$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3135322e302f32322d3232203d3e2039393339.roa File: 3135322e3130342e3135322e302f32322d3232203d3e2039393339.roa (raw, json) Hash identifier: Jdl3ynWGH/X+H9KsAPEM1Gmk4V1wCriTvjRBdclgjJ0= Subject key identifier: C4:40:A1:52:A5:C2:E8:1E:85:2A:81:9A:63:CC:53:DE:EC:6A:E6:0A Certificate issuer: /CN=A26A131411EAF25D645F4C22903078A445B073F7 Certificate serial: 26DFFE6688F0102970F488A8527E1A3FDA1ACD4D Authority key identifier: A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3135322e302f32322d3232203d3e2039393339.roa Signing time: Fri 10 Apr 2026 07:48:45 +0000 ROA not before: Fri 10 Apr 2026 07:43:45 +0000 ROA not after: Fri 09 Apr 2027 07:48:45 +0000 asID: 9939 IP address blocks: 152.104.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:df:fe:66:88:f0:10:29:70:f4:88:a8:52:7e:1a:3f:da:1a:cd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A26A131411EAF25D645F4C22903078A445B073F7 Validity Not Before: Apr 10 07:43:45 2026 GMT Not After : Apr 9 07:48:45 2027 GMT Subject: CN=C440A152A5C2E81E852A819A63CC53DEEC6AE60A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:8d:df:38:73:37:11:c7:4c:4b:4f:37:57: 39:2f:72:cd:40:d3:31:f1:09:e4:45:a1:ca:6d:fd: b8:c0:01:1d:bd:f2:23:41:c0:54:67:a9:ba:87:36: 24:2c:d5:b3:56:a2:6c:d1:4b:0b:8a:4f:b3:92:e0: 1f:08:d8:d4:c7:9a:8c:7c:16:28:0c:c1:f9:94:fa: 43:17:cc:db:b4:5b:fe:1a:44:76:7a:79:4b:a2:65: 11:9e:b4:27:23:55:67:b8:11:3a:fd:4d:f0:85:57: d6:82:2c:6b:5d:57:3e:ea:9d:db:ab:96:98:82:1f: 19:6d:81:78:71:8e:a2:98:ac:77:5f:68:b0:0a:3c: 34:4e:cf:50:3f:78:55:0a:82:c6:f5:95:40:ce:1e: a3:d3:be:c8:fa:6a:0e:d5:64:6d:25:fa:73:89:82: 96:39:05:50:f0:9a:f3:4d:d4:a2:ef:aa:eb:fe:f6: 8b:f5:28:e7:03:39:eb:3b:c9:54:b4:44:df:72:b0: 64:0e:89:65:e3:66:36:58:64:5a:8b:f2:55:69:70: 3d:ef:f3:45:dd:6e:87:f6:01:a3:96:e5:11:cc:c9: cc:02:9a:7e:9f:09:d6:46:da:9f:69:28:c1:b1:bf: ff:63:7e:46:fb:67:70:95:85:89:ff:c2:45:2f:fb: 8a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:40:A1:52:A5:C2:E8:1E:85:2A:81:9A:63:CC:53:DE:EC:6A:E6:0A X509v3 Authority Key Identifier: keyid:A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3135322e302f32322d3232203d3e2039393339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.104.152.0/22 Signature Algorithm: sha256WithRSAEncryption 49:5d:0e:27:3c:3a:1d:73:23:c2:af:46:b5:58:86:99:c8:b5: 7b:c7:f5:f3:72:76:45:51:8e:ad:18:10:6a:28:31:c6:02:cc: