
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32322d3232203d3e2034313334.roa
File: 3132312e34362e32382e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier: HPO5QZXIzv4XKvak5gGAJ01myx3Cg0ywsOdyPwTaMBk=
Subject key identifier: BB:28:D1:08:DD:C6:EF:6F:B8:76:86:20:CC:DE:91:08:7C:0A:93:BC
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 04299D1F5CD623BC5F6F870DDD4628CF5F829175
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32322d3232203d3e2034313334.roa
Signing time: Mon 20 Apr 2026 06:38:07 +0000
ROA not before: Mon 20 Apr 2026 06:33:07 +0000
ROA not after: Mon 19 Apr 2027 06:38:07 +0000
asID: 4134
IP address blocks: 121.46.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:29:9d:1f:5c:d6:23:bc:5f:6f:87:0d:dd:46:28:cf:5f:82:91:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 20 06:33:07 2026 GMT
Not After : Apr 19 06:38:07 2027 GMT
Subject: CN=BB28D108DDC6EF6FB8768620CCDE91087C0A93BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:09:32:dc:3d:4c:4c:8b:57:ab:b1:90:3e:
23:3c:5b:f5:5b:a9:74:ba:9b:4f:44:4f:bc:5e:6b:
e1:9c:c1:1b:be:16:25:a3:ae:36:13:7b:41:df:f9:
fd:10:ce:9e:ab:44:dc:4c:ca:9e:f6:a6:b4:a5:eb:
c9:74:d9:85:6a:c9:09:8a:ec:4c:70:8f:b1:95:ee:
bc:a1:4e:83:23:da:f5:c4:2e:b9:15:2f:4a:b7:01:
1c:18:2f:cb:37:af:f9:ea:17:51:1d:42:76:6d:de:
7a:0b:ba:0c:c7:af:f8:44:d8:c2:40:cc:99:66:b2:
7c:ec:11:b2:c0:cb:ef:e6:82:9f:24:3d:d3:4e:8d:
38:5c:f6:47:e2:0d:0a:df:3f:93:5a:59:0d:e9:12:
fa:6e:33:30:cd:12:b6:1a:c7:fb:60:c4:7d:86:ae:
f8:e9:7c:a2:e0:8e:3c:87:a1:d9:b3:2e:9e:4d:77:
19:ba:92:9d:09:6b:b4:2e:42:d8:74:67:76:38:07:
91:dc:7b:7b:ba:d9:b2:6d:69:84:bb:ca:ba:e5:20:
32:28:75:59:5f:df:e1:00:5b:49:0d:10:76:20:5c:
d3:38:71:5c:5c:c9:72:23:42:1d:e1:53:30:92:8b:
f2:6c:35:1c:1f:07:0d:17:2c:65:dc:36:99:e6:69:
1f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:28:D1:08:DD:C6:EF:6F:B8:76:86:20:CC:DE:91:08:7C:0A:93:BC
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32322d3232203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.28.0/22
Signature Algorithm: sha256WithRSAEncryption
54:60:bd:1c:36:a4:16:38:21:65:07:2b:9e:ac:0a:57:d1:7d:
bb:77:88:2b:d8:bc:df:7c:a6:ec:01:67:e0:b2:3d:04:63:b5:
a7:05:ed:cc:46:77:f1:f7:2b:c6:34:6b:b7:62:81:ef:bd:ec:
d4:ef:27:0a:3b:bb:3b:f5:d5:06:85:96:92:4c:7b:40:6e:41:
6b:87:4a:b4:ad:06:d1:16:82:b0:28:6c:84:2e:8d:bf:ba:28:
10:7a:79:e0:92:9e:62:92:dd:89:1b:a2:e5:4e:c4:7b:3a:41:
19:35:ad:61:02:5c:00:85:1b:6d:cb:fc:ce:6f:e7:26:d1:60:
61:a0:ad:35:20:01:22:68:d3:46:e4:ad:3b:3a:29:30:da:00:
d4:ef:85:59:9b:57:b2:b0:84:0b:d7:1f:aa:b7:5d:b3:1e:ef:
d3:03:45:7b:49:39:2f:56:31:91:0e:2d:4a:7c:d6:16:87:72:
45:54:f2:30:6d:b6:a1:51:53:51:77:be:ed:bd:00:ac:50:21:
1a:97:57:22:1b:4f:d1:70:29:8b:ec:71:6c:ec:30:c7:ae:79:
e5:94:d5:17:df:ff:b1:34:69:61:e1:f5:dc:f1:a6:49:5b:0c:
be:d8:10:6a:55:83:8f:a6:f6:c6:c6:7c:49:db:85:70:d3:a6:
8d:5d:2b:2d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUBCmdH1zWI7xfb4cN3UYoz1+CkXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA0MjAwNjMzMDdaFw0yNzA0MTkwNjM4MDdaMDMxMTAvBgNV
BAMTKEJCMjhEMTA4RERDNkVGNkZCODc2ODYyMENDREU5MTA4N0MwQTkzQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnCgky3D1MTItXq7GQPiM8W/Vb
qXS6m09ET7xea+GcwRu+FiWjrjYTe0Hf+f0Qzp6rRNxMyp72prSl68l02YVqyQmK
7Exwj7GV7ryhToMj2vXELrkVL0q3ARwYL8s3r/nqF1EdQnZt3noLugzHr/hE2MJA
zJlmsnzsEbLAy+/mgp8kPdNOjThc9kfiDQrfP5NaWQ3pEvpuMzDNErYax/tgxH2G
rvjpfKLgjjyHodmzLp5Ndxm6kp0Ja7QuQth0Z3Y4B5Hce3u62bJtaYS7yrrlIDIo
dVlf3+EAW0kNEHYgXNM4cVxcyXIjQh3hUzCSi/JsNRwfBw0XLGXcNpnmaR+/AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUuyjRCN3G72+4doYgzN6RCHwKk7wwHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2Mjc1MzMwNzc3MzUwMTQ2LzAvMzEzMjMxMmUzNDM2
MmUzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzMTMzMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJ5LhwwDQYJKoZIhvcNAQELBQADggEBAFRgvRw2pBY4IWUHK56sClfRfbt3iCvY
vN98puwBZ+CyPQRjtacF7cxGd/H3K8Y0a7dige+97NTvJwo7uzv11QaFlpJMe0Bu
QWuHSrStBtEWgrAobIQujb+6KBB6eeCSnmKS3YkbouVOxHs6QRk1rWECXACFG23L
/M5v5ybRYGGgrTUgASJo00bkrTs6KTDaANTvhVmbV7KwhAvXH6q3XbMe79MDRXtJ
OS9WMZEOLUp81haHckVU8jBttqFRU1F3vu29AKxQIRqXVyIbT9FwKYvscWzsMMeu
eeWU1Rff/7E0aWHh9dzxpklbDL7YEGpVg4+m9sbGfEnbhXDTpo1dKy0=
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:50:51 2026 by rpki-client