$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS153911.roa File: AS153911.roa (raw, json) Hash identifier: k4d0lln+WCz9yCQ8SJx1RZQW5mhDozOELFG2+G2vBiY= Subject key identifier: AB:47:D1:1B:BC:C7:7D:6B:3D:99:C1:BB:5F:8F:B4:0F:2C:A2:FE:DB Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 3BA7E0DD22E8F215F0658B8BB47D0F29D128274F Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS153911.roa Signing time: Tue 07 Jul 2026 02:50:37 +0000 ROA not before: Tue 07 Jul 2026 02:45:37 +0000 ROA not after: Tue 06 Jul 2027 02:50:37 +0000 asID: 153911 IP address blocks: 43.226.48.0/24 maxlen: 24 43.226.52.0/24 maxlen: 24 43.226.55.0/24 maxlen: 24 43.226.56.0/21 maxlen: 24 43.226.78.0/23 maxlen: 24 43.226.112.0/22 maxlen: 24 43.226.128.0/20 maxlen: 24 43.227.56.0/21 maxlen: 24 43.227.69.0/24 maxlen: 24 43.227.70.0/23 maxlen: 24 43.248.104.0/22 maxlen: 24 43.248.120.0/21 maxlen: 24 43.248.144.0/22 maxlen: 24 43.248.208.0/22 maxlen: 24 103.183.122.0/23 maxlen: 24 103.183.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 14:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a7:e0:dd:22:e8:f2:15:f0:65:8b:8b:b4:7d:0f:29:d1:28:27:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Jul 7 02:45:37 2026 GMT Not After : Jul 6 02:50:37 2027 GMT Subject: CN=AB47D11BBCC77D6B3D99C1BB5F8FB40F2CA2FEDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:40:76:1c:d2:08:fd:34:43:4f:d4:d0:78: 1a:29:e3:8b:a6:fd:80:0f:92:44:81:98:60:df:57: 94:b5:15:b7:09:58:17:5e:dc:f2:03:57:a0:e7:3d: a9:73:22:e1:48:9c:58:e8:a6:62:7c:21:1e:cd:1b: ce:60:65:d7:8b:34:f7:29:d1:13:cd:5c:91:1b:2f: 0a:9f:8c:89:7c:1e:1b:a2:7b:bd:ad:c2:a0:d3:94: 2f:65:7a:f7:26:2c:e4:a5:74:db:99:53:8b:6b:ac: dd:64:97:1e:12:36:88:5e:9f:60:d9:6b:3e:ea:f5: a0:c5:95:1a:88:fe:12:e9:9e:7a:89:20:f0:57:b0: da:57:b9:72:20:32:80:f0:61:c7:b6:34:82:06:a7: 08:07:a4:e9:5d:e1:c6:9b:f4:b7:a6:1f:ee:13:1c: 1a:e9:ac:f2:77:2f:9e:8c:52:d4:1a:8e:3b:9f:52: 81:a1:8b:d8:fe:29:bd:af:4a:4e:60:4d:5a:aa:16: 67:6e:d5:b1:d6:20:cf:f4:6f:e2:38:76:8d:6e:51: fd:5d:63:1f:6f:22:9b:16:0f:c6:cb:ef:45:35:cc: 2d:1f:43:70:11:26:d7:7c:11:a7:f5:4c:c4:90:c5: 35:97:98:ca:8e:29:ef:c2:44:27:de:9c:2a:cb:c2: 8e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:47:D1:1B:BC:C7:7D:6B:3D:99:C1:BB:5F:8F:B4:0F:2C:A2:FE:DB X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS153911.