
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134382e302f32322d3232203d3e20313335333931.roa
File: 3132312e34362e3134382e302f32322d3232203d3e20313335333931.roa (raw, json)
Hash identifier: PuBMUQiFhV/60LGBMBV5EExPolyZd00VHwbLsOcK1T8=
Subject key identifier: 3B:B2:A1:19:8D:3F:1E:1E:B6:AC:1A:77:27:5E:FE:BB:4D:36:C3:04
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 6E9A7C3DE7B6E4544431FCA70FB81874982A077B
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134382e302f32322d3232203d3e20313335333931.roa
Signing time: Thu 23 Apr 2026 08:15:52 +0000
ROA not before: Thu 23 Apr 2026 08:10:52 +0000
ROA not after: Thu 22 Apr 2027 08:15:52 +0000
asID: 135391
IP address blocks: 121.46.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:9a:7c:3d:e7:b6:e4:54:44:31:fc:a7:0f:b8:18:74:98:2a:07:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 08:10:52 2026 GMT
Not After : Apr 22 08:15:52 2027 GMT
Subject: CN=3BB2A1198D3F1E1EB6AC1A77275EFEBB4D36C304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:b7:7d:78:9d:6e:0e:a6:9c:c6:ee:3c:6d:
69:a0:c7:4e:a1:b5:ab:bc:2e:72:d0:dc:99:ab:ac:
bc:57:a6:06:a3:d8:c3:6a:7b:55:10:68:2a:9a:bd:
b8:d0:44:a6:38:5e:e4:20:b4:96:3a:49:e5:d7:19:
5d:a1:8b:75:ac:6c:be:65:6a:2f:90:3f:62:39:a7:
3f:11:33:60:d2:46:7b:c3:18:12:db:8d:4e:c5:34:
11:6d:eb:6e:5e:86:a4:55:c3:e2:a7:84:9a:70:b5:
6a:bd:9b:95:52:c0:5a:5f:60:45:13:a4:c3:49:df:
27:2e:8f:eb:c2:42:5e:14:4b:0b:e0:4f:f7:a6:8e:
38:f6:8a:f6:8f:5c:ca:51:99:3d:b5:57:f2:4c:fa:
cd:e3:39:95:74:b7:85:c5:e1:44:f7:84:b4:34:7c:
e3:30:01:4b:93:b2:5f:64:02:c6:7d:91:83:f4:96:
87:c6:90:51:95:0e:4c:25:d3:5d:7e:06:ac:a4:e0:
ae:ce:92:8d:4b:f0:12:58:b4:06:03:9e:ad:f9:bd:
d4:fc:90:b8:1c:18:ef:24:1a:6c:2c:1d:bb:04:e9:
ab:d9:2b:92:36:81:3b:dc:55:9f:b7:80:81:cd:74:
69:86:43:d6:ae:ae:ee:bb:d7:ca:c7:0c:23:d4:4e:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B2:A1:19:8D:3F:1E:1E:B6:AC:1A:77:27:5E:FE:BB:4D:36:C3:04
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134382e302f32322d3232203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:65:2a:19:da:fd:66:84:a8:94:b6:90:ed:80:d2:d2:2a:99:
b8:a2:be:66:94:1e:3f:7a:7f:da:eb:39:72:74:f0:33:91:b8:
9b:87:43:c6:29:bf:a3:72:5b:3a:17:da:52:75:48:fc:60:c3:
59:03:05:f9:57:a2:87:f1:a2:8b:e6:af:9a:eb:10:f0:97:5d:
90:5f:3c:1b:98:05:86:7c:75:00:42:85:27:b7:b1:d3:01:2f:
31:b8:8c:9a:89:f6:de:2b:ed:ff:a1:70:92:ce:07:a8:04:6c:
77:51:23:fc:c3:b6:b3:2b:48:8b:de:62:83:9f:77:a1:e1:8b:
78:4e:f2:91:c2:a5:1c:ed:30:87:b7:88:a3:19:af:3e:de:be:
b7:9f:d0:1d:33:15:49:6a:df:24:65:0e:85:e3:36:f1:50:b7:
29:a6:dd:0b:62:87:c9:40:2c:3d:63:53:52:3c:eb:db:c1:e3:
fd:6a:eb:e7:05:50:c6:0c:69:e6:be:31:f8:34:0c:70:ae:f4:
a7:50:80:3d:2d:70:35:fb:7d:a5:c3:02:d6:0e:11:c6:22:1f:
6f:4e:49:e8:87:c3:68:ac:8c:4d:e6:e0:42:3e:e7:96:41:c9:
38:4a:ed:cd:6e:f5:98:23:40:6e:1a:dc:2b:0e:cb:5b:08:a2:
d7:41:ca:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:15 2026 by rpki-client