$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/kMtGhQY_DnHonghgB-517K1lQLU.roa File: kMtGhQY_DnHonghgB-517K1lQLU.roa (raw, json) Hash identifier: PAz0Hu8Y3D0G++gjB/sjurw0ZoEzzimp8e5HgUHfkEQ= Subject key identifier: 90:CB:46:85:06:3F:0E:71:E8:9E:08:60:07:EE:75:EC:AD:65:40:B5 Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 2928 Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/kMtGhQY_DnHonghgB-517K1lQLU.roa Signing time: Mon 26 Jan 2026 06:52:24 +0000 ROA not before: Mon 26 Jan 2026 06:52:24 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 4538 IP address blocks: 103.152.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10536 (0x2928) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Jan 26 06:52:24 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=90CB4685063F0E71E89E086007EE75ECAD6540B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c1:9d:81:6b:01:bc:bd:88:9e:03:82:63:c2: cd:64:f4:1f:c8:6c:96:66:e6:15:1d:c0:d1:d3:b8: ef:c4:d6:c6:e5:2f:d1:cf:12:26:9c:6e:64:be:23: 15:56:9a:2c:9f:72:57:0b:01:88:7e:ce:0c:0b:0a: b4:a6:78:ed:48:90:58:bc:7d:20:35:83:fc:11:09: c8:d8:10:28:9a:7e:b4:45:b5:cc:18:d6:3b:f6:1d: 5b:d0:9a:62:ca:eb:20:ab:a2:0f:5f:49:f1:02:04: 99:ff:2f:71:08:a0:65:4c:67:67:10:0d:01:bf:11: 6e:73:e0:6e:01:55:1c:f0:6e:25:5e:3f:e8:52:e5: 46:58:59:58:91:ca:18:e7:5f:d5:dd:06:25:f2:3b: c0:99:da:12:f2:82:86:8e:a8:72:e1:16:1a:62:8c: 32:df:3f:b3:b8:d4:88:f5:f9:c5:7f:9d:14:04:e9: 7e:c7:99:be:4c:fd:63:b1:c1:c4:cb:e8:84:62:5f: 8d:39:e3:1c:de:b5:1e:a4:5a:5e:eb:65:6f:62:96: ef:18:a0:10:4e:85:4b:1b:e9:84:49:40:79:f7:aa: 7f:5e:41:02:64:31:f3:d2:eb:47:b8:d8:56:23:fe: 39:47:35:39:c8:cd:70:e2:07:c6:6e:0d:ce:de:c0: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CB:46:85:06:3F:0E:71:E8:9E:08:60:07:EE:75:EC:AD:65:40:B5 X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/kMtGhQY_DnHonghgB-517K1lQLU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.152.186.0/24 Signature Algorithm: sha256WithRSAEncryption 40:1b:ae:08:1a:33:33:74:73:9c:93:d3:12:2f:25:e9:82:fc: da:9a:44:ab:2a:6f:12:eb:a7:52:23:95:df:d6:81:40:00:95: 33:9b:09:d8:c2:07:94:2b:fd:52:42:d4:9e:63:8a:03:03:79: 74:6e:00:1d:7d:91:45:ca:7d:d7:d3:62:df:6c:7c:77:8c:1e: 13:27:5b:25:2a:7c:84:5e:8a:97:99:2b:79:54:a6:a8:d3:f8: 2d:ac:c5:f2:4a:e1:0d:5c:6a:67:12:79:06:e0:e3:d8:fc:83: 98:77:df:df:24:1e:4b:11:d2:30:af:d6:67:5a:45:03:aa:bc: d8:dc:14:7e:04:b3:bb:80:3a:31:bf:67:0a:1c:1a:fa:54:88: 6b:60:c1:a1:a1:87:8d:cf:c1:8b:ff:39:24:63:25:47:d7:d4: eb:b2:54:43:09:ba:06:d0:e4:bc:60:68:2d:ff:0f:b6:53:c5: b5:7e:82:b0:c5:eb:96:b8:ae:fd:a1:8f:ab:4f:b3:3d:4d:48: 85:d4:c2:1c:d8:3b:4d:ee:c9:68:1e:3a:11:97:b6:33:b9:63: c7:9a:3b:eb:d0:7c:ee:d1:67:75:77:6f:1c:66:df:79:e3:ee: 21:e4:7f:ed:0b:3e:4e:81:dd:c8:af:d0:67:f6:f1:a9:e2:93: e8:b7:3a:cd -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICKSgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNjAxMjYw NjUyMjRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDkwQ0I0Njg1MDYzRjBF NzFFODlFMDg2MDA3RUU3NUVDQUQ2NTQwQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbwZ2BawG8vYieA4Jjws1k9B/IbJZm5hUdwNHTuO/E1sblL9HP EiacbmS+IxVWmiyfclcLAYh+zgwLCrSmeO1IkFi8fSA1g/wRCcjYECiafrRFtcwY 1jv2HVvQmmLK6yCrog9fSfECBJn/L3EIoGVMZ2cQDQG/EW5z4G4BVRzwbiVeP+hS 5UZYWViRyhjnX9XdBiXyO8CZ2hLygoaOqHLhFhpijDLfP7O41Ij1+cV/nRQE6X7H mb5M/WOxwcTL6IRiX4054xzetR6kWl7rZW9ilu8YoBBOhUsb6YRJQHn3qn9eQQJk MfPS60e42FYj/jlHNTnIzXDiB8ZuDc7ewNS3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUkMtGhQY/DnHonghgB+517K1lQLUwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgva010R2hRWV9Ebkhv bmdoZ0ItNTE3SzFsUUxVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGeYujANBgkqhkiG9w0BAQsFAAOCAQEAQBuuCBozM3RznJPTEi8l6YL82ppE qypvEuunUiOV39aBQACVM5sJ2MIHlCv9UkLUnmOKAwN5dG4AHX2RRcp919Ni32x8 d4weEydbJSp8hF6Kl5kreVSmqNP4LazF8krhDVxqZxJ5BuDj2PyDmHff3yQeSxHS MK/WZ1pFA6q82NwUfgSzu4A6Mb9nChwa+lSIa2DBoaGHjc/Bi/85JGMlR9fU67JU Qwm6BtDkvGBoLf8PtlPFtX6CsMXrlriu/aGPq0+zPU1IhdTCHNg7Te7JaB46EZe2 M7ljx5o769B87tFndXdvHGbfeePuIeR/7Qs+ToHdyK/QZ/bxqeKT6Lc6zQ== -----END CERTIFICATE-----Generated at Fri Feb 20 03:29:32 2026 by rpki-client