
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e2034313334.roa
File: 3132312e34362e3134342e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier: nmEoVmaEy7yNZDuLh3c+gkAkpaf3Ai2xZ3UOWaabPp4=
Subject key identifier: 0F:06:8B:13:FF:DF:54:12:A5:1E:CE:A0:00:3D:C0:A0:0A:CE:D5:2A
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 7D5FBF327EEB34033FC70361DBCB00109D1FCE9A
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e2034313334.roa
Signing time: Thu 23 Apr 2026 08:14:09 +0000
ROA not before: Thu 23 Apr 2026 08:09:09 +0000
ROA not after: Thu 22 Apr 2027 08:14:09 +0000
asID: 4134
IP address blocks: 121.46.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:5f:bf:32:7e:eb:34:03:3f:c7:03:61:db:cb:00:10:9d:1f:ce:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 08:09:09 2026 GMT
Not After : Apr 22 08:14:09 2027 GMT
Subject: CN=0F068B13FFDF5412A51ECEA0003DC0A00ACED52A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:ee:c4:10:6d:eb:8a:0c:05:67:c0:bd:9d:
0c:57:b6:59:d6:54:3c:2e:67:a7:04:a2:f4:5a:fb:
2b:20:06:7f:90:8e:b5:65:35:c6:d7:0c:bb:af:b2:
5f:a0:3b:fa:da:b4:9d:e9:41:ff:dc:7a:d8:0a:52:
49:9a:3e:3f:04:cb:a9:4c:5f:3d:77:7c:18:01:c1:
2f:0d:d1:a6:60:d8:3a:fe:56:61:7e:6e:f2:6b:28:
44:ff:ae:8a:2c:fe:76:e9:31:62:d7:16:6a:5d:b0:
9b:21:15:0c:c4:ca:f5:0d:d7:00:05:40:98:63:ef:
e1:80:b9:8e:18:09:53:8f:b7:f6:0b:79:2e:70:c9:
31:04:f4:67:41:8b:51:31:7d:fa:2e:50:fe:1e:45:
af:2d:30:62:06:8d:32:03:f0:61:29:9e:cb:fe:05:
ee:68:e9:cd:69:32:c4:55:c9:e7:72:3c:26:9e:3b:
c0:76:ea:4c:cf:97:f6:fa:85:62:48:ce:6c:00:6b:
76:d0:77:96:04:39:99:50:c5:1f:6f:9b:99:b5:86:
04:c9:e9:02:b2:f1:f5:3f:d2:4a:6b:1d:0b:27:d9:
e5:bf:a8:e8:e4:c2:e2:10:f4:7a:13:d0:a7:75:3b:
23:43:c5:01:4e:40:de:39:d3:41:fa:62:00:3a:57:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:06:8B:13:FF:DF:54:12:A5:1E:CE:A0:00:3D:C0:A0:0A:CE:D5:2A
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.144.0/22
Signature Algorithm: sha256WithRSAEncryption
68:1b:b7:91:1a:1d:f8:7f:0e:3c:6c:11:4a:1c:ad:75:d9:94:
dd:7a:24:ff:c5:f0:dc:3f:8d:8d:40:81:ad:84:3f:37:a7:db:
2d:a0:94:2c:7e:a5:ec:e3:a9:11:06:24:49:a9:f3:f3:58:27:
03:7a:98:b9:51:06:90:1d:40:2c:4f:03:b0:aa:57:5f:97:98:
78:b3:6d:dc:33:37:aa:2a:3e:ef:44:4d:ae:77:09:17:b9:a0:
fa:63:dc:df:fe:19:a4:18:5a:d7:d7:2a:dc:25:71:f4:df:35:
a2:83:69:92:ef:ef:dc:db:49:2c:be:1f:51:aa:13:3d:35:9c:
af:69:26:b1:e9:97:50:52:76:7a:9e:40:04:6b:e5:4d:24:57:
66:bd:bb:54:d2:3f:97:7e:e7:6b:ec:22:56:09:06:5f:6d:d3:
f7:f1:e8:5e:f9:c7:ee:a7:6d:33:f0:48:82:d8:0a:4e:8c:af:
a5:05:d7:eb:1f:e6:82:95:90:68:a1:f9:d9:60:68:60:92:f7:
6d:3e:53:34:1f:fc:5d:07:ea:53:f2:e2:a3:62:96:40:2b:33:
3f:cb:57:14:38:73:38:4b:07:78:0c:51:37:31:c4:c8:2b:42:
78:6c:c6:b9:23:77:c5:4d:88:32:16:77:80:30:3f:6e:a7:df:
7a:f0:e5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:50:48 2026 by rpki-client