
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134362e302f32332d3233203d3e20313335333931.roa
File: 3132312e34362e3134362e302f32332d3233203d3e20313335333931.roa (raw, json)
Hash identifier: Rv3HPimZD1R/xYwQ/yA8yZ8lh68fWA2YAxYKV/YX7BM=
Subject key identifier: 02:FE:EB:19:BA:8F:CF:3D:A3:7F:C5:35:B5:CC:D3:7A:37:0A:09:3C
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 7AE896DF24D8D0459CE83658B8699E1D40E7A20B
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134362e302f32332d3233203d3e20313335333931.roa
Signing time: Thu 23 Apr 2026 08:14:09 +0000
ROA not before: Thu 23 Apr 2026 08:09:09 +0000
ROA not after: Thu 22 Apr 2027 08:14:09 +0000
asID: 135391
IP address blocks: 121.46.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e8:96:df:24:d8:d0:45:9c:e8:36:58:b8:69:9e:1d:40:e7:a2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 08:09:09 2026 GMT
Not After : Apr 22 08:14:09 2027 GMT
Subject: CN=02FEEB19BA8FCF3DA37FC535B5CCD37A370A093C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:f6:d7:62:0e:43:20:30:95:1e:81:b2:45:
cc:3d:49:c2:2f:aa:d9:bb:93:ed:84:56:8c:02:f6:
31:f3:17:a7:fb:8c:a6:26:27:37:d1:a7:17:38:62:
ea:ad:67:23:56:1d:0c:88:6a:0d:00:ef:04:7f:95:
51:45:2e:d3:e2:26:57:17:91:c3:be:63:e4:c8:79:
d4:90:fc:24:1e:f6:d7:9a:47:95:3c:eb:80:bb:7a:
2d:ee:9e:cc:b9:66:f9:1e:7e:58:52:87:d3:d3:dd:
fe:9f:05:22:25:7d:b6:41:9d:51:33:5e:3e:d7:f7:
66:92:84:1d:2d:4c:90:45:3a:f3:05:e4:68:27:2b:
8e:a0:84:fa:c6:4b:35:d3:1a:22:16:a0:14:1b:85:
15:d2:90:df:a7:cc:43:73:48:a7:3a:1a:e0:26:87:
6e:d6:15:fd:ff:bb:43:68:fc:04:0a:d6:59:0c:b6:
a9:c4:53:08:5d:b4:1c:db:ed:c3:71:17:16:89:24:
f4:b5:ca:fb:bb:e9:b4:19:06:26:48:05:f6:de:98:
24:04:b2:1d:76:c1:a1:35:bb:9d:db:99:4b:a7:53:
63:a3:e4:f8:93:33:19:ae:a3:03:9c:c2:44:96:2b:
31:e2:a0:ac:27:72:34:78:60:6f:a5:fc:26:c0:ff:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FE:EB:19:BA:8F:CF:3D:A3:7F:C5:35:B5:CC:D3:7A:37:0A:09:3C
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134362e302f32332d3233203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.146.0/23
Signature Algorithm: sha256WithRSAEncryption
48:48:71:03:87:1c:26:e6:72:6a:62:3c:8c:ce:dc:4b:83:6f:
a1:d7:46:bf:fc:75:d4:95:18:b9:7b:f5:5f:e4:86:aa:0e:66:
9d:32:12:9d:8e:e3:d1:45:0d:27:77:48:43:c0:30:68:de:3c:
69:f4:73:5a:b6:f8:de:e0:20:43:ca:71:3f:82:0d:be:05:c4:
bb:de:01:3c:d5:14:02:18:f1:b4:ff:46:9e:48:ba:b9:e8:ae:
c2:bc:a3:5f:f9:9c:60:fa:37:a3:71:33:f4:3b:8b:12:b2:d3:
04:57:ce:72:40:fd:87:b2:4e:1d:a9:3a:1c:a2:98:f2:b5:d8:
97:51:73:78:07:12:ef:49:5f:d3:21:19:6d:de:a6:9a:6c:51:
c4:d0:76:d8:a9:90:80:e5:c7:2a:6d:a5:7e:93:04:65:67:d0:
ea:dd:23:9e:4e:5d:8c:d5:ec:fe:6e:49:91:32:18:07:66:26:
33:63:e1:5a:82:1c:ac:4e:2b:f0:04:1b:5a:c0:18:c9:43:68:
9b:92:49:d9:c6:b3:0e:18:3b:84:46:34:f3:29:c2:1e:47:0f:
a7:6a:ee:47:9f:7c:cf:66:33:5c:d3:3e:cc:00:75:b3:1e:fd:
d9:ea:d3:a4:6e:af:62:72:3f:63:79:44:9c:86:37:c1:6c:43:
30:62:f9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:20 2026 by rpki-client