
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32342e302f32322d3232203d3e2034313334.roa
File: 3132312e34362e32342e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier: Y3xRbbb2UiDIh36NNC3pg9u8J08SY7Jd0UC6hmRoR+U=
Subject key identifier: E9:2D:AE:12:7B:35:4B:D4:C5:C3:50:8D:E6:F7:C9:55:D3:BC:B9:78
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 322E8D3EE1CF51A0CCE0811B4B417CCEA72D2DC5
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32342e302f32322d3232203d3e2034313334.roa
Signing time: Mon 20 Apr 2026 06:31:16 +0000
ROA not before: Mon 20 Apr 2026 06:26:16 +0000
ROA not after: Mon 19 Apr 2027 06:31:16 +0000
asID: 4134
IP address blocks: 121.46.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:2e:8d:3e:e1:cf:51:a0:cc:e0:81:1b:4b:41:7c:ce:a7:2d:2d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 20 06:26:16 2026 GMT
Not After : Apr 19 06:31:16 2027 GMT
Subject: CN=E92DAE127B354BD4C5C3508DE6F7C955D3BCB978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:47:e0:5f:88:e7:1e:19:14:e0:96:40:f0:
0c:40:80:08:51:42:af:21:1b:97:0d:ad:e5:f9:46:
29:2c:f0:d1:0d:28:fb:b7:7f:a8:dd:9d:b1:89:a5:
63:f1:d5:2a:0b:85:29:d1:68:6b:8b:6c:38:2f:bd:
3c:cc:8b:1d:76:3b:7f:78:0e:24:09:28:2b:74:66:
cd:c6:2d:b6:4a:6b:d8:fe:eb:b7:fc:77:63:69:45:
da:68:54:a4:6b:91:50:5a:1c:b3:a1:e7:f4:e5:e1:
cb:81:b0:62:7e:ec:0c:c9:0d:1c:9a:14:64:fe:ce:
08:a9:b9:84:67:94:21:b3:c5:ca:f5:27:4b:90:bb:
86:74:fc:53:45:65:f0:37:f3:46:84:58:9f:b1:e4:
89:09:11:3a:b7:0d:fc:98:a7:33:7c:2f:99:c9:01:
96:fe:87:8d:fe:ce:34:bd:e9:14:d2:4d:ac:06:3a:
d9:45:fe:62:5c:3e:24:ab:ed:e5:32:48:7b:e5:b8:
02:10:62:e5:d3:4a:50:8a:1f:b1:de:cc:25:81:73:
76:88:95:52:ab:2e:da:9d:ec:da:37:6c:63:15:5f:
05:58:2f:51:67:34:49:d8:6f:c5:90:3e:03:7c:50:
0a:98:cb:20:65:b4:bc:47:6e:a6:d9:af:db:fd:16:
22:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2D:AE:12:7B:35:4B:D4:C5:C3:50:8D:E6:F7:C9:55:D3:BC:B9:78
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32342e302f32322d3232203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.24.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:9f:fe:92:00:e1:d8:62:20:00:d5:08:8d:67:ef:53:4c:74:
d0:1c:9e:cb:3a:2d:7e:71:ef:86:ae:39:60:d3:7e:20:c1:be:
2d:95:48:6f:65:fd:26:79:f7:c5:af:fd:b7:9c:92:e8:d1:5d:
ce:fc:73:1d:db:53:6c:74:f1:2f:e6:df:68:cb:6a:50:8d:16:
b3:9b:e1:a1:5e:ab:2a:32:35:f8:13:db:30:0f:74:cf:f9:0d:
c6:fa:3f:8b:d1:ec:56:eb:b7:9c:95:4e:aa:53:3f:b6:d2:0f:
39:70:77:b3:8c:13:d8:e3:d3:d6:85:49:f9:f7:b3:15:12:b2:
75:89:55:0b:45:c5:e1:7c:e0:4b:56:2f:74:45:3f:52:14:06:
9f:49:33:d9:a0:c3:2d:47:ee:cc:8a:23:45:60:2c:4c:b7:fe:
5e:be:8b:90:39:3f:ea:25:ae:b0:2b:ac:7f:ea:8a:dd:6d:b8:
09:cd:8e:bd:2a:74:21:b8:12:83:83:b2:16:1b:02:e5:c6:ac:
60:89:0b:60:81:2e:7a:a5:c8:74:a3:f6:da:e3:b6:73:35:c2:
1c:12:60:39:0b:d0:6f:1c:26:ff:3c:d0:68:ad:ee:ce:14:7f:
f0:f5:b7:10:11:e6:2c:2f:c3:27:0e:ce:58:7d:fb:42:57:f8:
c5:2d:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:50:44 2026 by rpki-client