
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234372e302f32342d3234203d3e2034383131.roa
File: 3132312e34362e3234372e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: /+nt7+UOHmSZFs074ayJyo2pAYIiFXSopSVIKfFhb/s=
Subject key identifier: 18:43:70:C7:75:C9:0D:67:F3:74:FF:0B:F1:35:2A:2C:A2:0B:9F:13
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 65EADB8888167093BCE1050ACEA7ED074392B1F0
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234372e302f32342d3234203d3e2034383131.roa
Signing time: Mon 27 Apr 2026 07:59:58 +0000
ROA not before: Mon 27 Apr 2026 07:54:58 +0000
ROA not after: Mon 26 Apr 2027 07:59:58 +0000
asID: 4811
IP address blocks: 121.46.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ea:db:88:88:16:70:93:bc:e1:05:0a:ce:a7:ed:07:43:92:b1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Apr 27 07:54:58 2026 GMT
Not After : Apr 26 07:59:58 2027 GMT
Subject: CN=184370C775C90D67F374FF0BF1352A2CA20B9F13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:48:a3:51:e1:2d:1f:98:93:60:2f:74:16:
dc:a8:16:f6:f5:2d:0f:13:8e:f3:02:41:81:e0:f9:
65:a1:5f:43:b5:e7:17:bb:21:77:ad:8f:a4:cc:cd:
97:62:1b:b0:fe:46:14:41:fc:6a:c1:c9:22:99:a5:
a9:78:2a:96:0b:35:3e:ad:5f:cd:69:4f:3e:fb:57:
33:71:80:50:50:84:fc:b1:f2:45:2c:35:50:86:d6:
36:26:71:4a:b5:e1:9d:69:a5:f9:8c:e0:34:58:59:
59:2e:97:37:76:06:84:11:0c:bd:90:1f:48:21:e3:
89:21:01:7d:41:6b:f1:9d:36:ca:4d:da:15:e3:49:
78:60:be:62:87:4c:e0:c6:10:4b:23:d5:e5:ea:a0:
89:6a:c3:ef:f2:70:dd:ce:dc:43:63:7c:fd:db:98:
a8:9e:81:47:aa:8a:17:a5:3b:01:8f:4b:6d:17:bb:
b8:1d:23:23:62:f3:79:e5:6a:22:d0:10:b1:1d:41:
02:35:b9:f0:c7:10:3f:a1:79:38:50:b6:5a:ec:7e:
95:82:8d:f6:6c:89:32:41:32:db:fa:fc:6f:cb:71:
09:8f:01:47:8e:dd:68:50:e1:b8:9d:4f:44:3b:a0:
09:13:6c:f9:c8:df:72:32:0b:12:1c:16:3c:c4:8f:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:43:70:C7:75:C9:0D:67:F3:74:FF:0B:F1:35:2A:2C:A2:0B:9F:13
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234372e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.247.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:1d:86:62:2a:ca:81:65:8f:87:c2:b1:33:c3:72:e2:85:8b:
f9:88:2d:06:0f:e3:91:2d:62:ce:4d:02:f8:87:05:42:bd:9a:
25:97:ae:13:d4:03:9f:be:a0:2b:66:b7:87:18:a5:12:cc:03:
aa:28:62:26:ca:93:ce:38:0d:e4:e7:80:2d:09:82:3c:fc:6c:
d3:ab:e6:a0:da:0d:7a:b3:bd:11:3d:72:a6:f9:15:b7:bf:b0:
42:d7:97:6d:40:2e:27:d8:3b:9f:16:9f:01:d3:ac:d3:d6:68:
e1:cb:62:26:8f:8b:33:b2:2e:3e:7d:96:e7:11:de:0e:d9:c4:
d8:74:17:04:a4:ef:07:25:88:a2:18:c9:58:84:c6:09:f5:0d:
86:0a:0d:18:5a:70:01:9a:d0:5c:72:8e:c6:84:6f:8b:87:a2:
21:35:ed:c7:86:72:75:57:0c:11:da:a8:f4:27:06:0e:17:21:
02:71:92:f9:a8:ee:3c:11:8d:67:a6:70:ce:02:d2:bb:20:02:
82:49:af:59:6c:c5:40:f2:3a:65:c9:8f:bc:23:04:68:f9:b8:
09:4e:4b:4f:eb:8e:d4:81:48:f4:0a:5c:d5:f6:22:c9:82:4f:
b5:a5:9f:82:65:66:8a:41:94:f7:3d:d3:5d:90:89:e5:10:14:
8d:fb:1e:d9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUZerbiIgWcJO84QUKzqftB0OSsfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1
MDVBREQ5NDAeFw0yNjA0MjcwNzU0NThaFw0yNzA0MjYwNzU5NThaMDMxMTAvBgNV
BAMTKDE4NDM3MEM3NzVDOTBENjdGMzc0RkYwQkYxMzUyQTJDQTIwQjlGMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg3EijUeEtH5iTYC90FtyoFvb1
LQ8TjvMCQYHg+WWhX0O15xe7IXetj6TMzZdiG7D+RhRB/GrBySKZpal4KpYLNT6t
X81pTz77VzNxgFBQhPyx8kUsNVCG1jYmcUq14Z1ppfmM4DRYWVkulzd2BoQRDL2Q
H0gh44khAX1Ba/GdNspN2hXjSXhgvmKHTODGEEsj1eXqoIlqw+/ycN3O3ENjfP3b
mKiegUeqihelOwGPS20Xu7gdIyNi83nlaiLQELEdQQI1ufDHED+heThQtlrsfpWC
jfZsiTJBMtv6/G/LcQmPAUeO3WhQ4bidT0Q7oAkTbPnI33IyCxIcFjzEj2dPAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUGENwx3XJDWfzdP8L8TUqLKILnxMwHwYDVR0j
BBgwFoAUaomLPk67TFd/drvX8NdR+FBa3ZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzQwNTExNTI2ODA3MTQyNy8wLzZBODk4QjNFNEVCQjRDNTc3Rjc2QkJEN0YwRDc1
MUY4NTA1QUREOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1MDVBREQ5NC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3NDA1MTE1MjY4MDcxNDI3LzAvMzEzMjMxMmUzNDM2
MmUzMjM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHku9zANBgkqhkiG9w0BAQsFAAOCAQEAvB2GYirKgWWPh8KxM8Ny4oWL+Ygt
Bg/jkS1izk0C+IcFQr2aJZeuE9QDn76gK2a3hxilEswDqihiJsqTzjgN5OeALQmC
PPxs06vmoNoNerO9ET1ypvkVt7+wQteXbUAuJ9g7nxafAdOs09Zo4ctiJo+LM7Iu
Pn2W5xHeDtnE2HQXBKTvByWIohjJWITGCfUNhgoNGFpwAZrQXHKOxoRvi4eiITXt
x4ZydVcMEdqo9CcGDhchAnGS+ajuPBGNZ6ZwzgLSuyACgkmvWWzFQPI6ZcmPvCME
aPm4CU5LT+uO1IFI9Apc1fYiyYJPtaWfgmVmikGU9z3TXZCJ5RAUjfse2Q==
-----END CERTIFICATE-----
Generated at Wed May 13 14:50:21 2026 by rpki-client