
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203338333730.roa
File: 3132312e34362e3133362e302f32322d3232203d3e203338333730.roa (raw, json)
Hash identifier: lyoWuIOWYMy8p6sStUH83C12M4x6T0ozuyd6G/wTN4I=
Subject key identifier: 1A:79:91:E7:C5:08:36:C6:61:93:94:BE:15:63:B8:42:7D:05:21:9D
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 7B72E1E171E7A05B8221738643B588187EFFC0D4
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203338333730.roa
Signing time: Thu 23 Apr 2026 08:01:31 +0000
ROA not before: Thu 23 Apr 2026 07:56:31 +0000
ROA not after: Thu 22 Apr 2027 08:01:31 +0000
asID: 38370
IP address blocks: 121.46.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:72:e1:e1:71:e7:a0:5b:82:21:73:86:43:b5:88:18:7e:ff:c0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 07:56:31 2026 GMT
Not After : Apr 22 08:01:31 2027 GMT
Subject: CN=1A7991E7C50836C6619394BE1563B8427D05219D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:33:b0:0e:f3:67:11:c2:70:c4:7e:ff:53:
00:ca:fd:90:97:e7:19:80:29:03:53:73:ce:39:cb:
45:20:89:4b:61:c6:dc:9a:7d:d8:26:94:bd:a3:30:
d9:86:8f:c9:fe:5a:3d:06:b2:d2:22:19:cc:2f:f2:
7d:a8:4c:77:e3:d6:fb:4a:ae:cc:af:09:b8:9e:2e:
c6:97:d7:4b:6f:01:b1:0a:12:bb:a5:c8:65:4e:01:
d8:ec:7e:db:df:f1:32:fb:d0:df:56:dd:67:16:ad:
75:54:c6:29:e4:cb:83:6f:8b:1c:92:34:8d:39:f1:
28:93:e5:82:1b:c9:aa:c2:b5:4d:e5:4f:ba:f4:fd:
a6:bc:ae:74:79:70:32:77:6f:73:a8:bf:b8:59:f7:
c8:a4:38:45:ef:23:c4:27:78:6b:74:c8:4b:ea:6c:
1d:f2:4f:6e:9c:78:d5:d9:4d:7a:60:f4:5f:57:a6:
20:23:cf:80:37:cf:cf:b4:82:aa:f5:11:a1:d1:61:
26:6e:d3:4b:60:85:ba:48:1b:cb:d9:d1:14:21:ae:
c5:1c:6a:88:68:43:73:94:93:20:ea:41:50:3c:d9:
28:19:cc:d5:f6:54:f3:b6:f5:fe:7c:bf:15:f1:ee:
fc:dd:f1:b1:ae:12:27:05:45:87:2a:c0:97:b2:9e:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:79:91:E7:C5:08:36:C6:61:93:94:BE:15:63:B8:42:7D:05:21:9D
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203338333730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.136.0/22
Signature Algorithm: sha256WithRSAEncryption
05:9b:7d:e3:87:09:0a:18:e5:e2:50:9d:ae:8f:10:3e:28:09:
a6:75:9a:87:28:e2:b4:b9:ed:c4:06:77:0c:3f:6d:10:a8:15:
9f:a9:3a:29:19:c2:97:5f:73:0d:3e:82:ba:60:f9:7f:94:47:
7e:27:44:82:17:40:2a:f0:94:7f:71:99:12:f6:c0:95:83:2e:
45:22:83:bf:ce:f6:8d:7d:2a:6a:f7:d8:77:43:88:70:8a:8f:
47:24:08:cb:df:d5:3e:e1:91:99:e4:d8:e1:c2:9b:c7:bf:a1:
f1:23:75:21:09:2e:a6:d0:94:71:34:03:b5:69:04:ab:28:9c:
6f:11:6f:01:05:5f:d2:e4:56:cf:61:44:6a:7f:72:71:e7:56:
7c:ad:11:75:27:49:4e:42:0d:30:5b:9a:cd:0c:f9:b3:7e:c0:
54:03:63:6b:9a:50:47:b6:3b:64:57:88:d8:ca:31:69:9f:90:
da:f0:3b:6a:61:7d:09:f4:cc:b1:e4:c1:91:3a:7a:4b:6c:d2:
39:64:40:a7:93:24:19:b3:64:10:43:38:8f:19:dc:8e:33:c6:
13:b8:5e:a3:64:4e:ba:e5:6b:9b:d4:82:5d:ab:f2:f3:32:e8:
bd:09:83:98:4b:46:b9:73:1a:b6:c1:44:b5:4e:3c:8b:8a:fd:
d8:67:6d:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:20 2026 by rpki-client