$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/656/vLg3zOHflDe4QUHgAxPEsIx-nDg.roa File: vLg3zOHflDe4QUHgAxPEsIx-nDg.roa (raw, json) Hash identifier: uZEnQ6vF9Q8uyg0uWCWLlEtTXosUMr5/EYWvCjXmQFA= Subject key identifier: BC:B8:37:CC:E1:DF:94:37:B8:41:41:E0:03:13:C4:B0:8C:7E:9C:38 Certificate issuer: /CN=64DC20D9612C5B77499A6D223A652B2E38B11647 Certificate serial: 1EBE Authority key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/vLg3zOHflDe4QUHgAxPEsIx-nDg.roa Signing time: Mon 26 Jan 2026 06:55:36 +0000 ROA not before: Mon 26 Jan 2026 06:55:36 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 132203 IP address blocks: 119.28.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7870 (0x1ebe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64DC20D9612C5B77499A6D223A652B2E38B11647 Validity Not Before: Jan 26 06:55:36 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=BCB837CCE1DF9437B84141E00313C4B08C7E9C38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:97:94:ec:58:0a:d3:e7:37:9a:4f:3f:e3: c7:e0:ed:a3:2e:22:27:10:36:ad:ef:f8:5d:15:77: 13:19:f7:14:5f:e5:0a:48:31:56:94:36:d3:9b:7e: a5:cf:05:14:c4:5d:a1:c9:d0:43:e9:10:f9:7a:06: 83:a9:90:ba:ac:71:b8:d9:32:51:a6:f5:bd:3f:c2: 08:33:73:20:a0:74:6e:01:97:8e:aa:0f:87:a8:c7: 10:20:b4:e8:73:f7:92:d5:62:ed:f7:05:d9:04:e1: 51:9a:72:81:31:d3:4d:d8:84:87:86:4a:04:40:7f: a7:76:9a:7f:e8:f2:16:e9:8e:b8:86:b3:33:3c:02: f4:f2:d9:37:f2:2c:90:df:be:d8:d1:2a:0f:10:88: 53:d5:b5:ee:0d:c1:5b:01:65:6a:2e:79:f0:b7:14: 78:11:be:e3:89:58:98:d2:bf:ce:e2:40:15:59:75: 6e:08:fc:67:7d:df:bd:17:62:90:8c:79:df:c4:f8: 22:de:30:fd:ae:dc:dc:73:d4:e0:02:05:d4:91:de: 0a:37:14:54:3f:0c:db:01:d2:25:38:e3:60:12:e3: d7:7b:cc:5b:3e:4e:74:02:47:d4:bc:31:3c:0b:6d: 98:68:fe:92:32:17:1f:4a:1e:37:11:70:1c:c0:6c: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B8:37:CC:E1:DF:94:37:B8:41:41:E0:03:13:C4:B0:8C:7E:9C:38 X509v3 Authority Key Identifier: keyid:64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/vLg3zOHflDe4QUHgAxPEsIx-nDg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.28.164.0/24 Signature Algorithm: sha256WithRSAEncryption 42:57:4f:69:22:2a:6f:63:7e:ae:be:44:37:47:95:f6:4d:03: d4:6b:40:5e:33:34:dc:26:6f:fa:68:1a:1d:2e:83:78:9c:5a: ec:38:1a:43:6c:b3:6e:b3:04:2a:be:1a:db:01:95:af:f9:2e: 45:61:ca:02:15:57:b7:ad:e9:95:1e:4d:a0:16:3e:23:2b:ce: aa:f5:ae:ed:3a:56:09:e7:64:e9:1d:6e:0b:c2:a6:00:27:ec: 54:b4:e2:0c:d2:ce:24:91:86:34:4f:0e:bd:eb:87:37:3a:94: 55:a0:85:18:b9:7e:a3:f9:b2:b9:4a:38:f8:ff:7c:0c:77:04: a1:5f:b7:28:72:91:27:5c:e5:a1:a5:cf:8b:ce:2a:9d:ad:19: a9:b8:c4:84:ce:f6:cd:49:d0:0e:bb:d6:ff:7f:76:8b:85:91: 24:c9:9d:45:99:21:63:cb:c3:8a:39:60:91:57:70:1b:8d:c7: 5d:33:38:fe:7e:29:c3:73:a3:90:fb:42:5a:d6:6f:c2:f5:60: d2:db:36:02:ad:c7:1a:e8:83:e6:de:a5:f8:99:09:2b:eb:db: f6:95:8f:fc:14:ca:56:8e:18:62:7b:0b:ce:d3:cb:4f:b4:ea: 9b:9e:fa:fa:8d:65:36:bc:c1:79:2d:5d:35:59:c6:27:84:bc: e7:81:ed:6d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHr4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjRE QzIwRDk2MTJDNUI3NzQ5OUE2RDIyM0E2NTJCMkUzOEIxMTY0NzAeFw0yNjAxMjYw NjU1MzZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEJDQjgzN0NDRTFERjk0 MzdCODQxNDFFMDAzMTNDNEIwOEM3RTlDMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLq5eU7FgK0+c3mk8/48fg7aMuIicQNq3v+F0VdxMZ9xRf5QpI MVaUNtObfqXPBRTEXaHJ0EPpEPl6BoOpkLqscbjZMlGm9b0/wggzcyCgdG4Bl46q D4eoxxAgtOhz95LVYu33BdkE4VGacoEx003YhIeGSgRAf6d2mn/o8hbpjriGszM8 AvTy2TfyLJDfvtjRKg8QiFPVte4NwVsBZWouefC3FHgRvuOJWJjSv87iQBVZdW4I /Gd9370XYpCMed/E+CLeMP2u3Nxz1OACBdSR3go3FFQ/DNsB0iU442AS49d7zFs+ TnQCR9S8MTwLbZho/pIyFx9KHjcRcBzAbDBPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUvLg3zOHflDe4QUHgAxPEsIx+nDgwHwYDVR0jBBgwFoAUZNwg2WEsW3dJmm0i OmUrLjixFkcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2 L1pOd2cyV0VzVzNkSm1tMGlPbVVyTGppeEZrYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWk53ZzJXRXNXM2RKbW0waU9tVXJMaml4RmtjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2L3ZMZzN6T0hmbERlNFFV SGdBeFBFc0l4LW5EZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAB3HKQwDQYJKoZIhvcNAQELBQADggEBAEJXT2kiKm9jfq6+RDdHlfZNA9RrQF4z NNwmb/poGh0ug3icWuw4GkNss26zBCq+GtsBla/5LkVhygIVV7et6ZUeTaAWPiMr zqr1ru06VgnnZOkdbgvCpgAn7FS04gzSziSRhjRPDr3rhzc6lFWghRi5fqP5srlK OPj/fAx3BKFftyhykSdc5aGlz4vOKp2tGam4xITO9s1J0A671v9/douFkSTJnUWZ IWPLw4o5YJFXcBuNx10zOP5+KcNzo5D7QlrWb8L1YNLbNgKtxxrog+bepfiZCSvr 2/aVj/wUylaOGGJ7C87Ty0+06pue+vqNZTa8wXktXTVZxieEvOeB7W0= -----END CERTIFICATE-----Generated at Fri Feb 20 03:48:23 2026 by rpki-client