
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203536303430.roa
File: 3132312e34362e3133362e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier: vK6iY+3IBLr2j1f7syHYEeZIYaoB2KdjumiYmNfZ8hw=
Subject key identifier: 7E:58:36:0E:48:E8:AA:08:A7:B7:B6:CD:7E:59:69:BD:BC:6F:D6:EC
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 0B64D4C9D22E2EBE76D12B6CFC5180CA8552A503
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203536303430.roa
Signing time: Thu 23 Apr 2026 08:01:31 +0000
ROA not before: Thu 23 Apr 2026 07:56:31 +0000
ROA not after: Thu 22 Apr 2027 08:01:31 +0000
asID: 56040
IP address blocks: 121.46.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:64:d4:c9:d2:2e:2e:be:76:d1:2b:6c:fc:51:80:ca:85:52:a5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 07:56:31 2026 GMT
Not After : Apr 22 08:01:31 2027 GMT
Subject: CN=7E58360E48E8AA08A7B7B6CD7E5969BDBC6FD6EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:a2:49:19:09:4c:27:0b:e4:cd:ec:ef:48:
42:df:66:5d:ac:7f:ee:85:0d:18:6d:d8:cd:84:a3:
a3:e5:1f:fd:8e:8c:db:27:b1:84:3a:be:95:e7:33:
d5:05:57:02:cf:53:5f:bd:03:f7:6d:1c:eb:b2:14:
56:6e:7f:07:7a:d7:7e:c8:ab:83:ac:3f:05:0c:ad:
18:01:31:c5:b0:53:a7:ac:50:a9:e7:5e:cf:a5:89:
55:b9:e6:01:9d:84:de:fb:b3:4f:cc:da:3c:38:52:
b2:14:d5:cb:e8:de:cb:4a:f7:ab:87:e9:0e:4d:26:
6b:96:eb:88:ea:85:a1:e7:b1:ff:ae:01:66:da:75:
24:19:42:ea:10:4e:cf:89:7a:5f:ed:a8:d4:95:51:
8b:ab:36:5e:e4:0d:47:1d:bb:41:7f:b6:90:d0:0b:
5f:2b:c2:10:51:0c:18:75:61:44:05:47:22:14:06:
bf:9f:6a:98:62:70:ec:8f:da:e1:fc:9f:25:88:50:
28:f2:64:a9:17:70:3c:46:da:09:92:b4:c9:c5:0c:
47:c5:5d:94:6f:a3:58:6b:4d:95:4c:17:b6:75:c9:
a1:d3:91:ec:37:c5:99:cf:7e:4d:5e:eb:3a:07:3a:
2f:d9:05:e4:ce:5c:61:05:82:c7:aa:78:55:be:9e:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:58:36:0E:48:E8:AA:08:A7:B7:B6:CD:7E:59:69:BD:BC:6F:D6:EC
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.136.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:14:1f:38:b8:30:fc:be:58:be:a6:e9:1f:3f:06:a9:19:ea:
2b:8c:38:2b:a8:b3:dc:cd:53:7a:28:3e:c7:7c:94:e1:5c:b8:
f1:c8:dc:9f:75:15:49:66:62:75:c6:50:e1:8c:28:8f:3d:66:
6f:aa:bb:b2:d6:73:c6:7f:fd:9f:a2:4b:ee:c0:06:30:0b:e5:
ad:4e:ad:d5:e9:3f:9a:f8:20:60:f5:82:de:49:be:84:3d:cc:
ff:a3:cd:93:9c:c4:26:ca:e6:c5:ec:20:d6:f8:5d:8b:21:2c:
00:00:6c:d5:28:d9:2b:67:6d:04:4d:20:c6:1d:55:dd:01:46:
3e:63:ef:dc:cb:34:fb:b9:36:d6:a0:f9:60:41:1c:87:d9:2e:
dd:b4:13:01:42:10:04:76:b7:ba:0f:fe:99:45:c2:7f:58:d1:
bc:0d:52:49:fa:6e:96:85:38:49:e2:f5:32:eb:fd:1f:a5:4e:
c0:3d:22:75:49:20:7d:a0:5b:2c:1e:ee:3b:2c:e2:10:4f:bf:
50:ea:08:6b:34:76:91:ba:26:6a:9f:9c:15:74:43:81:cf:37:
fc:32:25:8f:9e:e8:d7:ed:7d:95:40:08:63:41:f3:9f:ef:11:
40:6b:33:a7:65:a0:c4:78:ff:f4:4b:19:76:42:57:85:fb:06:
2b:bc:93:85
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUC2TUydIuLr520Sts/FGAyoVSpQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA0MjMwNzU2MzFaFw0yNzA0MjIwODAxMzFaMDMxMTAvBgNV
BAMTKDdFNTgzNjBFNDhFOEFBMDhBN0I3QjZDRDdFNTk2OUJEQkM2RkQ2RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoAKJJGQlMJwvkzezvSELfZl2s
f+6FDRht2M2Eo6PlH/2OjNsnsYQ6vpXnM9UFVwLPU1+9A/dtHOuyFFZufwd6137I
q4OsPwUMrRgBMcWwU6esUKnnXs+liVW55gGdhN77s0/M2jw4UrIU1cvo3stK96uH
6Q5NJmuW64jqhaHnsf+uAWbadSQZQuoQTs+Jel/tqNSVUYurNl7kDUcdu0F/tpDQ
C18rwhBRDBh1YUQFRyIUBr+faphicOyP2uH8nyWIUCjyZKkXcDxG2gmStMnFDEfF
XZRvo1hrTZVMF7Z1yaHTkew3xZnPfk1e6zoHOi/ZBeTOXGEFgseqeFW+ng9HAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUflg2Dkjoqgint7bNfllpvbxv1uwwHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjI3NTMzMDc3NzM1MDE0Ni8wLzMxMzIzMTJlMzQz
NjJlMzEzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMwMzQzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAnkuiDANBgkqhkiG9w0BAQsFAAOCAQEALBQfOLgw/L5YvqbpHz8GqRnq
K4w4K6iz3M1Teig+x3yU4Vy48cjcn3UVSWZidcZQ4Ywojz1mb6q7stZzxn/9n6JL
7sAGMAvlrU6t1ek/mvggYPWC3km+hD3M/6PNk5zEJsrmxewg1vhdiyEsAABs1SjZ
K2dtBE0gxh1V3QFGPmPv3Ms0+7k21qD5YEEch9ku3bQTAUIQBHa3ug/+mUXCf1jR
vA1SSfpuloU4SeL1Muv9H6VOwD0idUkgfaBbLB7uOyziEE+/UOoIazR2kbomap+c
FXRDgc83/DIlj57o1+19lUAIY0Hzn+8RQGszp2WgxHj/9EsZdkJXhfsGK7yThQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:23 2026 by rpki-client