$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/fnynlPUM_SPeXdrSyF-Hf-aJVyk.roa File: fnynlPUM_SPeXdrSyF-Hf-aJVyk.roa (raw, json) Hash identifier: tHUOoid8LEF1gEg9c3t2OKMtLIL5MR4a5o2RXr0v3no= Subject key identifier: 7E:7C:A7:94:F5:0C:FD:23:DE:5D:DA:D2:C8:5F:87:7F:E6:89:57:29 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 18D6 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/fnynlPUM_SPeXdrSyF-Hf-aJVyk.roa Signing time: Tue 10 Feb 2026 05:00:43 +0000 ROA not before: Tue 10 Feb 2026 05:00:43 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 55990 IP address blocks: 116.218.0.0/19 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 15:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6358 (0x18d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Feb 10 05:00:43 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7E7CA794F50CFD23DE5DDAD2C85F877FE6895729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6d:e8:06:00:ff:88:b6:f4:1e:8e:ff:ea:c5: 71:48:35:9e:ee:bb:dc:b8:69:4c:11:2b:e1:c3:05: 9f:01:61:e5:42:d2:0f:0b:82:8a:6f:15:78:58:bc: ae:76:1d:1e:f8:1a:15:fd:8e:45:84:42:76:a3:d1: e3:d2:18:ab:06:61:4c:99:05:c4:7c:1f:6b:de:36: 11:1a:6f:ec:9b:ac:38:35:c1:8e:5b:50:9d:12:8c: cb:f5:3e:df:3c:c0:bd:15:10:cb:39:22:3c:35:1d: b3:d3:fa:e0:22:9f:a8:df:34:fe:37:56:7b:cf:63: 21:f6:18:39:48:65:45:9b:af:d4:35:dc:82:21:d4: ab:bf:4b:2b:8a:a0:44:3d:a6:c6:18:9f:55:a2:e1: 1f:b7:c8:8c:ed:84:82:12:b4:55:31:21:06:2b:87: df:cb:10:1e:16:dc:63:98:38:33:40:1e:78:44:dc: 36:a2:05:b1:af:e3:36:2b:8a:34:aa:a1:ff:28:e1: 1c:94:bc:6d:2f:83:6f:19:b3:4a:89:07:54:6d:b3: 11:40:1b:14:1e:b9:3a:e6:4c:78:ca:53:f9:f0:d9: 24:b1:c9:c0:58:b0:37:1a:40:ae:60:85:e8:8c:0f: af:b0:eb:dc:e6:21:0d:a9:e5:5c:3b:c4:6d:2b:38: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7C:A7:94:F5:0C:FD:23:DE:5D:DA:D2:C8:5F:87:7F:E6:89:57:29 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/fnynlPUM_SPeXdrSyF-Hf-aJVyk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 116.218.0.0/19 Signature Algorithm: sha256WithRSAEncryption 21:a2:40:6f:9c:7f:8f:88:19:a4:de:7f:32:1a:c8:3f:78:f2: c2:19:27:d9:7c:ee:bc:96:73:9a:e0:24:59:d2:7e:f2:7b:dd: d2:ef:ff:1f:80:27:3d:62:8b:78:a5:d5:ab:9a:7f:60:fb:df: 86:e9:71:6f:cf:5a:30:b8:0b:81:58:e9:63:31:94:4f:f9:c6: 03:4f:97:ed:a8:96:65:0a:33:3f:73:ac:4b:ca:13:b6:b9:d0: 3b:89:37:a3:a4:d3:f0:99:19:88:ff:36:91:34:e7:13:bd:ee: 90:dd:bc:be:f0:ef:6e:8a:c6:35:c6:50:e4:6f:cb:71:f7:28: b7:9a:2d:f2:0e:6b:51:f9:b9:40:bc:9e:b8:a8:8c:ed:c1:7a: cf:de:26:54:22:d9:49:73:a4:b7:f5:7a:31:fb:c7:c0:6a:3c: e4:18:d0:ec:43:f6:f5:b2:e0:28:86:8e:0f:4a:ea:a4:b2:08: 6a:ce:de:16:35:ff:bb:48:c0:b9:c0:70:76:54:b2:37:ca:42: 26:ba:c8:82:11:ef:91:ef:76:85:9f:b0:cf:8a:9d:48:f5:95: 34:34:b4:e5:cd:80:86:fc:da:ae:68:42:3d:80:35:88:16:99: dc:ff:3f:c9:fb:67:47:96:b3:6a:6b:9f:27:6c:f6:67:e6:65: dc:e8:89:17 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGNYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNjAyMTAw NTAwNDNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDdFN0NBNzk0RjUwQ0ZE MjNERTVEREFEMkM4NUY4NzdGRTY4OTU3MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTbegGAP+ItvQejv/qxXFINZ7uu9y4aUwRK+HDBZ8BYeVC0g8L gopvFXhYvK52HR74GhX9jkWEQnaj0ePSGKsGYUyZBcR8H2veNhEab+ybrDg1wY5b UJ0SjMv1Pt88wL0VEMs5Ijw1HbPT+uAin6jfNP43VnvPYyH2GDlIZUWbr9Q13IIh 1Ku/SyuKoEQ9psYYn1Wi4R+3yIzthIIStFUxIQYrh9/LEB4W3GOYODNAHnhE3Dai BbGv4zYrijSqof8o4RyUvG0vg28Zs0qJB1RtsxFAGxQeuTrmTHjKU/nw2SSxycBY sDcaQK5gheiMD6+w69zmIQ2p5Vw7xG0rOK4TAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUfnynlPUM/SPeXdrSyF+Hf+aJVykwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvZm55bmxQVU1fU1Bl WGRyU3lGLUhmLWFKVnlrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXTaADANBgkqhkiG9w0BAQsFAAOCAQEAIaJAb5x/j4gZpN5/MhrIP3jywhkn 2XzuvJZzmuAkWdJ+8nvd0u//H4AnPWKLeKXVq5p/YPvfhulxb89aMLgLgVjpYzGU T/nGA0+X7aiWZQozP3OsS8oTtrnQO4k3o6TT8JkZiP82kTTnE73ukN28vvDvborG NcZQ5G/Lcfcot5ot8g5rUfm5QLyeuKiM7cF6z94mVCLZSXOkt/V6MfvHwGo85BjQ 7EP29bLgKIaOD0rqpLIIas7eFjX/u0jAucBwdlSyN8pCJrrIghHvke92hZ+wz4qd SPWVNDS05c2AhvzarmhCPYA1iBaZ3P8/yftnR5azamufJ2z2Z+Zl3OiJFw== -----END CERTIFICATE-----Generated at Mon Mar 2 14:49:49 2026 by rpki-client