
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3230382e302f32322d3232203d3e2039393339.roa
File: 3135322e3130342e3230382e302f32322d3232203d3e2039393339.roa (raw, json)
Hash identifier: I23wvM9SW4Dtd71hWbFLbV8qMJczKqHBQWTUVOiqKYs=
Subject key identifier: 07:5A:F6:FF:AF:92:24:E2:BF:43:E9:13:82:F7:18:F1:03:29:73:A1
Certificate issuer: /CN=A26A131411EAF25D645F4C22903078A445B073F7
Certificate serial: 06C8662C2AA889E8D4A4B245F2CDD4AD025F8E6A
Authority key identifier: A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3230382e302f32322d3232203d3e2039393339.roa
Signing time: Fri 10 Apr 2026 07:48:44 +0000
ROA not before: Fri 10 Apr 2026 07:43:44 +0000
ROA not after: Fri 09 Apr 2027 07:48:44 +0000
asID: 9939
IP address blocks: 152.104.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c8:66:2c:2a:a8:89:e8:d4:a4:b2:45:f2:cd:d4:ad:02:5f:8e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A26A131411EAF25D645F4C22903078A445B073F7
Validity
Not Before: Apr 10 07:43:44 2026 GMT
Not After : Apr 9 07:48:44 2027 GMT
Subject: CN=075AF6FFAF9224E2BF43E91382F718F1032973A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:0d:aa:0b:ae:d9:4c:0f:71:79:76:d2:e9:
3a:5c:ca:bd:8e:1c:9b:1e:04:ea:d0:5c:69:81:79:
7d:dc:63:a7:07:13:da:4e:fd:47:a0:5c:31:5c:e1:
77:8d:d2:23:e2:2d:ed:d7:ad:d1:6c:10:94:19:fd:
ba:2f:4a:8e:86:70:25:88:a0:56:f2:c0:a1:02:07:
22:85:4f:05:73:ff:07:e3:a4:b5:cd:18:6c:a3:c8:
f2:9e:94:7d:6a:4c:06:81:de:e7:9b:e9:9b:23:bf:
34:18:29:d1:96:ce:ee:ac:ae:10:ee:60:25:17:ab:
24:4f:ef:ed:13:58:93:96:e1:bd:74:1c:66:c2:e4:
a4:31:3c:88:85:c5:e1:7d:37:85:64:23:0b:77:1d:
be:1d:cd:c1:f3:4c:2d:d3:d3:12:9d:ab:05:15:6e:
95:dd:62:29:5d:9e:18:92:ee:1c:b3:19:ef:3e:4a:
d8:6d:50:80:79:94:40:3f:ac:fc:a4:eb:6a:78:16:
47:81:a0:57:d7:a9:30:3f:47:6d:57:fe:6c:d9:3a:
04:b7:1e:96:c1:cc:9e:bc:6d:ce:18:1b:0a:72:bd:
21:e0:bd:d3:69:ea:2a:07:3f:25:7d:d5:3b:0d:45:
65:b1:d9:67:24:29:fd:3c:e9:c2:09:b7:b6:0b:a7:
cb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5A:F6:FF:AF:92:24:E2:BF:43:E9:13:82:F7:18:F1:03:29:73:A1
X509v3 Authority Key Identifier:
keyid:A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3230382e302f32322d3232203d3e2039393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.104.208.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:95:e8:c4:f2:26:23:18:b4:71:a0:39:8f:c5:48:5c:c4:a2:
12:a1:92:19:44:e9:41:48:7f:fd:40:b9:98:e0:bc:49:2a:2f:
7c:67:d9:40:6d:76:5c:23:64:fb:29:9c:14:df:b2:bd:5c:00:
0b:26:99:36:85:ee:5a:69:0e:bc:fe:80:2f:8a:d3:7a:4f:9b:
58:67:bc:a6:ea:7d:ec:c3:ed:fa:f4:f5:90:9a:1a:4d:b7:05:
a3:f5:2c:33:76:ca:7b:22:2a:09:4a:87:d0:13:32:d9:3a:21:
79:c8:48:b8:a5:7e:12:1f:ce:83:c0:9e:5d:b7:89:89:34:a7:
3d:42:ca:99:48:23:79:66:38:e9:a7:e1:dd:ab:9d:bc:6d:9d:
c6:60:7c:ab:fb:49:f0:0b:55:28:39:1e:aa:43:89:7e:e9:74:
0a:96:94:e0:9a:83:2e:f8:7d:43:f0:9d:3e:49:72:76:53:92:
7d:09:d2:60:df:32:28:69:1d:f2:ed:95:56:d3:7d:02:ed:3c:
27:cd:de:0d:c7:6d:ab:d7:86:cd:b1:5b:c4:e1:33:46:d6:c7:
e9:ee:32:fb:78:91:fe:87:26:6d:9c:a6:00:8b:07:d5:84:34:
4a:86:7c:39:cf:29:df:d4:81:dc:4b:7e:8f:05:d6:77:ae:1b:
5e:7b:e1:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:19:24 2026 by rpki-client