$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/BanSKiIiVPVlpAOM-15AuuWqC9E.roa File: BanSKiIiVPVlpAOM-15AuuWqC9E.roa (raw, json) Hash identifier: Uu7koKG6EADaE4ScNMIghBOpGv8kwnUnhHFSreHiw6k= Subject key identifier: 05:A9:D2:2A:22:22:54:F5:65:A4:03:8C:FB:5E:40:BA:E5:AA:0B:D1 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 0628 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/BanSKiIiVPVlpAOM-15AuuWqC9E.roa Signing time: Mon 26 Jan 2026 06:38:00 +0000 ROA not before: Mon 26 Jan 2026 06:38:00 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 136826 IP address blocks: 103.118.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 10:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Jan 26 06:38:00 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=05A9D22A222254F565A4038CFB5E40BAE5AA0BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:a2:28:5b:2c:87:a3:3d:65:80:08:40:ba: 65:b2:fe:88:44:44:80:2b:f5:72:1b:0a:3d:44:2c: 62:dd:09:22:0b:2d:35:6e:d0:00:ab:d5:fa:ae:27: 1b:b2:72:a9:9a:42:3a:34:10:8f:e8:d3:6f:c7:48: f0:9a:a6:84:54:55:b8:24:b4:8c:e5:82:e2:cc:65: b0:2d:da:76:d9:fc:79:35:cd:c2:e7:6d:d0:be:f0: 66:33:a6:89:96:c8:5c:7a:93:01:14:0a:ed:c5:35: 45:f2:d6:ec:22:6f:d9:2e:cb:37:26:e8:a2:58:79: 7f:0a:75:25:47:fb:2e:9c:80:29:0e:24:bb:33:e7: 12:c7:aa:9b:b5:99:af:2d:dc:3a:1e:7c:67:1e:29: 44:d9:ab:06:f1:6a:86:6b:26:8b:36:73:b2:4a:f1: 2d:71:50:f5:55:bd:08:8c:25:98:be:5c:5a:80:00: ee:b4:0b:2e:a1:62:7f:c1:ae:30:44:be:e4:b3:ea: 12:aa:4c:dd:c0:b1:94:95:46:9b:89:69:e4:eb:96: 98:b5:ee:b4:31:fb:34:6c:05:06:9a:8b:cd:8d:96: 87:a5:83:94:16:3a:a4:d4:60:93:36:76:40:c9:de: 51:65:db:f1:15:9c:b6:3b:f8:8b:3a:83:00:c2:e9: 98:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A9:D2:2A:22:22:54:F5:65:A4:03:8C:FB:5E:40:BA:E5:AA:0B:D1 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/BanSKiIiVPVlpAOM-15AuuWqC9E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.212.0/22 Signature Algorithm: sha256WithRSAEncryption 26:c0:6c:63:4e:04:f1:d3:5f:3a:90:de:1f:3c:13:9e:1a:33: ee:ee:30:32:26:36:93:a9:7f:77:94:aa:73:4c:79:cb:57:af: 7f:26:67:e4:4f:64:ae:d4:d6:4d:55:a5:c5:ad:47:b2:6e:35: ef:e9:0c:d3:9a:d0:15:63:53:08:bb:d9:08:39:00:a4:a6:ff: f1:9b:62:e1:e5:28:01:94:59:54:b2:ff:75:90:14:a4:d1:8a: 79:ae:a8:fe:7e:ef:f8:ca:cc:78:c1:f0:2e:30:42:0f:56:1e: 04:99:78:3f:2d:54:02:0c:74:18:8f:c8:96:7b:f0:d8:bd:29: b9:45:f0:84:44:d5:e1:fb:08:cc:5f:55:b0:9b:20:e7:99:74: 8f:43:f5:fc:56:38:c7:10:c9:7d:59:9f:c8:d8:e6:84:9c:94: 01:92:fd:fd:e3:9b:62:75:dd:e7:32:12:50:ca:87:03:ab:04: 04:8b:9e:d7:f7:b2:d0:b1:f7:14:e4:5b:af:9a:e8:a1:4a:a5: 88:15:44:c6:0b:96:2e:1c:07:49:f1:64:9c:62:82:c3:ce:f5: ab:cd:2e:57:17:be:d0:79:73:42:87:72:58:87:04:ea:5e:b2: 57:6a:22:3c:bc:93:ee:dc:3c:54:15:ed:3a:01:76:a1:cc:25: 36:c4:a1:63 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBigwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzlF RTg1MkZFMTM4Q0RFREM1QjQyRDExQTM0Mjk1RDEwOUFENDkyNTAeFw0yNjAxMjYw NjM4MDBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDA1QTlEMjJBMjIyMjU0 RjU2NUE0MDM4Q0ZCNUU0MEJBRTVBQTBCRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGoaIoWyyHoz1lgAhAumWy/ohERIAr9XIbCj1ELGLdCSILLTVu 0ACr1fquJxuycqmaQjo0EI/o02/HSPCapoRUVbgktIzlguLMZbAt2nbZ/Hk1zcLn bdC+8GYzpomWyFx6kwEUCu3FNUXy1uwib9kuyzcm6KJYeX8KdSVH+y6cgCkOJLsz 5xLHqpu1ma8t3DoefGceKUTZqwbxaoZrJos2c7JK8S1xUPVVvQiMJZi+XFqAAO60 Cy6hYn/BrjBEvuSz6hKqTN3AsZSVRpuJaeTrlpi17rQx+zRsBQaai82Nloelg5QW OqTUYJM2dkDJ3lFl2/EVnLY7+Is6gwDC6ZgfAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUBanSKiIiVPVlpAOM+15AuuWqC9EwHwYDVR0jBBgwFoAUOe6FL+E4ze3FtC0R o0KV0QmtSSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcx Ni9PZTZGTC1FNHplM0Z0QzBSbzBLVjBRbXRTU1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MTYvQmFuU0tpSWlWUFZs cEFPTS0xNUF1dVdxQzlFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmd21DANBgkqhkiG9w0BAQsFAAOCAQEAJsBsY04E8dNfOpDeHzwTnhoz7u4w MiY2k6l/d5Sqc0x5y1evfyZn5E9krtTWTVWlxa1Hsm417+kM05rQFWNTCLvZCDkA pKb/8Zti4eUoAZRZVLL/dZAUpNGKea6o/n7v+MrMeMHwLjBCD1YeBJl4Py1UAgx0 GI/Ilnvw2L0puUXwhETV4fsIzF9VsJsg55l0j0P1/FY4xxDJfVmfyNjmhJyUAZL9 /eObYnXd5zISUMqHA6sEBIue1/ey0LH3FORbr5rooUqliBVExguWLhwHSfFknGKC w871q80uVxe+0HlzQodyWIcE6l6yV2oiPLyT7tw8VBXtOgF2ocwlNsShYw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:34:59 2026 by rpki-client