
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32322d3232203d3e2034313334.roa
File: 3132312e34362e3133322e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier: 1+cp17nWTopdGmmdraIOS4OFcYof7lhSH1m7I9NSCuQ=
Subject key identifier: 95:16:DA:4D:16:4E:30:DB:F5:DA:14:18:CE:57:A2:E8:2F:59:C7:2A
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 57BD4DDD0362B628D2A909FD869E2CFE99AE39E9
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32322d3232203d3e2034313334.roa
Signing time: Thu 23 Apr 2026 07:56:05 +0000
ROA not before: Thu 23 Apr 2026 07:51:05 +0000
ROA not after: Thu 22 Apr 2027 07:56:05 +0000
asID: 4134
IP address blocks: 121.46.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:bd:4d:dd:03:62:b6:28:d2:a9:09:fd:86:9e:2c:fe:99:ae:39:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 07:51:05 2026 GMT
Not After : Apr 22 07:56:05 2027 GMT
Subject: CN=9516DA4D164E30DBF5DA1418CE57A2E82F59C72A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:95:7b:c0:d4:0d:36:b0:98:7e:ca:ba:68:
ea:b3:16:37:a1:8f:75:cb:d0:4c:0f:7e:4f:d4:8e:
ba:98:38:4b:68:6c:63:f4:2b:75:4c:ed:87:c2:63:
cd:94:6f:75:5c:4a:85:4e:74:ac:6c:8c:7e:9d:e0:
53:42:9c:6b:8b:b5:a0:92:31:e5:f5:53:9a:ec:7b:
ee:51:01:74:30:de:13:0c:e4:1f:ce:c0:ba:f2:ba:
55:04:26:ae:44:73:ba:70:2c:0d:b1:2b:88:de:4a:
70:d7:6f:3a:86:d4:9d:c9:68:60:2d:99:46:7f:c8:
42:69:a4:a7:d2:d5:8f:d3:f0:8d:1f:af:fb:12:40:
49:21:03:bc:3e:46:2b:3a:58:4c:75:46:72:c0:8e:
8a:40:a4:fd:f8:cd:17:14:f2:74:0f:76:98:1e:8a:
29:bc:94:a3:45:25:b1:15:b2:e3:47:37:fe:ef:b9:
9c:cc:aa:93:7b:97:dc:02:fa:94:96:66:2e:0e:a2:
de:64:5b:57:58:8c:f4:e0:ab:d2:a5:6e:01:06:a8:
4d:77:ed:b6:02:80:f0:81:98:17:66:44:78:f2:26:
db:28:8e:52:0c:1d:39:b4:de:d9:70:7a:1b:88:a3:
ce:8f:9e:0c:67:08:98:fb:fb:62:3f:1e:be:17:fb:
ea:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:16:DA:4D:16:4E:30:DB:F5:DA:14:18:CE:57:A2:E8:2F:59:C7:2A
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32322d3232203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.132.0/22
Signature Algorithm: sha256WithRSAEncryption
20:6e:85:5f:38:9e:39:67:f1:29:b9:44:56:96:ad:71:d0:5f:
2d:a0:c7:c9:ab:39:a4:de:8b:ba:b2:08:68:c4:64:64:67:93:
22:0b:b3:2f:09:3a:64:0d:9b:20:af:f1:0f:7d:99:37:d7:d7:
e4:86:91:ed:44:e5:2c:0e:38:a1:9a:3e:3b:14:8f:9b:e9:ac:
ba:64:47:5c:9c:ec:97:de:97:41:01:cd:0f:2d:ca:89:03:4f:
91:45:57:33:60:ab:f3:48:ac:42:9e:d3:7e:60:0c:58:fa:84:
e4:d7:89:44:9a:b8:e3:36:ba:3a:69:17:0a:47:c0:3e:11:af:
f4:1e:35:eb:0a:ef:c4:09:d0:54:40:c7:da:00:5e:f1:ce:eb:
d6:f3:40:0a:8d:2f:0c:50:2e:28:3b:e3:a1:24:e1:4a:e6:d6:
d4:e3:0c:3b:21:28:35:98:37:b5:e7:52:12:8c:57:cc:88:58:
cd:dc:2c:21:e2:6a:fd:ec:59:3d:1c:36:c9:88:29:0c:d3:e3:
d5:c8:39:40:f0:01:61:b6:ca:af:a5:b1:13:5c:aa:ea:78:72:
93:ff:78:20:59:0e:59:e8:51:c3:b0:99:cd:a0:ae:ab:7e:89:
02:22:7c:7c:9a:11:69:cc:e5:c0:45:20:4d:1e:59:f9:1c:48:
57:f4:ec:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:50:49 2026 by rpki-client