:4d: 95:2b:80:d9:5a:a1:cc:ba:4e:64:c4:19:bd:6d:bb:66:3e:b5: 70:72:c8:d0:d2:d5:9c:4d:8f:a1:ad:dc:af:3c:d2:1d:cd:b9: 98:8b:64:ac:f1:77:1f:b8:20:7f:e0:df:53:bf:b7:8b:ce:bf: 38:41:65:f4:28:71:3a:09:79:41:5b:d4:c9:d2:9f:9c:ab:e3: fe:37:c1:13:0b:a0:7e:a1:58:49:78:96:58:a5:6b:12:3c:e3: 48:72:c8:93:69:d2:5e:a8:6c:d5:3b:2a:04:a1:91:e4:15:61: 77:a9:68:5e -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICHr8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjRE QzIwRDk2MTJDNUI3NzQ5OUE2RDIyM0E2NTJCMkUzOEIxMTY0NzAeFw0yNjAxMjYw NjU1MzZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDhCMjBBRDgwQjAxMzA2 QkZCQzgwNDg0NTFDM0Q1QkQyRjdFRkVFREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhjwKn3oUEGfYVgHWGhRmaMx8j6YiJCrDL/xfik0g+/92YkqLs lvQrRysQ3YuMtg/smNkNF8/hUkuQbMtnTrL2hhXOqkJhZq+ZLRvfLzYXROxTrMc2 S2tva5RDYG+zhHDunQTiejKsKRaWnAVnCuQkCzhKbWoEY9PL3XRdJRNkOIA4nFhI fCZkRZGbFN5ZALRffOsCh6OcGSjnHfPQJ9ODaXDE6jztg8PBBeobIigM0eJW5ZKf kZPK5eRZYO55KTUJ0iBzVgfReMfyyr4DQMvuBIgb2QD1dFhwh4wv1avEgmR7j0pi j9CQMz7+RUZFlc0pbPje1u0blPPnsBGzmcRHAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUiyCtgLATBr+8gEhFHD1b0vfv7t4wHwYDVR0jBBgwFoAUZNwg2WEsW3dJmm0i OmUrLjixFkcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2 L1pOd2cyV0VzVzNkSm1tMGlPbVVyTGppeEZrYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWk53ZzJXRXNXM2RKbW0waU9tVXJMaml4RmtjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2L2l5Q3RnTEFUQnItOGdF aEZIRDFiMHZmdjd0NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwJ83DANBgkqhkiG9w0BAQsFAAOCAQEAs5UYqCafKjJcElfaZumoLovixKTFsOuC +hF2SOaHLY2pKiZV0UtpqT32xtfxjgUJb0VdRJ/dofEa0DidKHyN9aoJQenPKqBb Cnbuw/ZmSS8lv9wG/3fQPFh8wEMYX0zbOcm0ufhLgJC8RvYaAS1VkI5e5Y9GJ6XT 0Mc4c1rjaxHCWhIWsyPSliAgbsap4YBNlSuA2VqhzLpOZMQZvW27Zj61cHLI0NLV nE2Poa3crzzSHc25mItkrPF3H7ggf+DfU7+3i86/OEFl9ChxOgl5QVvUydKfnKvj /jfBEwugfqFYSXiWWKVrEjzjSHLIk2nSXqhs1TsqBKGR5BVhd6loXg== -----END CERTIFICATE-----Generated at Fri Feb 20 01:33:17 2026 by rpki-client