
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203538343636.roa
File: 3132312e34362e3133362e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier: v8mvXci3BrbBDBOwGtLEw8J9fPGtbotCrxNbymI0ibY=
Subject key identifier: D9:9A:C9:4D:13:09:36:91:A8:E2:9B:81:5D:01:79:8D:AE:20:95:07
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 7819CA7C392D9F7091C7BF5EB47F15CAB620620E
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203538343636.roa
Signing time: Thu 23 Apr 2026 08:01:32 +0000
ROA not before: Thu 23 Apr 2026 07:56:32 +0000
ROA not after: Thu 22 Apr 2027 08:01:32 +0000
asID: 58466
IP address blocks: 121.46.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:19:ca:7c:39:2d:9f:70:91:c7:bf:5e:b4:7f:15:ca:b6:20:62:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 07:56:32 2026 GMT
Not After : Apr 22 08:01:32 2027 GMT
Subject: CN=D99AC94D13093691A8E29B815D01798DAE209507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:ee:fb:df:26:90:60:fb:3d:ff:1d:70:c6:
7b:24:65:a9:c0:cf:6b:7c:df:8b:02:1e:c1:78:b1:
5a:a3:2f:3d:fe:1a:91:77:86:84:2f:f1:46:24:36:
00:49:3d:f0:4c:34:3f:b2:45:c4:6f:15:d8:48:47:
18:fc:2d:4c:a4:d1:ba:b4:a8:90:a3:c9:89:a1:d9:
47:0d:06:6d:6a:29:03:26:42:45:53:22:8f:31:13:
34:a3:6c:9e:e9:1b:16:83:ef:08:91:b7:d2:9d:77:
30:f8:da:43:7a:30:16:4b:f0:35:9c:cf:8e:11:07:
19:54:a8:2b:e3:c4:f5:be:20:cf:4f:b1:f0:37:67:
67:00:e4:6d:4e:c4:70:64:e0:78:5a:17:b8:7a:66:
4d:8a:da:89:07:ed:77:02:bd:53:18:6a:c6:ae:b0:
65:24:24:af:64:c8:96:a0:87:98:14:01:82:73:53:
61:82:36:50:bb:6d:11:19:e8:c0:f6:3e:b7:29:4f:
6d:61:b3:78:de:83:59:c9:bf:80:96:dd:ca:79:ab:
92:f0:76:f7:85:06:07:5b:8a:2b:b3:43:5c:d8:8c:
49:85:6d:a2:fa:b8:b4:3c:83:b9:94:f9:da:fc:8b:
60:c6:4d:91:86:73:23:99:7e:64:0d:8a:7b:35:ce:
bf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9A:C9:4D:13:09:36:91:A8:E2:9B:81:5D:01:79:8D:AE:20:95:07
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.136.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:5d:b8:bd:a9:35:4a:60:ed:19:78:5e:2a:d8:d0:0c:c5:b4:
ac:0b:d5:fd:80:b4:fb:5a:91:ee:a7:84:4e:c7:17:70:b6:60:
0b:1a:f4:d6:2c:7a:3f:a4:40:13:70:d7:89:c6:9e:65:c5:d9:
f0:fb:21:18:1e:c8:93:0e:7a:a6:af:5f:13:4e:42:a8:37:1d:
20:6b:5b:16:c1:fb:6d:97:43:da:8a:ab:ba:f7:56:ae:fd:3d:
04:8f:ab:dc:a6:4f:7a:0f:d6:3f:d3:be:d9:2c:04:da:d0:44:
96:dc:06:97:2b:ca:58:02:17:c9:92:91:11:13:3f:c0:ce:2e:
ad:0a:4b:f7:ef:96:a0:43:4e:5d:89:60:0b:16:8c:70:f6:a1:
ca:54:57:9a:8a:9d:e2:75:44:03:9d:16:5d:7e:96:0e:75:9f:
dc:73:f7:f8:4e:17:2c:fc:2d:5b:4a:ec:2e:8a:6e:c5:34:73:
1f:66:02:45:d4:39:ea:3f:b8:7a:ad:e0:04:a0:a4:bc:90:a2:
ed:f7:2e:a2:b9:00:5f:1f:84:cf:36:cf:95:fa:0a:8e:11:fe:
eb:e8:37:55:e0:6a:7b:c1:28:45:57:78:41:9e:5e:df:58:e9:
40:1e:ed:0c:8c:34:a9:66:86:39:62:d6:58:c4:4f:1e:64:cd:
82:e7:87:aa
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUeBnKfDktn3CRx79etH8VyrYgYg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA0MjMwNzU2MzJaFw0yNzA0MjIwODAxMzJaMDMxMTAvBgNV
BAMTKEQ5OUFDOTREMTMwOTM2OTFBOEUyOUI4MTVEMDE3OThEQUUyMDk1MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYQe773yaQYPs9/x1wxnskZanA
z2t834sCHsF4sVqjLz3+GpF3hoQv8UYkNgBJPfBMND+yRcRvFdhIRxj8LUyk0bq0
qJCjyYmh2UcNBm1qKQMmQkVTIo8xEzSjbJ7pGxaD7wiRt9KddzD42kN6MBZL8DWc
z44RBxlUqCvjxPW+IM9PsfA3Z2cA5G1OxHBk4HhaF7h6Zk2K2okH7XcCvVMYasau
sGUkJK9kyJagh5gUAYJzU2GCNlC7bREZ6MD2PrcpT21hs3jeg1nJv4CW3cp5q5Lw
dveFBgdbiiuzQ1zYjEmFbaL6uLQ8g7mU+dr8i2DGTZGGcyOZfmQNins1zr8LAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU2ZrJTRMJNpGo4puBXQF5ja4glQcwHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjI3NTMzMDc3NzM1MDE0Ni8wLzMxMzIzMTJlMzQz
NjJlMzEzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM0MzYzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAnkuiDANBgkqhkiG9w0BAQsFAAOCAQEAL124vak1SmDtGXheKtjQDMW0
rAvV/YC0+1qR7qeETscXcLZgCxr01ix6P6RAE3DXicaeZcXZ8PshGB7Ikw56pq9f
E05CqDcdIGtbFsH7bZdD2oqruvdWrv09BI+r3KZPeg/WP9O+2SwE2tBEltwGlyvK
WAIXyZKRERM/wM4urQpL9++WoENOXYlgCxaMcPahylRXmoqd4nVEA50WXX6WDnWf
3HP3+E4XLPwtW0rsLopuxTRzH2YCRdQ56j+4eq3gBKCkvJCi7fcuorkAXx+EzzbP
lfoKjhH+6+g3VeBqe8EoRVd4QZ5e31jpQB7tDIw0qWaGOWLWWMRPHmTNgueHqg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:23 2026 by rpki-client