
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133382e302f32332d3233203d3e20313335333931.roa
File: 3132312e34362e3133382e302f32332d3233203d3e20313335333931.roa (raw, json)
Hash identifier: DWoMyAbUhkVYhjmxcAQOPZsVVWCyQIXlDwx4sTXPXnY=
Subject key identifier: 68:9D:64:C6:4D:53:67:D5:0A:C1:6F:AF:AB:F8:B6:D0:73:ED:EF:55
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 2CE22173DE3B8C96C9DBACDBF18196B93122A4AD
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133382e302f32332d3233203d3e20313335333931.roa
Signing time: Thu 23 Apr 2026 08:01:31 +0000
ROA not before: Thu 23 Apr 2026 07:56:31 +0000
ROA not after: Thu 22 Apr 2027 08:01:31 +0000
asID: 135391
IP address blocks: 121.46.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e2:21:73:de:3b:8c:96:c9:db:ac:db:f1:81:96:b9:31:22:a4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 07:56:31 2026 GMT
Not After : Apr 22 08:01:31 2027 GMT
Subject: CN=689D64C64D5367D50AC16FAFABF8B6D073EDEF55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:28:0e:f5:98:14:0a:23:30:73:c2:e4:a9:
a4:01:9c:fa:c8:c6:75:29:d6:a0:83:dc:8b:57:35:
6f:dd:c2:59:25:7f:a4:5e:e8:4c:3f:0a:cd:33:a7:
cd:31:72:54:cf:ad:83:31:6d:5f:36:18:ea:9c:70:
22:6d:2a:d8:3b:cf:a2:1d:8a:c5:e0:6f:fb:7c:45:
9a:60:98:42:f7:8d:0d:cf:cd:db:db:79:b2:e4:05:
11:59:a4:fa:32:7d:17:56:ce:f6:f2:94:43:c5:f5:
0e:0f:e8:6a:65:87:27:2e:4f:b9:91:d1:04:9c:cb:
f1:2f:c0:80:aa:8a:a8:9f:e1:e2:70:36:1b:b6:de:
01:0f:67:8f:11:c5:4f:5b:05:49:d2:98:81:55:ec:
e0:f3:9d:19:b1:67:10:57:a5:48:a7:7e:d2:60:28:
8d:fa:36:03:3c:81:cf:81:1a:58:a7:e5:4d:f4:62:
fb:29:f4:f0:f5:3f:2f:03:9f:01:4f:28:d7:8d:2a:
22:e5:ec:5b:19:83:46:05:1c:1a:f9:26:dd:9d:17:
97:f4:91:68:d1:72:52:27:77:fd:4a:dd:9c:fa:4b:
ec:e0:f6:34:42:37:c6:8c:0a:a9:d7:a2:53:15:b8:
33:d0:18:5b:9b:3f:fd:49:a6:8d:e6:0a:2d:f6:32:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9D:64:C6:4D:53:67:D5:0A:C1:6F:AF:AB:F8:B6:D0:73:ED:EF:55
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133382e302f32332d3233203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.138.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:2d:ac:c8:b2:a9:7a:b9:cc:fc:f0:92:98:54:b4:ff:33:f7:
94:67:63:1b:d1:07:9c:59:5a:17:e7:88:8c:3a:3a:8e:47:25:
c3:21:fb:56:00:0a:04:ab:ba:6d:04:64:fa:db:91:23:a6:54:
ea:63:40:46:10:83:bc:7e:65:cf:e8:d3:9a:05:b2:97:43:fc:
06:5a:04:5d:c4:43:b6:09:e3:cc:d1:d1:22:95:5f:70:04:a1:
97:6d:f7:2a:75:64:67:e3:51:86:bf:04:69:12:b4:37:37:be:
63:9d:eb:5f:04:51:c1:5f:83:56:dd:32:1f:5a:ab:39:65:3c:
00:04:d3:cc:52:4d:b4:6d:d3:7e:5f:e1:fa:f2:83:34:ca:52:
f0:a5:d3:dc:74:58:16:73:c3:5b:4b:06:fe:e7:52:af:13:5a:
fd:85:52:a6:43:36:c8:27:0b:4d:7c:5d:9f:d7:4d:94:fd:b5:
d0:85:61:e1:a4:16:73:54:6d:93:71:1e:1f:12:a4:eb:17:b3:
14:50:1f:d4:6e:c0:99:58:a0:ce:ee:21:21:33:14:4d:fa:46:
30:5b:b7:2e:33:79:4e:a3:6b:6f:57:af:96:4e:59:70:16:7b:
8f:31:bf:a5:da:6d:db:9d:3e:b2:2a:24:a5:79:89:c4:79:83:
43:05:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:22 2026 by rpki-client