
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e203338333730.roa
File: 3132312e34362e3134302e302f32322d3232203d3e203338333730.roa (raw, json)
Hash identifier: loZA/kBrOyBcrH//2hz0W6AU7YLl7J3Z1iAynog+SfM=
Subject key identifier: 58:2D:89:5B:E4:27:A9:66:10:2A:0A:20:64:E2:AF:04:16:D5:73:E1
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 01E06ACBEA12A382D88C08FBB2FFFDBED1B3BB0A
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e203338333730.roa
Signing time: Thu 23 Apr 2026 08:09:20 +0000
ROA not before: Thu 23 Apr 2026 08:04:20 +0000
ROA not after: Thu 22 Apr 2027 08:09:20 +0000
asID: 38370
IP address blocks: 121.46.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:e0:6a:cb:ea:12:a3:82:d8:8c:08:fb:b2:ff:fd:be:d1:b3:bb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 08:04:20 2026 GMT
Not After : Apr 22 08:09:20 2027 GMT
Subject: CN=582D895BE427A966102A0A2064E2AF0416D573E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:2a:6d:2a:0a:61:fe:14:f4:76:aa:d3:b9:
c1:a6:9d:f3:fc:f6:a4:86:0d:3a:02:96:64:ff:3f:
db:d9:35:af:9d:8d:90:a4:2e:cd:7c:0d:ac:44:a5:
a2:66:15:bf:45:c6:19:9f:c3:41:86:4b:3c:06:d9:
3f:38:85:42:38:f2:9a:91:69:ed:f3:77:e5:fb:46:
a0:f9:e8:ef:3d:74:47:56:9c:32:8a:47:37:17:fd:
62:4d:81:e4:e7:f8:2a:91:94:72:19:ae:2d:80:d8:
ea:36:6c:3f:7d:de:7c:d0:ff:a8:07:b5:04:8f:bd:
ce:1d:f8:1f:e6:06:8c:7f:05:8f:0d:7e:48:66:f6:
27:c0:aa:9b:a8:e7:6b:ac:d7:f0:6b:07:42:2b:62:
7c:76:fe:a2:40:4b:ae:bd:7a:a1:c1:63:82:6d:92:
df:67:05:82:96:c4:85:29:8d:ea:4a:ae:3b:d6:ab:
95:57:d9:df:fc:a7:cd:ea:55:73:9f:54:9e:d9:4d:
08:d5:28:d7:60:47:d2:dc:e1:57:27:9b:eb:c5:48:
da:72:4a:25:d2:d2:aa:41:37:d6:88:a8:b3:96:e8:
cb:3c:54:46:7e:3d:8c:8f:99:53:6c:78:88:d4:5f:
46:95:f1:eb:24:6c:c2:af:9b:77:f5:04:0b:c2:e6:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2D:89:5B:E4:27:A9:66:10:2A:0A:20:64:E2:AF:04:16:D5:73:E1
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e203338333730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.140.0/22
Signature Algorithm: sha256WithRSAEncryption
dc:6a:29:5d:cb:f6:8c:fc:4d:df:11:27:80:ca:dc:fe:29:92:
18:16:69:1b:8d:16:3f:df:a7:8d:bb:a2:0c:05:33:36:32:2c:
1b:69:c5:c0:5a:2b:72:35:63:b1:44:8a:68:d5:bb:3e:8b:ce:
c6:e9:f0:92:29:d7:a7:9f:d0:44:f8:c2:55:06:20:9b:42:e8:
8c:b3:94:08:31:10:08:7e:3f:ca:6f:0e:4e:85:ea:fa:da:86:
b3:68:9e:b0:f9:e5:1f:ec:f4:b6:eb:d1:6d:5d:7b:81:9a:40:
19:8e:6c:af:14:52:5d:cf:d7:9e:f2:2b:8c:3d:6f:fc:5e:ec:
ec:77:8a:e7:43:90:21:35:7d:48:8b:1a:0a:13:e1:9c:18:07:
42:78:2b:e7:71:d3:af:63:c0:bb:6f:17:57:7a:29:e4:c2:60:
0c:29:f4:c3:53:66:a1:25:33:20:76:2e:c2:17:ce:26:7b:2e:
d6:fe:b9:14:c0:15:03:94:d4:1e:97:7f:34:23:94:0a:07:6d:
88:8c:09:fe:17:a5:42:03:e3:01:07:99:76:c9:92:e7:2a:c4:
d1:1c:6c:e3:af:3e:98:8f:eb:f7:ae:d2:37:d7:78:fd:12:67:
e6:37:f8:71:b2:0c:40:97:3e:39:78:b1:46:f6:70:ee:11:23:
ee:77:12:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:19 2026 by rpki-client