$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2927/z2PXj4uUP5XfnT_4HuwIz5WnqmY.roa File: z2PXj4uUP5XfnT_4HuwIz5WnqmY.roa (raw, json) Hash identifier: S6f/gEs3LRXtPf7lsSZaokZ1QivxCsVH9qyDn5e4sbM= Subject key identifier: CF:63:D7:8F:8B:94:3F:95:DF:9D:3F:F8:1E:EC:08:CF:95:A7:AA:66 Certificate issuer: /CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Certificate serial: 0489 Authority key identifier: 73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/z2PXj4uUP5XfnT_4HuwIz5WnqmY.roa Signing time: Wed 11 Feb 2026 04:15:25 +0000 ROA not before: Wed 11 Feb 2026 04:15:25 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 134760 IP address blocks: 43.250.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 10:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Validity Not Before: Feb 11 04:15:25 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=CF63D78F8B943F95DF9D3FF81EEC08CF95A7AA66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:57:25:aa:35:1d:3b:a0:b8:b9:09:f5:2a: df:9e:ef:c9:b6:38:c1:9f:c9:3b:e7:2c:52:9d:0e: 9f:c3:0f:29:b0:9d:49:b2:12:64:53:ec:2d:43:94: 05:80:5d:5c:36:1f:71:ad:47:8b:63:56:65:fa:93: 4e:98:bb:fc:86:20:06:af:e1:f0:f4:54:d3:d7:1d: be:b9:b6:32:96:83:9d:d8:9d:b7:e5:65:0a:dd:c7: c6:11:4c:21:2e:40:49:76:c4:54:0e:9e:9d:91:2b: 3e:a4:79:32:ed:4f:82:a4:e5:6b:f0:ed:af:db:9b: 91:79:5f:fc:31:3f:46:34:03:f9:ee:c2:13:3b:ce: a3:38:5b:1a:5a:3e:25:65:79:be:7f:f7:85:88:40: ff:39:f3:48:9e:cd:2f:b4:5e:fd:83:7b:ef:93:40: 70:b9:0e:c3:85:00:b5:9b:d1:4d:54:c9:e3:4b:2d: b0:4f:c1:e6:06:19:c3:4b:ba:7a:04:6c:8b:96:8a: 9b:ed:a4:dd:aa:20:8d:c6:b6:14:03:cf:c3:4e:3e: 73:40:17:5f:72:1b:6e:08:5e:1a:83:bf:e1:69:98: 7a:ef:a2:c2:0c:b4:d8:18:6e:d3:25:c8:fc:d2:15: 8a:2b:83:74:25:4f:cf:60:ce:eb:ab:1b:23:26:7d: a4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:63:D7:8F:8B:94:3F:95:DF:9D:3F:F8:1E:EC:08:CF:95:A7:AA:66 X509v3 Authority Key Identifier: keyid:73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/z2PXj4uUP5XfnT_4HuwIz5WnqmY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.250.32.0/22 Signature Algorithm: sha256WithRSAEncryption 71:57:5f:1b:cd:c7:a9:11:90:50:2f:d6:e7:5c:1c:37:61:24: d9:ec:22:33:76:1a:5e:a4:64:54:fe:db:d8:bc:e4:2a:e6:c0: 48:a1:95:28:3e:54:f6:29:46:12:61:cf:b6:14:ed:5e:99:ac: 37:e4:97:97:ab:43:0a:eb:31:08:d0:6e:e4:1a:21:99:ed:a8: 01:ca:7f:42:69:ea:a5:c1:b6:f4:62:de:10:31:4d:58:15:31: af:33:5d:b5:4f:01:49:fa:e4:00:8c:3f:2e:75:92:75:9a:12: 55:9a:49:05:42:f3:28:ed:53:fb:86:22:56:2d:64:ca:70:70: ef:8d:1c:74:6f:6b:68:ff:ae:2c:c5:45:4c:4f:96:bf:ee:41: a6:4c:f7:89:fb:c2:fc:ce:77:49:47:5a:2c:e2:38:a2:52:8d: 9b:a5:3e:b2:cc:23:a4:54:50:71:06:7d:0c:a7:95:d4:2d:a0: 0d:93:7d:95:d0:9d:9d:39:ef:a8:2e:f0:61:ed:f1:d5:92:10: 97:47:c4:63:7d:f4:9d:0c:6c:1b:46:30:2e:1b:2c:62:ab:b9: 6c:4a:f2:66:a8:20:4f:f8:4f:ca:3f:ce:88:1d:88:58:27:5a: d8:d1:a4:24:94:4b:d1:9a:e0:f7:52:78:90:55:82:98:bb:06: 1d:6d:0a:6f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNE MjExRDVCMjEwRTNCMTk2MDU0REI3MTg5MkQ4RTM4QTRFMDlFRjAeFw0yNjAyMTEw NDE1MjVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKENGNjNENzhGOEI5NDNG OTVERjlEM0ZGODFFRUMwOENGOTVBN0FBNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0ClclqjUdO6C4uQn1Kt+e78m2OMGfyTvnLFKdDp/DDymwnUmy EmRT7C1DlAWAXVw2H3GtR4tjVmX6k06Yu/yGIAav4fD0VNPXHb65tjKWg53Ynbfl ZQrdx8YRTCEuQEl2xFQOnp2RKz6keTLtT4Kk5Wvw7a/bm5F5X/wxP0Y0A/nuwhM7 zqM4WxpaPiVleb5/94WIQP8580iezS+0Xv2De++TQHC5DsOFALWb0U1UyeNLLbBP weYGGcNLunoEbIuWipvtpN2qII3GthQDz8NOPnNAF19yG24IXhqDv+FpmHrvosIM tNgYbtMlyPzSFYorg3QlT89gzuurGyMmfaRtAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUz2PXj4uUP5XfnT/4HuwIz5WnqmYwHwYDVR0jBBgwFoAUc9IR1bIQ47GWBU23 GJLY44pOCe8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjky Ny9jOUlSMWJJUTQ3R1dCVTIzR0pMWTQ0cE9DZTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2M5SVIxYklRNDdHV0JVMjNHSkxZNDRwT0NlOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5MjcvejJQWGo0dVVQNVhm blRfNEh1d0l6NVducW1ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv6IDANBgkqhkiG9w0BAQsFAAOCAQEAcVdfG83HqRGQUC/W51wcN2Ek2ewi M3YaXqRkVP7b2LzkKubASKGVKD5U9ilGEmHPthTtXpmsN+SXl6tDCusxCNBu5Boh me2oAcp/QmnqpcG29GLeEDFNWBUxrzNdtU8BSfrkAIw/LnWSdZoSVZpJBULzKO1T +4YiVi1kynBw740cdG9raP+uLMVFTE+Wv+5Bpkz3ifvC/M53SUdaLOI4olKNm6U+ sswjpFRQcQZ9DKeV1C2gDZN9ldCdnTnvqC7wYe3x1ZIQl0fEY330nQxsG0YwLhss Yqu5bEryZqggT/hPyj/OiB2IWCda2NGkJJRL0Zrg91J4kFWCmLsGHW0Kbw== -----END CERTIFICATE-----Generated at Mon Mar 2 10:45:44 2026 by rpki-client