
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232382e302f32332d3233203d3e2034383131.roa
File: 3132312e34362e3232382e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier: TBV0rA9ZmBSUANRyc1CQcvo6lPmJXx2ohYh8pyszCa4=
Subject key identifier: 0A:BA:02:CB:08:22:05:BE:71:6C:9D:CC:74:D2:40:FC:C1:0E:E8:4C
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 307427A6EF7C11CAD29A8ADFF092A9CF9F4497CF
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232382e302f32332d3233203d3e2034383131.roa
Signing time: Mon 27 Apr 2026 07:58:00 +0000
ROA not before: Mon 27 Apr 2026 07:53:00 +0000
ROA not after: Mon 26 Apr 2027 07:58:00 +0000
asID: 4811
IP address blocks: 121.46.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:74:27:a6:ef:7c:11:ca:d2:9a:8a:df:f0:92:a9:cf:9f:44:97:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Apr 27 07:53:00 2026 GMT
Not After : Apr 26 07:58:00 2027 GMT
Subject: CN=0ABA02CB082205BE716C9DCC74D240FCC10EE84C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:5b:85:e7:c0:d6:6b:8c:72:63:13:ba:f5:
2f:4f:f7:57:49:bc:f6:fa:6e:df:40:60:58:3a:47:
4e:fe:8b:6c:d6:bf:5a:a4:a3:d7:29:1f:2f:64:a3:
58:c0:08:35:d3:7b:13:69:41:0d:f8:2c:fb:f5:f6:
7c:95:9b:70:15:6c:f3:dd:0b:dc:e1:2e:1e:e7:79:
a1:f9:90:9d:a1:30:3e:2e:2f:48:6c:8e:7e:5d:30:
a7:cd:15:6e:ad:98:c3:86:84:a9:18:f9:18:f3:c5:
1d:fc:94:81:72:15:52:21:71:e5:d7:45:d4:32:ce:
00:75:a5:f6:aa:57:18:9c:18:fd:89:83:76:1f:88:
09:05:f5:5c:01:d1:50:d8:c1:99:49:fb:4f:54:c2:
9c:b2:14:09:2a:a4:48:94:d6:88:18:3a:a4:6e:d4:
fd:14:55:1e:6f:01:a2:1a:29:79:17:d4:da:a3:b3:
8a:4b:29:8a:6c:96:81:5e:b9:56:8d:0a:b2:28:83:
f2:96:8c:7e:01:1e:08:df:1a:f1:40:67:37:5e:7a:
54:39:fe:11:c3:6d:5e:af:9e:85:2f:c2:33:2d:2e:
53:df:c5:a2:59:04:cb:d9:b2:2b:f6:4a:81:4d:66:
9c:27:0e:24:73:13:bf:bf:1c:0f:bd:e1:d2:70:3b:
6e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BA:02:CB:08:22:05:BE:71:6C:9D:CC:74:D2:40:FC:C1:0E:E8:4C
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232382e302f32332d3233203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.228.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:fb:a4:ea:b9:f4:36:62:83:29:b6:83:e5:c2:f9:0e:27:fd:
b4:ee:44:d6:0f:54:f9:4a:0e:98:73:d4:3e:fa:d0:c8:15:6f:
91:f3:02:3c:cb:41:a5:ae:09:01:16:47:9d:78:17:a0:26:8b:
f0:74:7d:e6:d8:66:62:cb:60:8f:fd:60:47:9e:8b:13:b7:56:
2f:92:ec:cb:8e:a9:ad:ee:23:d6:5f:a7:30:03:1d:f0:b2:6e:
04:fc:5f:d9:03:56:34:8b:05:fd:c0:f4:e5:55:82:01:69:dd:
1d:7d:f9:ae:f8:82:ad:c8:45:c9:a1:a8:61:19:38:15:a0:ac:
b1:da:6b:a6:18:a1:a8:78:2e:cc:05:d5:84:aa:cd:d2:51:d0:
cb:0a:81:07:ef:28:68:5a:ff:b3:4a:b0:88:47:6d:40:5a:80:
9d:4a:c7:9e:f0:79:0b:ed:20:25:c7:cd:f3:1e:0d:48:da:ae:
a4:2c:be:f0:4c:9b:33:fd:5d:c2:13:45:1c:71:91:e1:b1:30:
52:11:9e:98:a9:6c:7a:df:61:6a:2e:a6:d7:d6:d8:3c:fd:c0:
60:2c:f7:5e:84:0a:84:c7:ce:d3:56:d3:ba:a0:51:80:49:20:
cd:b5:00:6a:b0:2d:48:2a:12:f0:9f:a4:a3:f3:c7:0d:9f:a6:
78:62:f7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:02 2026 by rpki-client