
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e203338333730.roa
File: 3132312e34362e3132382e302f32322d3232203d3e203338333730.roa (raw, json)
Hash identifier: Dc1qSYrL+dazi+HpZnZqSvjDralgj2Kg4TqhHL4JSYQ=
Subject key identifier: AC:09:7D:17:DB:ED:F2:B5:F3:13:0D:FE:D0:2B:4C:D9:2C:63:2E:9C
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 47625A81CD2B842D8A7741B3971F0904B80C80A9
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e203338333730.roa
Signing time: Fri 17 Apr 2026 09:14:02 +0000
ROA not before: Fri 17 Apr 2026 09:09:02 +0000
ROA not after: Fri 16 Apr 2027 09:14:02 +0000
asID: 38370
IP address blocks: 121.46.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:62:5a:81:cd:2b:84:2d:8a:77:41:b3:97:1f:09:04:b8:0c:80:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 17 09:09:02 2026 GMT
Not After : Apr 16 09:14:02 2027 GMT
Subject: CN=AC097D17DBEDF2B5F3130DFED02B4CD92C632E9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:01:07:58:77:0f:13:cc:63:be:43:97:e9:
db:fc:ee:c7:7c:2e:6c:25:27:49:49:e1:e5:90:f2:
d7:da:07:da:b8:92:45:47:a2:82:54:a6:ec:54:aa:
ad:62:7f:8b:fb:74:75:8d:53:10:61:13:00:d8:37:
7d:a5:19:d2:f7:9a:27:e1:59:9f:47:2b:24:34:a9:
00:28:a0:9c:b7:29:39:51:08:de:1f:ae:79:62:c0:
93:1e:81:3c:00:65:05:5a:ac:cf:30:ca:44:f8:52:
d9:77:e0:73:d3:d9:7f:be:b5:f6:39:11:97:0d:40:
e1:02:77:d2:16:6a:a0:51:fc:c7:ab:cc:1f:5f:45:
85:13:be:1b:ce:8b:e6:ee:91:4f:aa:5b:91:62:f4:
a6:17:67:30:8d:e0:26:15:e9:65:61:70:11:56:2c:
cc:cf:ff:1f:f6:c6:39:1c:95:8e:c4:00:27:40:c4:
b8:2d:0d:d8:16:96:61:b0:58:cf:30:a5:72:8f:cd:
67:89:cd:8e:e6:08:b9:ad:69:3b:a8:1f:74:75:2b:
63:d7:93:c9:fb:e8:05:15:3b:99:19:3a:a6:0e:06:
57:5c:8a:09:be:a3:7f:f8:a0:21:4f:9f:65:1d:0e:
66:53:a0:5a:1f:70:fe:4b:11:25:6e:17:0a:cf:76:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:09:7D:17:DB:ED:F2:B5:F3:13:0D:FE:D0:2B:4C:D9:2C:63:2E:9C
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e203338333730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.128.0/22
Signature Algorithm: sha256WithRSAEncryption
35:6a:c1:4f:d4:50:98:8d:dc:81:94:ac:23:5a:55:b5:64:b3:
df:67:c5:af:aa:3e:90:63:e9:a0:1a:59:48:fa:ca:2a:2d:6d:
6f:9c:a2:ca:44:a0:dc:ba:ac:56:4e:4f:00:8b:9b:06:b0:1d:
c8:2b:3f:3e:b8:3b:f6:cf:00:4d:f4:12:2f:7d:55:7e:85:13:
b3:a5:68:d6:01:43:91:3e:6c:be:40:d6:c8:11:d9:c7:8b:c7:
fb:9d:cc:70:e1:dd:20:6d:b3:56:14:49:8c:1f:0c:9a:19:bb:
1e:e2:30:3e:2b:2e:22:d5:bd:63:57:6d:77:a1:28:75:71:8b:
fb:4b:0a:62:89:4a:e3:8e:a8:34:59:f5:a1:79:a7:a9:59:77:
10:a7:75:75:78:c8:f5:06:06:2d:89:11:81:90:23:c5:58:89:
09:bb:41:17:f9:99:6a:9a:a3:c3:b2:f4:21:09:2a:8a:b0:a4:
b1:75:ce:8b:fd:c0:0e:47:d2:54:14:ad:38:0a:71:c2:95:da:
b9:3d:35:36:c4:a3:10:6a:bc:f1:c9:51:3f:e6:dd:bc:0b:c0:
74:99:0c:db:75:78:82:0e:8f:c4:3a:1c:9a:92:7c:fd:09:73:
e5:dc:77:2b:55:c9:ef:23:77:42:b7:b6:5e:35:96:54:94:cf:
f0:c4:8d:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:36 2026 by rpki-client