
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32322d3232203d3e20313335333931.roa
File: 3132312e34362e32382e302f32322d3232203d3e20313335333931.roa (raw, json)
Hash identifier: jhWIh0Uuzp/nBfMta39X7XxPGsmBgDDQlsyRfO3n8BE=
Subject key identifier: 0B:57:99:04:2B:38:31:0C:D8:6A:C7:FF:7F:CB:4D:0F:5C:9E:CD:A0
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 3A9126418E101F4B42E8BF2A2C81170174E2E2CB
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32322d3232203d3e20313335333931.roa
Signing time: Mon 20 Apr 2026 06:38:07 +0000
ROA not before: Mon 20 Apr 2026 06:33:07 +0000
ROA not after: Mon 19 Apr 2027 06:38:07 +0000
asID: 135391
IP address blocks: 121.46.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:91:26:41:8e:10:1f:4b:42:e8:bf:2a:2c:81:17:01:74:e2:e2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 20 06:33:07 2026 GMT
Not After : Apr 19 06:38:07 2027 GMT
Subject: CN=0B5799042B38310CD86AC7FF7FCB4D0F5C9ECDA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:3a:29:5d:99:5f:22:46:f8:fb:b7:fa:8f:
cb:c4:d5:f1:0b:fa:dd:17:d7:65:c3:d8:75:1b:09:
9c:ef:fd:78:ce:aa:77:9c:17:b1:ec:f0:47:3c:92:
26:f1:93:36:62:00:34:b0:24:8b:90:71:c6:aa:42:
63:bd:8b:9b:cf:7a:d3:f3:df:ea:4f:6a:fb:99:c1:
09:ca:1d:90:65:51:28:73:9c:3b:a8:45:e6:ec:2d:
d5:08:ec:25:53:f1:f1:cd:8d:1c:18:79:a8:2a:6c:
56:c3:ec:52:02:d6:65:b8:6c:b0:ea:3a:ce:62:0e:
a3:13:16:67:5c:e1:bc:7b:fb:76:04:a2:95:50:c6:
f8:c2:84:84:0a:ec:96:2d:ef:92:91:4b:57:52:26:
d2:d9:7f:0b:6b:02:1f:bd:81:40:5a:85:69:ac:ae:
4f:f9:38:c9:7c:34:22:39:84:61:07:10:4f:f0:b8:
90:ba:52:e2:9d:83:a3:3b:18:f3:ff:f3:cb:4a:7b:
93:f3:5e:6e:36:82:36:d8:84:71:e2:fc:90:77:b8:
26:70:6a:50:80:25:5c:90:e0:55:3c:1a:c4:b8:63:
8c:ca:f4:07:0d:6e:ed:87:59:40:0f:1f:4f:77:fc:
b7:e4:99:ab:ef:3d:c8:b1:fa:ec:1c:cd:05:0d:53:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:57:99:04:2B:38:31:0C:D8:6A:C7:FF:7F:CB:4D:0F:5C:9E:CD:A0
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32322d3232203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.28.0/22
Signature Algorithm: sha256WithRSAEncryption
be:14:12:70:f9:50:a6:ca:9f:04:4f:86:64:7e:17:85:bd:db:
03:c0:fd:29:b0:c7:04:37:51:f6:14:23:49:09:db:47:a8:81:
bd:26:d4:2f:19:6c:e9:2a:e8:0a:7c:13:62:2c:79:c2:a9:9d:
ed:41:4c:16:82:ee:49:f1:03:e9:22:a3:83:f2:78:81:bd:8c:
5b:4b:ac:14:4d:02:34:5a:d0:19:e7:e6:16:9a:cf:03:f2:c2:
3a:4e:00:40:88:93:e8:51:ce:46:96:f5:3c:ea:13:bb:ad:ea:
ab:33:4e:16:34:37:0f:b6:b8:07:00:c5:3e:26:89:c4:83:f2:
7e:0a:4c:40:8b:8c:73:37:a1:a2:99:6e:19:45:7d:8e:5f:52:
a3:cb:1f:e2:de:11:52:3c:68:14:b3:91:9b:00:0d:a1:53:65:
20:bb:01:a0:8c:87:aa:4d:9b:3e:0c:24:c4:4c:61:ed:ca:da:
0e:c1:d6:7b:b6:b5:b2:aa:01:dd:6e:b5:31:df:37:9c:ec:45:
93:01:65:83:67:f5:7e:ae:35:94:5c:a8:63:d9:71:b1:38:45:
46:a7:ec:34:ff:ee:c5:9c:65:62:4b:dd:f5:fc:0c:a4:30:c5:
97:2b:7e:e2:03:e8:04:85:da:3c:ee:e5:c3:23:4d:86:a7:ab:
39:71:f5:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:21 2026 by rpki-client