
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32332d3233203d3e20313335333931.roa
File: 3132312e34362e3133322e302f32332d3233203d3e20313335333931.roa (raw, json)
Hash identifier: L5iiqFRIH4XfeKEoQQJ3ga5vFtlihjenzdBRtq4aZBI=
Subject key identifier: 5C:EF:66:B6:84:1F:13:77:B1:CF:91:4D:4E:E9:E2:ED:92:58:CB:FC
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 3890BF6A3230649ACD4E71B4340EB61D9233F17D
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32332d3233203d3e20313335333931.roa
Signing time: Thu 23 Apr 2026 07:56:58 +0000
ROA not before: Thu 23 Apr 2026 07:51:58 +0000
ROA not after: Thu 22 Apr 2027 07:56:58 +0000
asID: 135391
IP address blocks: 121.46.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:90:bf:6a:32:30:64:9a:cd:4e:71:b4:34:0e:b6:1d:92:33:f1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 07:51:58 2026 GMT
Not After : Apr 22 07:56:58 2027 GMT
Subject: CN=5CEF66B6841F1377B1CF914D4EE9E2ED9258CBFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:77:94:65:46:c0:d9:67:03:f2:56:88:e3:
5a:50:d3:54:d2:60:a1:9a:02:4b:43:85:2d:5e:87:
49:05:48:de:22:8d:db:87:fd:98:56:9c:7f:35:86:
c6:5d:49:b3:3d:7c:55:24:eb:9b:d8:db:dd:5e:96:
ea:90:11:24:29:58:14:9c:da:46:be:36:7b:66:89:
19:b9:02:01:10:bd:f8:43:52:db:db:14:01:fa:04:
c8:c4:e1:61:1a:3e:9f:29:8f:6c:ef:9b:10:0c:f9:
7b:30:d1:a5:f3:a9:2a:80:ee:12:34:8d:0d:d5:96:
f4:8d:8e:ac:82:99:d7:bb:4d:3e:45:8c:c4:71:f1:
a4:85:cf:a3:6d:be:41:11:74:11:6e:a4:16:b6:d6:
27:b7:c5:07:fe:6a:84:d6:0c:56:42:a0:4e:80:df:
c3:af:31:63:30:b1:80:c8:b4:c2:ef:5f:65:93:d9:
f8:88:90:44:9b:e2:89:79:01:8b:99:c8:08:d8:70:
90:16:ba:5e:e8:bf:5b:b6:92:94:9f:27:2f:0d:2f:
79:c0:39:26:aa:ca:fc:79:bb:f7:45:95:0c:d3:a2:
cc:e5:95:04:5c:b5:4f:16:5e:92:07:ee:07:74:01:
3a:33:28:ba:89:32:77:f8:d4:9b:ba:60:16:ef:f8:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EF:66:B6:84:1F:13:77:B1:CF:91:4D:4E:E9:E2:ED:92:58:CB:FC
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32332d3233203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.132.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:be:62:03:ba:54:cc:4c:84:98:95:e5:4b:84:dc:b6:4c:5c:
95:b3:a2:16:6f:6d:6d:2d:e3:ad:9e:96:2c:28:44:00:d1:be:
99:c5:f8:40:b2:4e:e0:37:1a:2a:58:9d:0e:74:cd:1c:85:b6:
84:ba:5a:88:62:45:d4:13:69:56:35:24:98:42:7a:ee:da:2d:
5d:c7:62:e9:39:be:02:8b:df:5e:1e:43:96:70:80:44:55:a5:
1a:d6:78:e0:30:38:1b:5a:f8:4d:f0:c5:24:56:a8:da:81:3e:
7e:bd:0d:79:25:37:c4:57:4c:21:30:2e:d5:aa:77:75:d4:d1:
90:bf:5f:6e:78:79:4c:31:07:5b:dc:a6:80:53:a8:2d:a0:60:
eb:86:b1:84:60:d1:91:e4:02:e9:be:87:58:42:bd:d1:6d:0c:
a3:e4:78:5e:31:64:0b:f3:82:1b:ba:3f:4d:ac:df:f0:4c:15:
c2:69:38:fe:c5:a5:34:79:3c:53:bd:0a:a8:69:a5:0b:22:bf:
dd:8b:50:8b:65:e3:c1:ba:84:29:91:de:57:0e:17:23:7b:6c:
07:77:64:2f:82:81:8d:91:69:c4:a2:99:2b:ad:5e:ba:14:d8:
14:dd:7e:9a:56:39:e8:db:04:e0:bc:08:3f:64:68:c0:eb:db:
1a:8d:7c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:21 2026 by rpki-client