
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35322e38312e302e302f31362d3136203d3e203535393630.roa
File: 35322e38312e302e302f31362d3136203d3e203535393630.roa (raw, json)
Hash identifier: XGULG34jffN4DA4dk/Umd+IlAPGxxA5ym5D5nyzp62c=
Subject key identifier: 24:05:E6:B7:E4:99:6A:87:38:CC:8B:8E:D6:57:20:06:17:67:A7:1D
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 011C5FCA000A164272BA217664A1C691C99376F4
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35322e38312e302e302f31362d3136203d3e203535393630.roa
Signing time: Tue 19 May 2026 02:45:05 +0000
ROA not before: Tue 19 May 2026 02:40:05 +0000
ROA not after: Tue 18 May 2027 02:45:05 +0000
asID: 55960
IP address blocks: 52.81.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:1c:5f:ca:00:0a:16:42:72:ba:21:76:64:a1:c6:91:c9:93:76:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 02:40:05 2026 GMT
Not After : May 18 02:45:05 2027 GMT
Subject: CN=2405E6B7E4996A8738CC8B8ED65720061767A71D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:81:71:40:4f:61:2b:60:d0:32:1b:98:a3:
c5:13:69:77:64:b6:dc:b9:ca:65:75:67:8c:68:77:
19:b9:ce:f4:94:13:91:95:45:da:20:12:93:89:22:
0c:57:7a:b9:51:5f:64:9e:45:a9:cb:87:73:b3:a3:
c2:60:1f:66:83:68:98:61:0f:ff:9f:84:59:b9:2b:
94:d3:33:a2:44:f7:d2:5a:f3:fd:b0:dc:b7:1b:87:
fc:e2:c1:d6:e9:4d:20:17:98:93:b7:12:ce:e8:e0:
7f:6b:8b:b5:7d:00:45:89:fd:de:d4:52:bc:ac:8a:
3f:78:b6:a1:14:15:83:02:86:64:17:49:04:d9:7a:
25:4c:38:b5:37:78:2b:bd:0a:d5:37:42:74:39:68:
f3:f5:c0:11:5c:05:94:f5:67:c7:5d:16:46:92:2d:
3d:71:9d:97:ed:4d:89:26:e2:62:a3:2e:a2:11:7d:
db:7b:a8:2e:58:88:ea:0f:fb:29:e7:7b:bd:49:49:
10:54:31:30:52:72:53:27:13:0b:d6:5e:82:35:4c:
fe:70:f0:3f:2d:3e:da:4b:75:45:e0:6e:f1:c9:31:
65:70:e1:22:1d:fb:32:c0:3a:9c:61:a3:7b:99:07:
0f:7d:ab:12:23:94:3a:2d:cc:75:3c:00:ce:b8:24:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:05:E6:B7:E4:99:6A:87:38:CC:8B:8E:D6:57:20:06:17:67:A7:1D
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35322e38312e302e302f31362d3136203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.81.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:6d:06:37:65:50:d5:aa:6e:ce:ba:54:79:0a:94:28:32:2d:
bc:dd:20:56:e8:46:2c:04:3c:2d:64:3d:ba:4b:3a:e6:e0:f9:
f5:33:89:58:e3:2b:63:69:e4:5f:63:ae:62:3d:46:5b:15:f7:
61:2d:af:e9:44:11:17:09:8c:3e:ce:5f:fb:82:0c:1e:9b:6d:
50:3e:79:93:4b:0c:ce:d1:b3:e1:42:f9:6f:ef:5f:06:5a:3a:
84:1f:d8:b1:8a:90:63:a9:07:fc:2b:ab:c8:4a:c5:12:2d:60:
63:65:f6:da:ed:b0:f9:45:62:ee:b9:53:6a:ca:3c:b7:7d:80:
5b:eb:7f:74:86:a7:a1:f2:9e:99:35:66:ef:32:1e:d5:f2:44:
d3:71:cc:e4:d1:c9:22:1c:48:53:39:54:a1:72:97:ae:55:93:
c5:36:08:fc:b0:d6:04:68:06:71:02:63:05:cf:52:8a:2e:65:
d3:a5:cc:ee:ab:cc:41:63:73:ce:fd:fe:c2:63:b6:c2:c5:d5:
e2:a0:6e:43:a4:1b:b0:fc:4b:c7:fa:6e:c6:f0:de:2c:e8:fb:
1e:ba:6a:84:55:88:df:2c:6a:8a:5e:a9:6e:98:76:02:47:28:
b0:c3:a3:82:70:a4:11:5a:81:83:d4:8a:d2:af:93:5a:ee:2b:
a3:24:d2:98
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUARxfygAKFkJyuiF2ZKHGkcmTdvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC
MkNFRUM1RjAeFw0yNjA1MTkwMjQwMDVaFw0yNzA1MTgwMjQ1MDVaMDMxMTAvBgNV
BAMTKDI0MDVFNkI3RTQ5OTZBODczOENDOEI4RUQ2NTcyMDA2MTc2N0E3MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EIFxQE9hK2DQMhuYo8UTaXdk
tty5ymV1Z4xodxm5zvSUE5GVRdogEpOJIgxXerlRX2SeRanLh3Ozo8JgH2aDaJhh
D/+fhFm5K5TTM6JE99Ja8/2w3Lcbh/ziwdbpTSAXmJO3Es7o4H9ri7V9AEWJ/d7U
Urysij94tqEUFYMChmQXSQTZeiVMOLU3eCu9CtU3QnQ5aPP1wBFcBZT1Z8ddFkaS
LT1xnZftTYkm4mKjLqIRfdt7qC5YiOoP+ynne71JSRBUMTBSclMnEwvWXoI1TP5w
8D8tPtpLdUXgbvHJMWVw4SId+zLAOpxho3uZBw99qxIjlDotzHU8AM64JGczAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUJAXmt+SZaoc4zIuO1lcgBhdnpx0wHwYDVR0j
BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy
OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA4Njc3NDM1Mzk1NjcwMDM3LzAvMzUzMjJlMzgzMTJl
MzAyZTMwMmYzMTM2MmQzMTM2MjAzZDNlMjAzNTM1MzkzNjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
NFEwDQYJKoZIhvcNAQELBQADggEBAIttBjdlUNWqbs66VHkKlCgyLbzdIFboRiwE
PC1kPbpLOubg+fUziVjjK2Np5F9jrmI9RlsV92Etr+lEERcJjD7OX/uCDB6bbVA+
eZNLDM7Rs+FC+W/vXwZaOoQf2LGKkGOpB/wrq8hKxRItYGNl9trtsPlFYu65U2rK
PLd9gFvrf3SGp6Hynpk1Zu8yHtXyRNNxzOTRySIcSFM5VKFyl65Vk8U2CPyw1gRo
BnECYwXPUoouZdOlzO6rzEFjc879/sJjtsLF1eKgbkOkG7D8S8f6bsbw3izo+x66
aoRViN8saopeqW6YdgJHKLDDo4JwpBFagYPUitKvk1ruK6Mk0pg=
-----END CERTIFICATE-----
Generated at Sat May 30 01:22:41 2026 by rpki-client