
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e203538343636.roa
File: 3132312e34362e3132382e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier: 8LHprx0vZXubPYk5aKb99k7sXcOAB+sR/whhkIuXv7I=
Subject key identifier: 32:C4:56:FF:65:43:B8:F9:F9:34:7B:76:43:A0:9F:23:96:39:31:16
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 1F929832570AF357C3F74FAE6ACA37CA5E7DF2A3
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e203538343636.roa
Signing time: Fri 17 Apr 2026 09:14:02 +0000
ROA not before: Fri 17 Apr 2026 09:09:02 +0000
ROA not after: Fri 16 Apr 2027 09:14:02 +0000
asID: 58466
IP address blocks: 121.46.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:92:98:32:57:0a:f3:57:c3:f7:4f:ae:6a:ca:37:ca:5e:7d:f2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 17 09:09:02 2026 GMT
Not After : Apr 16 09:14:02 2027 GMT
Subject: CN=32C456FF6543B8F9F9347B7643A09F2396393116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:c6:37:c6:5b:f6:a1:9b:07:e1:17:96:15:
4a:94:b3:46:2f:d9:ca:92:50:16:5f:b8:c4:0e:b7:
15:00:d9:85:54:e6:b1:2c:9a:63:13:4a:53:5a:7f:
fe:a6:83:93:de:85:26:fb:6b:35:ef:f7:05:97:df:
9c:eb:cd:61:a6:70:22:c7:33:3b:41:d1:31:4c:4f:
a4:be:ff:15:3c:64:40:cf:97:1f:bd:ee:8c:3e:cc:
4f:a1:a6:0f:b4:b4:e8:74:f7:78:a3:45:ff:a8:f0:
f7:b4:9f:13:fe:49:dd:e4:9c:40:f5:8f:71:84:7e:
66:f8:71:43:15:62:58:01:00:df:c0:f9:22:62:7b:
d3:3c:0d:94:94:94:e6:d6:a1:ed:58:6b:37:53:1d:
ca:40:e4:cf:6b:64:d3:d2:0f:15:17:f8:d4:cf:79:
71:c9:1d:74:5d:7c:e9:49:13:e4:3a:63:04:d6:9e:
80:6d:f5:f3:55:2a:5e:65:ad:dc:3e:b4:87:f8:b0:
e3:54:cb:df:44:d3:bd:97:17:a0:0f:46:5b:69:fa:
3e:23:27:8d:ca:97:c1:54:da:8f:7f:42:78:79:84:
de:17:73:10:32:30:aa:f2:b2:f3:79:6f:c5:fa:a0:
8c:50:31:79:e9:a2:da:e9:23:46:7e:e5:21:af:00:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C4:56:FF:65:43:B8:F9:F9:34:7B:76:43:A0:9F:23:96:39:31:16
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.128.0/22
Signature Algorithm: sha256WithRSAEncryption
08:39:70:db:b3:7d:f5:50:9b:84:b4:7b:bd:8f:ce:b9:b4:3b:
40:cd:5e:d9:95:96:8a:30:4f:e8:54:47:6f:cb:bf:aa:d8:39:
2a:83:f6:7c:34:65:dc:41:ae:6c:8d:f3:40:68:88:e9:05:1c:
c1:47:35:f1:33:47:4b:fa:ec:4f:18:f0:4b:14:a8:fc:6d:64:
3a:32:d9:38:62:6a:22:35:bf:3e:5c:a5:0e:ef:d3:07:35:6d:
4f:8b:d8:b8:26:e9:42:9d:02:ba:44:9e:e9:14:da:0e:43:6f:
96:4a:63:79:47:1a:11:59:fe:00:54:e1:43:fc:ad:49:1f:f0:
99:b4:5d:88:e7:55:01:2b:4f:c4:ed:6e:1b:d9:c0:fb:80:12:
3f:3b:08:6d:f4:f4:5b:6c:69:f5:d3:a7:c7:62:b3:9e:54:9f:
71:5e:fd:9f:3d:f8:37:02:1e:c1:22:74:2f:90:9b:66:b7:87:
c8:61:ce:39:0a:9d:13:63:53:24:7c:e3:e1:5d:0e:33:64:a8:
f8:13:d7:5c:f1:70:0e:b6:5a:ba:8a:df:cd:a9:91:c9:be:db:
ca:47:95:cc:e9:33:09:e5:52:ac:a4:d8:64:f3:a4:6f:fc:e9:
c6:71:0d:c9:26:31:b2:b1:1d:46:a8:27:a2:b9:16:9f:87:83:
5e:81:97:5a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUH5KYMlcK81fD90+uaso3yl598qMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA0MTcwOTA5MDJaFw0yNzA0MTYwOTE0MDJaMDMxMTAvBgNV
BAMTKDMyQzQ1NkZGNjU0M0I4RjlGOTM0N0I3NjQzQTA5RjIzOTYzOTMxMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4n8Y3xlv2oZsH4ReWFUqUs0Yv
2cqSUBZfuMQOtxUA2YVU5rEsmmMTSlNaf/6mg5PehSb7azXv9wWX35zrzWGmcCLH
MztB0TFMT6S+/xU8ZEDPlx+97ow+zE+hpg+0tOh093ijRf+o8Pe0nxP+Sd3knED1
j3GEfmb4cUMVYlgBAN/A+SJie9M8DZSUlObWoe1YazdTHcpA5M9rZNPSDxUX+NTP
eXHJHXRdfOlJE+Q6YwTWnoBt9fNVKl5lrdw+tIf4sONUy99E072XF6APRltp+j4j
J43Kl8FU2o9/Qnh5hN4XcxAyMKrysvN5b8X6oIxQMXnpotrpI0Z+5SGvAMsJAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUMsRW/2VDuPn5NHt2Q6CfI5Y5MRYwHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjI3NTMzMDc3NzM1MDE0Ni8wLzMxMzIzMTJlMzQz
NjJlMzEzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM0MzYzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAnkugDANBgkqhkiG9w0BAQsFAAOCAQEACDlw27N99VCbhLR7vY/OubQ7
QM1e2ZWWijBP6FRHb8u/qtg5KoP2fDRl3EGubI3zQGiI6QUcwUc18TNHS/rsTxjw
SxSo/G1kOjLZOGJqIjW/PlylDu/TBzVtT4vYuCbpQp0CukSe6RTaDkNvlkpjeUca
EVn+AFThQ/ytSR/wmbRdiOdVAStPxO1uG9nA+4ASPzsIbfT0W2xp9dOnx2KznlSf
cV79nz34NwIewSJ0L5CbZreHyGHOOQqdE2NTJHzj4V0OM2So+BPXXPFwDrZauorf
zamRyb7bykeVzOkzCeVSrKTYZPOkb/zpxnENySYxsrEdRqgnorkWn4eDXoGXWg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:53 2026 by rpki-client