$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1239/r4ApDfaFdlnKaS2-FwXztqp4xcw.roa File: r4ApDfaFdlnKaS2-FwXztqp4xcw.roa (raw, json) Hash identifier: u0nhu3X/tvvx1t+8HCJa+r5wOjhNwq5HLFn3Gp4fR0c= Subject key identifier: AF:80:29:0D:F6:85:76:59:CA:69:2D:BE:17:05:F3:B6:AA:78:C5:CC Certificate issuer: /CN=91989A02AD0D13692FCB6F6F96EA362D7DDCFA4B Certificate serial: 04 Authority key identifier: 91:98:9A:02:AD:0D:13:69:2F:CB:6F:6F:96:EA:36:2D:7D:DC:FA:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kZiaAq0NE2kvy29vluo2LX3c-ks.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/r4ApDfaFdlnKaS2-FwXztqp4xcw.roa Signing time: Mon 02 Feb 2026 02:52:05 +0000 ROA not before: Mon 02 Feb 2026 02:52:05 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 399138 IP address blocks: 103.61.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/kZiaAq0NE2kvy29vluo2LX3c-ks.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/kZiaAq0NE2kvy29vluo2LX3c-ks.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kZiaAq0NE2kvy29vluo2LX3c-ks.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 10:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91989A02AD0D13692FCB6F6F96EA362D7DDCFA4B Validity Not Before: Feb 2 02:52:05 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=AF80290DF6857659CA692DBE1705F3B6AA78C5CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:60:ce:e1:7c:c5:d5:7f:5f:58:45:5a:88:04: 92:f9:51:07:c0:72:db:e4:28:f3:bc:92:f1:4e:c5: 96:60:a4:ce:8c:7c:4f:37:d1:6e:da:09:c8:f8:e1: ef:3d:d2:42:38:0f:97:25:a6:37:19:99:28:0e:e3: 31:7e:15:e7:9f:a2:18:68:88:ef:df:4a:a2:e0:46: 04:73:3a:7f:7f:9b:44:73:bf:d7:be:31:6d:d4:fb: cf:6d:6d:9c:03:40:f8:72:7d:19:8d:26:30:55:d4: 5f:e4:40:e6:60:29:ac:93:23:d5:d0:b9:8e:d0:5f: c2:7b:e6:f7:75:c8:2f:3e:3e:72:fa:59:36:4a:d4: 97:24:78:0d:5f:eb:fe:93:d6:98:62:3b:bb:66:b4: 8f:43:4f:28:81:a9:be:c7:01:60:4f:61:b3:cb:c7: 2a:bc:aa:bd:62:26:4c:99:bb:77:44:31:34:ba:c4: 9d:71:bd:bf:e5:25:d5:5e:4e:bd:63:7f:04:b7:c0: c4:b5:6d:d5:e4:09:0e:d9:5b:68:87:6e:57:61:10: ec:61:55:7f:a4:d2:a5:4d:98:23:d0:41:1f:5f:8a: de:c2:42:6d:a6:db:01:de:77:a1:d9:2c:ed:5a:6d: a7:4f:ed:b8:2a:43:7c:27:21:fe:46:1b:33:be:c8: ba:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:80:29:0D:F6:85:76:59:CA:69:2D:BE:17:05:F3:B6:AA:78:C5:CC X509v3 Authority Key Identifier: keyid:91:98:9A:02:AD:0D:13:69:2F:CB:6F:6F:96:EA:36:2D:7D:DC:FA:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/kZiaAq0NE2kvy29vluo2LX3c-ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kZiaAq0NE2kvy29vluo2LX3c-ks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1239/r4ApDfaFdlnKaS2-FwXztqp4xcw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.61.176.0/22 