
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31302e302f32332d3233203d3e20313334373634.roa
File: 3132312e34362e31302e302f32332d3233203d3e20313334373634.roa (raw, json)
Hash identifier: zCDbPPDzF1X49/NhfXymFWnf54g4a3GhNHMAIHGg8J4=
Subject key identifier: 9A:F1:F5:32:87:DF:28:37:14:F8:D8:88:46:FB:DF:2A:68:1E:55:82
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 1F276CA1F95C6A45356E5A022FBC86E22934B9AF
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31302e302f32332d3233203d3e20313334373634.roa
Signing time: Thu 16 Apr 2026 02:31:20 +0000
ROA not before: Thu 16 Apr 2026 02:26:20 +0000
ROA not after: Thu 15 Apr 2027 02:31:20 +0000
asID: 134764
IP address blocks: 121.46.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:27:6c:a1:f9:5c:6a:45:35:6e:5a:02:2f:bc:86:e2:29:34:b9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 16 02:26:20 2026 GMT
Not After : Apr 15 02:31:20 2027 GMT
Subject: CN=9AF1F53287DF283714F8D88846FBDF2A681E5582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:7e:55:7f:08:6b:b6:ce:75:95:d9:3e:20:
cc:fa:69:c9:8c:45:a3:f2:ff:13:ff:ae:8c:fd:e7:
e3:2b:d7:b5:ec:b6:bc:f0:93:1d:bd:35:c8:e4:31:
3a:a7:dc:88:cf:6d:e2:12:59:e4:9a:2b:d4:26:58:
79:45:77:4f:97:b2:cd:29:d1:ef:71:ab:c1:8c:61:
58:52:7f:33:47:be:f5:d7:d3:97:e1:33:fc:60:ad:
31:b9:a0:cd:f5:29:20:66:2e:58:30:5a:ca:e2:22:
b2:90:d3:17:01:88:b7:c0:38:21:bd:7e:3e:75:5a:
b9:8b:99:42:d7:26:40:92:e3:0b:ab:13:72:3e:d9:
b9:df:64:f9:1f:22:3f:60:e7:ad:cc:a5:5a:ce:43:
42:fe:0c:13:3e:2c:37:2e:fe:0d:7f:51:d5:38:a1:
f0:b7:68:12:ad:c9:4a:7e:ae:0a:45:ec:ec:98:4a:
b6:35:20:be:77:e0:c3:0f:77:75:4b:1f:56:b7:85:
8e:f8:99:94:89:f5:a3:1a:ff:22:d4:9b:10:78:1b:
20:ad:ad:8c:16:19:29:e3:c8:34:1d:ed:e9:b5:e9:
89:19:04:b6:ab:69:10:7e:13:89:12:4b:5e:86:bb:
2b:bd:b9:2a:c3:59:fc:b7:90:0a:6a:76:a6:9b:a2:
a7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F1:F5:32:87:DF:28:37:14:F8:D8:88:46:FB:DF:2A:68:1E:55:82
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31302e302f32332d3233203d3e20313334373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.10.0/23
Signature Algorithm: sha256WithRSAEncryption
40:25:97:b3:87:12:6d:cb:97:5e:de:a8:49:9a:a3:e0:0a:dc:
83:f5:5b:c9:a0:71:89:b3:31:31:f5:ec:f2:77:00:7c:02:49:
37:a4:23:b8:37:33:78:77:7b:2b:0b:9c:3a:7f:70:a9:1f:8c:
79:56:bd:fa:49:e1:7c:d9:fe:9a:18:6e:1b:3a:90:25:a8:85:
e5:dd:d5:31:63:d9:b5:a6:8d:38:99:ec:5f:ed:9d:6e:5e:fe:
63:bb:e2:a1:d0:3b:52:c5:bf:bd:cb:1d:28:32:a7:bc:2d:89:
d3:77:ba:3e:f0:68:d5:c2:2c:09:a1:19:31:97:99:59:45:e0:
d9:c0:4e:94:0c:da:46:2d:c8:a3:5e:5e:61:07:74:68:fe:e3:
22:bc:c2:33:97:f1:96:9e:84:df:a7:5f:6a:03:1e:e8:d9:29:
a0:5f:f3:ad:60:84:8b:f3:b0:28:d8:ad:b2:a0:9a:ae:32:7c:
93:1a:fb:8c:42:16:58:33:06:09:c9:ff:ab:76:4c:34:cd:9e:
3f:bd:12:52:63:eb:06:24:16:c4:a0:c0:eb:26:e8:f8:7e:b0:
45:57:a5:fb:2e:37:e4:f7:0c:8b:ac:f0:3e:d8:83:c6:c0:91:
51:a8:0e:fe:cb:8e:42:1c:94:6b:03:77:c8:bd:aa:4f:a3:7b:
7f:12:59:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:41 2026 by rpki-client