
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134312e302f32342d3234203d3e203538343636.roa
File: 3132312e34362e3134312e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: DzgLoT1/paBaazcBjx8RYl7N7i6yhV9orytIREIe/oI=
Subject key identifier: 67:46:9C:0E:D5:67:7D:35:6F:D5:BC:73:28:91:C8:B6:78:71:90:13
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 3BF0D7EA067FE96D11252780A7467B562046D45C
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134312e302f32342d3234203d3e203538343636.roa
Signing time: Thu 23 Apr 2026 08:10:28 +0000
ROA not before: Thu 23 Apr 2026 08:05:28 +0000
ROA not after: Thu 22 Apr 2027 08:10:28 +0000
asID: 58466
IP address blocks: 121.46.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f0:d7:ea:06:7f:e9:6d:11:25:27:80:a7:46:7b:56:20:46:d4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 08:05:28 2026 GMT
Not After : Apr 22 08:10:28 2027 GMT
Subject: CN=67469C0ED5677D356FD5BC732891C8B678719013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:b9:3d:4d:ba:98:25:22:24:9b:f5:12:49:
7c:ea:f6:12:74:71:93:1b:21:7f:ed:aa:0b:bd:e7:
e6:c4:06:a0:ac:7f:ac:32:30:a3:e2:cc:d0:59:2f:
1e:48:25:a3:4a:62:d6:5a:c1:75:ee:ba:0a:08:23:
52:6a:91:f4:81:3d:22:2b:cf:7e:fa:4c:40:1d:84:
fd:2c:fe:6e:fd:92:8c:42:e0:5d:2c:21:f7:ef:7a:
34:05:c1:35:dc:c1:19:44:3b:90:9a:36:c3:66:92:
62:76:30:1d:98:14:58:a3:a4:b4:49:04:97:ee:66:
74:2c:1f:65:86:22:a5:12:58:39:03:f8:ff:7b:e2:
00:13:48:66:3c:a0:0a:36:83:54:54:e9:ef:44:f3:
ba:39:10:90:dd:1a:bd:f8:bc:ff:28:cc:c1:b7:51:
d0:1c:7d:9d:6b:cf:f8:bd:5e:f2:7d:dd:70:e8:e1:
55:fa:22:0a:8a:c7:34:59:3b:20:98:dd:25:08:94:
58:1b:28:2c:73:60:a8:98:8d:8e:23:a5:92:2b:07:
5a:d4:68:7d:da:e6:84:23:4d:44:8a:fc:f3:1f:dd:
cf:d4:cd:ac:4f:c1:f6:ec:4d:f0:8f:e3:c2:fa:b5:
7e:80:4c:bc:22:ae:d3:4c:2e:e5:9b:21:3c:4f:13:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:46:9C:0E:D5:67:7D:35:6F:D5:BC:73:28:91:C8:B6:78:71:90:13
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134312e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.141.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:13:07:86:2c:93:21:fd:d3:0a:9e:d6:17:d2:2a:90:8d:75:
02:9d:17:5f:4a:fd:c2:3e:c5:b0:2e:18:32:4b:4a:17:02:c8:
ee:99:8c:cd:d0:24:30:ea:06:ab:bc:b3:e5:42:a0:db:99:ca:
7d:f9:7b:59:c8:d4:12:8f:f7:f5:9a:63:94:d7:4e:35:02:d1:
b6:e8:ee:3d:64:c0:ea:21:c1:d0:af:02:54:e0:d2:7f:60:a6:
4e:09:01:c5:8e:66:b5:0e:11:61:dd:da:ee:2a:17:11:84:86:
2f:83:47:77:45:5e:96:1c:df:1f:6f:92:8d:55:ee:b6:50:1b:
1e:2c:f1:c0:92:d9:bc:82:2a:05:07:4f:3b:71:0d:63:60:70:
62:d1:c9:fc:7a:8b:e0:57:b7:9e:3b:60:82:b6:78:ac:e6:39:
d0:2f:da:fc:42:11:f3:2d:5c:37:af:01:7d:79:38:be:68:6f:
4b:34:d4:df:7b:30:bf:27:f4:e9:fe:de:e6:81:79:e9:8d:7f:
62:24:9d:da:08:18:66:82:43:1c:45:85:2c:f1:39:c0:ea:5e:
0e:ed:68:fa:fa:d2:5f:86:f0:e4:d9:6d:be:d1:88:3d:bd:9d:
94:46:55:4c:92:93:ca:31:ed:b5:18:a2:25:aa:ae:8f:2f:f3:
a8:05:5c:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:23 2026 by rpki-client