
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32342e302f32332d3233203d3e20313335333931.roa
File: 3132312e34362e32342e302f32332d3233203d3e20313335333931.roa (raw, json)
Hash identifier: j90oGVeo39XkUo58z4za32zjmAd0MnwmnPc15Ivm3tI=
Subject key identifier: 40:42:6E:BE:D6:34:31:56:C7:2B:24:87:A5:72:9A:2A:3A:52:19:2C
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 7C4F17F9770C068B08429DCFCF1B4BB0F236F1CB
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32342e302f32332d3233203d3e20313335333931.roa
Signing time: Mon 20 Apr 2026 06:34:58 +0000
ROA not before: Mon 20 Apr 2026 06:29:58 +0000
ROA not after: Mon 19 Apr 2027 06:34:58 +0000
asID: 135391
IP address blocks: 121.46.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4f:17:f9:77:0c:06:8b:08:42:9d:cf:cf:1b:4b:b0:f2:36:f1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 20 06:29:58 2026 GMT
Not After : Apr 19 06:34:58 2027 GMT
Subject: CN=40426EBED6343156C72B2487A5729A2A3A52192C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e3:1d:3a:eb:ad:32:f2:33:19:4f:67:43:66:
a5:0d:ef:46:47:87:bc:92:4b:a3:d1:81:2b:33:88:
9c:35:72:be:2d:3e:64:b8:a5:fe:0a:56:9b:d8:cc:
74:c0:50:58:0f:8f:97:7f:5b:c9:ed:ed:18:5e:52:
62:43:2a:70:25:1a:b6:37:cc:c4:1e:fd:21:32:f2:
f0:ca:ca:8b:9e:33:d3:d6:73:3d:84:93:99:72:05:
ca:5b:30:78:97:a8:4a:61:f1:63:42:a4:e5:1f:fe:
d8:ed:01:14:21:b1:88:aa:e9:b6:74:b1:c1:a5:b2:
a3:39:7b:a4:38:5c:a0:c9:18:de:ab:e6:0b:05:89:
00:13:70:6e:98:0a:34:21:ce:0c:44:aa:b4:3d:f7:
80:82:eb:b8:e3:f1:5b:dd:4a:70:5b:a4:d7:bd:f4:
eb:57:c3:33:98:4a:f1:47:cf:84:b1:ed:ba:d8:4d:
5f:b5:e1:7b:04:3d:e1:82:78:c7:34:2c:f8:32:aa:
9f:c5:51:13:e5:9f:4d:d4:4e:f4:e6:6c:42:46:26:
64:0a:d9:3e:80:92:57:4e:43:8e:57:36:a7:ba:c0:
68:ad:ad:56:37:c8:e0:ee:97:0e:f9:50:64:80:73:
5b:87:1b:ef:14:df:52:36:12:46:a4:0c:bf:70:80:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:42:6E:BE:D6:34:31:56:C7:2B:24:87:A5:72:9A:2A:3A:52:19:2C
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32342e302f32332d3233203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.24.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:1f:07:7a:35:95:18:50:a9:54:08:0e:33:1a:4f:24:3f:4f:
14:f2:d9:a9:b5:fe:7a:45:2f:e8:49:20:e4:6e:29:a9:bc:b7:
33:48:f2:e5:36:d8:57:87:81:eb:53:0a:40:9b:6b:8b:eb:6d:
fe:25:fd:d4:ea:1b:9e:ba:74:f7:bf:52:bd:9d:0e:14:bb:84:
6f:db:64:5e:38:cd:c3:01:94:39:30:34:e2:c7:fa:30:60:84:
ad:f0:3a:58:c3:85:13:1e:22:0b:d1:4e:91:1b:0a:44:4c:d6:
d0:a5:e7:c0:39:e7:25:2b:ea:d8:a5:e4:b4:04:fa:1b:f5:82:
7c:b7:19:ff:5b:65:73:0b:5d:dc:8a:bd:f7:5d:5e:b5:37:3d:
4a:07:1f:09:fb:3f:cb:8e:77:0a:24:17:94:c0:cd:f0:08:8c:
8c:2b:43:f9:e5:85:de:9e:e7:1a:fb:1e:c2:8c:b5:99:f5:cf:
46:a6:52:cb:a0:0d:3f:06:f2:cb:eb:b3:67:7e:17:8a:7e:0d:
65:c6:2c:6e:64:ba:ab:47:eb:3c:44:92:87:33:e6:2d:c2:f7:
47:4e:c1:7f:08:30:0c:77:9b:d2:e6:51:a1:47:29:75:c7:36:
da:f0:03:07:cd:42:f0:fe:81:de:40:0e:5c:a3:f4:37:10:26:
22:a9:16:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:26 2026 by rpki-client