$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/119/Ytt-sZWFeEl7Ag-etQDx2u34_Ek.roa File: Ytt-sZWFeEl7Ag-etQDx2u34_Ek.roa (raw, json) Hash identifier: Am7wWX/+t2PT/KQGXWKB1Li0f65LRNZE2QFYyl/AQmw= Subject key identifier: 62:DB:7E:B1:95:85:78:49:7B:02:0F:9E:B5:00:F1:DA:ED:F8:FC:49 Certificate issuer: /CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A Certificate serial: 1673 Authority key identifier: F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/Ytt-sZWFeEl7Ag-etQDx2u34_Ek.roa Signing time: Mon 26 Jan 2026 07:00:20 +0000 ROA not before: Mon 26 Jan 2026 07:00:20 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 9807 IP address blocks: 219.235.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 05:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5747 (0x1673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A Validity Not Before: Jan 26 07:00:20 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=62DB7EB1958578497B020F9EB500F1DAEDF8FC49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:d9:45:6e:77:60:f2:a4:93:e5:91:25:ae: 81:8a:99:da:cd:12:ef:09:7c:eb:c8:1f:6c:59:d7: 51:d4:b7:0e:3c:b1:06:65:43:57:65:39:15:77:c0: ca:df:e0:52:7f:3c:52:5e:39:c0:b5:f6:2c:ae:d4: 38:63:1e:a4:89:bb:54:4d:ac:7e:c1:d0:bb:7c:c3: 5b:7a:ef:90:8c:a7:d5:92:1f:69:c2:a7:26:a0:20: b2:8f:29:da:0a:db:66:00:05:45:4e:41:0d:cb:16: 92:98:32:ce:94:8e:99:04:5c:3e:7f:d0:e9:46:b9: ac:b2:7e:de:90:5e:3e:91:4d:d7:50:77:5a:38:30: d5:14:8a:61:dc:a7:43:8f:06:f9:6d:18:7c:15:aa: bf:03:d8:f3:a5:df:a4:6f:40:6a:04:63:d6:73:cc: 0c:50:1e:ef:ad:b1:a3:ac:b9:99:d5:2d:9a:51:68: 0d:bf:be:e5:4e:74:8d:0a:a9:30:88:58:5c:4a:6c: bb:4d:6b:c2:ee:62:dc:8e:28:f4:4f:9b:44:e5:00: 01:0f:da:de:98:5b:e6:f5:f4:92:54:ca:fc:a2:3e: e6:3a:51:07:5e:74:90:58:42:0a:f4:ee:9d:e2:05: ee:8d:b1:7e:58:c0:fe:a0:e4:de:b5:9e:be:55:11: 05:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DB:7E:B1:95:85:78:49:7B:02:0F:9E:B5:00:F1:DA:ED:F8:FC:49 X509v3 Authority Key Identifier: keyid:F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/Ytt-sZWFeEl7Ag-etQDx2u34_Ek.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.235.144.0/21 Signature Algorithm: sha256WithRSAEncryption 20:8c:98:58:9e:5c:c8:21:07:77:0b:94:bf:98:77:f8:b4:12: b6:bf:ed:16:10:c9:ca:e7:03:4a:2d:d5:eb:43:76:05:91:38: 5a:75:d7:5e:99:eb:60:65:0a:19:08:9d:3d:db:d0:6a:75:76: b1:02:9d:6b:1d:09:6e:ec:fc:76:75:c9:d6:41:6a:95:a2:36: 34:2a:cc:6a:6d:41:e3:00:33:8c:e1:0c:e1:b1:0a:e7:25:12: b6:57:56:4e:c9:52:6b:82:12:78:3a:93:b8:15:b6:db:0a:a8: ba:6b:b0:0e:52:ef:54:47:e8:e7:9c:cf:1b:96:5d:10:fe:4a: 5f:6c:e4:be:22:4b:20:80:93:dd:32:f6:89:d8:27:b4:62:cd: 02:ad:d4:8d:e3:11:1e:e9:47:56:04:d9:3f:04:16:29:1b:05: dd:69:09:93:4d:20:81:56:5b:0d:b9:02:18:8d:bd:f0:1e:80: 69:95:32:10:e5:3a:6b:f7:24:00:90:73:4d:5d:3d:ef:ca:7a: ac:ac:e6:86:2f:a4:ee:5d:15:7b:d6:2a:ad:b4:8a:0e:5e:e5: 9a:b7:3b:eb:a9:b6:71:f1:d3:c8:3c:75:57:6c:b0:7a:f5:e0: 59:42:16:7b:2e:7e:67:4a:a9:73:8a:73:b1:60:d0:9f:16:44: 88:41:d5:1b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjU1 NkMzQUFBMTAwMUY4OURDMEZDRUQ1NDM2QTIxQkI0RkYzNUQ3QTAeFw0yNjAxMjYw NzAwMjBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDYyREI3RUIxOTU4NTc4 NDk3QjAyMEY5RUI1MDBGMURBRURGOEZDNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2I9lFbndg8qST5ZElroGKmdrNEu8JfOvIH2xZ11HUtw48sQZl Q1dlORV3wMrf4FJ/PFJeOcC19iyu1DhjHqSJu1RNrH7B0Lt8w1t675CMp9WSH2nC pyagILKPKdoK22YABUVOQQ3LFpKYMs6UjpkEXD5/0OlGuayyft6QXj6RTddQd1o4 MNUUimHcp0OPBvltGHwVqr8D2POl36RvQGoEY9ZzzAxQHu+tsaOsuZnVLZpRaA2/ vuVOdI0KqTCIWFxKbLtNa8LuYtyOKPRPm0TlAAEP2t6YW+b19JJUyvyiPuY6UQde dJBYQgr07p3iBe6NsX5YwP6g5N61nr5VEQWlAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYtt+sZWFeEl7Ag+etQDx2u34/EkwHwYDVR0jBBgwFoAU9VbDqqEAH4ncD87V Q2ohu0/zXXowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTE5 LzlWYkRxcUVBSDRuY0Q4N1ZRMm9odTBfelhYby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOVZiRHFxRUFING5jRDg3VlEyb2h1MF96WFhvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTE5L1l0dC1zWldGZUVsN0Fn LWV0UUR4MnUzNF9Fay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPb65AwDQYJKoZIhvcNAQELBQADggEBACCMmFieXMghB3cLlL+Yd/i0Era/7RYQ ycrnA0ot1etDdgWROFp1116Z62BlChkInT3b0Gp1drECnWsdCW7s/HZ1ydZBapWi NjQqzGptQeMAM4zhDOGxCuclErZXVk7JUmuCEng6k7gVttsKqLprsA5S71RH6Oec zxuWXRD+Sl9s5L4iSyCAk90y9onYJ7RizQKt1I3jER7pR1YE2T8EFikbBd1pCZNN IIFWWw25AhiNvfAegGmVMhDlOmv3JACQc01dPe/Keqys5oYvpO5dFXvWKq20ig5e 5Zq3O+uptnHx08g8dVdssHr14FlCFnsufmdKqXOKc7Fg0J8WRIhB1Rs= -----END CERTIFICATE-----Generated at Mon Mar 2 05:54:23 2026 by rpki-client