
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32332d3233203d3e20313334373634.roa
File: 3132312e34362e342e302f32332d3233203d3e20313334373634.roa (raw, json)
Hash identifier: 6QvcdeOij2JjgDq9KQkr2m4WULvN3SfKxCnNFV46E/Q=
Subject key identifier: EF:A7:E9:CF:7B:B5:82:D4:87:D0:FE:DD:86:00:D5:40:BD:9F:97:DD
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 2E62EFAF33EAF7FE16D0230F8BF5344B112550CA
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32332d3233203d3e20313334373634.roa
Signing time: Thu 16 Apr 2026 02:22:37 +0000
ROA not before: Thu 16 Apr 2026 02:17:37 +0000
ROA not after: Thu 15 Apr 2027 02:22:37 +0000
asID: 134764
IP address blocks: 121.46.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:62:ef:af:33:ea:f7:fe:16:d0:23:0f:8b:f5:34:4b:11:25:50:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 16 02:17:37 2026 GMT
Not After : Apr 15 02:22:37 2027 GMT
Subject: CN=EFA7E9CF7BB582D487D0FEDD8600D540BD9F97DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:f3:e4:1c:3e:53:e1:09:db:0d:7d:2b:f2:
1b:b2:6d:a2:5d:17:df:21:4f:9d:87:ec:fb:ce:13:
bb:c1:57:78:f0:7f:72:29:ea:17:44:a6:91:3f:82:
dc:20:27:c1:a9:34:72:bf:20:49:f7:2e:5a:5f:27:
a5:34:1e:0f:59:13:ee:51:8d:c5:7c:b9:c9:7b:fc:
54:e3:43:a1:21:31:8d:95:d5:0a:ce:fa:d7:ac:1a:
e3:f1:64:74:14:c6:16:e2:f0:58:ec:05:6b:7c:8c:
4e:55:99:55:87:55:02:7b:69:74:86:e8:b8:13:09:
42:ac:a1:a1:b0:aa:bd:22:e3:91:c0:3f:f5:eb:98:
f3:35:33:d1:d7:8f:c2:0b:25:e4:3c:6d:38:4b:c0:
74:d3:d2:5e:ef:c3:2d:c9:e8:7a:01:2d:05:21:6e:
9d:78:f1:43:0f:5d:57:a1:36:e1:1a:94:8c:1a:2c:
26:c0:95:5f:06:39:c7:51:2a:57:06:6a:c4:77:42:
92:ce:6e:c3:8a:66:c1:cb:41:10:59:8a:2a:b6:42:
f5:1f:0c:9e:7d:ac:23:31:a7:58:14:0e:00:de:06:
9c:6e:52:72:4f:fc:6b:37:25:e4:03:c0:95:e0:08:
f6:7f:65:e0:83:9a:8f:cd:ef:fc:10:bc:c3:32:64:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A7:E9:CF:7B:B5:82:D4:87:D0:FE:DD:86:00:D5:40:BD:9F:97:DD
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32332d3233203d3e20313334373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.4.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:93:da:8a:59:f9:b1:20:aa:89:fd:88:13:12:f8:e0:7f:6f:
bd:1f:10:ca:80:9c:dc:a1:e4:62:e7:e6:59:aa:77:ea:89:37:
f8:c5:31:6f:6f:3b:83:3f:ff:c2:0b:47:89:40:f5:ec:24:33:
10:eb:0a:1b:42:d2:aa:5e:2c:31:55:a9:ac:c6:27:4b:d5:a5:
dc:c7:1e:f5:d7:75:92:90:eb:9f:ac:d1:1d:7a:d3:25:63:f8:
c7:0b:60:a2:dc:95:e9:ef:ee:0d:bd:76:30:92:6c:ec:4e:90:
ee:5d:f2:35:25:81:bc:73:f3:88:8c:d1:21:89:d1:15:26:57:
40:1f:44:d2:31:f9:d2:28:45:eb:f5:71:d3:57:fa:33:27:52:
3c:6b:0d:3b:82:f1:9e:82:27:aa:d6:f9:98:57:e4:a8:f9:76:
96:8b:93:6a:57:a9:7d:03:6c:ae:15:74:8a:33:5a:c7:96:c7:
74:a6:5f:36:e7:0a:7f:56:0a:bf:f8:87:2a:07:b2:02:fd:ba:
f7:d6:d1:95:3a:95:58:d5:17:ce:c8:d0:25:f8:54:15:82:67:
1f:aa:5f:a4:c6:fd:4d:b0:95:9c:aa:44:62:a3:44:64:32:e2:
ad:f7:ce:66:d6:0c:a9:97:df:ce:78:9e:73:46:ee:3e:e2:9c:
79:4f:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:10:58 2026 by rpki-client