
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233342e302f32342d3234203d3e2034383131.roa
File: 3132312e34362e3233342e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: rJ8PevUKkS81OG8WLF73jjwLU+IGqr6tI9ot5kVJi+Y=
Subject key identifier: 63:B5:D7:E6:C3:E3:73:11:5F:AE:18:FF:B8:D4:F1:4D:D9:2D:D2:42
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 75430177835B98AA22C719B0A81D01B1D18E1E93
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233342e302f32342d3234203d3e2034383131.roa
Signing time: Mon 27 Apr 2026 07:58:43 +0000
ROA not before: Mon 27 Apr 2026 07:53:43 +0000
ROA not after: Mon 26 Apr 2027 07:58:43 +0000
asID: 4811
IP address blocks: 121.46.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:43:01:77:83:5b:98:aa:22:c7:19:b0:a8:1d:01:b1:d1:8e:1e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Apr 27 07:53:43 2026 GMT
Not After : Apr 26 07:58:43 2027 GMT
Subject: CN=63B5D7E6C3E373115FAE18FFB8D4F14DD92DD242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:60:46:23:8a:65:fc:11:bb:aa:2c:d3:08:
9e:53:d2:35:51:e2:77:44:ba:46:ab:ab:90:37:6a:
66:04:11:b0:36:30:83:35:9f:77:2c:15:ea:5f:58:
9d:f2:0a:be:49:1e:7a:ab:9e:2a:0c:f6:d7:55:d3:
a1:f9:64:10:05:98:fb:bc:0b:99:89:91:71:a0:c6:
65:62:06:ae:b7:74:34:c3:b4:42:6b:35:11:c9:fb:
f1:16:b4:02:5e:e4:f4:b0:f8:bd:a0:d5:d2:eb:09:
ff:1d:10:10:e3:31:f1:8e:84:3f:05:92:9e:96:99:
72:a1:a5:69:d1:9b:40:12:92:b5:ba:5f:59:6a:ca:
3c:39:23:78:8a:e8:3a:f7:e7:3d:7f:52:29:fb:48:
21:94:bd:0f:57:ca:6a:c3:6b:38:16:5e:b7:da:f0:
1d:7e:14:63:52:c5:4d:8c:e9:22:76:cd:99:a4:b4:
1c:51:49:a9:76:12:3e:0b:e5:ce:70:b8:7a:fe:b2:
cf:e4:de:1f:7a:5f:f4:1e:14:33:6d:f9:b6:db:c6:
6f:c5:40:f9:d5:1a:1b:3f:8c:24:27:7e:3d:44:5c:
d6:f6:15:32:9d:60:20:5b:fa:f6:06:2d:a6:ec:fa:
d8:f3:e2:47:75:a4:e2:7e:88:f2:5f:9b:55:ca:60:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B5:D7:E6:C3:E3:73:11:5F:AE:18:FF:B8:D4:F1:4D:D9:2D:D2:42
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233342e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.234.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0f:15:0b:81:94:31:2d:32:73:76:a0:79:aa:a0:c8:09:7c:
bb:a2:79:10:08:25:b0:c3:c7:0e:13:70:a4:a3:98:68:1f:2f:
89:1d:e9:b6:96:ed:5b:b5:eb:39:00:39:13:d5:d1:c1:9f:98:
1b:2b:74:7f:dc:4e:f7:5f:c0:e3:e4:8e:a7:15:a9:dd:ea:55:
4a:00:ba:dc:97:d1:69:39:32:46:ef:6f:4d:8d:98:8e:6b:b5:
f0:9e:36:3e:3a:84:24:c2:2c:f0:14:77:06:0e:b7:ed:b0:17:
54:bf:8e:2e:1a:59:75:85:d2:2c:8d:7a:9c:08:99:ee:fa:a7:
33:9d:74:d6:54:86:f0:4b:18:0b:a2:88:59:15:6b:ac:d4:2b:
d2:62:c2:88:e6:3b:7c:c8:50:3f:4b:bc:30:2a:50:69:4b:70:
a8:8e:3c:48:c5:87:a8:a8:13:59:5a:9d:95:bc:91:ec:7f:4c:
de:be:91:b6:3a:8d:25:1f:8f:0d:b8:fb:0c:28:26:90:1e:8d:
e6:6a:15:d3:17:2d:fc:f5:26:39:3b:5c:cd:23:70:b6:6f:9f:
b1:1a:6b:50:d8:d4:df:b1:13:76:dc:c9:76:4c:3c:93:dc:93:
28:36:fe:2e:a3:46:74:96:cf:46:6e:70:81:71:aa:c0:84:cf:
64:72:eb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:33 2026 by rpki-client