
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234352e302f32342d3234203d3e2034383131.roa
File: 3132312e34362e3234352e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: K2+E96TOB123eDmds7ch4nsFIxsPGZkKGQ6NOjteGKo=
Subject key identifier: B3:DE:89:5C:03:D3:7C:CB:E6:71:B3:4F:04:0E:14:85:76:8D:7D:B4
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 79D74E4F4BB47F5F0AAC23B9105EFBB2B29DA82C
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234352e302f32342d3234203d3e2034383131.roa
Signing time: Mon 27 Apr 2026 07:59:58 +0000
ROA not before: Mon 27 Apr 2026 07:54:58 +0000
ROA not after: Mon 26 Apr 2027 07:59:58 +0000
asID: 4811
IP address blocks: 121.46.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d7:4e:4f:4b:b4:7f:5f:0a:ac:23:b9:10:5e:fb:b2:b2:9d:a8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Apr 27 07:54:58 2026 GMT
Not After : Apr 26 07:59:58 2027 GMT
Subject: CN=B3DE895C03D37CCBE671B34F040E1485768D7DB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f4:f4:d3:88:f1:2f:dd:32:97:e5:b9:7a:b8:
17:fa:d1:12:df:58:2d:94:a3:dd:83:24:2c:e5:1c:
59:d0:3b:79:20:22:1c:94:41:2f:14:03:7c:61:ca:
47:10:a6:c1:b5:6f:de:09:7f:60:42:a7:82:8a:38:
41:83:6f:1d:34:2e:62:b1:b7:9f:3e:3b:74:5c:a4:
2b:60:88:4f:6e:93:5c:b9:90:01:7f:b6:b5:0c:54:
b0:48:04:99:ac:f1:42:2d:d0:7b:63:e3:b6:ea:d4:
e2:f8:ef:5c:5f:2c:31:6e:25:9f:fb:c2:15:03:a6:
a7:ee:f3:10:d8:40:b7:64:1e:18:3c:fe:5f:a2:52:
b7:41:8c:0b:93:14:3c:d8:23:ad:ed:04:1c:e1:51:
ef:5f:fa:54:10:34:74:52:6c:8e:cf:a6:ef:a3:8b:
4b:6f:f3:1b:6b:7e:d7:80:16:66:9d:35:2f:73:69:
53:bc:eb:13:29:a0:aa:60:a5:98:87:08:f4:16:71:
65:25:a9:be:97:3a:0b:4e:cf:23:b0:69:99:6d:16:
e1:e8:8e:fe:89:dc:bf:95:ad:fe:8f:05:8e:e3:1a:
06:ab:53:13:de:65:44:c8:c2:73:75:be:a4:74:dc:
74:79:90:35:5f:e7:36:e6:37:c1:40:61:54:e6:97:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DE:89:5C:03:D3:7C:CB:E6:71:B3:4F:04:0E:14:85:76:8D:7D:B4
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234352e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.245.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1f:9e:51:7e:4f:4e:02:de:5a:25:5b:86:9e:46:4a:9a:18:
8d:23:9f:83:c1:6b:da:32:8e:c8:98:64:fb:85:5e:0e:e3:6c:
31:4e:38:4f:b9:9d:e4:14:84:26:42:a4:86:27:70:df:b5:0d:
f6:4e:e9:5b:36:e0:88:86:2d:86:9d:7c:57:3f:be:d2:93:9b:
e3:dc:72:65:ae:e4:74:36:8d:2e:5e:80:70:69:81:3c:ec:bd:
7a:2c:ce:8b:b4:e7:30:f6:92:bd:24:70:24:aa:4e:64:70:23:
d6:8d:9b:87:0f:cb:54:97:cd:6a:30:05:dd:34:a7:f2:35:c8:
77:50:d1:d6:7d:70:2d:33:b1:56:0a:eb:e4:76:48:00:82:92:
ae:be:8e:ff:c1:e6:7a:ba:64:a8:0f:04:ba:df:79:f0:6f:55:
6c:89:d3:c7:c2:28:26:8c:73:b0:09:d8:d7:fd:e9:6a:ca:19:
21:72:e5:db:ee:10:cb:7d:6c:c1:02:cb:3e:24:17:9d:10:7f:
1d:fb:1c:78:f5:e2:4e:26:f0:d0:d6:7a:4e:80:03:8c:80:ad:
56:f4:bd:6c:8d:b7:ec:73:17:4e:13:33:26:7b:7b:0b:44:f6:
e8:c1:75:59:ef:02:e8:d7:88:b7:a7:1f:e2:ac:7a:e6:87:bf:
0e:7f:d6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:24:18 2026 by rpki-client