
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e203536303430.roa
File: 3132312e34362e342e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier: jME2F/6HoKLUDxlJMOR+CHdrVr5b6r7zHxn4G/6LyOM=
Subject key identifier: 58:06:00:F1:AA:DB:B8:57:9C:AE:64:07:ED:06:60:C2:A2:B3:AB:A2
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 2EB9679E3EC534BC9338C0C99685A892DD0E4B43
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e203536303430.roa
Signing time: Thu 16 Apr 2026 02:22:37 +0000
ROA not before: Thu 16 Apr 2026 02:17:37 +0000
ROA not after: Thu 15 Apr 2027 02:22:37 +0000
asID: 56040
IP address blocks: 121.46.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b9:67:9e:3e:c5:34:bc:93:38:c0:c9:96:85:a8:92:dd:0e:4b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 16 02:17:37 2026 GMT
Not After : Apr 15 02:22:37 2027 GMT
Subject: CN=580600F1AADBB8579CAE6407ED0660C2A2B3ABA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8e:5d:65:82:1f:03:0c:a9:69:bc:84:f9:ea:
d4:df:50:02:f4:31:ee:42:1d:e1:af:69:58:c7:41:
c4:33:ad:bc:05:6e:2a:41:95:5d:b2:a0:74:53:fe:
b1:73:35:4e:cf:13:86:ac:d8:d4:7a:4b:7d:9a:65:
a9:96:64:c8:38:b2:15:6e:51:e9:bb:c4:19:19:5e:
fd:50:e0:53:aa:43:2f:87:60:e4:44:f7:c8:79:89:
e9:fd:12:b1:b9:5f:a6:47:87:e4:8c:98:86:71:fb:
e6:78:22:b1:c9:94:d8:9e:95:a8:f3:62:63:99:b1:
9a:80:f1:0f:0f:b4:62:33:9b:d0:16:8a:d5:0c:f6:
9d:1f:93:e2:1e:ab:64:44:33:99:d5:9a:a8:13:e0:
08:72:40:22:f6:eb:51:fd:89:4b:78:80:38:2e:82:
dd:d9:d4:ce:42:53:22:e8:3e:6a:3a:49:5e:85:bb:
7e:14:54:b0:eb:3b:a6:50:a2:ab:6d:bc:44:ca:36:
8e:4a:8b:a2:f8:6d:f6:8b:c4:33:23:6d:50:82:e7:
50:8e:71:48:8c:de:7a:67:37:34:56:79:51:4b:c2:
69:60:52:5d:9f:02:6a:bb:9b:6e:23:49:25:c1:3e:
f6:2e:3e:72:a8:6a:40:66:38:b7:ab:95:4f:07:ea:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:06:00:F1:AA:DB:B8:57:9C:AE:64:07:ED:06:60:C2:A2:B3:AB:A2
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.4.0/22
Signature Algorithm: sha256WithRSAEncryption
61:7a:94:d6:68:97:35:b2:4d:c9:e1:64:f3:39:f2:9c:71:b8:
44:18:72:fb:a9:93:85:cb:12:07:43:4c:eb:47:7f:a9:06:d8:
5c:ec:af:69:b6:a3:70:28:ec:65:f0:28:27:7d:a2:b4:c1:64:
6b:cf:49:cd:c3:16:bc:bd:3c:99:f9:e8:78:b1:1f:23:90:31:
0d:43:13:52:a3:2b:cd:7f:3c:d8:1e:d7:56:e5:bb:43:88:0f:
f4:e5:56:83:46:d2:21:13:82:17:21:49:01:c4:73:fb:e9:ae:
93:f8:32:59:8a:63:04:c3:c7:d5:ad:15:ee:7b:49:33:fe:8a:
2a:24:29:72:a4:10:d8:09:0c:e1:91:67:82:cb:9a:fc:3b:22:
3e:f6:ab:d2:47:a4:c6:03:30:d1:04:38:8d:c7:e5:e8:25:ba:
64:e9:fb:e2:25:ac:9d:e5:56:13:a6:c7:f3:d1:3b:3c:d9:01:
8c:40:88:f1:b1:e4:ac:e3:1d:10:94:4a:bc:e5:b2:3b:3a:ca:
84:22:24:2e:2e:e8:fe:70:f4:e7:af:2f:80:40:92:dc:a7:69:
5d:d4:76:c8:57:57:2b:67:b2:f6:b1:b0:dc:94:cb:3b:a8:8e:
d8:28:16:7d:91:37:7b:d9:b3:2d:af:53:2e:65:d6:06:5f:09:
c8:bd:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:10:52 2026 by rpki-client