
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233322e302f32332d3233203d3e2034383131.roa
File: 3132312e34362e3233322e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier: ya78O7sAuJyhGsU6/IknufRy2nAzwBu9UN31pB+KKU4=
Subject key identifier: F3:EF:45:F9:93:33:AE:8C:37:6C:E9:9F:B1:CD:A1:B6:FD:6E:93:99
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 7165E95A7AD9A5D52093765F84EAA17E8AEB3977
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233322e302f32332d3233203d3e2034383131.roa
Signing time: Mon 27 Apr 2026 07:58:01 +0000
ROA not before: Mon 27 Apr 2026 07:53:01 +0000
ROA not after: Mon 26 Apr 2027 07:58:01 +0000
asID: 4811
IP address blocks: 121.46.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:65:e9:5a:7a:d9:a5:d5:20:93:76:5f:84:ea:a1:7e:8a:eb:39:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Apr 27 07:53:01 2026 GMT
Not After : Apr 26 07:58:01 2027 GMT
Subject: CN=F3EF45F99333AE8C376CE99FB1CDA1B6FD6E9399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:eb:89:76:c2:e1:69:2e:3b:64:17:6f:dd:
0c:c4:11:9c:45:5f:8d:0a:1a:a8:77:46:46:b7:a1:
95:7d:80:cd:45:1b:0b:64:d3:18:15:fd:cf:38:f0:
ce:d4:c0:48:9c:08:0c:57:4a:71:2f:a8:a0:f0:43:
05:a6:af:89:c7:c4:c6:b6:c8:e3:3f:81:bf:25:3d:
0e:2b:9d:7b:9b:49:bf:73:4d:2f:a7:84:8f:ef:ad:
71:c2:7e:02:d2:71:da:50:bb:f0:da:ba:f8:64:1b:
83:ab:10:e3:8e:2b:05:df:f7:21:2c:05:0e:b3:04:
cd:69:24:0f:83:da:e7:df:24:45:6a:93:06:19:74:
66:e3:93:1d:45:58:13:3a:11:cc:25:fc:d9:83:df:
e4:98:eb:a1:92:88:27:a0:85:2f:68:41:29:57:91:
9c:50:3c:d4:25:d4:d4:0f:32:0d:58:12:15:2a:b6:
89:ba:6d:73:6d:3e:e9:e5:ef:36:b1:3a:ef:54:a9:
9d:7b:28:8a:a6:2f:7b:03:f0:56:c0:68:5a:35:ea:
ed:47:fd:4e:25:db:74:7e:86:26:39:ab:84:1b:62:
64:da:ac:9a:7a:a9:f0:34:4d:f4:86:a4:cf:03:f0:
a0:7f:08:30:f3:ff:4c:bc:23:d4:39:cf:08:e6:b8:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EF:45:F9:93:33:AE:8C:37:6C:E9:9F:B1:CD:A1:B6:FD:6E:93:99
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233322e302f32332d3233203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.232.0/23
Signature Algorithm: sha256WithRSAEncryption
23:ef:da:a2:f0:23:b2:69:dd:95:65:c9:8d:cd:1a:86:bf:c8:
bc:03:e6:34:2a:c0:86:e0:a1:a6:42:a6:a6:51:25:59:ca:25:
b8:64:d3:05:32:c9:2b:e2:10:81:6c:3f:9a:a7:7c:86:da:48:
8a:f4:17:9b:a7:19:9c:31:e8:84:06:0a:c3:72:51:59:a3:9c:
23:e9:4a:18:37:56:cb:f8:84:a1:16:44:aa:c3:74:c4:45:f5:
95:d2:8d:26:40:bf:2e:59:9d:23:99:86:a1:cf:c4:d2:20:ee:
e8:51:21:71:51:a2:c1:75:7b:69:f6:c2:26:51:c8:8a:ad:3c:
86:98:12:ba:ed:4a:26:ae:c9:6b:c1:6e:28:ca:dc:7c:b9:fc:
75:8f:aa:4e:59:e6:bb:a3:bb:0c:24:64:38:a9:53:25:f3:21:
82:d7:95:f9:fd:ed:7d:ee:e2:fb:66:e6:be:54:51:9a:95:55:
0c:0c:ee:78:56:b9:21:fc:00:64:b1:76:8a:b4:22:71:88:c3:
d0:56:e6:97:cc:7c:18:3b:ed:b5:be:a1:7b:79:53:c2:35:43:
c9:78:60:08:dd:41:3f:68:e7:6c:85:69:f6:59:da:e6:79:ea:
ed:21:af:81:76:2a:db:2c:c3:37:5b:4f:9f:1e:31:ef:9b:04:
d5:36:c4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:39:36 2026 by rpki-client