$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/EA4uAG-qCXzSaPCcS19FXvprl7Y.roa File: EA4uAG-qCXzSaPCcS19FXvprl7Y.roa (raw, json) Hash identifier: K+i/b7H6oRT/9X4Hzk2EYOhflgnC67oZbVdEyUZrWQo= Subject key identifier: 10:0E:2E:00:6F:AA:09:7C:D2:68:F0:9C:4B:5F:45:5E:FA:6B:97:B6 Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF Certificate serial: 19EE Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/EA4uAG-qCXzSaPCcS19FXvprl7Y.roa Signing time: Mon 26 Jan 2026 06:52:57 +0000 ROA not before: Mon 26 Jan 2026 06:52:57 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 58593 IP address blocks: 143.64.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 10:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6638 (0x19ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF Validity Not Before: Jan 26 06:52:57 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=100E2E006FAA097CD268F09C4B5F455EFA6B97B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5f:75:e2:98:f8:cc:da:86:9b:d7:57:63:42: 7a:20:c5:d1:7d:91:01:eb:bb:23:29:61:10:ca:8c: bb:76:78:6e:6f:de:41:32:5a:44:c2:82:c4:3e:d7: 44:25:c9:19:83:fb:ef:09:e0:03:33:37:47:06:04: 55:83:ff:67:f9:d9:1b:d6:72:96:da:6c:e2:2e:8c: 0a:9b:dc:ed:e2:1c:4b:70:9b:7f:63:06:be:a9:bf: f8:a7:f6:5e:48:88:ea:33:75:30:1a:85:6f:de:7d: dd:28:de:5e:58:65:c1:55:2e:30:0b:74:6f:a1:93: 24:03:f2:90:4f:ae:54:92:96:f1:12:85:1b:7c:b4: d9:36:df:03:52:97:26:bc:94:02:3d:84:53:75:39: ec:06:df:d1:0d:d1:59:2b:83:02:82:9a:d6:42:ad: 66:6e:9b:58:d9:b7:bd:20:af:1d:2d:81:36:b6:6e: ce:f6:25:ec:da:dd:c6:c4:8b:07:21:0a:99:62:27: 04:e3:e9:36:68:2f:b9:ac:b0:df:d8:ed:e1:21:12: 50:9f:65:91:d0:f8:29:98:75:6f:a1:ec:a5:24:b4: d0:0a:e6:2c:8f:b7:cb:c9:96:a4:6f:90:45:ce:ea: 2b:42:36:74:93:7b:a0:25:3c:5c:a1:00:c4:49:77: 48:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0E:2E:00:6F:AA:09:7C:D2:68:F0:9C:4B:5F:45:5E:FA:6B:97:B6 X509v3 Authority Key Identifier: keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/EA4uAG-qCXzSaPCcS19FXvprl7Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 143.64.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5c:5c:19:cc:ce:81:66:c5:2b:08:9e:de:38:7a:b7:18:a4:6c: 6f:21:cd:8b:30:40:04:21:0a:26:f1:96:0a:5c:b5:aa:54:81: f2:d2:3d:ef:d3:87:e3:17:e0:40:48:2b:6c:c9:ca:6c:97:e0: 83:ed:22:c3:43:8e:8a:cc:e4:10:cc:02:b0:cb:a8:47:21:0b: 61:30:1a:5d:86:ae:31:f9:05:7c:c7:93:f1:a8:1a:34:06:ae: 49:31:71:59:55:23:4d:06:32:7e:c5:7c:69:3e:5c:29:d1:aa: c6:75:a8:32:63:af:b4:3b:a6:55:b2:77:3a:d7:75:a5:17:c8: e5:05:62:e6:b9:3f:79:25:97:74:08:89:0d:de:6d:c1:6e:87: ab:68:29:cf:d1:c5:00:0b:ed:69:43:5b:fc:3a:9b:c4:cc:76: a0:e6:ad:52:39:2b:af:87:04:e0:6f:f9:af:80:18:b1:1a:e4: 82:c1:31:e9:31:30:03:d7:fc:d8:6b:cb:cd:be:71:e3:22:ce: e0:12:1f:e6:5e:f9:b1:24:84:8a:24:e7:99:3a:38:d6:96:24: 43:05:1d:16:d5:f6:79:0a:12:2b:61:4a:55:be:fe:01:0c:eb: cf:37:2d:41:87:c1:c5:e7:2d:8e:31:ce:2e:92:ff:e2:23:a7: ad:5a:e8:7e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICGe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjFE Qzg3NTk2NUMyQkE2MUQxREFDQkI0OERFRTE0MDU1NEFBNUFFRjAeFw0yNjAxMjYw NjUyNTdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDEwMEUyRTAwNkZBQTA5 N0NEMjY4RjA5QzRCNUY0NTVFRkE2Qjk3QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYX3XimPjM2oab11djQnogxdF9kQHruyMpYRDKjLt2eG5v3kEy WkTCgsQ+10QlyRmD++8J4AMzN0cGBFWD/2f52RvWcpbabOIujAqb3O3iHEtwm39j Br6pv/in9l5IiOozdTAahW/efd0o3l5YZcFVLjALdG+hkyQD8pBPrlSSlvEShRt8 tNk23wNSlya8lAI9hFN1OewG39EN0VkrgwKCmtZCrWZum1jZt70grx0tgTa2bs72 Jeza3cbEiwchCpliJwTj6TZoL7mssN/Y7eEhElCfZZHQ+CmYdW+h7KUktNAK5iyP t8vJlqRvkEXO6itCNnSTe6AlPFyhAMRJd0gfAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUEA4uAG+qCXzSaPCcS19FXvprl7YwHwYDVR0jBBgwFoAUIdyHWWXCumHR2su0 je4UBVSqWu8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy MC9JZHlIV1dYQ3VtSFIyc3UwamU0VUJWU3FXdTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0lkeUhXV1hDdW1IUjJzdTBqZTRVQlZTcVd1OC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvRUE0dUFHLXFDWHpT YVBDY1MxOUZYdnBybDdZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAI9AMA0GCSqGSIb3DQEBCwUAA4IBAQBcXBnMzoFmxSsInt44ercYpGxvIc2L MEAEIQom8ZYKXLWqVIHy0j3v04fjF+BASCtsycpsl+CD7SLDQ46KzOQQzAKwy6hH IQthMBpdhq4x+QV8x5PxqBo0Bq5JMXFZVSNNBjJ+xXxpPlwp0arGdagyY6+0O6ZV snc613WlF8jlBWLmuT95JZd0CIkN3m3BboeraCnP0cUAC+1pQ1v8OpvEzHag5q1S OSuvhwTgb/mvgBixGuSCwTHpMTAD1/zYa8vNvnHjIs7gEh/mXvmxJISKJOeZOjjW liRDBR0W1fZ5ChIrYUpVvv4BDOvPNy1Bh8HF5y2OMc4ukv/iI6etWuh+ -----END CERTIFICATE-----Generated at Mon Mar 2 10:05:53 2026 by rpki-client