
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32322d3232203d3e203538343636.roa
File: 3132312e34362e32382e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier: 0GG8joO9Cs4SRFhoig9ODBS3ONi4Pq8FJ9R9JPfkoEM=
Subject key identifier: 5C:D0:6E:5B:B4:DA:21:E6:D0:89:62:2C:68:1F:E3:F0:D2:34:AD:F6
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 3CFDAC213F0E452F1A1B623D2A3888BE30237C9B
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32322d3232203d3e203538343636.roa
Signing time: Mon 20 Apr 2026 06:38:07 +0000
ROA not before: Mon 20 Apr 2026 06:33:07 +0000
ROA not after: Mon 19 Apr 2027 06:38:07 +0000
asID: 58466
IP address blocks: 121.46.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fd:ac:21:3f:0e:45:2f:1a:1b:62:3d:2a:38:88:be:30:23:7c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 20 06:33:07 2026 GMT
Not After : Apr 19 06:38:07 2027 GMT
Subject: CN=5CD06E5BB4DA21E6D089622C681FE3F0D234ADF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:73:af:7d:18:bd:5a:45:b3:58:ac:3b:10:
20:fa:59:2f:79:9f:f4:d5:52:af:63:0c:26:ea:b0:
de:c3:24:61:8c:42:85:31:d0:47:07:03:c0:2f:a1:
aa:64:cd:90:34:26:6c:7f:30:84:ae:d7:3f:81:0c:
e8:44:3e:e6:8e:06:3d:7e:71:5d:1f:39:fd:39:b9:
17:7d:6a:56:51:4f:35:b7:77:02:3e:dd:00:b4:d9:
73:15:24:5b:b3:b2:f7:5b:26:9a:93:cd:b5:38:68:
af:53:2f:b7:1b:6a:a1:d8:73:c0:e2:b9:5e:a3:e9:
e4:b3:63:56:5e:d6:0b:dc:34:3c:cd:cb:30:81:85:
4b:44:7e:77:12:d0:ae:24:41:10:c6:e1:cc:23:10:
4a:30:26:4c:0e:0e:71:17:38:1f:7a:b8:69:b2:f5:
1f:70:54:5a:6d:7a:7e:37:c9:98:b2:76:b2:d6:6d:
ef:fd:28:b3:1b:5e:13:29:69:30:61:2e:c6:3d:7d:
e3:e7:71:99:2c:5d:17:34:60:e0:78:8b:9c:cd:f3:
ee:bb:f9:a9:b2:da:6c:ae:2a:ab:dc:a7:a4:33:52:
ee:48:2c:54:f7:77:3c:10:40:86:c2:b7:22:c6:6d:
57:20:96:28:95:dd:99:46:8b:96:09:66:81:a0:45:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D0:6E:5B:B4:DA:21:E6:D0:89:62:2C:68:1F:E3:F0:D2:34:AD:F6
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32322d3232203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:a5:29:16:18:c6:f4:94:cb:66:13:9f:7f:99:11:35:79:eb:
9d:38:33:78:5a:f0:6b:be:7a:c8:a2:50:cc:c4:5b:35:86:9b:
10:8a:c4:13:bd:ed:a9:49:25:95:f1:49:52:aa:48:d4:9e:9b:
da:9e:09:55:49:67:1b:d6:44:91:06:65:2a:2d:66:5b:f2:5f:
5b:3d:15:8d:63:75:dd:39:5e:f8:6b:b9:e2:f5:45:a5:54:77:
8c:ab:16:1e:b0:0c:b3:ae:a0:0a:79:4c:70:67:da:b7:cb:d4:
86:9f:f5:30:4a:ff:6b:1f:30:2b:8e:6f:16:f9:e1:17:c6:fb:
8e:4a:bc:a4:ca:82:13:6b:9a:aa:6e:44:07:17:5d:6f:7d:f4:
cf:37:a1:17:18:7e:ef:81:3a:7b:2c:11:2c:96:0f:c5:1e:da:
33:97:78:fd:a7:6f:28:47:9e:c1:67:85:e8:0a:a6:c4:ac:18:
1b:79:eb:75:63:ac:47:22:0e:f9:fc:fe:93:c0:5a:2a:0d:9a:
b9:fb:31:14:e7:50:9d:b3:39:11:91:02:a8:8a:3d:85:9b:d2:
96:26:4f:7d:50:ce:a1:75:df:13:9a:5b:8d:55:50:9c:ad:6b:
99:f2:73:ba:29:e7:c8:d1:af:bc:99:c5:43:8f:74:80:35:eb:
56:d6:b6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:24 2026 by rpki-client