f4:22:0e:68:84:0b:c7:96:0b:5c:fa:c9:72:18:1f:c8:08:f4: 75:b5:c4:c6:db:f6:3d:6c:c7:41:d1:c2:c6:0f:6a:a7:de:b3: b4:df:92:92:20:9c:49:08:93:e2:12:da:d6:e4:b9:30:c6:82: 73:e5:68:00:59:bd:72:aa:04:f6:20:e7:aa:70:55:10:b9:1d: 98:0d:e9:f8:8a:41:9c:af:91:c1:7e:49:5f:1d:df:08:7b:c5: d4:ab:7b:23:a3:c4:83:62:23:63:a5:12:a7:c2:54:8c:c0:50: 42:e6:fb:32:ca:3f:0d:82:23:7c:9a:e8:0c:ba:b2:c3:5a:27: 09:49:38:5b:7f:4e:d5:00:33:01:ca:ed:9d:5b:b7:3e:79:c3: 47:b4:0a:78:4c:9d:a2:ea:38:3a:db:34:02:62:7b:33:f8:e5: a8:08:44:94:59:5e:84:d8:98:05:cb:b6:65:ee:f4:0a:e8:49: 7c:ab:5b:3b:d1:7f:06:cf:0c:a8:47:c7:db:28:28:4e:52:85: 34:40:53:f1:b8:c7:88:82:26:c9:7b:51:a5:6d:3e:f9:14:93: 59:2d:ba:b8 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJt/+ZojwEClw9IioUn4aP9oazU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI2QTEzMTQxMUVBRjI1RDY0NUY0QzIyOTAzMDc4QTQ0 NUIwNzNGNzAeFw0yNjA0MTAwNzQzNDVaFw0yNzA0MDkwNzQ4NDVaMDMxMTAvBgNV BAMTKEM0NDBBMTUyQTVDMkU4MUU4NTJBODE5QTYzQ0M1M0RFRUM2QUU2MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfRo3fOHM3EcdMS083Vzkvcs1A 0zHxCeRFocpt/bjAAR298iNBwFRnqbqHNiQs1bNWomzRSwuKT7OS4B8I2NTHmox8 FigMwfmU+kMXzNu0W/4aRHZ6eUuiZRGetCcjVWe4ETr9TfCFV9aCLGtdVz7qndur lpiCHxltgXhxjqKYrHdfaLAKPDROz1A/eFUKgsb1lUDOHqPTvsj6ag7VZG0l+nOJ gpY5BVDwmvNN1KLvquv+9ov1KOcDOes7yVS0RN9ysGQOiWXjZjZYZFqL8lVpcD3v 80Xdbof2AaOW5RHMycwCmn6fCdZG2p9pKMGxv/9jfkb7Z3CVhYn/wkUv+4q7AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUxEChUqXC6B6FKoGaY8xT3uxq5gowHwYDVR0j BBgwFoAUomoTFBHq8l1kX0wikDB4pEWwc/cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0NzkyMzcxNS8wL0EyNkExMzE0MTFFQUYyNUQ2NDVGNEMyMjkwMzA3 OEE0NDVCMDczRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQTI2QTEzMTQxMUVBRjI1RDY0NUY0QzIyOTAzMDc4QTQ0NUIwNzNGNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NDgwODQwOTQ0NzkyMzcxNS8wLzMxMzUzMjJlMzEz MDM0MmUzMTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzOTM5MzMzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAphomDANBgkqhkiG9w0BAQsFAAOCAQEASV0OJzw6HXMjwq9GtViGmci1 e8f183J2RVGOrRgQaigxxgLM9CIOaIQLx5YLXPrJchgfyAj0dbXExtv2PWzHQdHC xg9qp96ztN+SkiCcSQiT4hLa1uS5MMaCc+VoAFm9cqoE9iDnqnBVELkdmA3p+IpB nK+RwX5JXx3fCHvF1Kt7I6PEg2IjY6USp8JUjMBQQub7Mso/DYIjfJroDLqyw1on CUk4W39O1QAzAcrtnVu3PnnDR7QKeEydouo4Ots0AmJ7M/jlqAhElFlehNiYBcu2 Ze70CuhJfKtbO9F/Bs8MqEfH2ygoTlKFNEBT8bjHiIImyXtRpW0++RSTWS26uA== -----END CERTIFICATE-----Generated at Mon Apr 13 15:21:50 2026 by rpki-client