
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233302e302f32332d3233203d3e2034383131.roa
File: 3132312e34362e3233302e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier: EiA+BqlbegLoPMI7F5c+3foAfHhrJkLe37gcyYaiUmY=
Subject key identifier: 94:B9:CC:F6:6E:36:58:38:48:3E:E6:AC:DE:CB:3D:E0:30:27:CD:FB
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 07ADBD569B54825E20BC1A8C4DBEA5EC20A40FFD
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233302e302f32332d3233203d3e2034383131.roa
Signing time: Mon 27 Apr 2026 07:58:01 +0000
ROA not before: Mon 27 Apr 2026 07:53:01 +0000
ROA not after: Mon 26 Apr 2027 07:58:01 +0000
asID: 4811
IP address blocks: 121.46.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ad:bd:56:9b:54:82:5e:20:bc:1a:8c:4d:be:a5:ec:20:a4:0f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Apr 27 07:53:01 2026 GMT
Not After : Apr 26 07:58:01 2027 GMT
Subject: CN=94B9CCF66E365838483EE6ACDECB3DE03027CDFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6c:5d:50:ab:5c:4e:11:9a:d9:66:34:da:84:
75:d9:96:d4:37:2a:48:1f:db:48:39:83:6a:e4:9b:
2e:e1:bc:14:d1:84:dd:2a:0b:b0:45:01:87:5a:5b:
49:c7:8f:30:e3:a1:b7:97:08:91:de:67:5f:e8:95:
76:c8:58:52:88:9f:a7:08:3c:99:b0:08:db:e4:02:
8f:09:8c:1f:25:1d:ae:59:1f:bd:73:9f:e6:65:a2:
cf:9f:1b:67:25:e8:be:51:df:6f:28:20:e0:78:fd:
cf:fb:0b:e7:3c:97:ae:a2:26:fc:97:3e:b8:2d:ae:
a7:5f:3c:36:33:d9:a7:88:c8:1e:dc:62:d7:2a:f7:
a7:d0:95:22:71:03:f5:50:7e:2c:aa:c9:a8:b8:cd:
75:0b:0f:fc:7b:ad:81:2a:28:96:bd:43:98:47:23:
67:fe:b5:2f:3e:7f:53:72:d6:7b:0c:88:7d:6d:ab:
2d:31:d4:70:05:3e:d1:e2:b9:7d:70:71:e4:e0:2c:
a5:2f:87:97:54:d2:18:c6:5e:25:dc:ce:69:9e:5c:
47:07:6a:04:7d:8d:ee:a9:b9:e1:0b:97:91:93:3f:
fe:30:90:ba:b8:38:04:7d:ec:2e:ef:46:25:b4:32:
32:e1:14:d6:81:6a:75:c1:b5:30:6f:f5:fb:87:52:
ac:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B9:CC:F6:6E:36:58:38:48:3E:E6:AC:DE:CB:3D:E0:30:27:CD:FB
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233302e302f32332d3233203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.230.0/23
Signature Algorithm: sha256WithRSAEncryption
68:d3:0f:3c:fd:bf:66:1e:37:bb:4f:79:49:6b:9e:6b:28:0f:
dd:ec:b8:99:4e:f2:bc:c4:a3:12:c1:68:9b:d1:de:65:6a:88:
c1:02:c0:e5:01:81:68:4f:7e:ab:7b:bc:bc:b0:66:9d:d6:37:
cf:68:3c:63:48:c0:2e:2a:22:f7:da:e9:71:f4:f6:e9:03:d8:
96:f0:65:58:86:97:c8:58:1b:b2:65:3f:2a:f6:1d:5f:b0:07:
57:bd:7a:1f:d4:7f:60:e0:18:e8:1e:c2:4a:e4:4e:83:7b:08:
83:e8:a7:6a:7b:4d:07:07:92:9e:fb:29:a9:c4:f2:6b:77:d6:
18:4c:52:47:53:08:19:e4:ea:bb:ff:20:e0:e0:c5:e8:b8:3d:
8b:b1:44:b5:24:1f:69:e1:65:40:ef:22:bf:5d:21:ed:37:90:
04:40:f9:fe:42:f3:66:aa:09:9d:00:4f:f4:25:7b:aa:00:e5:
58:34:8f:53:36:66:01:b6:ec:21:6b:b5:b8:b1:02:c3:26:7e:
5c:65:f8:1f:54:1a:96:4f:5c:42:f2:02:07:da:b3:97:94:8f:
82:d1:fe:96:28:e3:89:7f:ca:fe:8c:ed:3c:8a:05:38:fa:e7:
cb:db:59:04:9a:2b:4c:24:83:f2:19:c3:b5:a0:f3:ec:df:92:
20:d0:9e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:21 2026 by rpki-client