
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32362e302f32332d3233203d3e20313335333931.roa
File: 3132312e34362e32362e302f32332d3233203d3e20313335333931.roa (raw, json)
Hash identifier: Kd2QGdwENY2+AvwFK1eY4+sRJGiZbCEb6TcgHqSbvio=
Subject key identifier: 69:EA:0E:04:59:D6:A2:B1:76:21:21:19:C0:8C:BF:98:15:8C:F3:4D
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 3D457845AA155AF36517BDD5E8DF8AF16F6B6767
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32362e302f32332d3233203d3e20313335333931.roa
Signing time: Mon 20 Apr 2026 06:34:58 +0000
ROA not before: Mon 20 Apr 2026 06:29:58 +0000
ROA not after: Mon 19 Apr 2027 06:34:58 +0000
asID: 135391
IP address blocks: 121.46.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:45:78:45:aa:15:5a:f3:65:17:bd:d5:e8:df:8a:f1:6f:6b:67:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 20 06:29:58 2026 GMT
Not After : Apr 19 06:34:58 2027 GMT
Subject: CN=69EA0E0459D6A2B176212119C08CBF98158CF34D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:7e:8d:13:fb:32:ba:c3:5c:31:b2:92:3f:
5d:f9:f3:fa:c8:85:e3:02:66:6a:bb:07:18:54:b5:
02:54:94:aa:73:26:5a:9a:ce:c4:a5:bb:5e:79:2f:
f8:7e:fa:fa:e5:2b:71:a3:ce:d1:19:fb:ff:e9:cb:
20:84:09:bd:b7:8b:64:e8:71:14:4c:f6:7b:5c:e5:
74:08:99:62:3c:22:4c:14:b3:11:9e:3b:cd:ed:f7:
e3:44:ec:92:bf:94:d5:dc:46:ed:2b:49:16:c9:92:
cc:8f:7b:6e:d9:d2:aa:2a:7d:49:71:f2:dc:a8:77:
f0:77:8a:80:ac:58:ce:40:ce:56:58:b9:21:6f:3f:
93:07:a5:43:74:ad:b6:c7:a1:65:28:58:43:4b:99:
28:3a:4b:f6:06:f2:20:d8:0e:00:38:ea:94:b8:4d:
18:af:c3:7d:48:86:60:61:26:10:51:be:35:f1:b1:
37:43:3d:59:2a:36:f0:78:48:41:f9:e1:a4:1e:3e:
41:24:10:cc:5b:22:52:a8:38:7a:30:11:83:98:ea:
c1:5d:cc:71:38:29:65:df:43:a2:a7:f1:5c:7f:f8:
59:6f:cb:04:1e:17:d5:c8:4b:05:43:a9:52:cb:71:
7c:68:f4:7c:63:38:fe:d0:67:e8:4c:ff:d7:be:9b:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EA:0E:04:59:D6:A2:B1:76:21:21:19:C0:8C:BF:98:15:8C:F3:4D
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32362e302f32332d3233203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.26.0/23
Signature Algorithm: sha256WithRSAEncryption
25:73:4f:bd:96:5b:3f:56:e5:88:3a:b2:bd:1d:90:8d:96:79:
2c:49:0d:4b:3d:35:3e:aa:2e:17:81:3f:97:55:fc:e2:b1:3f:
0a:ea:1c:98:e8:ce:1b:ed:b7:db:aa:cd:a4:c8:a3:fd:09:e8:
db:88:91:d9:68:bf:3e:34:42:2e:7b:f3:7f:f1:01:72:7a:e6:
68:5d:19:c8:e8:b5:d0:a4:dd:3a:d9:fa:ab:43:23:2d:73:c8:
3b:1b:06:44:ff:50:a1:ff:cf:a6:c7:8a:15:36:cf:0e:91:00:
2f:d3:46:0f:f8:c6:1d:c9:1a:e4:1a:d1:61:1a:b2:da:df:07:
5d:87:4e:c7:80:ca:0b:fb:e7:6c:f3:75:3b:10:d1:e7:00:26:
59:45:f5:d9:d0:ce:50:21:a6:83:cb:ce:5d:5c:40:4c:94:15:
36:fd:83:fe:97:ce:c6:f3:e3:4f:72:9f:43:9b:9c:5b:cf:af:
fb:69:b8:eb:25:c2:b1:b3:15:73:60:2a:d6:65:ea:8f:ff:d4:
01:b0:e1:4d:49:7c:51:99:0a:f8:27:2b:91:32:43:2b:42:3b:
07:25:0b:06:df:36:76:5c:ab:41:6a:43:fa:4b:bb:d5:3c:3f:
22:e1:5f:ce:35:ec:b8:26:69:8f:f3:a7:d0:58:24:b4:87:2d:
e1:ee:a0:08
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:23 2026 by rpki-client