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.48.0/24 43.226.52.0/24 43.226.55.0-43.226.63.255 43.226.78.0/23 43.226.112.0/22 43.226.128.0/20 43.227.56.0/21 43.227.69.0-43.227.71.255 43.248.104.0/22 43.248.120.0/21 43.248.144.0/22 43.248.208.0/22 103.183.122.0-103.183.125.255 Signature Algorithm: sha256WithRSAEncryption 9c:65:8a:33:2e:a4:14:8b:36:6d:cf:6c:0a:02:b2:af:6a:e6: bd:fe:d8:d8:42:ce:57:67:11:19:1f:18:58:6d:87:19:bd:48: eb:77:d3:a0:db:27:20:9a:90:25:e6:c8:d8:41:28:5b:f2:b8: 60:9e:36:3a:e0:d5:7d:03:1c:dc:90:4b:13:d1:98:9a:10:d2: cf:9e:cd:11:d6:cd:dc:11:ae:80:4a:55:4c:2a:98:a7:ea:bd: 6a:cc:95:fb:bf:a2:ad:24:ae:9d:3d:89:5d:2c:82:7d:7d:12: be:0d:02:37:b1:c7:72:38:97:8d:a6:87:2a:67:f5:fc:06:4e: ba:33:3e:e4:3c:ed:f2:a9:ed:e1:f2:6a:1d:7c:47:10:0e:32: 37:af:0f:1b:9b:37:46:b0:91:a6:89:2b:c6:2c:dd:e3:5c:49: c5:f7:68:38:75:2f:e1:56:7a:f2:39:6f:3d:c5:b0:81:41:c7: d2:f7:bf:cf:46:81:97:18:4c:17:e0:3f:26:1f:47:16:c3:f1: 57:71:ad:55:6c:29:65:d7:c8:99:33:48:98:3f:19:6c:de:b1: 73:82:ab:0e:de:cf:0c:82:55:fb:15:7b:4a:f8:47:80:7f:24: 19:7b:81:f8:26:81:08:2b:09:2d:a8:8b:10:66:78:82:82:c6: 03:bd:18:4d -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUO6fg3SLo8hXwZYuLtH0PKdEoJ08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA3MDcwMjQ1MzdaFw0yNzA3MDYwMjUwMzdaMDMxMTAvBgNV BAMTKEFCNDdEMTFCQkNDNzdENkIzRDk5QzFCQjVGOEZCNDBGMkNBMkZFREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeF0B2HNII/TRDT9TQeBop44um /YAPkkSBmGDfV5S1FbcJWBde3PIDV6DnPalzIuFInFjopmJ8IR7NG85gZdeLNPcp 0RPNXJEbLwqfjIl8Hhuie72twqDTlC9levcmLOSldNuZU4trrN1klx4SNohen2DZ az7q9aDFlRqI/hLpnnqJIPBXsNpXuXIgMoDwYce2NIIGpwgHpOld4cab9LemH+4T HBrprPJ3L56MUtQajjufUoGhi9j+Kb2vSk5gTVqqFmdu1bHWIM/0b+I4do1uUf1d Yx9vIpsWD8bL70U1zC0fQ3ARJtd8Eaf1TMSQxTWXmMqOKe/CRCfenCrLwo67AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUq0fRG7zHfWs9mcG7X4+0Dyyi/tswHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC9BUzE1MzkxMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB/BggrBgEFBQcBBwEB/wRwMG4wbAQC AAEwZgMEACviMAMEACviNDAMAwQAK+I3AwQGK+IAAwQBK+JOAwQCK+JwAwQEK+KA AwQDK+M4MAwDBAAr40UDBAMr40ADBAIr+GgDBAMr+HgDBAIr+JADBAIr+NAwDAME AWe3egMEAWe3fDANBgkqhkiG9w0BAQsFAAOCAQEAnGWKMy6kFIs2bc9sCgKyr2rm vf7Y2ELOV2cRGR8YWG2HGb1I63fToNsnIJqQJebI2EEoW/K4YJ42OuDVfQMc3JBL E9GYmhDSz57NEdbN3BGugEpVTCqYp+q9asyV+7+irSSunT2JXSyCfX0Svg0CN7HH cjiXjaaHKmf1/AZOujM+5Dzt8qnt4fJqHXxHEA4yN68PG5s3RrCRpokrxizd41xJ xfdoOHUv4VZ68jlvPcWwgUHH0ve/z0aBlxhMF+A/Jh9HFsPxV3GtVWwpZdfImTNI mD8ZbN6xc4KrDt7PDIJV+xV7SvhHgH8kGXuB+CaBCCsJLaiLEGZ4goLGA70YTQ== -----END CERTIFICATE-----Generated at Wed Jul 22 03:32:38 2026 by rpki-client