Signature Algorithm: sha256WithRSAEncryption 26:60:da:f9:24:28:78:31:0f:bb:f2:03:ec:84:5f:1d:9f:aa: 67:a2:85:b7:d4:84:39:59:db:d0:0a:bf:f5:e0:e6:03:88:b8: a5:9a:29:36:a2:b3:a2:83:53:a1:7f:3a:d7:88:a1:cf:d4:81: 5d:7c:fb:d9:30:a9:79:8a:4c:7d:a1:23:3b:6d:20:cd:34:d2: f3:35:65:55:91:d1:9c:18:9e:9c:b6:55:e8:de:96:d7:58:2d: ff:96:fa:f8:e2:bc:15:4d:bd:3d:5c:ca:d1:26:a2:ed:78:53: 5f:a1:53:e1:b3:75:a7:14:a0:13:2c:e9:28:1e:41:c2:f3:0e: df:6e:f9:29:c4:bf:cd:60:9f:8d:a2:09:39:57:08:06:2c:c7: c4:bb:5e:15:4f:c6:e9:c3:ec:97:fe:c8:83:ea:c0:90:0f:41: 21:c6:7a:03:af:44:84:d2:c9:c4:45:01:08:63:c2:e4:00:e9: 1b:e1:19:ed:b0:a9:76:d8:66:e1:92:5c:c6:a1:24:f5:9c:7a: 0e:8e:66:99:2f:a2:5a:7b:db:91:02:d7:89:38:c8:d4:a6:ab: 4c:e1:86:5c:f2:cd:67:73:bb:62:88:86:f9:be:a8:89:ed:ff: 62:18:1e:92:ae:be:3c:20:49:03:c8:1f:bd:04:6c:d5:e6:df: 96:82:dc:d0 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MTk4 OUEwMkFEMEQxMzY5MkZDQjZGNkY5NkVBMzYyRDdERENGQTRCMB4XDTI2MDIwMjAy NTIwNVoXDTI3MDEwOTA4MjMxOFowMzExMC8GA1UEAxMoQUY4MDI5MERGNjg1NzY1 OUNBNjkyREJFMTcwNUYzQjZBQTc4QzVDQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOBgzuF8xdV/X1hFWogEkvlRB8By2+Qo87yS8U7FlmCkzox8TzfR btoJyPjh7z3SQjgPlyWmNxmZKA7jMX4V55+iGGiI799KouBGBHM6f3+bRHO/174x bdT7z21tnANA+HJ9GY0mMFXUX+RA5mAprJMj1dC5jtBfwnvm93XILz4+cvpZNkrU lyR4DV/r/pPWmGI7u2a0j0NPKIGpvscBYE9hs8vHKryqvWImTJm7d0QxNLrEnXG9 v+Ul1V5OvWN/BLfAxLVt1eQJDtlbaIduV2EQ7GFVf6TSpU2YI9BBH1+K3sJCbabb Ad53odks7Vptp0/tuCpDfCch/kYbM77Iug8CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSvgCkN9oV2WcppLb4XBfO2qnjFzDAfBgNVHSMEGDAWgBSRmJoCrQ0TaS/Lb2+W 6jYtfdz6SzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjM5 L2taaWFBcTBORTJrdnkyOXZsdW8yTFgzYy1rcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAva1ppYUFxME5FMmt2eTI5dmx1bzJMWDNjLWtzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzOS9yNEFwRGZhRmRsbkth UzItRndYenRxcDR4Y3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZz2wMA0GCSqGSIb3DQEBCwUAA4IBAQAmYNr5JCh4MQ+78gPshF8dn6pnooW3 1IQ5WdvQCr/14OYDiLilmik2orOig1OhfzrXiKHP1IFdfPvZMKl5ikx9oSM7bSDN NNLzNWVVkdGcGJ6ctlXo3pbXWC3/lvr44rwVTb09XMrRJqLteFNfoVPhs3WnFKAT LOkoHkHC8w7fbvkpxL/NYJ+Nogk5VwgGLMfEu14VT8bpw+yX/siD6sCQD0EhxnoD r0SE0snERQEIY8LkAOkb4RntsKl22GbhklzGoST1nHoOjmaZL6Jae9uRAteJOMjU pqtM4YZc8s1nc7tiiIb5vqiJ7f9iGB6Srr48IEkDyB+9BGzV5t+WgtzQ -----END CERTIFICATE-----Generated at Mon Mar 2 10:04:33 2026 by rpki-client