
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234342e302f32342d3234203d3e2034383131.roa
File: 3132312e34362e3234342e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: WKUTb3+nU8Q8MVc6zgKN74/b/hNERmvdsnThxBvo2+0=
Subject key identifier: 3F:A6:1B:D6:58:2A:91:D2:DF:53:C6:A7:0D:F4:40:B4:95:26:16:B9
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 388B0FAEC3D37EA965C7BA17D8DE0CA60B71819F
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234342e302f32342d3234203d3e2034383131.roa
Signing time: Mon 27 Apr 2026 07:59:58 +0000
ROA not before: Mon 27 Apr 2026 07:54:58 +0000
ROA not after: Mon 26 Apr 2027 07:59:58 +0000
asID: 4811
IP address blocks: 121.46.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8b:0f:ae:c3:d3:7e:a9:65:c7:ba:17:d8:de:0c:a6:0b:71:81:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Apr 27 07:54:58 2026 GMT
Not After : Apr 26 07:59:58 2027 GMT
Subject: CN=3FA61BD6582A91D2DF53C6A70DF440B4952616B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:9a:d7:e2:d3:8f:4a:23:89:e0:c7:0a:88:
45:95:26:26:59:91:39:96:33:54:9e:a5:24:24:5a:
da:6f:a5:4d:5d:7b:7a:61:66:1a:08:f5:56:9d:e2:
15:d5:90:73:e6:0b:66:50:04:19:6c:9b:c1:9e:63:
1c:b8:55:0c:ef:32:90:d2:9a:e0:43:55:1b:54:b3:
aa:fb:9d:3a:a1:5a:0e:46:b4:8a:48:53:d8:2b:4f:
84:4d:14:a7:7e:0c:c6:20:7a:4d:d7:9e:e6:fb:9c:
67:62:44:f7:ac:66:c7:85:6b:07:40:e7:14:3d:ef:
16:89:a3:56:e0:a7:58:49:f6:5d:3c:3f:0d:86:21:
c4:29:ca:e0:4f:13:33:74:5c:c7:89:97:2d:33:85:
50:68:cb:f0:e2:b7:ee:86:39:c3:fe:42:bd:f0:70:
76:1d:fa:3d:32:f1:19:84:3b:f1:9d:0e:30:02:7c:
c5:f9:ff:f8:f2:94:61:33:c8:f7:7b:68:53:f1:c2:
8b:a9:2c:ee:2f:ec:b4:50:01:87:2d:67:9e:cf:a9:
57:79:f9:d5:89:6a:60:8a:23:f4:c0:2d:89:00:b1:
2a:cc:cf:45:82:29:4f:8f:9e:58:ae:98:2f:8f:d5:
43:b1:35:e6:b9:44:1c:dc:08:8e:65:1e:7c:21:41:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:1B:D6:58:2A:91:D2:DF:53:C6:A7:0D:F4:40:B4:95:26:16:B9
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234342e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.244.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b7:13:d8:93:58:45:80:52:2e:b4:95:14:5b:fb:bc:d4:1c:
0d:c2:9f:2a:92:99:03:5a:e1:78:53:cd:d6:86:42:28:cf:15:
6f:b6:df:65:d0:e1:aa:1b:1f:fe:3c:8a:4a:65:8b:f5:bd:4e:
29:c0:b0:02:8e:d7:6a:cc:b7:40:b5:3f:e6:9e:fd:0b:b9:d7:
42:10:b9:09:e1:ce:13:d7:cf:2a:36:8c:0d:ad:c6:93:77:c0:
28:18:c1:89:77:9f:d7:fe:cb:c1:a8:ee:73:6c:c0:cb:af:da:
2a:cc:13:82:35:28:53:fb:4d:aa:8c:f0:a9:2f:1b:df:b7:79:
a4:0e:32:cd:07:ec:01:54:19:b2:0b:b0:8c:bf:39:80:74:8a:
d6:f7:0e:f7:65:93:c3:e2:d9:6c:c5:87:56:7a:b4:4f:ea:31:
82:18:2f:1b:df:ac:66:d9:52:63:92:25:72:0d:9c:ee:da:5b:
74:f6:f6:75:c4:b1:4e:65:3d:07:a4:d8:be:dd:67:1b:0b:ef:
7c:92:04:99:4c:91:80:6a:db:ac:ae:08:95:7c:1c:fe:2b:8b:
50:d7:24:22:20:8d:63:16:ba:5a:f0:d0:09:f9:4c:31:62:e5:
6c:7c:dc:52:59:7c:2b:b5:40:78:42:6b:09:dd:65:de:15:c9:
2e:e3:75:98
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUOIsPrsPTfqllx7oX2N4MpgtxgZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1
MDVBREQ5NDAeFw0yNjA0MjcwNzU0NThaFw0yNzA0MjYwNzU5NThaMDMxMTAvBgNV
BAMTKDNGQTYxQkQ2NTgyQTkxRDJERjUzQzZBNzBERjQ0MEI0OTUyNjE2QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpP5rX4tOPSiOJ4McKiEWVJiZZ
kTmWM1SepSQkWtpvpU1de3phZhoI9Vad4hXVkHPmC2ZQBBlsm8GeYxy4VQzvMpDS
muBDVRtUs6r7nTqhWg5GtIpIU9grT4RNFKd+DMYgek3Xnub7nGdiRPesZseFawdA
5xQ97xaJo1bgp1hJ9l08Pw2GIcQpyuBPEzN0XMeJly0zhVBoy/Dit+6GOcP+Qr3w
cHYd+j0y8RmEO/GdDjACfMX5//jylGEzyPd7aFPxwoupLO4v7LRQAYctZ57PqVd5
+dWJamCKI/TALYkAsSrMz0WCKU+PnliumC+P1UOxNea5RBzcCI5lHnwhQWYVAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUP6Yb1lgqkdLfU8anDfRAtJUmFrkwHwYDVR0j
BBgwFoAUaomLPk67TFd/drvX8NdR+FBa3ZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzQwNTExNTI2ODA3MTQyNy8wLzZBODk4QjNFNEVCQjRDNTc3Rjc2QkJEN0YwRDc1
MUY4NTA1QUREOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1MDVBREQ5NC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3NDA1MTE1MjY4MDcxNDI3LzAvMzEzMjMxMmUzNDM2
MmUzMjM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHku9DANBgkqhkiG9w0BAQsFAAOCAQEAMbcT2JNYRYBSLrSVFFv7vNQcDcKf
KpKZA1rheFPN1oZCKM8Vb7bfZdDhqhsf/jyKSmWL9b1OKcCwAo7Xasy3QLU/5p79
C7nXQhC5CeHOE9fPKjaMDa3Gk3fAKBjBiXef1/7Lwajuc2zAy6/aKswTgjUoU/tN
qozwqS8b37d5pA4yzQfsAVQZsguwjL85gHSK1vcO92WTw+LZbMWHVnq0T+oxghgv
G9+sZtlSY5Ilcg2c7tpbdPb2dcSxTmU9B6TYvt1nGwvvfJIEmUyRgGrbrK4IlXwc
/iuLUNckIiCNYxa6WvDQCflMMWLlbHzcUll8K7VAeEJrCd1l3hXJLuN1mA==
-----END CERTIFICATE-----
Generated at Wed May 13 13:58:19 2026 by rpki-client