
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e382e302f32332d3233203d3e20313334373634.roa
File: 3132312e34362e382e302f32332d3233203d3e20313334373634.roa (raw, json)
Hash identifier: F1FseXgFOMJt1hdsm9sfI4VRcnl+wsJ3c/RSBOFW6/M=
Subject key identifier: 04:DD:03:E1:6B:D7:5F:5D:2A:E8:DC:38:F2:A1:65:37:FA:3C:43:D1
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 5DAF6C2F348396A7CFF57349F613D6ECC9203112
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e382e302f32332d3233203d3e20313334373634.roa
Signing time: Thu 16 Apr 2026 02:31:20 +0000
ROA not before: Thu 16 Apr 2026 02:26:20 +0000
ROA not after: Thu 15 Apr 2027 02:31:20 +0000
asID: 134764
IP address blocks: 121.46.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:af:6c:2f:34:83:96:a7:cf:f5:73:49:f6:13:d6:ec:c9:20:31:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 16 02:26:20 2026 GMT
Not After : Apr 15 02:31:20 2027 GMT
Subject: CN=04DD03E16BD75F5D2AE8DC38F2A16537FA3C43D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:8f:b8:1c:00:d4:50:85:9b:98:e7:b6:80:
51:f4:a9:64:9e:c8:9e:f9:ac:a3:07:f3:93:58:4e:
e1:36:3b:d1:21:71:da:55:f3:a5:6c:b1:01:c9:fc:
25:29:ef:8b:d0:29:ca:fa:8e:a1:4e:48:18:1f:30:
73:b8:8a:a0:7a:72:fe:85:9d:78:13:06:fb:95:b9:
2b:6c:02:f1:16:59:59:e1:3d:7b:c6:ef:81:44:42:
4d:e5:f2:4e:ad:4e:07:bc:5d:57:7e:00:8f:5b:dd:
24:aa:98:2d:8d:6e:95:f6:90:ad:e3:13:e6:ff:69:
fa:62:45:72:d0:b2:62:af:08:aa:9e:f8:bc:c8:8d:
e4:2f:b1:d5:d7:25:6e:0e:11:42:4c:f0:b1:c5:1b:
ae:9e:6b:c7:ed:72:88:92:93:40:93:31:86:13:2b:
b6:93:16:79:cb:e3:da:a5:9b:fa:82:4e:1a:2c:33:
4f:6f:4f:6d:75:23:ee:62:0f:85:5b:9c:a8:da:fe:
de:e3:d4:fa:b3:05:af:a4:e5:91:31:a6:23:33:3e:
63:f1:37:18:6f:16:ad:cf:53:44:37:0e:cc:93:67:
3b:78:10:bd:45:f0:18:6f:30:a4:90:73:95:1d:27:
70:68:75:23:a5:32:46:95:cf:34:99:42:42:57:81:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DD:03:E1:6B:D7:5F:5D:2A:E8:DC:38:F2:A1:65:37:FA:3C:43:D1
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e382e302f32332d3233203d3e20313334373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.8.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:9b:fc:6a:b9:fe:50:0a:e9:37:ff:02:6d:98:36:27:10:4a:
f0:f5:37:67:a0:0d:92:b0:7b:1b:cd:55:26:0b:f3:91:b8:ce:
2e:22:4b:50:76:00:7b:2b:50:0c:61:11:e7:81:06:51:a7:6b:
35:c8:f5:96:d9:a7:e2:f1:c6:4a:4d:25:e9:be:7c:9a:aa:86:
29:98:dd:cb:42:9f:90:f4:40:b9:59:67:6c:41:b2:cf:c8:ed:
3b:18:0c:f9:61:cd:c1:d4:41:80:27:da:e4:86:de:2f:1e:2b:
fe:20:ec:3b:20:6c:f1:d0:e3:2b:3e:98:25:f9:0f:dd:18:12:
54:10:75:c8:9e:fe:aa:57:56:55:bb:76:01:6d:ad:ae:92:1f:
4d:b7:25:61:c2:b6:9a:d2:f4:69:33:be:a5:6b:d2:aa:97:6f:
cb:d4:d1:ff:b7:bf:f2:1d:56:24:3a:9d:78:ef:86:31:b8:cf:
4c:68:2a:0a:c8:0f:ea:34:51:f4:3d:6c:b3:d4:6f:f3:d7:63:
b5:78:f4:f3:27:4d:0e:dd:e0:3b:34:7d:35:68:0b:8e:c3:48:
1d:09:57:88:97:37:de:8a:19:89:c7:82:cb:bd:1f:e0:25:f8:
17:27:64:a1:85:2b:24:cb:76:b0:d2:58:0f:66:72:ab:48:cb:
3e:50:b7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:46 2026 by rpki-client