
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e203338333730.roa
File: 3132312e34362e3135322e302f32322d3232203d3e203338333730.roa (raw, json)
Hash identifier: AUbxyTuMeOmdhozJdWQ5BQfxbFJx+tQ883r4rcwHa2o=
Subject key identifier: 0A:55:52:90:29:97:B7:DD:AE:E4:03:FC:89:A6:DC:DA:FA:19:D2:1F
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 5C4F6BC8B0503AC34D36637690BF5D75376E5E4E
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e203338333730.roa
Signing time: Thu 23 Apr 2026 08:16:43 +0000
ROA not before: Thu 23 Apr 2026 08:11:43 +0000
ROA not after: Thu 22 Apr 2027 08:16:43 +0000
asID: 38370
IP address blocks: 121.46.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:4f:6b:c8:b0:50:3a:c3:4d:36:63:76:90:bf:5d:75:37:6e:5e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 08:11:43 2026 GMT
Not After : Apr 22 08:16:43 2027 GMT
Subject: CN=0A5552902997B7DDAEE403FC89A6DCDAFA19D21F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e0:98:71:c7:ca:09:7e:32:0e:92:c6:89:d7:
48:db:0d:44:2b:b2:40:c1:f8:84:91:3e:00:ee:95:
0d:fb:4f:20:f4:58:34:16:67:03:1d:33:f4:18:6b:
1c:ca:55:80:0d:81:63:43:1e:1f:8a:25:8f:f1:35:
a3:cf:d1:7f:28:e3:ec:2e:e8:bd:e9:1d:1a:35:ce:
c7:cd:9b:d0:dd:f1:f8:dc:53:e5:b0:6e:0b:71:4b:
22:b5:f8:c4:a7:6b:51:48:40:df:b1:4f:6e:5e:9d:
12:f8:77:39:56:19:fc:87:e6:fb:8d:c2:20:04:8d:
f9:0a:6d:98:fd:25:bf:89:0c:9c:aa:50:c5:74:44:
04:7d:de:be:86:ee:a4:8b:c0:c3:e3:be:61:c3:9d:
7d:87:72:a2:bf:ad:b8:a4:7f:74:d2:d6:c1:ed:e8:
ad:2e:c4:96:bb:b8:47:43:e6:bc:64:4c:bf:c4:52:
16:c2:fd:87:bf:ba:d3:4c:fa:cd:fe:a0:ce:da:d0:
a9:62:58:bc:f1:95:89:ea:ed:0a:72:85:eb:c5:08:
72:29:6c:2a:8b:db:aa:31:0a:0b:71:ee:8d:60:19:
0b:0e:88:79:19:31:6d:cb:9b:e4:b6:36:cf:e4:9d:
df:11:75:f8:da:71:b2:6b:a6:91:a3:28:74:7f:63:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:55:52:90:29:97:B7:DD:AE:E4:03:FC:89:A6:DC:DA:FA:19:D2:1F
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e203338333730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.152.0/22
Signature Algorithm: sha256WithRSAEncryption
79:24:85:0c:fb:03:11:2e:f6:b8:38:d7:ee:e3:0f:12:f8:7f:
21:ef:65:5d:bd:d2:3f:95:9b:48:0e:42:c4:50:b0:72:11:ce:
8a:2e:86:77:a3:a4:34:88:cc:ac:75:bb:e8:10:eb:be:ec:14:
5a:80:25:a8:6d:8a:b2:c4:14:57:a6:8d:8f:c1:ef:df:bf:dd:
98:3b:39:17:35:aa:79:cb:12:b1:c7:a1:94:60:34:2d:1b:b8:
bc:2a:58:99:b2:af:6a:65:2d:68:20:8d:6b:9b:bb:1b:d2:c0:
49:71:71:39:39:e7:f0:ae:36:44:99:33:2b:86:b7:2d:d5:bb:
3c:98:0a:2b:2d:74:b3:b7:40:41:dd:6f:a2:e9:b0:aa:5e:4d:
fc:59:4c:40:9f:85:0f:1d:21:6c:49:90:3d:18:b0:5f:93:0f:
56:5b:c2:37:d4:89:05:57:72:3f:3a:cd:1e:d4:d2:54:03:a1:
0c:a1:4e:1f:c7:27:f9:6b:18:42:c7:7d:ee:7d:bc:4e:15:5f:
17:c7:b6:05:43:a0:d5:89:e6:20:f2:f5:72:25:67:d4:23:36:
49:eb:68:74:02:0f:50:53:35:75:4e:74:6b:28:66:fa:de:39:
d0:af:4c:9d:df:44:f5:da:d7:9b:db:73:70:f0:3b:25:47:97:
8b:5d:86:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:19 2026 by rpki-client