
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e203538343636.roa
File: 3132312e34362e3134342e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier: CfWvuDb+IwVBTy0BSKnknlj8bFY+Zc9+6jdfBRqU9x4=
Subject key identifier: 7E:92:53:A4:41:32:F4:8B:13:E3:3A:F6:9B:EB:CC:13:AB:86:73:A8
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 71B7B233157B34605B636D69CD379FFA190133FC
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e203538343636.roa
Signing time: Thu 23 Apr 2026 08:14:09 +0000
ROA not before: Thu 23 Apr 2026 08:09:09 +0000
ROA not after: Thu 22 Apr 2027 08:14:09 +0000
asID: 58466
IP address blocks: 121.46.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b7:b2:33:15:7b:34:60:5b:63:6d:69:cd:37:9f:fa:19:01:33:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 08:09:09 2026 GMT
Not After : Apr 22 08:14:09 2027 GMT
Subject: CN=7E9253A44132F48B13E33AF69BEBCC13AB8673A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:cb:24:39:56:51:21:e2:d2:3c:9a:a9:2e:
16:d4:ad:d9:a9:4f:9b:5d:7f:d0:37:9b:2b:0f:57:
62:fa:ae:27:6e:5c:a2:ad:bf:12:4d:9e:96:d5:aa:
1d:59:54:e7:74:c9:1f:0d:54:df:70:05:43:0b:0b:
8e:b9:3d:c2:e8:d0:c6:7c:51:af:56:68:e0:dc:77:
45:d7:92:b1:0a:75:f3:a1:88:28:68:d1:48:80:53:
5d:77:dc:b0:fd:b5:8b:8d:26:20:31:2b:31:4a:bb:
d5:16:bf:9f:c5:12:f0:62:f6:b3:96:00:2b:85:f3:
39:84:f5:6a:32:21:4b:f4:00:f1:41:e9:ec:96:9a:
02:6b:29:1e:ee:9d:e0:3d:ca:45:26:b9:70:7b:b8:
30:0e:f6:3b:d5:6a:83:83:28:19:1a:bb:49:cd:46:
ec:7c:12:37:08:2d:e5:bc:93:29:35:06:39:38:09:
1c:6f:34:19:92:de:cf:3c:25:e4:59:ab:41:f6:df:
78:e0:32:d4:c2:74:2b:94:a5:86:f0:8b:ff:4d:f0:
5a:18:bb:c5:29:5a:49:b5:7a:5e:15:f5:3e:cb:26:
bc:e0:b1:06:61:8d:93:1b:cc:c0:3e:94:f2:14:b8:
f4:1f:27:ee:2f:e7:a9:6b:1d:a5:e1:aa:ef:a9:45:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:92:53:A4:41:32:F4:8B:13:E3:3A:F6:9B:EB:CC:13:AB:86:73:A8
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.144.0/22
Signature Algorithm: sha256WithRSAEncryption
07:1c:5e:68:26:7c:a2:72:33:34:df:11:5b:66:fd:a2:49:4a:
d7:8c:cf:10:1b:5c:e2:d2:ac:7d:2f:96:09:48:ec:06:4c:58:
e3:5d:e4:52:c9:33:7e:28:9b:34:2b:87:34:6e:2e:eb:05:12:
0a:6c:85:87:ac:a9:8c:52:19:c3:20:1e:33:e4:6c:06:2b:9f:
b7:d7:63:d8:14:78:2a:be:0c:2b:00:ee:97:fc:c6:34:db:b3:
b1:40:83:f1:8a:ea:25:d2:cf:99:c3:a8:94:4c:c0:02:02:b8:
55:76:62:82:6b:a1:c9:ee:bd:fd:95:02:89:58:94:99:e5:5c:
1c:8d:b9:71:8e:5a:56:c4:c3:84:51:23:dc:7b:d4:fc:d8:e2:
62:ef:d2:73:69:2c:b2:b5:03:42:d9:5c:f2:3a:6f:30:9a:fb:
40:f4:a3:ea:8f:9a:95:1b:e9:93:9e:b7:70:51:9a:96:e4:82:
4a:3d:1e:4d:0f:4e:de:b7:a0:56:1a:c2:d8:a9:a8:9e:7b:7d:
c9:21:cf:af:c0:66:7c:03:a3:5e:6d:b2:b7:f5:8d:06:da:7f:
94:a5:de:ac:8e:ec:e3:d3:66:ba:2b:ac:5c:6a:35:ed:c3:39:
ec:2d:7f:2b:e1:06:f7:e1:62:9a:b3:11:5d:9d:45:5c:bd:13:
6b:65:7a:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:21 2026 by rpki-client