$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2841/K6dM3LoliVMQPn-6OZ8bO8A4Ux8.roa File: K6dM3LoliVMQPn-6OZ8bO8A4Ux8.roa (raw, json) Hash identifier: /DWeD+5yM4Zt5ioOX6r2bUHR2V5mYF+BbU8pekEVfcQ= Subject key identifier: 2B:A7:4C:DC:BA:25:89:53:10:3E:7F:BA:39:9F:1B:3B:C0:38:53:1F Certificate issuer: /CN=51A5666D323BF842F6044CE71059773E2271B013 Certificate serial: 22FD Authority key identifier: 51:A5:66:6D:32:3B:F8:42:F6:04:4C:E7:10:59:77:3E:22:71:B0:13 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/K6dM3LoliVMQPn-6OZ8bO8A4Ux8.roa Signing time: Mon 26 Jan 2026 06:53:53 +0000 ROA not before: Mon 26 Jan 2026 06:53:53 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 137571 IP address blocks: 103.126.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 07:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8957 (0x22fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51A5666D323BF842F6044CE71059773E2271B013 Validity Not Before: Jan 26 06:53:53 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=2BA74CDCBA258953103E7FBA399F1B3BC038531F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:aa:00:c3:fc:21:4f:4d:28:26:da:cb:90:ad: a3:ac:ad:67:6d:3e:8f:b8:01:5a:d2:1a:63:cb:5f: 29:7b:04:7c:2c:6d:b5:b2:67:a9:b8:f2:8e:50:db: 5b:59:f0:d7:72:db:55:46:66:3d:c0:1e:aa:48:32: 57:69:f0:8a:78:eb:cb:17:29:13:f7:ed:41:f7:14: 29:da:bc:57:a8:a7:1c:aa:fc:86:27:88:8a:b1:25: d4:13:35:a9:18:d7:56:99:26:b3:40:e1:74:77:28: cb:f9:83:e3:93:6a:70:5b:7e:b7:1c:df:d5:b9:b8: f6:5b:ed:aa:8e:f4:8d:97:2c:d9:12:c6:68:60:ba: 85:3b:1c:04:88:9f:5a:ae:93:4e:bf:95:53:47:20: 86:24:f3:f8:bc:7c:f9:56:fb:01:31:da:13:10:f4: af:9b:00:a1:08:b8:06:d5:ba:97:08:04:fc:64:7d: 4b:34:94:c9:f1:d2:05:71:a3:b2:f9:56:dd:b5:7f: 74:e2:7b:ba:82:42:8c:a4:fb:86:40:e9:84:6a:c2: 98:40:49:a1:ff:6f:11:34:1c:5c:93:0f:39:e6:ac: cb:74:b4:6a:93:36:20:1f:43:a2:4a:68:6d:50:2a: 92:ac:60:f4:02:72:ba:fb:41:58:3b:65:f5:10:6f: 07:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A7:4C:DC:BA:25:89:53:10:3E:7F:BA:39:9F:1B:3B:C0:38:53:1F X509v3 Authority Key Identifier: keyid:51:A5:66:6D:32:3B:F8:42:F6:04:4C:E7:10:59:77:3E:22:71:B0:13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/K6dM3LoliVMQPn-6OZ8bO8A4Ux8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.126.101.0/24 Signature Algorithm: sha256WithRSAEncryption 49:b9:00:d8:6d:ca:6d:01:be:c5:21:3c:b5:34:01:58:6b:b9: 9a:01:8d:c3:f4:9d:aa:12:70:85:2d:b7:fe:08:28:69:f5:de: d8:02:9c:a2:de:21:83:5d:79:10:5b:39:b2:7a:31:85:86:00: 0f:b4:a8:6e:d2:20:a1:5b:11:60:95:e9:07:40:fc:0a:97:57: d9:58:69:91:c2:84:2b:de:7c:4c:ae:82:39:a0:41:b5:82:a5: c1:db:5e:61:f9:d4:eb:91:67:92:f8:ce:51:4a:5f:21:39:70: 2b:22:6b:9f:02:26:bb:fe:72:d8:97:a6:50:8a:d6:ad:70:28: c3:c8:b5:ad:66:c3:4f:9f:86:d5:37:a4:d0:2f:a3:f0:c3:47: 44:23:af:d7:b4:5d:ee:a0:ef:17:7f:62:45:8e:56:d7:d8:32: 00:6c:ca:24:e9:7b:09:e2:24:e9:9a:a2:16:40:c1:f3:cd:78: 9f:fa:f9:9c:2b:9f:fb:94:67:e0:47:04:c5:43:82:e5:98:f8: 19:83:15:3f:e3:21:63:b2:c2:aa:30:09:b4:73:a1:40:5d:87: f1:7f:88:30:a4:aa:55:db:e3:eb:73:ef:a0:a9:35:f8:b0:ec: 08:9b:e6:ad:04:d4:8c:08:36:d0:66:1e:e1:3a:a1:df:35:44: 53:a6:09:6b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTFB NTY2NkQzMjNCRjg0MkY2MDQ0Q0U3MTA1OTc3M0UyMjcxQjAxMzAeFw0yNjAxMjYw NjUzNTNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDJCQTc0Q0RDQkEyNTg5 NTMxMDNFN0ZCQTM5OUYxQjNCQzAzODUzMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOqgDD/CFPTSgm2suQraOsrWdtPo+4AVrSGmPLXyl7BHwsbbWy Z6m48o5Q21tZ8Ndy21VGZj3AHqpIMldp8Ip468sXKRP37UH3FCnavFeopxyq/IYn iIqxJdQTNakY11aZJrNA4XR3KMv5g+OTanBbfrcc39W5uPZb7aqO9I2XLNkSxmhg uoU7HASIn1quk06/lVNHIIYk8/i8fPlW+wEx2hMQ9K+bAKEIuAbVupcIBPxkfUs0 lMnx0gVxo7L5Vt21f3Tie7qCQoyk+4ZA6YRqwphASaH/bxE0HFyTDznmrMt0tGqT NiAfQ6JKaG1QKpKsYPQCcrr7QVg7ZfUQbwcvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUK6dM3LoliVMQPn+6OZ8bO8A4Ux8wHwYDVR0jBBgwFoAUUaVmbTI7+EL2BEzn EFl3PiJxsBMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg0 MS9VYVZtYlRJNy1FTDJCRXpuRUZsM1BpSnhzQk0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1VhVm1iVEk3LUVMMkJFem5FRmwzUGlKeHNCTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4NDEvSzZkTTNMb2xpVk1R UG4tNk9aOGJPOEE0VXg4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGd+ZTANBgkqhkiG9w0BAQsFAAOCAQEASbkA2G3KbQG+xSE8tTQBWGu5mgGN w/SdqhJwhS23/ggoafXe2AKcot4hg115EFs5snoxhYYAD7SobtIgoVsRYJXpB0D8 CpdX2VhpkcKEK958TK6COaBBtYKlwdteYfnU65FnkvjOUUpfITlwKyJrnwImu/5y 2JemUIrWrXAow8i1rWbDT5+G1Tek0C+j8MNHRCOv17Rd7qDvF39iRY5W19gyAGzK JOl7CeIk6ZqiFkDB8814n/r5nCuf+5Rn4EcExUOC5Zj4GYMVP+MhY7LCqjAJtHOh QF2H8X+IMKSqVdvj63PvoKk1+LDsCJvmrQTUjAg20GYe4Tqh3zVEU6YJaw== -----END CERTIFICATE-----Generated at Mon Feb 23 06:07:17 2026 by rpki-client