
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133342e302f32332d3233203d3e20313335333931.roa
File: 3132312e34362e3133342e302f32332d3233203d3e20313335333931.roa (raw, json)
Hash identifier: 30ea2Rw3Xbwpqrq3+/wy6hGFf12lHVHlSTEriLoQdsQ=
Subject key identifier: EE:76:BD:19:6F:1F:07:D1:BD:0C:97:A8:9D:4F:31:7B:82:29:A4:88
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 15B07F609C1E978D527442F6ECFEC64F4D405F63
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133342e302f32332d3233203d3e20313335333931.roa
Signing time: Thu 23 Apr 2026 07:56:58 +0000
ROA not before: Thu 23 Apr 2026 07:51:58 +0000
ROA not after: Thu 22 Apr 2027 07:56:58 +0000
asID: 135391
IP address blocks: 121.46.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b0:7f:60:9c:1e:97:8d:52:74:42:f6:ec:fe:c6:4f:4d:40:5f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 07:51:58 2026 GMT
Not After : Apr 22 07:56:58 2027 GMT
Subject: CN=EE76BD196F1F07D1BD0C97A89D4F317B8229A488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:78:91:87:b7:0e:ab:e1:95:12:8c:5d:0a:
61:61:d6:bd:a0:3e:5c:23:47:d9:56:bc:93:c4:5b:
9c:80:b3:67:8b:5a:89:9a:12:42:83:fa:c5:0f:65:
3f:ed:9c:35:f6:2d:a7:12:90:2b:bd:3c:88:7e:a4:
f2:d0:67:bd:69:58:7a:41:71:8b:7a:e7:22:61:28:
e0:c2:ce:ba:6e:8c:84:4b:b1:70:11:2e:be:05:71:
06:86:ec:88:98:2f:13:ae:d0:4f:80:ac:8e:8d:53:
e3:09:f2:69:ea:68:15:33:4a:08:82:d0:b9:8d:85:
15:d3:0d:86:e2:10:ae:7c:44:f3:9b:bd:64:0e:ca:
c0:ee:ae:0b:7a:f7:af:aa:35:d1:b7:45:53:b5:22:
22:c6:30:9f:33:cd:f7:f2:1e:07:5a:ec:84:46:e7:
03:66:b1:56:7c:f4:4e:eb:b2:53:e5:99:cb:12:1e:
25:82:2f:6a:7d:fd:17:5a:05:9c:b0:fb:7f:60:e2:
4a:79:a7:1c:21:c3:c4:82:c3:e4:99:13:f5:26:82:
f0:6a:28:68:be:79:b5:28:60:9e:76:cf:2c:cf:d4:
b6:56:cb:83:89:48:45:14:c2:97:7d:53:f5:4b:c8:
04:08:f5:f6:66:56:77:0d:5a:3f:2d:60:6a:ac:13:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:76:BD:19:6F:1F:07:D1:BD:0C:97:A8:9D:4F:31:7B:82:29:A4:88
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133342e302f32332d3233203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.134.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:93:67:c8:bb:1d:88:07:a8:d1:4a:96:b7:9e:79:46:b9:00:
fe:0d:89:ba:e9:08:eb:5f:6f:8d:67:86:8a:f6:dd:e1:17:df:
f7:b1:08:94:80:17:90:16:a2:b4:dc:7c:a2:30:75:e3:ee:fb:
9a:8e:e2:b4:f2:0b:dc:1d:4b:67:68:56:b7:95:83:71:8e:40:
9a:df:c9:fa:15:50:6f:10:20:96:f6:09:f4:ce:3e:ed:dd:5f:
a4:7a:cb:cc:90:5b:9d:49:45:54:d6:c1:a7:a3:05:6f:e3:99:
0e:d1:2a:08:0f:be:bf:71:4e:90:2b:bf:36:53:c2:a4:2b:ff:
47:5d:38:96:7e:9d:eb:28:f0:39:6f:95:c1:e9:54:b4:8b:f9:
d8:3a:cb:2f:ce:5e:ab:0f:37:ee:6b:ba:ef:f5:6a:7a:ce:14:
b8:21:f4:cb:2e:ed:6a:66:42:09:92:16:37:b3:7d:59:06:9b:
52:a0:1b:ab:6c:e2:9a:d1:36:db:b6:2e:a9:83:ae:51:6f:df:
89:19:1c:5e:21:dc:1b:28:54:f4:e0:35:74:fa:0b:64:45:5d:
6b:d4:47:e2:46:b6:da:ba:d9:e4:39:37:7b:bc:d6:0f:5c:b4:
b0:43:37:db:07:39:34:36:2c:4b:da:bc:a3:2e:66:17:38:34:
52:f0:c1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:27 2026 by rpki-client