
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233362e302f32342d3234203d3e2034383131.roa
File: 3132312e34362e3233362e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: aOL2twD5oXm+ZXFKGnkUGShNfSgPt+QKt3iWK0pV7Ro=
Subject key identifier: 06:A3:90:BF:09:D2:A2:C6:1A:07:CA:09:E7:3C:5E:29:5B:24:3E:60
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 6A8152F3158E917F6251E4363ABB2229570D813F
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233362e302f32342d3234203d3e2034383131.roa
Signing time: Mon 27 Apr 2026 07:58:43 +0000
ROA not before: Mon 27 Apr 2026 07:53:43 +0000
ROA not after: Mon 26 Apr 2027 07:58:43 +0000
asID: 4811
IP address blocks: 121.46.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:81:52:f3:15:8e:91:7f:62:51:e4:36:3a:bb:22:29:57:0d:81:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Apr 27 07:53:43 2026 GMT
Not After : Apr 26 07:58:43 2027 GMT
Subject: CN=06A390BF09D2A2C61A07CA09E73C5E295B243E60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:49:89:7d:54:9d:ee:0f:92:3c:3d:1a:d0:
c6:1a:c3:44:4c:fc:96:7f:db:30:5d:dd:96:4c:f1:
93:54:81:d7:b0:5b:ca:10:2d:86:c9:32:1a:5b:97:
68:12:91:a7:e8:bc:c3:13:6d:92:d3:55:d8:6b:f2:
90:f3:b0:60:b8:d8:ae:dd:9e:f8:4e:1e:16:cc:50:
83:d3:f5:65:4a:9c:c1:3c:b6:66:bf:34:d9:9f:59:
27:51:bf:1a:c9:96:e6:8d:73:36:f7:c0:a9:27:6a:
cf:eb:a9:6e:37:38:b9:21:67:f4:95:6a:88:cb:90:
a5:9a:d0:c3:72:f3:a6:82:c7:1e:a6:75:76:f7:8b:
87:67:54:22:db:e7:a2:d8:81:2a:00:c5:9d:e2:f8:
89:7a:7e:bc:a8:0d:95:a3:ff:34:0e:89:fb:c6:3d:
bb:6b:42:f3:57:14:39:6c:d3:07:cb:4f:2c:f8:29:
3b:a9:39:89:86:4a:82:6a:3b:b8:b9:65:01:47:36:
f5:a8:b3:c1:0d:0e:0e:4a:6b:b4:c5:77:da:b0:ab:
9c:97:45:49:09:5b:31:9c:fc:59:e0:e8:45:b1:95:
da:93:36:16:59:44:c0:9b:bf:17:a8:3f:61:00:14:
3a:33:89:9e:6b:2f:bd:e5:e0:fa:e7:e9:53:fd:ce:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A3:90:BF:09:D2:A2:C6:1A:07:CA:09:E7:3C:5E:29:5B:24:3E:60
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233362e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.236.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:cb:65:5e:75:72:45:ff:a6:8b:c8:d4:2e:37:36:56:49:a9:
88:28:47:da:8f:e0:bb:83:3d:0f:ae:20:ff:90:29:83:22:86:
f7:bb:1c:61:f1:c7:4e:65:66:a5:39:3b:92:cf:44:c2:01:28:
80:d2:27:54:af:09:83:3c:b6:94:41:8e:b7:a4:06:86:98:a8:
e4:2f:ad:ab:59:45:74:f3:fd:6f:b3:5e:dc:90:09:64:62:78:
72:98:8c:9e:9d:04:af:46:8f:3a:d2:5e:af:d1:24:e8:6f:08:
1d:1c:3d:1d:9d:fe:88:c7:01:fa:20:37:b2:71:84:15:18:ad:
b2:92:e0:b6:1b:5b:0b:09:9e:0a:b5:67:5a:07:da:8f:39:01:
52:74:f8:f3:97:f8:c3:5b:de:9d:76:ab:c7:bf:33:4e:60:92:
57:bb:da:8c:2a:37:73:8f:dd:85:aa:0c:c8:75:6c:ea:85:fd:
95:0c:a8:53:16:bb:0f:48:fd:3e:5f:d4:ae:32:97:b3:35:80:
bb:b8:2e:9f:d8:0b:c7:e9:c4:3b:17:96:63:b1:b5:bf:97:50:
35:24:61:17:76:f6:91:e3:a7:ed:77:18:62:9c:d5:65:b6:93:
dc:3c:f4:32:56:be:57:9e:bd:bf:b1:fb:20:16:2f:29:e5:9d:
49:54:19:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:17:15 2026 by rpki-client