$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/m7KLpdIkQhlUic2KR1DO-C_kVjY.roa File: m7KLpdIkQhlUic2KR1DO-C_kVjY.roa (raw, json) Hash identifier: wbqVDuJjy0gMzAY6r7yd/CaS0ynLzINfV0y7Srll4Pg= Subject key identifier: 9B:B2:8B:A5:D2:24:42:19:54:89:CD:8A:47:50:CE:F8:2F:E4:56:36 Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 2924 Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/m7KLpdIkQhlUic2KR1DO-C_kVjY.roa Signing time: Mon 26 Jan 2026 06:52:23 +0000 ROA not before: Mon 26 Jan 2026 06:52:23 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 139139 IP address blocks: 103.152.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10532 (0x2924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Jan 26 06:52:23 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=9BB28BA5D22442195489CD8A4750CEF82FE45636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:95:a5:57:1f:f5:43:03:74:98:22:56:aa:8b: 08:54:46:c2:2a:d1:c9:8c:0a:c0:cf:a5:1e:6e:79: c6:24:bc:78:6e:1b:bd:c3:6f:80:cf:43:f0:d4:4f: 8f:6c:e0:cd:b0:d0:0b:8b:f6:7f:42:d6:3b:8b:0b: 4d:ae:17:91:70:34:7c:24:5e:32:55:c4:2f:82:09: 94:4a:c7:df:1b:cf:bb:8a:f2:4d:2c:b5:44:e2:72: 49:f4:9b:ef:4f:4f:b1:eb:0a:08:32:f5:ec:7a:c1: 3d:9a:e5:2a:0b:a0:88:64:0d:83:93:c7:32:11:d8: cd:2c:a0:be:1f:a9:08:df:05:44:f0:72:92:0a:9d: fd:1b:f4:ba:38:31:6b:69:bf:1c:ce:22:44:ca:66: 4a:be:d3:66:06:4f:2c:8d:67:4c:cf:a6:75:93:2c: 05:78:43:90:ee:c0:46:8f:07:af:e4:7d:40:3d:7a: 46:a2:76:3b:5c:0a:29:31:9f:7f:80:f2:94:5e:50: fe:9d:7c:fb:1f:c4:a9:5e:78:d4:3b:fe:cc:a2:cb: 30:01:40:c3:0b:b9:0e:76:2d:07:65:0c:2c:7c:da: 33:be:06:1a:6b:3a:a9:c9:4d:a8:f8:1b:9d:9b:23: 9f:08:66:88:f9:ce:9e:ba:9f:3c:c1:1f:b6:f0:ec: f9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B2:8B:A5:D2:24:42:19:54:89:CD:8A:47:50:CE:F8:2F:E4:56:36 X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/m7KLpdIkQhlUic2KR1DO-C_kVjY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.152.187.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:08:ec:08:93:b9:93:27:e7:87:69:10:9a:65:8b:22:01:1a: 8b:43:0d:e6:ea:fd:94:58:26:47:4e:25:ee:8a:0e:78:85:d5: 8a:2b:3b:e5:da:c6:55:ca:3c:14:d6:ab:4d:67:cc:45:b3:a2: a4:07:10:11:b4:78:76:c0:a4:26:02:d6:5d:03:57:88:e1:d0: 5c:e7:b0:39:01:37:f4:18:2e:f0:b5:dc:f6:a3:b1:0c:a8:47: 83:3f:a5:4b:90:c9:48:f5:9e:c9:de:77:97:d3:08:bc:b0:8c: 3a:e0:43:c6:0b:27:f4:e3:23:99:b7:99:44:b9:38:52:79:c1: 11:3f:1f:ed:f7:2d:2d:6b:ce:19:49:c3:ed:7c:d9:a6:90:8b: 91:6a:68:fc:0b:c5:7c:98:22:e1:02:14:c4:a6:20:b1:03:19: 5f:a1:cb:fe:20:24:7e:ce:28:aa:97:8a:21:f7:67:22:94:af: 87:62:2e:66:c7:5e:d0:a3:8f:d5:39:2d:0e:e0:f2:62:a9:d1: 61:52:ee:fe:98:3b:37:35:eb:af:a8:b4:ce:59:c1:80:64:4f: 4b:4e:1f:98:9f:0d:4b:bd:f5:5b:7e:df:e2:b7:60:fb:72:fc: ed:fa:5d:34:cd:9d:95:94:88:07:22:ea:e4:b4:e5:7b:c3:b6: 9f:4d:d8:4f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICKSQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNjAxMjYw NjUyMjNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDlCQjI4QkE1RDIyNDQy MTk1NDg5Q0Q4QTQ3NTBDRUY4MkZFNDU2MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrlaVXH/VDA3SYIlaqiwhURsIq0cmMCsDPpR5uecYkvHhuG73D b4DPQ/DUT49s4M2w0AuL9n9C1juLC02uF5FwNHwkXjJVxC+CCZRKx98bz7uK8k0s tUTickn0m+9PT7HrCggy9ex6wT2a5SoLoIhkDYOTxzIR2M0soL4fqQjfBUTwcpIK nf0b9Lo4MWtpvxzOIkTKZkq+02YGTyyNZ0zPpnWTLAV4Q5DuwEaPB6/kfUA9ekai djtcCikxn3+A8pReUP6dfPsfxKleeNQ7/syiyzABQMMLuQ52LQdlDCx82jO+Bhpr OqnJTaj4G52bI58IZoj5zp66nzzBH7bw7PlvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUm7KLpdIkQhlUic2KR1DO+C/kVjYwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvbTdLTHBkSWtRaGxV aWMyS1IxRE8tQ19rVmpZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGeYuzANBgkqhkiG9w0BAQsFAAOCAQEAbwjsCJO5kyfnh2kQmmWLIgEai0MN 5ur9lFgmR04l7ooOeIXViis75drGVco8FNarTWfMRbOipAcQEbR4dsCkJgLWXQNX iOHQXOewOQE39Bgu8LXc9qOxDKhHgz+lS5DJSPWeyd53l9MIvLCMOuBDxgsn9OMj mbeZRLk4UnnBET8f7fctLWvOGUnD7XzZppCLkWpo/AvFfJgi4QIUxKYgsQMZX6HL /iAkfs4oqpeKIfdnIpSvh2IuZsde0KOP1TktDuDyYqnRYVLu/pg7NzXrr6i0zlnB gGRPS04fmJ8NS731W37f4rdg+3L87fpdNM2dlZSIByLq5LTle8O2n03YTw== -----END CERTIFICATE-----Generated at Fri Feb 20 05:35:08 2026 by rpki-client