
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3139362e302f32322d3232203d3e203536303436.roa
File: 3132312e34362e3139362e302f32322d3232203d3e203536303436.roa (raw, json)
Hash identifier: aodd28e8U9PHDKWSm11EB6EZp6VbHVm/MuILVwyonvk=
Subject key identifier: 9F:07:76:DF:9C:D2:BE:4B:ED:65:91:53:3E:00:41:E0:23:EC:EA:9C
Certificate issuer: /CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F
Certificate serial: 1B6E576FD500F2ECFEB12B30232F200A68CC6684
Authority key identifier: A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3139362e302f32322d3232203d3e203536303436.roa
Signing time: Tue 28 Apr 2026 02:30:30 +0000
ROA not before: Tue 28 Apr 2026 02:25:30 +0000
ROA not after: Tue 27 Apr 2027 02:30:30 +0000
asID: 56046
IP address blocks: 121.46.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl
rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:6e:57:6f:d5:00:f2:ec:fe:b1:2b:30:23:2f:20:0a:68:cc:66:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F
Validity
Not Before: Apr 28 02:25:30 2026 GMT
Not After : Apr 27 02:30:30 2027 GMT
Subject: CN=9F0776DF9CD2BE4BED6591533E0041E023ECEA9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:f1:2e:75:d5:55:b3:ca:2c:4b:1d:a0:b5:
91:9e:65:c3:8e:a8:99:a5:2c:c7:66:ff:19:11:d8:
8b:c2:c1:bf:d4:72:34:c4:42:87:cb:9d:47:f5:2a:
67:e3:44:f5:d0:99:33:7c:6b:69:1d:54:64:f9:12:
e7:db:a5:fc:ef:97:0d:2d:3f:56:c6:e4:ce:04:90:
ea:44:df:7a:d1:5f:0f:99:04:34:7e:82:96:11:ff:
d3:a9:f8:8e:19:79:ee:54:ee:02:62:2e:85:9d:37:
8e:37:e4:f6:dc:94:cd:7b:11:06:5f:0b:86:6c:81:
61:66:95:c2:f9:b6:94:0b:e6:fc:80:0a:7d:5c:49:
71:51:cc:a4:c8:a0:a2:e1:07:0d:1f:8e:fd:f8:7b:
b9:52:2c:ca:ab:75:10:77:1f:88:51:a3:19:71:ef:
5a:a3:9e:3a:65:48:63:dc:7d:e3:94:12:63:bd:ea:
fd:0b:6c:60:83:bb:74:0d:60:27:11:d2:4b:a6:f6:
54:a8:e7:69:25:b3:d0:a4:28:b4:52:2c:92:4b:39:
71:e7:7f:71:8c:e5:26:ad:54:b5:1e:2e:0d:11:df:
44:c3:e9:2e:46:cb:50:95:84:f1:52:f8:f9:74:c5:
9f:dd:45:e4:12:81:80:e6:2e:3c:7d:7a:b5:fc:d1:
de:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:07:76:DF:9C:D2:BE:4B:ED:65:91:53:3E:00:41:E0:23:EC:EA:9C
X509v3 Authority Key Identifier:
keyid:A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3139362e302f32322d3232203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.196.0/22
Signature Algorithm: sha256WithRSAEncryption
22:96:ec:1c:f1:5a:c5:de:11:3b:83:99:22:de:16:0d:13:f0:
28:f7:2f:fc:31:d3:fc:8e:40:95:e9:f4:ba:32:28:64:87:88:
06:d1:3a:69:3e:c7:cc:f2:26:d0:40:e6:76:3b:04:43:15:01:
e5:14:0a:03:d9:2c:1a:2e:37:7b:1f:fd:d2:38:f8:df:fc:16:
2f:f3:35:06:53:7b:65:9f:02:9f:0f:f6:65:32:b0:09:cd:0d:
c5:7b:99:a6:cf:13:87:9d:d3:91:2b:b8:a7:84:3e:39:d1:6f:
53:55:09:6e:fa:a9:0a:7d:07:5e:68:b0:66:70:61:f4:44:12:
da:fa:ff:4a:77:f3:5c:2c:5e:74:e9:dc:b4:d5:00:92:e8:6b:
f5:27:af:a8:0b:67:92:91:f8:cd:57:05:61:be:3f:61:da:52:
07:e2:1d:99:a0:61:f2:82:05:7f:86:1b:24:dc:6f:98:cd:1d:
24:5b:16:c0:76:c3:d7:62:11:33:15:f6:45:f7:d1:90:9f:2c:
c3:05:1a:5c:46:c4:07:4c:cd:91:53:ff:34:7d:4a:c8:17:7c:
1f:c0:f8:9d:1c:e5:b4:64:2a:67:3e:24:17:d4:38:6c:3a:fc:
c9:c9:e6:3b:80:f5:a3:f8:49:55:69:5a:4d:41:03:be:8a:0b:
4b:5a:6f:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:27:40 2026 by rpki-client