
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234382e302f32342d3234203d3e2034383131.roa
File: 3132312e34362e3234382e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: BY+32YYbz6Jpz8IY+jYppjE5SMjBqxs8ovr+0lLa7LY=
Subject key identifier: EC:7F:BC:27:E4:2B:5A:4D:10:2B:F1:F1:37:63:B2:DC:E7:6E:00:A7
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 4EE3B2CB0A7C442CD6A622AF747F35B55CF67AE6
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234382e302f32342d3234203d3e2034383131.roa
Signing time: Mon 27 Apr 2026 07:59:58 +0000
ROA not before: Mon 27 Apr 2026 07:54:58 +0000
ROA not after: Mon 26 Apr 2027 07:59:58 +0000
asID: 4811
IP address blocks: 121.46.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e3:b2:cb:0a:7c:44:2c:d6:a6:22:af:74:7f:35:b5:5c:f6:7a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Apr 27 07:54:58 2026 GMT
Not After : Apr 26 07:59:58 2027 GMT
Subject: CN=EC7FBC27E42B5A4D102BF1F13763B2DCE76E00A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:ef:61:45:b6:a8:88:21:4a:85:ce:f1:b0:
00:91:5c:48:3a:a6:ad:9b:85:4c:d1:59:7d:f1:e4:
75:a2:0f:e9:a2:60:44:64:2c:9f:a7:f9:25:e9:9c:
c5:d1:b2:b5:7a:8d:8d:3c:62:71:c2:fc:2e:4e:5b:
96:f2:ad:a7:13:0a:69:c6:cd:46:9d:2b:17:73:6d:
31:98:0c:0a:09:4f:9b:40:f7:11:c5:1c:b2:30:15:
bb:35:59:16:97:7e:34:98:38:17:7e:d8:df:cc:ea:
30:2a:68:cb:af:19:75:3a:e6:6c:81:0b:b5:c3:fc:
ec:6b:f5:0f:99:69:4f:54:bd:0f:e0:3a:5e:a7:e7:
5b:3e:3b:e5:d9:66:9d:e3:c3:75:db:e7:8b:70:2d:
45:43:83:4e:b9:a8:f5:80:09:64:20:12:92:ec:07:
43:d2:04:b6:98:55:c2:1f:bb:21:d7:e5:a3:75:db:
74:d5:b5:a1:1e:86:1f:2c:35:f2:bf:03:60:68:65:
95:74:a8:79:12:21:0a:6d:0e:ca:87:8f:23:c1:19:
72:f1:24:d2:6a:ca:a7:40:06:06:be:a4:c7:da:91:
87:0a:f3:16:e4:85:c5:54:24:af:89:0c:3a:af:97:
6f:4b:ad:25:09:d1:6e:cc:3a:36:d2:71:23:30:d9:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7F:BC:27:E4:2B:5A:4D:10:2B:F1:F1:37:63:B2:DC:E7:6E:00:A7
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234382e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.248.0/24
Signature Algorithm: sha256WithRSAEncryption
68:56:b1:43:eb:ea:ab:de:58:ca:ec:14:2f:a2:f7:35:99:b9:
ae:8a:9e:79:3d:ee:7d:1d:4a:b7:78:44:20:dd:a4:b3:f7:88:
cf:3b:cc:17:9f:cb:c9:29:8c:99:8a:9f:c4:7f:c9:d5:7a:2e:
c5:b7:88:a3:85:ee:b8:54:7c:ad:2c:3d:dd:cd:2c:d1:ec:95:
80:1b:e2:c6:ba:b0:19:52:87:83:6f:9d:1c:20:21:00:22:12:
b6:3d:e2:9a:50:c1:17:94:96:1e:10:2c:c5:fc:8e:0b:d0:1e:
b3:76:63:2e:b1:aa:2b:d6:ce:29:60:77:1b:d0:a8:83:d3:00:
6e:d7:a0:72:81:3b:e1:df:51:2d:ca:92:d7:2a:9f:a3:4e:08:
5b:45:db:79:5d:95:02:77:09:53:b0:e9:84:c5:d5:97:07:b3:
4a:da:0e:8f:01:c6:c0:73:41:0e:d5:02:b2:9f:2a:f6:ea:9d:
48:1f:9b:86:d4:63:a1:7f:ca:46:98:f8:f3:d7:52:29:25:cb:
49:8a:bf:3f:27:8d:18:40:e1:2f:b5:83:01:13:54:c7:b9:02:
ba:2b:5d:9e:66:a5:d1:97:c4:b8:66:90:40:8d:d0:65:b9:ad:
18:99:d9:6f:99:dc:da:34:28:8e:97:62:8a:3b:67:db:5c:25:
21:2e:d0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:24:26 2026 by rpki-client