$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/119/v6Faz7VKoqwNwglDNFtgd3H0Nhc.roa File: v6Faz7VKoqwNwglDNFtgd3H0Nhc.roa (raw, json) Hash identifier: Aq7JCfWo6hLi8NMkcsfakV2tH3kB+NE4WHgBDNgDz3U= Subject key identifier: BF:A1:5A:CF:B5:4A:A2:AC:0D:C2:09:43:34:5B:60:77:71:F4:36:17 Certificate issuer: /CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A Certificate serial: 16C0 Authority key identifier: F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/v6Faz7VKoqwNwglDNFtgd3H0Nhc.roa Signing time: Tue 10 Feb 2026 05:00:57 +0000 ROA not before: Tue 10 Feb 2026 05:00:57 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 9807 IP address blocks: 2400:5a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 05:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5824 (0x16c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A Validity Not Before: Feb 10 05:00:57 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=BFA15ACFB54AA2AC0DC20943345B607771F43617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e8:fc:57:70:d9:87:a7:be:96:2d:0e:7b:cb: 15:6c:4e:8c:3c:57:91:6f:95:1b:c2:ed:16:75:60: a8:36:12:6d:c8:70:53:6f:97:a5:91:b1:67:e5:c1: 85:4f:d2:7a:82:84:c6:9d:90:f4:b9:2a:96:e5:b6: c0:8e:7d:2b:99:d6:52:20:89:64:5b:6a:66:7b:1d: 40:2c:3c:2c:56:cd:45:4b:42:a3:30:e1:96:3a:89: a4:13:5e:49:f5:8e:97:9c:e3:a4:c6:ef:af:ad:5e: 30:36:dc:34:6b:96:20:48:49:9b:53:3c:b7:a3:1d: fc:9e:ad:f1:e3:d6:cc:cd:8f:c4:67:a5:52:b4:93: 07:3d:8f:4b:f5:bd:d7:61:bf:01:d6:a5:ec:68:7c: d1:73:b1:3a:3e:ea:51:f2:13:10:cf:3b:22:39:91: c8:c3:af:74:a3:50:b0:d3:73:ed:45:f7:6b:6f:40: bb:73:f6:40:d7:34:41:43:90:ef:bf:08:64:f6:78: a8:f4:c5:d9:ce:b8:06:98:e0:0e:1c:97:28:56:fd: 5b:ea:af:8f:a6:a2:c6:3d:c0:08:46:1c:1c:f9:20: fc:49:3e:a2:d3:20:c1:2a:17:40:05:8e:c2:cc:ea: 7d:10:88:97:ea:85:29:f8:e8:00:54:7d:2e:eb:1d: b1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A1:5A:CF:B5:4A:A2:AC:0D:C2:09:43:34:5B:60:77:71:F4:36:17 X509v3 Authority Key Identifier: keyid:F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/v6Faz7VKoqwNwglDNFtgd3H0Nhc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:5a00::/32 Signature Algorithm: sha256WithRSAEncryption 20:95:f1:7c:51:04:4d:7b:4e:40:c2:12:95:76:65:32:15:8c: e0:14:b7:c8:1a:39:ff:a4:cb:1c:ca:d1:77:9d:e9:f8:44:30: 68:f5:90:3f:fb:f9:19:65:46:b3:8d:71:34:40:57:a4:9f:df: cd:8d:71:e8:9e:46:98:82:9b:24:ed:19:60:8f:fa:f1:b8:5d: 85:70:40:5e:0b:f2:35:e9:44:37:8d:ea:cf:cc:3c:32:a0:ab: b0:9a:68:fb:0e:a5:70:6f:0b:f5:ac:7a:08:10:ef:8e:7e:46: 45:a6:e8:70:62:ea:8f:52:98:34:42:35:c6:a7:7c:78:5f:98: 42:f4:dc:d3:56:04:ae:c1:63:01:97:68:4b:65:94:b0:3a:0d: 18:f9:29:0a:28:48:b2:cd:ff:5c:0d:f9:b5:53:e7:ae:cd:77: 90:e9:11:82:94:94:cb:7f:06:03:17:2c:f6:5c:7f:80:f1:0d: 62:c5:cc:a5:f0:ce:53:e0:3b:cc:a2:26:5d:57:ac:d1:19:5b: 80:32:38:35:66:e7:46:c3:6c:b4:41:1d:e6:17:07:f4:f0:93: ee:54:36:46:04:ca:f9:6b:d4:8a:f9:30:b0:93:4d:e9:b6:b8: 8b:61:f8:d0:b1:53:ed:64:d6:21:92:7b:cd:ca:32:bb:cf:ff: 2c:90:f3:7c -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjU1 NkMzQUFBMTAwMUY4OURDMEZDRUQ1NDM2QTIxQkI0RkYzNUQ3QTAeFw0yNjAyMTAw NTAwNTdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEJGQTE1QUNGQjU0QUEy QUMwREMyMDk0MzM0NUI2MDc3NzFGNDM2MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL6PxXcNmHp76WLQ57yxVsTow8V5FvlRvC7RZ1YKg2Em3IcFNv l6WRsWflwYVP0nqChMadkPS5KpbltsCOfSuZ1lIgiWRbamZ7HUAsPCxWzUVLQqMw 4ZY6iaQTXkn1jpec46TG76+tXjA23DRrliBISZtTPLejHfyerfHj1szNj8RnpVK0 kwc9j0v1vddhvwHWpexofNFzsTo+6lHyExDPOyI5kcjDr3SjULDTc+1F92tvQLtz 9kDXNEFDkO+/CGT2eKj0xdnOuAaY4A4clyhW/Vvqr4+mosY9wAhGHBz5IPxJPqLT IMEqF0AFjsLM6n0QiJfqhSn46ABUfS7rHbERAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUv6Faz7VKoqwNwglDNFtgd3H0NhcwHwYDVR0jBBgwFoAU9VbDqqEAH4ncD87V Q2ohu0/zXXowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTE5 LzlWYkRxcUVBSDRuY0Q4N1ZRMm9odTBfelhYby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOVZiRHFxRUFING5jRDg3VlEyb2h1MF96WFhvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTE5L3Y2RmF6N1ZLb3F3Tndn bERORnRnZDNIME5oYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAFoAMA0GCSqGSIb3DQEBCwUAA4IBAQAglfF8UQRNe05AwhKVdmUyFYzgFLfI Gjn/pMscytF3nen4RDBo9ZA/+/kZZUazjXE0QFekn9/NjXHonkaYgpsk7Rlgj/rx uF2FcEBeC/I16UQ3jerPzDwyoKuwmmj7DqVwbwv1rHoIEO+OfkZFpuhwYuqPUpg0 QjXGp3x4X5hC9NzTVgSuwWMBl2hLZZSwOg0Y+SkKKEiyzf9cDfm1U+euzXeQ6RGC lJTLfwYDFyz2XH+A8Q1ixcyl8M5T4DvMoiZdV6zRGVuAMjg1ZudGw2y0QR3mFwf0 8JPuVDZGBMr5a9SK+TCwk03ptriLYfjQsVPtZNYhknvNyjK7z/8skPN8 -----END CERTIFICATE-----Generated at Mon Mar 2 05:54:20 2026 by rpki-client