
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32342e302f32322d3232203d3e203538343636.roa
File: 3132312e34362e32342e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier: lQf0OM5YnwrwhiypTVavQj1nDmQ70TC5/+tXzURnYCE=
Subject key identifier: 2C:07:70:74:C7:65:C8:97:CC:31:66:DF:3F:85:6E:D4:E9:6C:57:46
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 55CC75D6A121BF3E5D3B1DADDFDE8085F01C3983
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32342e302f32322d3232203d3e203538343636.roa
Signing time: Mon 20 Apr 2026 06:31:16 +0000
ROA not before: Mon 20 Apr 2026 06:26:16 +0000
ROA not after: Mon 19 Apr 2027 06:31:16 +0000
asID: 58466
IP address blocks: 121.46.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:cc:75:d6:a1:21:bf:3e:5d:3b:1d:ad:df:de:80:85:f0:1c:39:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 20 06:26:16 2026 GMT
Not After : Apr 19 06:31:16 2027 GMT
Subject: CN=2C077074C765C897CC3166DF3F856ED4E96C5746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:96:37:5d:c5:96:c9:24:d9:b7:f9:f4:de:
55:3f:81:d1:ad:62:4b:9e:c4:cc:54:7f:a3:85:c2:
11:b6:37:fa:e2:1d:62:5f:23:51:33:54:57:ac:6e:
a4:06:f4:dc:28:d5:2b:c1:68:fd:2e:32:5c:87:64:
21:53:6f:5b:fb:a9:d4:20:ab:3d:3f:2e:35:6d:8c:
c8:42:1d:f1:1d:40:45:e2:17:98:4a:45:3f:eb:e8:
e9:9a:0f:0d:82:7c:46:d8:41:44:66:b9:ea:e7:ec:
d8:8d:ac:85:a7:0d:5e:fc:2f:b8:5f:66:f3:92:c0:
c6:76:3a:49:c3:a5:a2:b5:5f:06:ef:45:9f:62:88:
5a:3a:c4:36:a8:36:80:bd:e7:f1:e3:59:1d:9d:fe:
66:48:31:aa:0f:b8:31:73:6d:89:ad:38:b5:cb:de:
cc:9d:67:ce:1d:d8:e2:1f:50:47:0b:e9:f2:1b:55:
09:93:de:1d:25:9a:78:cc:1c:8e:7d:53:fe:3e:12:
79:c8:fe:af:9c:82:a5:fc:b9:3d:4c:2c:f5:ce:40:
14:55:44:ea:ba:84:7e:23:12:aa:c0:fd:22:83:3e:
20:0a:c9:36:63:e8:70:85:33:13:6b:bb:75:34:3a:
7d:cb:43:71:f5:bb:ae:e4:e7:df:da:a1:5f:21:55:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:07:70:74:C7:65:C8:97:CC:31:66:DF:3F:85:6E:D4:E9:6C:57:46
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32342e302f32322d3232203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.24.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:de:bf:53:af:58:e1:45:cf:19:1b:4e:85:0d:77:b0:e6:78:
2c:69:2f:87:af:fb:fb:18:e5:2b:33:a6:04:0d:e8:e6:80:b3:
34:4f:49:ac:db:3b:d5:0e:e1:d6:a7:f8:71:d5:74:92:fd:d0:
3e:c6:0e:43:0c:81:eb:5f:e3:99:bd:cf:4b:00:a0:42:c1:0d:
bf:a7:4a:25:e8:d4:63:2d:e2:55:f2:f5:09:0a:d0:4c:c3:18:
39:0d:a3:e8:8f:9e:7c:58:60:83:88:5f:27:ef:a6:34:75:1e:
3a:42:eb:9e:d0:2c:36:a6:a0:dd:03:fb:3a:a8:06:d5:fe:49:
fc:34:14:98:2d:60:10:22:3b:eb:d8:d5:e5:db:01:e9:bb:20:
14:3a:06:68:0e:4d:eb:03:97:d0:39:4c:1e:6a:d3:cd:83:7b:
af:32:24:52:26:31:be:ac:82:fa:6b:96:e4:bf:94:d5:85:ff:
01:0e:f2:a8:8e:67:12:e0:bc:79:95:e1:1e:e1:72:ae:5b:92:
81:d2:7e:a6:2e:23:8b:21:6d:0a:a4:4d:8c:55:01:e8:72:81:
b4:59:7d:62:c5:65:92:50:cc:7a:9b:c2:cc:f7:5a:30:fb:07:
57:ec:5e:c8:42:04:e9:8d:3b:0f:d3:86:2c:5d:23:12:0c:14:
e7:47:dc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:15:20 2026 by rpki-client