$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS151302.roa File: AS151302.roa (raw, json) Hash identifier: LjMyhy9oJozbR4yTez6ckcklvG7qUHbJIsa2boA2gxo= Subject key identifier: 79:12:FF:CD:FA:43:B3:F5:5B:0C:71:11:43:29:3D:4B:84:60:92:5D Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 66CD31DBAEA35AA2113855A50C810D0824114090 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS151302.roa Signing time: Mon 13 Jul 2026 02:01:54 +0000 ROA not before: Mon 13 Jul 2026 01:56:54 +0000 ROA not after: Mon 12 Jul 2027 02:01:54 +0000 asID: 151302 IP address blocks: 43.226.56.0/24 maxlen: 24 43.226.57.0/24 maxlen: 24 43.226.58.0/24 maxlen: 24 43.226.59.0/24 maxlen: 24 43.226.60.0/24 maxlen: 24 43.226.61.0/24 maxlen: 24 43.226.62.0/24 maxlen: 24 43.226.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 14:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:cd:31:db:ae:a3:5a:a2:11:38:55:a5:0c:81:0d:08:24:11:40:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Jul 13 01:56:54 2026 GMT Not After : Jul 12 02:01:54 2027 GMT Subject: CN=7912FFCDFA43B3F55B0C711143293D4B8460925D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:79:8d:98:ab:32:19:5d:51:87:82:ed:5b: 15:cf:a8:38:bd:f8:4b:c4:4c:d8:bc:1a:22:ed:33: 5b:9d:08:3d:40:7d:83:66:d3:a1:3c:71:db:e4:3b: bb:8f:c0:c8:d6:8b:3d:0e:72:4c:ff:74:56:23:76: 79:1f:ce:cf:13:d1:29:5b:85:8b:36:c8:e5:66:0c: 7a:9b:e9:63:a2:a2:dd:b0:3d:b7:a1:16:51:18:f5: df:57:f2:e1:ee:59:c9:eb:d2:d4:e8:82:5b:ed:e0: 68:a1:b8:95:d9:de:64:00:ca:d6:31:98:5f:65:a2: c6:0b:e9:f7:1d:f6:b2:75:27:41:9b:fe:1b:de:c9: cb:4d:ee:ea:70:95:02:7e:31:1e:90:75:31:5a:39: 5d:3c:b6:f6:f4:37:63:2b:66:dc:f5:d5:f1:02:d0: b7:f1:73:c5:b5:43:31:57:31:ff:db:81:d9:12:be: ba:a5:9e:60:92:25:5a:aa:70:d3:0e:21:b0:c3:0a: 1b:3c:de:b9:77:85:b8:00:c1:1b:7b:7c:64:21:e4: 2a:d4:ec:d2:7c:66:40:ab:1d:5d:c2:2d:1f:ab:12: c3:42:36:d9:7c:f9:71:72:cd:9f:f4:4a:03:25:fb: c9:e3:73:ff:59:59:35:62:76:49:63:b6:c3:90:aa: c3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:12:FF:CD:FA:43:B3:F5:5B:0C:71:11:43:29:3D:4B:84:60:92:5D X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS151302.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.56.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:cc:53:64:ba:df:a3:ba:09:79:38:6e:18:0f:c1:69:2a:95: f8:b4:49:4f:01:99:6a:24:82:fe:4b:01:38:61:6a:20:ea:e3: de:e4:63:e7:46:c6:1e:1e:42:d6:36:b7:5f:88:bc:a3:b0:c4: 7b:55:1c:d3:5b:ab:e4:af:aa:b3:ed:58:1d:f2:be:b5:bc:07: a1:83:c5:72:93:85:2a:85:7e:84:54:35:69:6c:72:a9:57:c6: b5:4e:72:41:3a:10:8e:5f:0e:13:6a:89:e2:01:58:b5:be:df: b2:86:3a:4f:7a:1a:34:29:ab:89:85:e0:77:a2:77:89:05:a1: 66:ef:32:45:34:33:0b:23:d1:4f:50:cc:15:9e:9e:6f:c9:63: ee:2e:d5:17:93:ae:e0:dc:57:03:44:37:da:7c:64:d4:a6:64: 67:b8:bb:3d:8a:3c:83:e1:b3:07:a8:d8:1e:e6:2a:10:3c:e0: c1:43:33:53:f4:9c:fa:aa:f0:35:84:bf:24:e0:0a:7e:f4:46: 6a:e6:d6:ad:01:66:89:20:91:69:a5:bb:73:2e:11:d4:05:2f: dd:15:d5:c9:96:01:1f:2a:73:58:de:49:37:8b:6b:47:70:f0: 88:1b:bb:d0:f7:c4:55:fa:43:c4:cc:36:a4:5c:bf:55:9e:90: 1f:e8:86:f6 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUZs0x266jWqIROFWlDIENCCQRQJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA3MTMwMTU2NTRaFw0yNzA3MTIwMjAxNTRaMDMxMTAvBgNV BAMTKDc5MTJGRkNERkE0M0IzRjU1QjBDNzExMTQzMjkzRDRCODQ2MDkyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNHmNmKsyGV1Rh4LtWxXPqDi9 +EvETNi8GiLtM1udCD1AfYNm06E8cdvkO7uPwMjWiz0Ockz/dFYjdnkfzs8T0Slb hYs2yOVmDHqb6WOiot2wPbehFlEY9d9X8uHuWcnr0tToglvt4GihuJXZ3mQAytYx mF9losYL6fcd9rJ1J0Gb/hveyctN7upwlQJ+MR6QdTFaOV08tvb0N2MrZtz11fEC 0Lfxc8W1QzFXMf/bgdkSvrqlnmCSJVqqcNMOIbDDChs83rl3hbgAwRt7fGQh5CrU 7NJ8ZkCrHV3CLR+rEsNCNtl8+XFyzZ/0SgMl+8njc/9ZWTVidkljtsOQqsPTAgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQUeRL/zfpDs/VbDHERQyk9S4Rgkl0wHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC9BUzE1MTMwMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAyviODANBgkqhkiG9w0BAQsFAAOCAQEADcxTZLrfo7oJeThuGA/BaSqV +LRJTwGZaiSC/ksBOGFqIOrj3uRj50bGHh5C1ja3X4i8o7DEe1Uc01ur5K+qs+1Y HfK+tbwHoYPFcpOFKoV+hFQ1aWxyqVfGtU5yQToQjl8OE2qJ4gFYtb7fsoY6T3oa NCmriYXgd6J3iQWhZu8yRTQzCyPRT1DMFZ6eb8lj7i7VF5Ou4NxXA0Q32nxk1KZk Z7i7PYo8g+GzB6jYHuYqEDzgwUMzU/Sc+qrwNYS/JOAKfvRGaubWrQFmiSCRaaW7 cy4R1AUv3RXVyZYBHypzWN5JN4trR3DwiBu70PfEVfpDxMw2pFy/VZ6QH+iG9g== -----END CERTIFICATE-----Generated at Wed Jul 22 03:32:38 2026 by rpki-client