
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3232302e302f32322d3232203d3e2039393339.roa
File: 3135322e3130342e3232302e302f32322d3232203d3e2039393339.roa (raw, json)
Hash identifier: w1/jfwfPXgFr1P6o64D0Bwg9gKqZ/RWcYOfzXJGI0yI=
Subject key identifier: 4E:B1:E0:1B:CB:82:90:61:5B:8F:90:CA:8C:FB:97:3C:88:F4:8A:FF
Certificate issuer: /CN=A26A131411EAF25D645F4C22903078A445B073F7
Certificate serial: 615679DE1C6DBAF35E7987080BF31566502E0C15
Authority key identifier: A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3232302e302f32322d3232203d3e2039393339.roa
Signing time: Fri 10 Apr 2026 07:48:45 +0000
ROA not before: Fri 10 Apr 2026 07:43:45 +0000
ROA not after: Fri 09 Apr 2027 07:48:45 +0000
asID: 9939
IP address blocks: 152.104.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:56:79:de:1c:6d:ba:f3:5e:79:87:08:0b:f3:15:66:50:2e:0c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A26A131411EAF25D645F4C22903078A445B073F7
Validity
Not Before: Apr 10 07:43:45 2026 GMT
Not After : Apr 9 07:48:45 2027 GMT
Subject: CN=4EB1E01BCB8290615B8F90CA8CFB973C88F48AFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:42:01:d3:7e:f4:b7:b2:bc:77:e2:14:a7:
88:94:5d:de:18:3a:e8:45:73:76:06:5e:9f:af:f9:
a0:1f:6e:d4:4a:79:3e:d6:5a:8c:ca:42:d9:b7:2f:
9a:00:e3:dc:95:a3:9f:2a:ba:0a:81:6a:ca:81:fb:
1f:24:66:37:22:34:b9:48:10:80:be:cb:20:30:b3:
f8:56:e8:a6:eb:73:89:9a:f0:d1:f7:e9:5f:03:55:
2f:41:da:00:fb:d4:a9:34:ce:9d:db:5a:28:41:f3:
42:e0:9e:f3:ec:45:ad:c3:3b:ce:5a:9f:a5:df:00:
52:68:80:2e:1b:5b:78:20:3b:24:2a:14:64:9b:dd:
5c:06:10:e5:58:c7:7f:d0:05:cc:24:81:a0:64:a2:
bb:6b:10:d4:36:55:53:20:dd:c7:1b:e4:5d:79:32:
a3:01:96:e8:80:a4:e9:d4:84:29:a6:78:79:a1:d6:
b3:d6:f3:98:19:fe:05:57:d2:18:ba:bb:37:81:65:
0c:4c:b9:75:cc:1b:b9:a6:84:2c:cf:24:94:46:5c:
6f:3b:84:78:36:a6:2b:c3:81:da:b4:d9:2c:fa:6a:
a6:f7:92:75:0d:78:ec:bd:e9:3e:ef:b7:2f:e2:33:
0c:34:bc:5d:85:59:7c:e2:64:4c:62:f1:d8:95:84:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B1:E0:1B:CB:82:90:61:5B:8F:90:CA:8C:FB:97:3C:88:F4:8A:FF
X509v3 Authority Key Identifier:
keyid:A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/3135322e3130342e3232302e302f32322d3232203d3e2039393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.104.220.0/22
Signature Algorithm: sha256WithRSAEncryption
85:f5:9e:ea:71:ad:b1:b9:51:89:0e:30:9b:e0:de:b0:a5:f8:
bb:ad:69:cc:2f:4b:48:fc:e9:05:87:d7:dc:88:4d:b6:8c:c4:
d5:12:35:13:ca:85:92:59:86:d5:64:aa:0e:e7:24:65:b3:34:
47:91:08:5c:fc:b6:44:d1:ae:d1:f0:b0:bc:23:8a:22:8c:99:
20:56:d8:1b:64:f8:f2:69:35:66:de:59:f2:9f:47:88:16:80:
f4:67:a5:7a:c7:bd:89:2d:87:37:62:8b:53:00:45:4d:b3:11:
30:e6:b8:e3:f0:36:f1:88:ff:4d:1c:64:ab:5d:19:7c:bc:ee:
07:25:c8:0c:d8:09:92:68:6a:fe:33:f5:fe:06:0b:f9:82:00:
1a:c1:d7:9d:5e:f9:cf:39:10:4e:63:be:db:b2:9e:ed:fc:13:
89:b3:74:b1:3b:9d:92:6e:82:7c:0c:58:c9:14:29:6e:81:b1:
d8:81:9e:19:ab:e6:87:df:7f:db:de:31:ae:01:ab:93:12:64:
65:02:8b:93:49:bc:d4:56:ec:0f:71:06:a4:ad:2e:cb:a7:37:
48:97:82:27:de:3f:1b:b2:22:d4:a1:86:6f:bb:d0:aa:54:8b:
c5:2c:55:6b:3e:c9:2e:90:f0:4a:76:21:46:79:33:ec:e2:fa:
1e:ed:ec:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:19:25 2026 by rpki-client