
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31322e302f32322d3232203d3e20313335333931.roa
File: 3132312e34362e31322e302f32322d3232203d3e20313335333931.roa (raw, json)
Hash identifier: UBGmuTCeP+AClAC3VdyzD6hQYd7a5nj1GE8kXXbfEa4=
Subject key identifier: 0E:98:FE:79:B4:BE:4F:5A:A8:CA:FB:15:4F:30:D2:E2:16:7D:15:E9
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 5454E94961BFA6761F0E9471475C1FD8288D900F
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31322e302f32322d3232203d3e20313335333931.roa
Signing time: Thu 16 Apr 2026 02:35:29 +0000
ROA not before: Thu 16 Apr 2026 02:30:29 +0000
ROA not after: Thu 15 Apr 2027 02:35:29 +0000
asID: 135391
IP address blocks: 121.46.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:54:e9:49:61:bf:a6:76:1f:0e:94:71:47:5c:1f:d8:28:8d:90:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 16 02:30:29 2026 GMT
Not After : Apr 15 02:35:29 2027 GMT
Subject: CN=0E98FE79B4BE4F5AA8CAFB154F30D2E2167D15E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:0e:c6:f5:c8:9a:ee:98:21:68:aa:a0:46:
07:2b:2d:50:a3:5c:7f:3e:ec:26:a7:6a:13:0a:25:
34:56:11:5e:03:da:a0:91:51:57:40:11:c7:53:92:
2f:c7:39:0f:6e:c9:d8:c0:8e:88:45:90:37:03:df:
1b:a3:cf:b4:31:49:4d:be:f8:15:1d:65:95:df:29:
fc:a6:79:3e:0a:e9:c3:32:9a:a1:b1:ed:a0:23:e8:
14:3a:93:ab:51:0b:74:16:23:6b:27:58:50:30:09:
c0:f6:34:90:c4:0e:12:8f:11:af:d5:54:47:74:80:
e4:7b:57:c9:11:5b:a0:3f:51:38:e7:46:48:50:42:
04:ff:5b:02:34:38:d0:85:cf:ec:0a:88:a6:0a:aa:
49:23:e0:90:cd:64:1b:53:c3:17:d1:47:9c:ce:40:
1d:4a:47:9d:2c:69:37:3d:39:1c:83:7b:d0:f5:6e:
35:a4:94:c3:6c:b2:12:e6:81:a7:68:a4:72:e6:99:
d2:98:ac:8d:7f:db:8f:0b:ee:c6:fd:8b:5b:36:31:
a5:17:84:f3:e0:62:3c:f4:f3:79:e9:cc:91:2b:e4:
7c:fc:f9:cb:20:8c:fb:8e:f0:db:b2:12:d2:47:8c:
18:cb:24:27:40:b7:e1:19:b4:3a:d0:ba:fb:74:5f:
97:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:98:FE:79:B4:BE:4F:5A:A8:CA:FB:15:4F:30:D2:E2:16:7D:15:E9
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31322e302f32322d3232203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.12.0/22
Signature Algorithm: sha256WithRSAEncryption
26:9b:90:fc:8c:49:da:cd:43:e5:22:53:5f:36:2b:34:d2:5c:
26:2a:7f:2a:1a:ab:1f:fe:b2:80:41:44:62:3c:ef:f8:35:ec:
d8:e3:a2:26:aa:b4:dd:d3:dd:e9:fd:cf:d9:fd:61:03:ba:f9:
6e:a1:9f:f6:97:12:98:da:a4:b6:9e:2a:41:91:fd:43:ba:9c:
fb:ff:55:98:5f:3e:f2:02:f6:95:ec:f4:6c:cb:6a:0b:23:7d:
11:b0:7a:6a:78:79:5c:f6:84:0b:57:5e:00:45:84:03:18:75:
3e:58:fb:da:96:90:2d:4c:05:c6:f0:91:82:be:e9:8a:d9:a0:
6f:42:8f:f8:ee:36:d3:9c:d1:3d:ce:40:9a:87:d4:82:c8:d1:
14:3e:ed:4a:0c:53:8e:57:00:60:96:af:89:42:d0:75:88:cb:
50:9b:55:63:9a:cf:68:d7:2b:c3:3f:7f:3d:ed:fa:4a:64:06:
fd:52:56:28:96:ca:8f:0c:70:45:4c:23:11:cd:37:47:57:ee:
b8:71:55:17:da:22:3d:33:3f:57:92:ea:88:09:06:28:c6:7f:
94:0e:70:37:b1:49:08:89:28:74:27:66:f8:71:b9:2f:2c:3a:
1a:4c:4c:aa:d0:1e:7e:76:f1:05:65:75:cd:94:36:f1:f8:ff:
3d:1a:8e:2b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUVFTpSWG/pnYfDpRxR1wf2CiNkA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA0MTYwMjMwMjlaFw0yNzA0MTUwMjM1MjlaMDMxMTAvBgNV
BAMTKDBFOThGRTc5QjRCRTRGNUFBOENBRkIxNTRGMzBEMkUyMTY3RDE1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQColw7G9cia7pghaKqgRgcrLVCj
XH8+7CanahMKJTRWEV4D2qCRUVdAEcdTki/HOQ9uydjAjohFkDcD3xujz7QxSU2+
+BUdZZXfKfymeT4K6cMymqGx7aAj6BQ6k6tRC3QWI2snWFAwCcD2NJDEDhKPEa/V
VEd0gOR7V8kRW6A/UTjnRkhQQgT/WwI0ONCFz+wKiKYKqkkj4JDNZBtTwxfRR5zO
QB1KR50saTc9ORyDe9D1bjWklMNsshLmgadopHLmmdKYrI1/248L7sb9i1s2MaUX
hPPgYjz083npzJEr5Hz8+csgjPuO8NuyEtJHjBjLJCdAt+EZtDrQuvt0X5eZAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUDpj+ebS+T1qoyvsVTzDS4hZ9FekwHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjI3NTMzMDc3NzM1MDE0Ni8wLzMxMzIzMTJlMzQz
NjJlMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNTMzMzkzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAnkuDDANBgkqhkiG9w0BAQsFAAOCAQEAJpuQ/IxJ2s1D5SJTXzYrNNJc
Jip/KhqrH/6ygEFEYjzv+DXs2OOiJqq03dPd6f3P2f1hA7r5bqGf9pcSmNqktp4q
QZH9Q7qc+/9VmF8+8gL2lez0bMtqCyN9EbB6anh5XPaEC1deAEWEAxh1Plj72paQ
LUwFxvCRgr7pitmgb0KP+O4205zRPc5AmofUgsjRFD7tSgxTjlcAYJaviULQdYjL
UJtVY5rPaNcrwz9/Pe36SmQG/VJWKJbKjwxwRUwjEc03R1fuuHFVF9oiPTM/V5Lq
iAkGKMZ/lA5wN7FJCIkodCdm+HG5Lyw6GkxMqtAefnbxBWV1zZQ28fj/PRqOKw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:33 2026 by rpki-client