
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e322e302f32332d3233203d3e20313334373634.roa
File: 3132312e34362e322e302f32332d3233203d3e20313334373634.roa (raw, json)
Hash identifier: Pz5ZtuB2L2w22qlljCaVqAUB9mohrGgmjq2XkFRxYQw=
Subject key identifier: 3F:E1:17:5F:79:87:1C:86:86:36:D7:DE:A6:2E:2E:A4:F9:D3:C2:A2
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 3DADC0EF0650EF0602B2A6F2D97E48877665EE5F
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e322e302f32332d3233203d3e20313334373634.roa
Signing time: Tue 14 Apr 2026 03:57:48 +0000
ROA not before: Tue 14 Apr 2026 03:52:48 +0000
ROA not after: Tue 13 Apr 2027 03:57:48 +0000
asID: 134764
IP address blocks: 121.46.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ad:c0:ef:06:50:ef:06:02:b2:a6:f2:d9:7e:48:87:76:65:ee:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 14 03:52:48 2026 GMT
Not After : Apr 13 03:57:48 2027 GMT
Subject: CN=3FE1175F79871C868636D7DEA62E2EA4F9D3C2A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:8e:91:ee:99:53:73:2a:4c:79:60:10:0f:
d7:cf:97:f1:0b:28:69:b6:a6:3b:da:93:1f:c3:04:
fb:e8:94:55:34:17:94:0b:4c:42:b6:fc:1c:83:90:
24:7d:e0:6f:e9:d0:95:f9:31:ab:f9:e2:01:de:a9:
0e:a9:1c:2e:96:20:0e:ac:3d:e8:0b:e9:13:74:8d:
88:43:0a:d5:fe:86:48:e9:f9:ba:1f:bc:c2:9c:46:
fe:99:57:39:9d:39:3f:66:67:9a:54:a6:6d:85:e0:
8e:b5:45:82:fd:f5:2c:4c:21:fb:04:b3:26:de:a2:
c8:07:5b:a5:91:5e:2b:15:45:9a:47:43:0c:40:70:
2f:52:2c:a8:f8:9c:2b:4a:53:e2:a2:8c:c4:5e:4b:
f7:17:1b:d5:51:7c:89:68:72:de:39:0e:7f:55:9e:
fc:a1:f7:3e:84:ae:8d:b9:ba:14:f4:14:85:8b:21:
31:fd:d7:e6:eb:8a:be:a9:ac:e4:1d:86:16:c3:6c:
aa:27:c0:2f:d7:7b:21:38:c6:ef:a2:05:cd:6c:36:
4b:a3:fd:85:30:c5:43:7d:45:f9:13:03:9a:67:46:
15:45:eb:71:04:cf:7d:d1:17:df:85:f5:0f:12:71:
19:b3:d8:a0:f2:07:2e:f7:be:7c:f4:b8:7b:7d:fe:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E1:17:5F:79:87:1C:86:86:36:D7:DE:A6:2E:2E:A4:F9:D3:C2:A2
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e322e302f32332d3233203d3e20313334373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.2.0/23
Signature Algorithm: sha256WithRSAEncryption
af:4a:4e:0a:e8:f6:e8:9e:6c:3d:cd:0e:fe:d0:a0:52:f8:8b:
1e:20:a0:9a:ce:6a:f0:ed:dd:05:27:b4:9a:3c:b2:8d:f4:f2:
64:50:75:86:50:70:b8:f0:6d:4d:3a:ec:30:43:75:4a:4c:89:
9b:00:88:f9:37:81:76:0f:34:3e:17:c0:c5:c9:6c:6a:4e:78:
4b:77:5c:19:eb:72:d9:f6:1a:9e:ed:99:47:36:51:1c:3e:63:
84:4a:b4:8c:e7:b1:62:21:42:99:e4:bb:66:91:0a:b7:bc:95:
f5:f1:e4:29:ae:ac:62:fb:10:3c:46:ab:c3:9b:57:7f:05:9c:
24:da:7c:ed:f1:4f:2c:9a:c4:5e:bf:86:13:9a:9e:c5:48:5f:
15:85:11:9b:ab:fd:82:2c:bf:4e:ff:0c:f0:ac:7a:40:7e:f0:
15:87:a5:db:a8:18:59:82:fe:d5:82:1f:6d:b7:33:67:13:81:
eb:e5:ca:76:7a:a5:f9:37:cb:13:fe:70:8e:a6:97:3a:29:29:
95:24:2c:fb:bb:b9:c2:4e:28:e1:26:d0:3a:92:4d:a2:29:25:
f8:cc:f2:fc:24:61:77:bc:14:a9:00:87:cb:ec:e2:e1:ee:1c:
13:aa:9b:0f:0a:55:b2:87:20:68:a5:67:5f:b4:a4:20:e4:4a:
27:15:93:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:43 2026 by rpki-client