$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2522/gHKbb-owHdBUF4fvL6_pSMt32Zs.roa File: gHKbb-owHdBUF4fvL6_pSMt32Zs.roa (raw, json) Hash identifier: 56mvpNn9plMsrTiXaQ9HFU9FBsxkgydFNqE/+N0vCKw= Subject key identifier: 80:72:9B:6F:EA:30:1D:D0:54:17:87:EF:2F:AF:E9:48:CB:77:D9:9B Certificate issuer: /CN=4087DAB67172836B082075CE18BE5E5FA45D5E95 Certificate serial: 231E Authority key identifier: 40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/gHKbb-owHdBUF4fvL6_pSMt32Zs.roa Signing time: Mon 26 Jan 2026 06:56:00 +0000 ROA not before: Mon 26 Jan 2026 06:56:00 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 131567 IP address blocks: 103.96.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 07:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8990 (0x231e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4087DAB67172836B082075CE18BE5E5FA45D5E95 Validity Not Before: Jan 26 06:56:00 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=80729B6FEA301DD0541787EF2FAFE948CB77D99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:f4:03:e0:14:e6:cf:01:c9:2c:b7:9d:87: 06:45:be:cc:95:82:d6:f5:82:0a:9f:fa:9c:5a:68: 7b:d4:5b:1f:d6:80:ac:7b:8d:a0:52:19:28:0a:9c: b1:24:43:59:85:ff:ed:d7:23:6a:42:37:b8:79:80: 7d:f0:15:39:f9:91:ed:99:c6:3e:89:31:33:fa:e6: bf:41:94:97:60:31:f1:f8:ba:ee:ef:7e:30:ee:af: f6:51:fc:71:9e:f7:e6:ec:0f:d2:95:48:1c:fa:50: 0c:00:e9:cb:29:69:d6:5b:8d:5e:7d:81:5c:36:e8: 40:c9:61:ed:5c:4a:55:e3:8e:2c:1b:3c:a7:35:59: d5:8e:8a:0c:13:62:96:4f:eb:e2:2c:09:1f:99:68: 19:94:f7:8c:1e:3e:9b:01:6c:1e:15:29:61:a2:7a: 8d:c8:6b:e2:c2:ca:b6:3a:10:ca:5d:a4:b5:83:ba: a2:d2:65:bb:11:e6:a4:2a:15:c8:1b:6d:f2:28:b9: 7b:53:b3:86:6b:27:8a:14:0f:8f:20:41:b0:fb:9d: 4a:74:68:e4:73:58:c2:f8:6f:01:72:78:06:a4:ea: 91:d3:ac:28:0d:4f:53:74:02:ef:43:44:a8:46:c8: ec:05:b0:dc:51:bc:af:f9:54:80:12:50:e1:ba:95: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:72:9B:6F:EA:30:1D:D0:54:17:87:EF:2F:AF:E9:48:CB:77:D9:9B X509v3 Authority Key Identifier: keyid:40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/gHKbb-owHdBUF4fvL6_pSMt32Zs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.96.8.0/24 Signature Algorithm: sha256WithRSAEncryption 88:d2:93:4f:30:4a:3d:85:e9:d3:af:9b:aa:2a:14:be:cf:f8: 2f:a4:59:be:88:03:06:fb:dc:98:3e:b0:38:8f:f6:7b:c1:74: 11:57:80:4a:f1:4e:e2:97:5d:ff:21:21:f1:f1:45:af:5c:3b: 13:4d:23:b9:bc:62:c8:c6:1e:3d:80:f7:d7:2e:6a:98:66:74: 56:bd:f2:e4:75:9e:44:1b:af:08:0f:7d:81:ea:d0:81:e6:6e: 70:f1:3f:a6:f9:8f:f8:ff:bd:06:52:d7:f5:cf:98:55:d4:da: 9d:11:79:61:f1:34:25:33:6d:51:ec:cf:63:f5:c5:71:b4:5e: 78:bc:15:e3:45:24:47:5c:5c:d6:08:bd:f8:bd:28:3b:6f:8d: 05:19:24:48:91:ef:2e:fe:e8:1b:42:ba:a1:76:02:81:a8:41: 60:c5:f7:68:7b:18:09:96:ce:3a:03:2f:59:48:a2:06:f6:6e: 61:21:f2:a5:51:1c:86:73:a5:55:df:59:60:b5:31:2f:1e:57: 60:43:41:2c:d4:b3:22:72:6b:27:b3:22:05:55:ca:e6:14:b2: e7:ca:8b:41:fc:bf:f0:02:ea:62:a9:87:d6:4b:1a:1e:69:a2: da:f2:33:17:0e:eb:be:f2:2a:f1:97:22:96:44:ad:da:9c:9a: 07:01:c4:bf -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIx4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA4 N0RBQjY3MTcyODM2QjA4MjA3NUNFMThCRTVFNUZBNDVENUU5NTAeFw0yNjAxMjYw NjU2MDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDgwNzI5QjZGRUEzMDFE RDA1NDE3ODdFRjJGQUZFOTQ4Q0I3N0Q5OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvXPQD4BTmzwHJLLedhwZFvsyVgtb1ggqf+pxaaHvUWx/WgKx7 jaBSGSgKnLEkQ1mF/+3XI2pCN7h5gH3wFTn5ke2Zxj6JMTP65r9BlJdgMfH4uu7v fjDur/ZR/HGe9+bsD9KVSBz6UAwA6cspadZbjV59gVw26EDJYe1cSlXjjiwbPKc1 WdWOigwTYpZP6+IsCR+ZaBmU94wePpsBbB4VKWGieo3Ia+LCyrY6EMpdpLWDuqLS ZbsR5qQqFcgbbfIouXtTs4ZrJ4oUD48gQbD7nUp0aORzWML4bwFyeAak6pHTrCgN T1N0Au9DRKhGyOwFsNxRvK/5VIASUOG6lUotAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUgHKbb+owHdBUF4fvL6/pSMt32ZswHwYDVR0jBBgwFoAUQIfatnFyg2sIIHXO GL5eX6RdXpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy Mi9RSWZhdG5GeWcyc0lJSFhPR0w1ZVg2UmRYcFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1FJZmF0bkZ5ZzJzSUlIWE9HTDVlWDZSZFhwVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MjIvZ0hLYmItb3dIZEJV RjRmdkw2X3BTTXQzMlpzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdgCDANBgkqhkiG9w0BAQsFAAOCAQEAiNKTTzBKPYXp06+bqioUvs/4L6RZ vogDBvvcmD6wOI/2e8F0EVeASvFO4pdd/yEh8fFFr1w7E00jubxiyMYePYD31y5q mGZ0Vr3y5HWeRBuvCA99gerQgeZucPE/pvmP+P+9BlLX9c+YVdTanRF5YfE0JTNt UezPY/XFcbReeLwV40UkR1xc1gi9+L0oO2+NBRkkSJHvLv7oG0K6oXYCgahBYMX3 aHsYCZbOOgMvWUiiBvZuYSHypVEchnOlVd9ZYLUxLx5XYENBLNSzInJrJ7MiBVXK 5hSy58qLQfy/8ALqYqmH1ksaHmmi2vIzFw7rvvIq8ZcilkSt2pyaBwHEvw== -----END CERTIFICATE-----Generated at Mon Feb 23 06:07:17 2026 by rpki-client