
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e2034313334.roa
File: 3132312e34362e342e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier: Xm1EI8MKZ8ViR2fJ5gXxj/eig6ZeQARM3lsLk6aivZU=
Subject key identifier: 66:AC:F4:8B:38:37:A8:FD:6B:8C:E0:A9:BC:1A:C1:61:41:66:11:FA
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 68889C43C7E1B5F2C1D77AE51BEC7FDC3A5D4A02
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e2034313334.roa
Signing time: Thu 16 Apr 2026 02:22:37 +0000
ROA not before: Thu 16 Apr 2026 02:17:37 +0000
ROA not after: Thu 15 Apr 2027 02:22:37 +0000
asID: 4134
IP address blocks: 121.46.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:88:9c:43:c7:e1:b5:f2:c1:d7:7a:e5:1b:ec:7f:dc:3a:5d:4a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 16 02:17:37 2026 GMT
Not After : Apr 15 02:22:37 2027 GMT
Subject: CN=66ACF48B3837A8FD6B8CE0A9BC1AC161416611FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ae:9d:1b:b2:7c:d2:ca:43:d2:c6:7d:c2:99:
0f:db:9f:12:e4:f7:e6:20:e8:36:ef:e0:54:63:71:
0c:31:dc:8f:ee:ac:7d:48:e0:83:e5:93:60:1b:70:
0d:6c:b7:6e:ec:ba:8b:f5:ab:4d:54:aa:6f:35:67:
58:e2:bc:85:c1:5c:b2:02:79:e9:c9:68:a4:89:c8:
e4:ae:20:66:c6:f0:69:5d:21:07:d2:c7:4e:4b:cc:
c2:da:05:06:19:b0:6a:1a:88:88:f5:05:84:6f:5d:
9a:ea:c2:41:f4:1e:c7:3c:22:83:12:2a:f0:01:c1:
4a:98:f1:e5:31:0a:05:88:0a:8d:15:54:17:0c:d9:
3e:ce:75:dd:d3:dd:5e:5b:45:df:16:19:ac:99:e1:
4b:d2:ff:b2:41:61:4c:46:8a:d9:56:cc:f1:05:58:
d1:f4:da:a2:16:d6:5b:b8:0d:30:9c:91:36:17:e8:
de:b1:52:c7:8b:08:4b:e0:4c:9a:b6:ac:df:4b:50:
85:cc:9d:f9:bc:f6:d9:ba:64:85:2e:ba:53:82:8a:
a4:ca:c9:4e:bb:a1:5c:80:22:ed:db:ba:ba:dc:15:
54:d6:01:eb:48:a5:48:df:5b:ea:dd:27:c6:e5:1b:
5b:53:25:be:b8:b0:07:5e:d1:b6:ce:c2:00:33:b6:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:F4:8B:38:37:A8:FD:6B:8C:E0:A9:BC:1A:C1:61:41:66:11:FA
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:85:78:db:7a:d6:44:78:4c:b8:e4:11:1b:c6:b0:51:80:22:
30:e9:5c:60:60:a4:1a:6d:d1:ab:8e:13:86:f4:20:17:0e:b8:
80:32:20:d8:ec:e2:35:c4:d3:79:34:30:7c:00:23:36:48:9d:
c7:e7:71:36:e3:75:79:82:2d:bb:19:31:f5:53:cf:86:58:e5:
c8:5f:1a:4b:ce:d2:c9:ce:02:ef:a4:27:77:ae:95:6d:15:aa:
1b:05:09:ff:c0:2c:1a:0d:40:0a:88:0d:40:40:ed:a5:97:5c:
f0:52:c8:cd:d9:cc:27:e2:3a:cf:47:c2:02:a4:4b:ab:af:e4:
0f:95:04:8d:ea:76:9b:d9:4d:90:15:22:7d:82:b4:ac:ed:df:
31:a6:39:b6:22:62:9e:89:9d:5e:47:6a:15:3d:17:21:8e:f6:
ae:41:74:66:1f:90:bc:31:5f:81:55:ee:7c:4c:3b:96:42:68:
38:a8:99:93:6f:e2:60:dd:63:d8:88:60:b9:3e:e8:4f:f9:74:
43:cf:fd:be:cb:f8:94:f7:0c:a3:b7:da:de:b1:3b:4d:c6:6c:
01:a3:b7:c8:c8:77:7f:52:5b:f5:fd:43:77:62:99:22:10:a9:
4d:83:46:4a:1d:9f:75:d9:d3:b6:d0:20:27:b0:f3:0f:a0:87:
13:63:e2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:34:15 2026 by rpki-client