
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232342e302f32332d3233203d3e2034383131.roa
File: 3132312e34362e3232342e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier: xXLfcLQxyoqoh0t2wRfwyRm0ZSYeJsQ6FmJ/Sg/Kg4g=
Subject key identifier: 9A:20:91:61:C5:E0:A8:2F:F2:75:7A:54:0E:34:62:A3:3D:DD:2E:3F
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 69DE2D1FEFB0C62163E8612DCD491C9D159B49B7
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232342e302f32332d3233203d3e2034383131.roa
Signing time: Sun 23 Aug 2026 15:03:17 +0000
ROA not before: Sun 23 Aug 2026 14:58:17 +0000
ROA not after: Sun 22 Aug 2027 15:03:17 +0000
asID: 4811
IP address blocks: 121.46.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 10:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:de:2d:1f:ef:b0:c6:21:63:e8:61:2d:cd:49:1c:9d:15:9b:49:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Aug 23 14:58:17 2026 GMT
Not After : Aug 22 15:03:17 2027 GMT
Subject: CN=9A209161C5E0A82FF2757A540E3462A33DDD2E3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:8e:61:f8:c3:97:56:bc:11:b8:c7:32:d3:
e1:de:6d:9d:e8:c0:dd:c4:ab:e3:37:08:c5:25:6e:
dc:de:e0:94:13:52:ed:fe:f0:54:77:e0:a7:6b:46:
c3:b3:27:aa:c3:23:64:1e:8f:23:c3:95:55:13:69:
27:d2:cf:42:32:fe:27:e6:c6:c8:ff:3b:aa:25:db:
72:a4:fb:62:e2:0f:e1:d4:0c:7e:51:6f:48:30:50:
4b:66:27:f9:cd:5f:6a:9f:84:f3:16:71:db:a7:ca:
36:d5:bb:90:40:60:f6:d1:58:c4:f6:f8:a9:c2:0a:
ab:b4:9a:58:07:d5:e0:71:28:90:79:46:d6:17:4a:
2e:47:e2:30:16:0e:58:1e:6c:e7:95:33:a1:31:29:
39:ce:cc:60:3c:66:3d:53:df:c8:08:d3:ad:97:4e:
b0:0e:88:f6:b5:2c:76:d4:d3:76:d8:e0:9c:35:1d:
17:bd:d5:65:85:86:5d:98:82:6c:64:c6:0c:58:12:
63:db:78:ae:08:08:fb:a6:e5:f7:05:81:15:df:a1:
02:1a:9c:59:36:6e:30:f5:f1:cf:58:57:fc:22:d8:
5c:57:3d:53:ef:59:82:a1:8c:4c:9d:54:51:60:86:
18:4e:02:f3:1b:de:31:1e:d2:fc:e7:4f:26:cb:ec:
20:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:20:91:61:C5:E0:A8:2F:F2:75:7A:54:0E:34:62:A3:3D:DD:2E:3F
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232342e302f32332d3233203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.224.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:98:a2:58:3e:74:7d:ef:fe:5d:dd:86:b5:f1:ea:14:99:65:
0f:58:cd:44:c4:43:5a:41:61:76:c2:79:7f:ae:a2:cb:ca:e2:
34:3a:2c:f9:4c:c5:df:1e:7e:91:c0:36:23:49:89:16:96:e2:
8b:56:b9:ec:5e:88:8b:83:8c:11:a2:a9:27:e6:54:33:30:bd:
de:c0:f4:92:b1:ae:62:dc:7a:ef:bf:df:0f:2b:bf:f0:b4:af:
b1:b6:60:a8:c2:e0:d0:c5:42:5a:44:52:0a:68:2a:31:8c:09:
f4:58:3d:5a:b0:9b:64:ec:6e:0d:7b:32:51:da:f8:6a:59:48:
9b:28:e1:57:d0:9f:f9:f6:fc:49:87:7b:0c:2e:0c:1c:96:0f:
b8:0d:f0:22:72:b4:89:5d:87:ab:fb:ed:ec:5e:f6:22:39:9f:
07:e7:50:78:58:ea:37:da:7f:5b:c0:f8:96:3f:ce:46:b8:70:
b8:0c:e9:05:ab:5d:51:5e:ff:ff:4f:3c:87:25:97:a8:b2:6e:
e6:8d:36:ee:6a:cc:7b:d6:1a:ba:e8:a8:6c:06:bc:54:21:26:
c6:8b:63:55:55:30:6c:80:a3:2e:3f:2e:73:c9:f2:04:98:ff:
0a:86:8d:41:20:5b:5b:84:40:99:44:c6:71:ef:ee:bf:df:33:
50:67:33:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:43:22 2026 by rpki-client