$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS151300.roa File: AS151300.roa (raw, json) Hash identifier: P7ijkqfVlDFLRg4B2Lm3ItQppso5LOmzGo91SxlE8AE= Subject key identifier: 90:A9:F0:E8:FE:2C:7E:A9:5B:B0:8F:59:EB:75:55:4D:56:A9:DA:0F Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 07BAA5FDE81358D8B20E41C1E9854503573B191D Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS151300.roa Signing time: Tue 07 Jul 2026 02:50:38 +0000 ROA not before: Tue 07 Jul 2026 02:45:38 +0000 ROA not after: Tue 06 Jul 2027 02:50:38 +0000 asID: 151300 IP address blocks: 43.226.48.0/24 maxlen: 24 43.226.52.0/24 maxlen: 24 43.226.55.0/24 maxlen: 24 43.226.56.0/21 maxlen: 24 43.226.78.0/23 maxlen: 24 43.226.112.0/22 maxlen: 24 43.226.128.0/20 maxlen: 24 43.227.56.0/21 maxlen: 24 43.227.69.0/24 maxlen: 24 43.227.70.0/23 maxlen: 24 43.248.104.0/22 maxlen: 24 43.248.120.0/21 maxlen: 24 43.248.144.0/22 maxlen: 24 43.248.208.0/22 maxlen: 24 103.183.122.0/23 maxlen: 24 103.183.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 14:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ba:a5:fd:e8:13:58:d8:b2:0e:41:c1:e9:85:45:03:57:3b:19:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Jul 7 02:45:38 2026 GMT Not After : Jul 6 02:50:38 2027 GMT Subject: CN=90A9F0E8FE2C7EA95BB08F59EB75554D56A9DA0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:47:d7:51:75:e6:ff:17:a8:bd:74:63:64: 39:ef:ab:57:c0:7b:8a:c5:ae:d5:77:c5:ee:37:8e: c0:2b:84:33:de:7a:e9:e7:04:e6:e4:a9:b6:a5:a8: 42:b1:9d:19:0d:d2:1a:d1:6c:01:16:da:cd:94:8f: b4:57:62:95:5f:c3:e8:cd:42:27:e3:32:9a:e1:b9: 1c:b1:2d:b4:82:3e:9e:20:ac:9d:9d:32:6d:ca:de: 9e:a3:ba:95:4d:65:16:a1:d4:a8:76:ea:57:3b:1f: 61:e6:89:b3:16:76:06:0b:2d:d0:48:6a:2f:53:12: 7d:3b:bd:e7:ef:7e:3e:68:8c:01:a2:53:1a:03:d1: 05:e3:46:d1:f1:87:7c:24:ff:a6:44:79:34:05:e7: 68:e1:29:5b:4f:00:03:a0:f3:cc:f3:4e:bf:3f:a0: 88:69:f4:c7:14:1a:2d:7a:0e:d1:f7:1b:13:88:60: 9d:d4:a5:25:5f:64:b7:8f:de:a3:57:df:4b:04:07: ab:4b:5c:47:5e:13:89:fb:11:d3:4d:03:8b:b5:e6: 6f:f9:66:14:23:00:0e:3f:5c:3a:e5:16:3d:c6:90: 56:54:87:be:52:c9:23:3c:d0:e0:9c:cf:64:6b:71: 01:0e:bc:c4:8d:7e:91:a9:a9:e9:ae:88:17:54:cb: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A9:F0:E8:FE:2C:7E:A9:5B:B0:8F:59:EB:75:55:4D:56:A9:DA:0F X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS151300.