
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS134764.roa
File: AS134764.roa (raw, json)
Hash identifier: xBe/goNb1fufTCb9L8wWUBYbiFdPALUFLhszW5C/vLo=
Subject key identifier: 51:F4:A4:0C:31:B3:B3:7B:1F:28:44:93:70:8C:EC:66:33:71:39:08
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 2871178015525FD64C50AA8DC4BB1BE15D62EBBD
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS134764.roa
Signing time: Wed 27 May 2026 07:20:00 +0000
ROA not before: Wed 27 May 2026 07:15:00 +0000
ROA not after: Wed 26 May 2027 07:20:00 +0000
asID: 134764
IP address blocks: 121.46.0.0/23 maxlen: 23
121.46.2.0/23 maxlen: 23
121.46.4.0/23 maxlen: 23
121.46.6.0/23 maxlen: 23
121.46.8.0/23 maxlen: 23
121.46.10.0/23 maxlen: 23
121.46.12.0/23 maxlen: 23
121.46.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:71:17:80:15:52:5f:d6:4c:50:aa:8d:c4:bb:1b:e1:5d:62:eb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: May 27 07:15:00 2026 GMT
Not After : May 26 07:20:00 2027 GMT
Subject: CN=51F4A40C31B3B37B1F284493708CEC6633713908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:f1:58:ea:90:a2:9e:a9:5b:a7:a0:f3:52:
7b:c4:78:e4:e2:b2:74:b2:41:5b:c5:44:76:0a:57:
24:c5:93:1d:94:13:82:16:85:60:35:36:47:64:24:
b7:a5:e0:b7:10:fe:d4:26:1f:ea:19:f2:6a:bd:32:
c5:a4:b4:75:b2:88:f1:25:9a:ec:1e:df:1f:b1:8b:
5d:94:3e:38:f2:9d:4b:e7:08:b7:92:df:63:d1:3c:
46:20:db:7b:eb:4c:51:fd:d8:24:13:e5:9c:7b:60:
88:29:69:5b:ca:d2:02:cf:35:eb:7c:c4:9b:ae:de:
f5:f9:ed:04:70:c5:87:0b:6f:34:73:dd:5b:1e:b5:
87:f9:61:0a:a5:8e:f3:f6:31:09:6f:e0:30:df:e9:
0d:83:92:7a:0a:07:11:f9:b7:9f:c4:7f:7c:f9:ed:
2f:77:4c:ce:d8:f0:84:ad:8a:b6:66:90:a6:50:1e:
8c:1b:08:31:38:ea:c0:1a:99:70:57:04:79:e7:91:
64:41:18:0a:13:d3:2e:53:ba:6d:38:f8:9d:3a:88:
b0:d8:fd:82:28:d5:5c:08:e5:ea:9e:87:d7:b5:47:
cc:35:ff:bc:c3:14:4d:22:05:5a:9f:22:7b:42:37:
c9:d4:96:20:bd:28:eb:73:a2:dc:85:36:05:e6:61:
7e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F4:A4:0C:31:B3:B3:7B:1F:28:44:93:70:8C:EC:66:33:71:39:08
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS134764.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.0.0/20
Signature Algorithm: sha256WithRSAEncryption
d2:37:f1:31:39:94:2f:14:cf:35:d5:c4:e0:5e:7d:c7:13:2e:
8c:cb:79:43:4d:2d:3e:62:3b:10:f4:67:65:5b:bd:91:a4:85:
02:5e:b5:04:08:32:96:64:a0:cd:cd:03:5f:64:f8:25:b0:2c:
3e:f6:58:6d:6c:f8:ab:25:5c:52:aa:5c:a6:b8:0d:87:f3:18:
fc:cc:1c:b6:66:95:10:1c:20:03:1b:1c:f7:64:64:2f:ac:44:
c8:49:04:69:47:41:4e:9d:a8:c2:83:27:b7:01:ec:ac:05:c5:
35:1b:71:7a:79:ec:c5:b1:41:f0:1e:d7:f9:99:bb:71:de:6c:
3a:a6:5d:4b:71:8f:65:51:b9:1a:f8:29:5a:3d:fa:1b:d8:c8:
f3:10:76:ce:5a:cc:94:a7:a1:c0:e8:07:7b:91:e7:cc:d7:b3:
95:26:b0:6a:78:af:c5:4b:8a:c9:f9:0b:06:54:76:ed:f1:2c:
f9:24:36:8b:b5:53:69:30:17:90:ba:06:31:6d:35:89:a9:56:
91:af:5e:d5:15:4c:1d:53:46:69:b8:d8:6e:bd:1d:64:71:17:
02:22:9f:08:be:8a:c5:f2:f0:11:d6:d7:74:f0:84:8c:60:f3:
c3:17:16:e1:1d:da:48:6f:36:f1:8f:cb:1a:22:8c:05:4e:7d:
cc:ca:5e:ce
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUKHEXgBVSX9ZMUKqNxLsb4V1i670wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA1MjcwNzE1MDBaFw0yNzA1MjYwNzIwMDBaMDMxMTAvBgNV
BAMTKDUxRjRBNDBDMzFCM0IzN0IxRjI4NDQ5MzcwOENFQzY2MzM3MTM5MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75PFY6pCinqlbp6DzUnvEeOTi
snSyQVvFRHYKVyTFkx2UE4IWhWA1NkdkJLel4LcQ/tQmH+oZ8mq9MsWktHWyiPEl
muwe3x+xi12UPjjynUvnCLeS32PRPEYg23vrTFH92CQT5Zx7YIgpaVvK0gLPNet8
xJuu3vX57QRwxYcLbzRz3VsetYf5YQqljvP2MQlv4DDf6Q2DknoKBxH5t5/Ef3z5
7S93TM7Y8IStirZmkKZQHowbCDE46sAamXBXBHnnkWRBGAoT0y5Tum04+J06iLDY
/YIo1VwI5eqeh9e1R8w1/7zDFE0iBVqfIntCN8nUliC9KOtzotyFNgXmYX5VAgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQUUfSkDDGzs3sfKESTcIzsZjNxOQgwHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTYyNzUzMzA3NzczNTAxNDYvMC9BUzEzNDc2NC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBHkuADANBgkqhkiG9w0BAQsFAAOCAQEA0jfxMTmULxTPNdXE4F59xxMu
jMt5Q00tPmI7EPRnZVu9kaSFAl61BAgylmSgzc0DX2T4JbAsPvZYbWz4qyVcUqpc
prgNh/MY/MwctmaVEBwgAxsc92RkL6xEyEkEaUdBTp2owoMntwHsrAXFNRtxenns
xbFB8B7X+Zm7cd5sOqZdS3GPZVG5GvgpWj36G9jI8xB2zlrMlKehwOgHe5HnzNez
lSawanivxUuKyfkLBlR27fEs+SQ2i7VTaTAXkLoGMW01ialWka9e1RVMHVNGabjY
br0dZHEXAiKfCL6KxfLwEdbXdPCEjGDzwxcW4R3aSG828Y/LGiKMBU59zMpezg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:43 2026 by rpki-client