
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234392e302f32342d3234203d3e2034383131.roa
File: 3132312e34362e3234392e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: cmvIW4sXtGEpVBV8idr95fS3oeQBOCkjgxn412lwIng=
Subject key identifier: 27:F4:A6:CF:13:FC:3F:8D:C6:56:94:A2:C4:AD:BE:80:22:24:C9:C1
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 1BB226AFD0FE78D5FC51D364293EA292DC01D652
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234392e302f32342d3234203d3e2034383131.roa
Signing time: Mon 27 Apr 2026 07:59:58 +0000
ROA not before: Mon 27 Apr 2026 07:54:58 +0000
ROA not after: Mon 26 Apr 2027 07:59:58 +0000
asID: 4811
IP address blocks: 121.46.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b2:26:af:d0:fe:78:d5:fc:51:d3:64:29:3e:a2:92:dc:01:d6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Apr 27 07:54:58 2026 GMT
Not After : Apr 26 07:59:58 2027 GMT
Subject: CN=27F4A6CF13FC3F8DC65694A2C4ADBE802224C9C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:35:8d:fd:15:33:6d:46:10:74:ba:fd:74:
0d:75:d3:28:5d:53:47:43:3b:6e:17:6c:1b:7e:7f:
e3:c2:35:0f:f5:99:5a:90:01:ce:cd:c7:4f:4d:21:
cf:8d:22:f7:c5:73:36:16:4a:cd:46:0e:f6:f8:d5:
49:99:42:52:ce:ef:cc:11:7f:17:c1:02:f1:24:28:
3d:05:88:65:e6:86:5f:16:ae:d3:f4:3c:86:a5:79:
5f:08:18:70:7e:79:37:af:24:f2:80:a1:5c:7d:f2:
d8:94:da:2f:e6:2a:ba:d8:30:32:6e:03:81:d0:d8:
17:30:82:d5:be:5c:48:ab:5e:d7:c3:e5:27:96:68:
4d:20:38:d0:42:0c:7e:9a:0d:93:57:f4:78:7c:43:
8a:33:a4:4b:8b:6d:07:fa:bc:51:c1:29:ce:12:bf:
3a:2d:77:1a:89:18:02:f3:41:79:22:62:78:50:24:
af:80:c6:25:53:a7:76:d0:60:3e:c9:ce:79:75:da:
81:d3:e6:0e:59:4c:f0:05:db:98:7c:db:5f:cd:69:
d0:42:76:32:39:6c:75:2c:75:3e:b3:19:1a:21:70:
db:68:3d:6c:19:19:9b:02:cc:cb:9f:a0:18:fb:5c:
16:71:ca:7b:cf:99:75:86:85:e1:bc:d0:0e:68:38:
81:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F4:A6:CF:13:FC:3F:8D:C6:56:94:A2:C4:AD:BE:80:22:24:C9:C1
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234392e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.249.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:9a:6f:ab:2c:5f:64:4e:aa:60:f1:29:87:9e:58:a2:d3:ca:
ac:37:5e:fb:9c:18:bb:13:56:d0:c8:90:0d:04:c4:b1:ea:7d:
a4:b7:e7:15:53:f5:c3:a7:e7:56:32:da:72:3c:fe:8f:fd:6c:
df:3c:e9:d1:1d:08:b3:25:80:1f:b7:41:b4:e1:12:d8:2d:b2:
29:5e:2c:b0:12:ba:95:9a:00:4a:83:ff:a7:3c:c9:4e:69:23:
a3:9e:46:bb:32:c4:34:98:35:a8:b3:09:64:c4:07:a0:78:4b:
f4:84:de:e5:a1:44:02:e7:b0:60:51:72:9a:f4:39:51:fb:85:
bf:0d:11:8f:06:3a:05:f6:08:fa:fc:1f:74:ef:42:3c:a5:76:
d6:94:dd:30:04:41:ab:bf:7b:be:93:ae:d2:c3:c7:fe:e0:8f:
8b:25:67:4a:7e:73:41:01:be:b3:5d:3b:ad:a4:21:7b:91:b2:
45:6f:d8:83:e5:f8:a6:5d:ed:bd:91:08:c2:b9:40:c5:56:5c:
f7:43:06:e4:74:52:ed:81:93:6d:b4:64:43:ac:4b:87:ff:ad:
bf:e1:87:fc:3d:81:ef:4f:8b:70:a4:c2:56:7e:7c:e6:be:49:
d2:00:0b:8f:77:df:ba:0e:75:f5:4d:7d:3f:57:f1:2a:bf:e5:
0c:57:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:45:17 2026 by rpki-client