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.48.0/24 43.226.52.0/24 43.226.55.0-43.226.63.255 43.226.78.0/23 43.226.112.0/22 43.226.128.0/20 43.227.56.0/21 43.227.69.0-43.227.71.255 43.248.104.0/22 43.248.120.0/21 43.248.144.0/22 43.248.208.0/22 103.183.122.0-103.183.125.255 Signature Algorithm: sha256WithRSAEncryption 52:d4:d3:b6:16:66:33:a5:c9:70:e8:49:4e:09:24:9f:0e:a3: 99:15:ce:0a:42:9e:13:60:1a:e3:a0:01:7b:ba:fb:cf:55:44: 23:3e:91:8d:8c:67:e3:0f:9f:fe:03:65:2e:bf:a5:3e:e5:33: 36:9b:1b:cc:71:e1:f3:cf:5e:e0:f5:92:ec:ad:95:33:6a:90: 47:7e:99:6a:03:5c:ae:91:2b:cb:e1:8a:a6:15:64:0b:84:ad: d6:5e:5d:96:11:cb:d0:5e:d7:3f:ea:bd:14:80:a3:ab:18:4e: 4e:c2:3a:44:2d:40:16:c9:91:f5:06:67:29:36:87:41:41:97: 71:12:e0:e0:33:ee:46:17:e4:7b:96:8a:37:c3:ba:82:a2:ab: 35:1c:e5:87:ee:64:d4:6c:90:a1:97:43:09:e0:43:bd:b1:23: bf:ae:a9:af:24:62:4f:ef:cc:06:bf:f8:e0:c4:40:98:f2:43: 42:a0:24:69:83:1c:c2:9e:a6:25:bd:b6:9d:12:89:95:cc:e9: 69:48:10:ec:87:c3:d7:58:85:7f:3a:6f:41:96:b4:a6:c0:aa: de:cf:fe:10:48:1b:9b:d1:ce:5a:15:75:6c:3c:da:98:53:10: bb:69:63:89:03:af:05:7f:eb:14:56:61:fe:b9:c3:70:1d:62: 03:18:ef:ab -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUB7ql/egTWNiyDkHB6YVFA1c7GR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA3MDcwMjQ1MzhaFw0yNzA3MDYwMjUwMzhaMDMxMTAvBgNV BAMTKDkwQTlGMEU4RkUyQzdFQTk1QkIwOEY1OUVCNzU1NTRENTZBOURBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCteUfXUXXm/xeovXRjZDnvq1fA e4rFrtV3xe43jsArhDPeeunnBObkqbalqEKxnRkN0hrRbAEW2s2Uj7RXYpVfw+jN QifjMprhuRyxLbSCPp4grJ2dMm3K3p6jupVNZRah1Kh26lc7H2HmibMWdgYLLdBI ai9TEn07vefvfj5ojAGiUxoD0QXjRtHxh3wk/6ZEeTQF52jhKVtPAAOg88zzTr8/ oIhp9McUGi16DtH3GxOIYJ3UpSVfZLeP3qNX30sEB6tLXEdeE4n7EdNNA4u15m/5 ZhQjAA4/XDrlFj3GkFZUh75SySM80OCcz2RrcQEOvMSNfpGpqemuiBdUy+WnAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUkKnw6P4sfqlbsI9Z63VVTVap2g8wHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC9BUzE1MTMwMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB/BggrBgEFBQcBBwEB/wRwMG4wbAQC AAEwZgMEACviMAMEACviNDAMAwQAK+I3AwQGK+IAAwQBK+JOAwQCK+JwAwQEK+KA AwQDK+M4MAwDBAAr40UDBAMr40ADBAIr+GgDBAMr+HgDBAIr+JADBAIr+NAwDAME AWe3egMEAWe3fDANBgkqhkiG9w0BAQsFAAOCAQEAUtTTthZmM6XJcOhJTgkknw6j mRXOCkKeE2Aa46ABe7r7z1VEIz6RjYxn4w+f/gNlLr+lPuUzNpsbzHHh889e4PWS 7K2VM2qQR36ZagNcrpEry+GKphVkC4St1l5dlhHL0F7XP+q9FICjqxhOTsI6RC1A FsmR9QZnKTaHQUGXcRLg4DPuRhfke5aKN8O6gqKrNRzlh+5k1GyQoZdDCeBDvbEj v66pryRiT+/MBr/44MRAmPJDQqAkaYMcwp6mJb22nRKJlczpaUgQ7IfD11iFfzpv QZa0psCq3s/+EEgbm9HOWhV1bDzamFMQu2ljiQOvBX/rFFZh/rnDcB1iAxjvqw== -----END CERTIFICATE-----Generated at Wed Jul 22 03:32:37 2026 by rpki-client