
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32342e302f32322d3232203d3e203536303430.roa
File: 3132312e34362e32342e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier: ztcej8BgvKq6+/bHGzrZe3cxPQq/m1U/Zg3mPIYwEYM=
Subject key identifier: C7:BD:A8:65:5D:EB:AA:2A:F8:3D:F8:33:9D:6F:1A:E5:BF:85:FD:45
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 4C46108C7A86AE74AA0FE29FB8E3DDCD26A0E0D9
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32342e302f32322d3232203d3e203536303430.roa
Signing time: Mon 20 Apr 2026 06:31:16 +0000
ROA not before: Mon 20 Apr 2026 06:26:16 +0000
ROA not after: Mon 19 Apr 2027 06:31:16 +0000
asID: 56040
IP address blocks: 121.46.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:46:10:8c:7a:86:ae:74:aa:0f:e2:9f:b8:e3:dd:cd:26:a0:e0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 20 06:26:16 2026 GMT
Not After : Apr 19 06:31:16 2027 GMT
Subject: CN=C7BDA8655DEBAA2AF83DF8339D6F1AE5BF85FD45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:a2:85:7c:56:55:bb:42:76:af:a1:ea:16:
1a:f9:52:9b:4a:ee:25:5c:b1:c8:d4:e7:d6:67:ec:
cd:83:84:91:d0:1a:de:17:17:40:97:40:3a:c7:73:
14:02:af:7a:8e:8f:73:9c:2e:55:c5:2b:53:74:b9:
89:f5:68:9e:4b:cf:e7:67:09:23:85:49:c6:cb:7a:
0e:37:70:e0:b7:88:7b:49:0e:79:72:7a:99:76:53:
d2:f0:2a:a4:66:7e:ab:a9:8e:34:72:07:95:56:0b:
dc:6a:67:cb:cc:ca:4a:e1:11:ca:20:a3:0f:eb:67:
a5:62:86:03:8a:d8:a9:b7:61:9c:ad:a5:b3:f3:4b:
99:e4:cc:43:ca:a0:2d:75:12:7e:f8:2a:cf:8c:78:
c1:b8:fd:ff:23:2a:8e:8c:e6:62:13:93:40:da:21:
3d:11:76:02:83:f1:42:87:f2:8c:34:d8:d9:38:37:
86:3b:57:ab:5f:ba:6d:b3:61:7b:f5:07:3b:3f:6d:
70:ce:2b:c4:85:97:b2:c7:1b:48:7a:4e:de:45:2e:
ec:28:f8:c4:fc:6c:11:45:3f:6b:0f:c1:2e:53:03:
03:43:36:3b:d9:b2:78:27:ea:ff:11:b6:56:aa:93:
8e:9b:19:e9:49:8f:82:29:27:cf:3e:0a:50:91:55:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BD:A8:65:5D:EB:AA:2A:F8:3D:F8:33:9D:6F:1A:E5:BF:85:FD:45
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32342e302f32322d3232203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.24.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:79:b0:dd:fd:cf:e5:a5:d9:71:9b:c9:92:03:d5:fb:19:f7:
a5:08:29:77:23:58:30:63:43:a9:65:4a:22:2f:78:87:c3:8c:
03:07:36:4d:12:cf:be:91:29:7e:cd:06:31:67:39:ab:89:2c:
f1:05:2f:f0:09:e0:a8:2f:f3:e7:7d:dd:59:58:29:67:54:52:
a5:0b:b2:ea:8c:86:34:4a:b9:8f:7e:f7:69:47:c7:81:6d:c4:
d9:04:75:1e:02:34:59:83:ab:c6:9b:0c:02:cb:33:14:37:fd:
64:91:d6:ca:af:2f:d6:d1:cf:f1:7b:f0:7a:77:1c:4b:bc:27:
71:be:d1:9b:d3:c1:10:06:7d:c5:86:ac:3e:a4:00:b6:40:97:
23:5b:40:d6:ac:7f:3a:2e:13:0d:71:ea:31:75:66:9b:00:1f:
24:77:47:ad:07:80:7b:ee:40:bd:06:21:1d:d9:2f:34:df:2a:
10:5f:bd:12:d5:7b:b7:fd:50:83:92:44:c8:be:8e:c3:87:27:
c2:66:48:5d:f9:58:40:04:e8:e0:d2:53:59:20:45:a5:c8:99:
52:20:33:e7:c1:c3:81:8e:14:6b:64:85:d5:ed:11:21:1f:8c:
cf:0e:46:54:de:e7:48:22:41:59:ce:2f:c2:01:51:d3:33:bd:
28:b9:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:15:20 2026 by rpki-client