$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/242/qNLltn56HM078SiShLYIiere6-8.roa File: qNLltn56HM078SiShLYIiere6-8.roa (raw, json) Hash identifier: D9NCFv8jwYo6nKUJFGsYdY54fL6ckDHlRfe9IKW2EKo= Subject key identifier: A8:D2:E5:B6:7E:7A:1C:CD:3B:F1:28:92:84:B6:08:89:EA:DE:EB:EF Certificate issuer: /CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA Certificate serial: 1A6F Authority key identifier: 0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/qNLltn56HM078SiShLYIiere6-8.roa Signing time: Thu 26 Feb 2026 02:17:49 +0000 ROA not before: Thu 26 Feb 2026 02:17:49 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 37963 IP address blocks: 2401:2e00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 15:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6767 (0x1a6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA Validity Not Before: Feb 26 02:17:49 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=A8D2E5B67E7A1CCD3BF1289284B60889EADEEBEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:91:dc:8b:fd:e8:91:88:cd:c3:fd:fd:c1: 66:f8:3f:6c:b1:c9:7f:71:c5:b6:30:cc:a1:a0:00: 50:c0:e1:aa:f3:01:01:e4:64:5c:d1:d3:68:c3:ad: e8:4c:3e:39:b8:78:db:75:37:fb:03:19:fb:10:8a: f8:55:30:61:b4:5b:1c:46:0a:9e:6a:8d:a6:e8:e5: 88:a7:9b:59:42:d7:3c:fe:21:fc:52:79:62:4f:61: 37:e1:9f:13:37:0e:cd:55:41:27:a6:5a:08:9a:1d: c7:c4:8d:58:f7:70:a2:c6:3a:8e:79:4b:86:3a:3e: 43:4a:60:52:c7:15:17:ad:d0:90:aa:9a:c2:6c:81: 4e:21:67:fa:59:d8:ad:cd:70:8a:59:d2:73:db:4e: 38:f9:b1:d7:f9:c3:e2:a3:c9:86:06:ba:da:32:82: ba:72:12:09:d7:96:71:fb:8d:23:3f:3b:47:ae:d1: 3e:46:c0:70:77:ba:17:ab:15:41:3a:d8:40:c3:c7: 15:25:02:c8:b0:a3:6c:11:77:11:64:81:87:aa:4f: e8:b2:be:a8:e0:94:5e:06:af:ed:0b:97:f3:87:aa: d1:bd:0f:0e:39:bd:59:60:b2:b6:23:8f:2b:7c:27: b1:a3:aa:e6:11:a0:b4:8f:9f:d9:b3:84:6e:58:df: 0f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D2:E5:B6:7E:7A:1C:CD:3B:F1:28:92:84:B6:08:89:EA:DE:EB:EF X509v3 Authority Key Identifier: keyid:0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/qNLltn56HM078SiShLYIiere6-8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:2e00::/32 Signature Algorithm: sha256WithRSAEncryption 23:3f:78:57:63:4d:fe:68:aa:19:ca:1e:ff:a0:1c:f7:01:72: be:ca:ee:66:53:97:35:32:d3:da:8c:0d:bc:11:16:90:95:b8: 29:1f:8e:9f:43:78:85:80:38:e0:92:d8:15:50:03:9c:70:a7: 88:e0:01:e1:9f:d3:86:ff:ad:48:42:00:07:99:86:06:ae:cd: 3b:8b:62:e8:0a:e0:b9:43:a2:71:ef:e5:6d:32:21:2a:d1:4e: 88:fa:89:8b:de:88:18:ef:87:fa:0c:43:ff:b6:5c:80:82:5d: 36:67:df:b6:5b:81:f6:ff:3e:50:09:d0:6e:76:d8:ef:30:02: ec:be:50:76:a4:31:f6:20:cd:77:9f:09:c8:76:bd:91:d0:5b: 85:e9:3a:8d:82:89:2e:19:d0:c2:c2:6d:6b:bd:74:a1:58:55: 42:d0:9f:a6:d9:89:74:12:ba:ba:e8:45:bc:4f:8b:28:43:41: b1:3a:0b:d2:fa:fb:20:da:c3:3a:70:ca:f4:72:15:ff:36:22: fc:46:b4:15:98:d2:85:2f:d3:05:c6:b1:2a:9a:0c:2d:06:9d: 15:50:4b:88:7f:5c:9a:5e:c1:4a:4b:9d:48:d3:32:ab:5e:46: 31:a3:f0:52:b1:5f:71:ef:73:2a:ed:da:2b:7c:2f:8c:47:1d: bc:cd:eb:3b -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICGm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE2 Rjk3MkQyNDA3OEY4OTA4OEVEMTEwQTI2RENERjkwQTlFQkNFQTAeFw0yNjAyMjYw MjE3NDlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEE4RDJFNUI2N0U3QTFD Q0QzQkYxMjg5Mjg0QjYwODg5RUFERUVCRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmTZHci/3okYjNw/39wWb4P2yxyX9xxbYwzKGgAFDA4arzAQHk ZFzR02jDrehMPjm4eNt1N/sDGfsQivhVMGG0WxxGCp5qjabo5Yinm1lC1zz+IfxS eWJPYTfhnxM3Ds1VQSemWgiaHcfEjVj3cKLGOo55S4Y6PkNKYFLHFRet0JCqmsJs gU4hZ/pZ2K3NcIpZ0nPbTjj5sdf5w+KjyYYGutoygrpyEgnXlnH7jSM/O0eu0T5G wHB3uherFUE62EDDxxUlAsiwo2wRdxFkgYeqT+iyvqjglF4Gr+0Ll/OHqtG9Dw45 vVlgsrYjjyt8J7GjquYRoLSPn9mzhG5Y3w8XAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUqNLltn56HM078SiShLYIiere6+8wHwYDVR0jBBgwFoAUCm+XLSQHj4kIjtEQ om3N+QqevOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQy L0NtLVhMU1FIajRrSWp0RVFvbTNOLVFxZXZPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvQ20tWExTUUhqNGtJanRFUW9tM04tUXFldk9vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQyL3FOTGx0bjU2SE0wNzhT aVNoTFlJaWVyZTYtOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAS4AMA0GCSqGSIb3DQEBCwUAA4IBAQAjP3hXY03+aKoZyh7/oBz3AXK+yu5m U5c1MtPajA28ERaQlbgpH46fQ3iFgDjgktgVUAOccKeI4AHhn9OG/61IQgAHmYYG rs07i2LoCuC5Q6Jx7+VtMiEq0U6I+omL3ogY74f6DEP/tlyAgl02Z9+2W4H2/z5Q CdBudtjvMALsvlB2pDH2IM13nwnIdr2R0FuF6TqNgokuGdDCwm1rvXShWFVC0J+m 2Yl0Erq66EW8T4soQ0GxOgvS+vsg2sM6cMr0chX/NiL8RrQVmNKFL9MFxrEqmgwt Bp0VUEuIf1yaXsFKS51I0zKrXkYxo/BSsV9x73Mq7dorfC+MRx28zes7 -----END CERTIFICATE-----Generated at Mon Mar 2 14:14:53 2026 by rpki-client