
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e203536303430.roa
File: 3132312e34362e3134302e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier: kriVL6cnzlhQQYXqjDYAf9pBrjWehFWp81+lDFhUPIU=
Subject key identifier: 53:87:40:F4:8A:44:6E:8D:6F:3A:A2:59:A0:54:63:56:31:9B:13:1B
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 46E3726779EDA6D695EFD61D263E50031CBC2E93
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e203536303430.roa
Signing time: Thu 23 Apr 2026 08:09:21 +0000
ROA not before: Thu 23 Apr 2026 08:04:21 +0000
ROA not after: Thu 22 Apr 2027 08:09:21 +0000
asID: 56040
IP address blocks: 121.46.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e3:72:67:79:ed:a6:d6:95:ef:d6:1d:26:3e:50:03:1c:bc:2e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 08:04:21 2026 GMT
Not After : Apr 22 08:09:21 2027 GMT
Subject: CN=538740F48A446E8D6F3AA259A0546356319B131B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:e1:5c:e2:f2:7d:68:60:f3:79:72:80:5a:
36:a5:45:fa:0d:87:c0:6b:d3:26:14:b7:ee:bf:52:
6e:5f:d5:9e:e1:a0:4d:30:8c:39:91:c7:87:76:67:
47:82:17:1e:72:01:61:3c:3f:34:b5:57:2a:a6:88:
af:b4:b6:72:e0:f7:ea:5c:c1:a7:4d:d2:87:2f:e7:
7f:71:d9:1a:39:d0:fa:c5:f4:29:d6:25:93:97:32:
cb:bb:99:2c:85:1f:a7:92:9f:07:9e:d7:e1:95:92:
34:b3:00:ae:49:90:87:0c:3b:3d:c8:b2:d9:ea:3a:
6a:31:28:b1:af:8c:41:d4:c8:79:ed:a7:35:c3:a8:
ed:9b:95:a8:e0:97:af:ca:63:a5:66:a3:84:1c:b5:
4c:5e:24:0c:57:de:f6:7c:e4:8e:dc:45:eb:f4:f5:
e1:9c:1f:b1:21:b0:38:7e:cc:84:27:d8:3b:a3:22:
37:f0:59:00:0f:57:3c:9f:f4:72:b3:a7:c0:01:b2:
bc:01:43:dc:cf:93:ce:47:48:ec:ad:06:60:36:0d:
d6:ec:83:8b:97:4f:a9:57:96:f0:e9:6d:82:eb:34:
af:3f:b2:a7:b4:55:96:cc:1d:fd:f7:b8:4b:74:da:
df:59:50:a1:f6:d4:40:6f:bc:88:91:01:30:76:c8:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:87:40:F4:8A:44:6E:8D:6F:3A:A2:59:A0:54:63:56:31:9B:13:1B
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.140.0/22
Signature Algorithm: sha256WithRSAEncryption
88:7b:38:0f:7d:7e:8d:33:cb:fc:bb:56:1f:fd:1e:ba:da:89:
5a:1f:aa:15:b8:75:e7:c5:48:62:b9:71:b3:ad:2f:c5:2f:12:
3c:57:88:80:46:9c:fb:c9:23:34:20:8c:8b:a4:60:83:63:b4:
40:46:1b:26:7b:9f:d4:af:e0:4c:a4:65:6b:b7:7b:3b:90:0f:
6c:08:bd:fb:a2:97:91:a8:90:0c:4a:a2:2d:0d:8f:12:15:d1:
84:e7:12:03:f5:de:c0:ee:83:f4:b4:dc:62:33:74:c3:9d:df:
95:49:90:18:39:12:e1:86:73:c3:70:15:24:ce:6e:d1:12:d2:
d7:74:2e:a0:b9:07:fd:08:4b:d6:83:33:03:03:07:6d:55:9e:
bf:20:74:2d:4a:98:97:e7:c7:3a:31:a0:15:6f:e1:5f:4a:cb:
d7:3f:58:15:1a:6c:f5:0c:48:8f:e6:f7:cc:0e:78:c1:95:5b:
c3:32:13:df:15:aa:ae:f7:a7:aa:77:44:25:bf:a7:76:34:59:
c5:13:d2:77:17:59:63:c1:38:99:72:33:76:2b:1c:93:62:f1:
58:d6:c7:2e:b8:aa:fc:35:cd:f1:f6:2c:a3:be:c1:0d:77:d3:
de:93:ac:ed:1a:cf:d9:5b:8e:da:c5:d0:be:9e:39:c3:fc:19:
fd:12:d0:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:22 2026 by rpki-client