
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e203538343636.roa
File: 3132312e34362e3135322e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier: BlZe2glx8Csn9EtVagR82Au+3VAxty//vyLIEYZtMvI=
Subject key identifier: 34:6C:66:25:33:C6:8A:C5:D0:55:E0:DC:86:17:3E:D6:B4:CD:E5:69
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 55F02F39B8F5366A7BA8E2EF0F81E6C873B960AE
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e203538343636.roa
Signing time: Thu 23 Apr 2026 08:16:43 +0000
ROA not before: Thu 23 Apr 2026 08:11:43 +0000
ROA not after: Thu 22 Apr 2027 08:16:43 +0000
asID: 58466
IP address blocks: 121.46.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f0:2f:39:b8:f5:36:6a:7b:a8:e2:ef:0f:81:e6:c8:73:b9:60:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 08:11:43 2026 GMT
Not After : Apr 22 08:16:43 2027 GMT
Subject: CN=346C662533C68AC5D055E0DC86173ED6B4CDE569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:97:23:15:85:f0:9a:58:dc:06:3f:ed:64:
b6:b3:6d:61:97:48:fa:ed:ab:13:c9:1d:cd:30:06:
34:5a:a2:54:50:95:58:a8:a0:4e:8f:e2:11:52:af:
57:dc:ba:83:cb:4a:5f:dd:31:d4:94:ac:1e:c3:16:
95:cc:4c:79:e0:cf:89:cc:e8:02:4b:81:38:3c:a3:
01:de:02:bc:18:ea:e4:99:59:0a:55:6f:3e:61:e6:
d0:26:37:4f:67:56:85:38:32:d2:f2:a0:ff:ac:75:
19:6d:ea:54:6c:fb:f9:b7:d0:51:ae:7a:81:90:fd:
d5:6c:a8:8d:c8:99:80:8b:cc:38:03:7e:c0:a5:6f:
06:43:bd:aa:35:a5:1a:ed:b1:c5:79:0d:54:c4:51:
bb:c7:b4:fa:02:5f:d4:50:39:d9:d1:7a:d1:fb:26:
8e:7b:a1:08:40:68:03:b6:4b:21:e7:8f:43:7e:c7:
3e:b1:84:62:7a:e7:26:cb:de:c1:e4:b9:01:f3:d2:
87:b3:d5:a2:4d:90:38:d9:57:e5:54:58:5b:96:e6:
45:24:85:29:a8:7f:39:2e:ea:29:50:b0:b4:62:c8:
62:60:b9:37:dc:15:ec:c0:0a:f4:84:19:37:da:57:
eb:74:f5:5c:47:9b:3a:75:2a:63:7e:fe:10:5e:83:
eb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6C:66:25:33:C6:8A:C5:D0:55:E0:DC:86:17:3E:D6:B4:CD:E5:69
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:85:27:f1:93:11:61:cf:f5:89:91:89:ef:85:0c:ba:7c:62:
f5:70:23:e0:4a:65:4d:f1:ac:57:48:67:fe:60:09:73:45:c8:
72:bc:42:1d:74:b9:24:d5:a2:18:51:90:60:08:28:87:cf:7e:
af:f2:dd:f9:07:62:47:9f:4a:ac:70:68:fc:2c:fe:ca:be:0f:
21:eb:06:82:66:5f:ed:60:95:9b:f1:46:e6:3a:dd:a5:65:17:
28:58:2f:07:d3:9e:94:a8:e0:6d:ed:d9:8f:e2:cf:23:5a:81:
b7:ea:eb:ed:f8:06:25:38:43:3c:47:1b:63:2f:d8:c8:4d:d2:
67:f3:e8:9b:1f:97:d6:46:32:b0:7b:46:71:7c:18:b1:4c:fe:
c5:f3:e9:72:e0:e4:3e:e6:18:b0:a2:6a:20:1c:f9:ed:32:d3:
68:65:ee:c5:d8:f0:fa:51:8b:fc:38:76:6a:88:f9:3e:2b:5e:
14:7a:73:34:94:42:6c:a9:01:49:55:3f:eb:b7:b8:6b:d7:d1:
11:4c:9e:84:46:61:d1:2c:0b:49:bb:e3:4f:c9:f3:f7:0b:cf:
db:60:77:b7:69:fa:7e:f1:83:7f:31:f6:1d:61:28:0b:00:6b:
80:d6:fe:91:43:52:a9:3e:14:d0:5a:b1:2f:7f:45:3d:8f:b1:
1b:3d:5a:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:22 2026 by rpki-client