
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e2034313334.roa
File: 3132312e34362e3134302e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier: +PLVTq7avu9c9ROBcOqEpIpJAqg5WDIFZVKdu+5fK5M=
Subject key identifier: E8:8C:2A:21:86:CA:48:32:8E:B4:AA:4C:76:57:9F:AF:9A:2B:03:CB
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 789F57B9ACCF0E20767C44FF4BE069DB673366E4
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e2034313334.roa
Signing time: Thu 23 Apr 2026 08:09:21 +0000
ROA not before: Thu 23 Apr 2026 08:04:21 +0000
ROA not after: Thu 22 Apr 2027 08:09:21 +0000
asID: 4134
IP address blocks: 121.46.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:9f:57:b9:ac:cf:0e:20:76:7c:44:ff:4b:e0:69:db:67:33:66:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 08:04:21 2026 GMT
Not After : Apr 22 08:09:21 2027 GMT
Subject: CN=E88C2A2186CA48328EB4AA4C76579FAF9A2B03CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:31:b4:ab:68:a0:89:e9:23:34:7b:da:18:
f9:65:5e:57:cd:3a:90:d3:88:4d:b6:31:db:47:e7:
94:22:db:5c:d2:b0:31:15:37:bc:39:7e:c7:d8:9d:
39:8b:e2:42:00:55:40:7d:39:e2:ba:ac:ee:b6:d7:
43:19:3c:cc:be:93:0d:e7:6c:f3:29:5c:78:8b:f2:
e3:7a:50:6c:29:3c:53:46:a6:70:dc:1f:86:7f:84:
af:4e:2d:5b:e6:9e:4e:28:2f:7b:2c:80:16:40:06:
7e:ea:36:13:55:c6:85:28:bc:11:cf:a0:84:af:ab:
9c:cc:37:74:66:0e:7f:0e:86:7b:71:3b:a7:80:a8:
37:0a:bc:13:27:8f:a7:09:e8:79:96:bf:49:7f:41:
bc:e4:32:00:fd:0f:17:ab:66:95:eb:6c:11:29:07:
12:67:06:94:54:dd:07:95:db:89:8c:d6:d1:36:c0:
61:bb:02:e3:9d:1e:eb:29:4a:e0:77:1e:ba:10:2c:
3f:24:8f:e0:88:fc:f8:c0:e6:16:5e:11:5e:c0:3b:
89:8e:9a:9c:a1:f3:eb:8b:80:4b:93:14:5d:9d:60:
2d:ef:32:83:80:f4:b6:26:83:7f:e0:35:d4:43:b9:
01:f0:bc:34:3e:4b:34:6f:ac:68:85:e2:1c:69:42:
be:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8C:2A:21:86:CA:48:32:8E:B4:AA:4C:76:57:9F:AF:9A:2B:03:CB
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.140.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:32:d0:8b:92:19:a1:06:bf:71:6e:16:26:7e:ea:42:8a:6b:
52:39:4e:6e:86:f2:65:05:56:c9:2f:83:71:02:8d:b0:df:a3:
9d:98:01:16:7c:88:ab:07:47:8f:3f:64:db:de:38:96:69:2f:
31:e9:2c:c6:d5:97:2e:3a:2c:e1:31:5e:a9:9c:bd:26:ea:4e:
17:28:a8:be:09:1e:e5:c9:63:e4:9b:0c:6f:2e:73:c8:24:d4:
38:94:9b:e8:ee:6a:d7:6c:68:85:21:2f:2f:88:8c:2b:81:4e:
dc:45:b8:dd:11:13:63:4f:f5:cf:d0:3f:f5:8e:d8:b0:94:33:
ce:59:e2:04:1e:1e:df:f2:38:23:98:7a:72:fc:63:5a:89:59:
00:2c:a7:c4:fb:da:76:fc:be:50:90:4c:11:c7:f5:e8:94:e5:
f4:74:79:96:70:ab:bb:de:7f:39:d9:70:37:55:7a:56:c8:a3:
86:00:93:75:0a:fa:93:32:63:e0:99:1e:6d:6c:42:64:e6:1b:
d3:d8:48:18:f9:c2:42:be:6b:cb:cd:32:90:6b:8f:cd:d6:0c:
9c:f5:d0:1a:82:6c:3a:8d:17:13:97:2d:77:d3:5b:5e:90:f9:
74:31:51:df:bc:c4:5d:4a:8a:b4:ca:7b:51:15:25:52:c5:b5:
f1:20:f9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:50:48 2026 by rpki-client