
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3132382e302f31372d3234203d3e2039393339.roa
File: 3135322e3130342e3132382e302f31372d3234203d3e2039393339.roa (raw, json)
Hash identifier: BB3+inb2b/sokXVtPXJL5alrQF9D20RaWJDFi+7pIi8=
Subject key identifier: B3:3C:96:06:81:38:25:96:A0:A3:FE:31:E7:CD:B3:3E:C8:ED:8A:F4
Certificate issuer: /CN=A26A131411EAF25D645F4C22903078A445B073F7
Certificate serial: 412257A2D2491CB1627AC1463288C3AF0F71357E
Authority key identifier: A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3132382e302f31372d3234203d3e2039393339.roa
Signing time: Fri 10 Apr 2026 07:39:50 +0000
ROA not before: Fri 10 Apr 2026 07:34:50 +0000
ROA not after: Fri 09 Apr 2027 07:39:50 +0000
asID: 9939
IP address blocks: 152.104.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:22:57:a2:d2:49:1c:b1:62:7a:c1:46:32:88:c3:af:0f:71:35:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A26A131411EAF25D645F4C22903078A445B073F7
Validity
Not Before: Apr 10 07:34:50 2026 GMT
Not After : Apr 9 07:39:50 2027 GMT
Subject: CN=B33C960681382596A0A3FE31E7CDB33EC8ED8AF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:78:58:1a:06:37:aa:d7:5f:10:43:60:44:
da:bb:a2:1c:9c:3d:b4:bf:b9:99:75:fd:a6:eb:f2:
5a:69:37:d9:80:75:27:84:3b:3b:d9:c9:2a:5b:4e:
d4:03:54:a9:11:cc:bc:0a:2f:58:b1:4c:b3:ee:71:
84:3c:59:0d:68:70:7e:e8:d1:30:16:40:f5:db:d0:
bf:86:52:ba:41:8f:c6:f5:23:29:25:c5:47:66:d7:
99:1b:ce:be:91:d4:7a:f8:89:9c:5c:b0:cd:5d:29:
3a:d5:d0:22:f5:e7:91:d1:32:56:f3:4c:af:fa:a4:
ad:8a:d9:33:0f:34:4c:4d:83:03:d3:75:97:2e:74:
15:d4:13:38:20:e8:d7:80:2d:7b:82:7b:62:6f:3f:
ce:6c:b2:94:ea:ca:1d:cb:cb:90:c6:6b:0a:97:a3:
3c:98:04:a4:84:96:23:6b:58:78:44:94:14:40:7c:
ad:84:89:e8:21:e5:24:00:04:56:ea:be:9e:db:c0:
97:fe:2b:48:5a:23:29:4e:6b:0d:61:f1:7e:db:e8:
e3:55:f4:3a:32:3d:80:ea:9a:df:28:49:14:a5:2d:
01:e3:6d:85:87:1f:d9:2c:20:fa:f2:bd:46:a4:b5:
98:e1:8c:74:ab:9b:fd:96:d5:d1:42:ef:7e:cf:e2:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3C:96:06:81:38:25:96:A0:A3:FE:31:E7:CD:B3:3E:C8:ED:8A:F4
X509v3 Authority Key Identifier:
keyid:A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3132382e302f31372d3234203d3e2039393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.104.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9d:6d:fd:37:89:89:f7:e2:2e:bf:4a:62:29:6b:0d:74:51:be:
49:18:4e:c9:e7:cf:f3:52:a3:29:e4:8a:91:c8:a8:4b:da:68:
00:b1:49:53:18:46:4d:c8:8a:5c:90:b2:1a:41:cb:77:40:cd:
26:10:a4:a0:95:37:8d:22:ae:00:f0:a2:6e:c2:1f:74:14:b6:
da:bc:bf:9e:0c:15:b8:e7:6e:1b:06:52:8a:f4:5b:50:5b:b9:
66:bd:7f:b5:71:1f:60:00:7a:09:c2:48:f8:b3:96:a0:e0:b3:
9f:56:12:31:6c:ed:d5:21:c1:b4:6f:f4:95:4e:fd:3a:f3:18:
f1:5e:83:f3:9a:d0:93:b1:be:86:7d:17:c8:aa:3f:be:df:3c:
0e:e0:14:e6:e4:01:1a:d7:48:1f:87:86:88:49:ff:bc:8a:c2:
14:fb:5c:59:ba:94:8e:cf:71:16:4f:60:08:04:6e:bb:9d:c6:
3c:e3:91:bc:35:e8:28:98:83:e1:8f:1d:5f:bd:90:a9:d0:90:
88:d0:25:3b:28:53:4c:f5:f8:8c:f3:ba:f4:ab:97:85:7c:05:
ca:1a:f1:8a:1f:6e:0e:a2:d1:84:a8:00:b8:56:91:aa:7b:88:
a9:ae:48:cd:4c:9d:09:bc:96:7d:60:46:13:19:0e:99:76:3e:
4d:f4:1a:2a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:22:07 2026 by rpki-client