
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135362e302f32322d3232203d3e203338373330.roa
File: 3132312e34362e3135362e302f32322d3232203d3e203338373330.roa (raw, json)
Hash identifier: OrLLUUQ8f1raGQyQ26LybYhHsnPnM7jTlgIUw6n4+aI=
Subject key identifier: 14:9B:A2:7A:88:56:07:67:10:71:95:2D:77:24:D3:3B:8F:78:DC:D9
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 0C4154701B7F41282BA1687A7EBB213454899CDD
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135362e302f32322d3232203d3e203338373330.roa
Signing time: Thu 23 Apr 2026 08:17:52 +0000
ROA not before: Thu 23 Apr 2026 08:12:52 +0000
ROA not after: Thu 22 Apr 2027 08:17:52 +0000
asID: 38730
IP address blocks: 121.46.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:41:54:70:1b:7f:41:28:2b:a1:68:7a:7e:bb:21:34:54:89:9c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 08:12:52 2026 GMT
Not After : Apr 22 08:17:52 2027 GMT
Subject: CN=149BA27A885607671071952D7724D33B8F78DCD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:48:b0:53:60:ca:e8:48:c4:70:89:59:37:
bc:f9:84:cf:c7:2c:5f:d8:28:08:0d:2e:8d:86:98:
70:08:51:e2:17:e9:1f:2a:ab:fc:b9:8f:e0:75:9a:
22:7d:12:25:26:92:4a:95:0f:a2:1b:91:86:f2:86:
62:b2:9e:5b:de:a8:d2:a2:02:b5:1a:2a:50:d7:06:
9c:45:57:4f:23:a2:6a:a9:f9:72:d8:59:08:42:38:
d6:f0:3c:a2:c2:d5:e7:6e:11:00:0b:1f:d4:49:7a:
00:ad:01:8b:28:d3:f1:32:93:2a:27:d6:c7:2c:5f:
a7:f5:e1:63:58:a3:ff:f1:9f:b3:fe:97:36:e5:7a:
4e:41:1a:b4:57:e5:77:65:48:cd:24:4b:be:61:7c:
73:b7:5b:6b:99:2a:5f:44:77:ef:3e:37:1c:1d:73:
f3:2d:f8:25:e8:6e:85:f3:e5:bd:6a:12:42:45:5d:
87:1f:37:7b:80:fc:09:f3:f7:3b:12:b6:ad:1f:1d:
22:49:20:a8:6d:c8:14:dd:15:41:06:ea:28:c3:be:
98:7f:18:dc:2a:7d:63:31:3b:c3:54:ca:14:b5:8e:
81:2d:ad:c7:a0:17:11:ab:a9:4c:e9:f1:9f:21:60:
85:9e:7f:91:27:f7:4f:2d:aa:19:dd:db:57:04:58:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9B:A2:7A:88:56:07:67:10:71:95:2D:77:24:D3:3B:8F:78:DC:D9
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135362e302f32322d3232203d3e203338373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.156.0/22
Signature Algorithm: sha256WithRSAEncryption
07:f5:54:13:fb:90:69:58:60:47:e6:62:7d:43:ac:81:4c:76:
74:f1:10:c8:34:fc:22:33:21:e9:58:65:75:61:d1:40:75:d5:
31:6b:bc:3d:72:f4:a7:64:21:33:56:fb:99:91:a5:b0:6f:36:
0c:24:69:e3:43:18:72:62:2f:e8:43:34:f0:9b:43:4d:e6:ce:
60:25:09:31:6a:a9:ef:fc:44:8e:49:1a:96:aa:fe:9a:eb:f8:
9b:b7:b9:1a:4d:a0:7c:be:82:72:00:39:d3:b1:20:a6:29:91:
31:81:3e:c6:65:cf:c0:73:f6:e6:1f:1f:3c:f0:1a:99:95:ae:
5c:96:90:8d:41:95:c0:37:64:61:fc:ac:65:a8:21:b1:b6:35:
13:26:7e:55:f7:74:f4:ae:28:a7:df:a1:fc:8f:1a:09:73:72:
e0:b8:ed:ff:c1:f0:d6:f9:14:39:b4:f2:ec:10:17:67:ca:6e:
26:7e:aa:3e:df:a7:ed:fe:19:5a:e3:09:d6:e0:6f:a4:63:92:
8f:e7:d5:ee:57:f4:42:63:58:16:5f:dc:b4:6d:f5:70:44:c6:
7d:55:4e:02:fb:aa:d6:26:53:b3:05:e5:bd:94:85:ce:e8:c7:
1f:43:67:9a:50:bd:9a:c0:e0:15:78:7c:56:d1:88:25:b5:4a:
ee:c2:7b:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:24 2026 by rpki-client