
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130302e302f32342d3234203d3e203535393630.roa
File: 35342e3232322e3130302e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier: wo4GX20aGQhsSk4362kE93OE7gC79yLx8bPdUTO15Ug=
Subject key identifier: 26:64:43:1C:19:6B:D8:31:A4:DA:C1:F2:86:09:5E:2A:2C:A9:64:B5
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 6CC68D76E99D053BBFA4C4F231327B8C1DE2805D
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130302e302f32342d3234203d3e203535393630.roa
Signing time: Tue 19 May 2026 02:57:07 +0000
ROA not before: Tue 19 May 2026 02:52:07 +0000
ROA not after: Tue 18 May 2027 02:57:07 +0000
asID: 55960
IP address blocks: 54.222.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c6:8d:76:e9:9d:05:3b:bf:a4:c4:f2:31:32:7b:8c:1d:e2:80:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 02:52:07 2026 GMT
Not After : May 18 02:57:07 2027 GMT
Subject: CN=2664431C196BD831A4DAC1F286095E2A2CA964B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:a8:1c:e1:30:80:1a:1e:86:96:7f:47:49:
c2:9a:2e:01:74:d7:46:99:b7:dd:9c:db:44:a7:c2:
0e:48:d4:ea:f0:1b:16:2f:c8:1f:b2:bd:23:43:b8:
5e:16:2c:ed:ce:89:45:3a:17:29:52:78:fd:03:55:
89:3d:b4:72:78:90:c8:de:0a:7f:61:1a:40:99:fb:
c4:9b:57:f0:ee:26:21:7a:2b:c8:96:72:06:17:e5:
55:b1:f5:00:43:db:f3:89:9c:c7:e1:71:64:51:ab:
e9:bb:9e:30:28:51:cf:ec:dc:54:a3:4b:2d:50:1a:
fb:c8:30:21:ee:4a:94:10:34:72:49:4e:55:1c:58:
a0:63:1f:8d:f7:c3:c0:e8:4f:2e:7c:70:0f:fa:2b:
4e:1b:bb:22:f5:d9:c6:91:7d:ff:58:8d:01:1c:ce:
6d:8e:8b:5e:b8:01:af:dd:ee:cc:2c:d5:73:6c:a6:
18:ee:5c:c7:e4:9b:d0:bb:eb:12:ff:97:a0:f1:c2:
13:74:22:4a:15:e5:93:02:16:fb:b5:2b:06:b0:16:
8a:82:34:43:e2:07:35:db:a9:8a:8f:0d:10:ce:35:
bf:89:53:8e:3c:f3:ac:57:dd:35:a5:ca:65:e1:be:
d9:a8:d8:8d:3c:ee:74:ef:0a:f2:c7:a8:57:84:e9:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:64:43:1C:19:6B:D8:31:A4:DA:C1:F2:86:09:5E:2A:2C:A9:64:B5
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130302e302f32342d3234203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.222.100.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c7:93:fc:a3:e2:ad:4a:f2:97:34:06:1c:88:e9:8e:77:10:
45:f3:9d:33:23:0d:2e:3f:24:d0:3e:b7:4a:60:27:8a:b7:65:
ab:a5:7f:b7:2d:6d:20:96:c8:e0:ca:81:a1:ef:bb:b7:59:4b:
91:5e:a8:3b:e2:cd:bf:08:3d:1a:2f:f6:2f:25:cf:fd:ea:0a:
9d:92:e2:3f:7a:b9:c6:cc:68:7e:c7:dd:62:1c:85:b8:a3:f7:
aa:a5:3f:cb:fe:81:3e:f3:16:20:c0:9e:60:b7:32:05:e9:83:
69:5e:7f:d1:b2:01:c5:69:ab:c1:3b:e4:7c:6d:c3:2d:b4:23:
2d:2e:49:6b:f8:3b:0d:f0:2e:46:81:aa:b3:47:9b:5a:b9:19:
bd:32:b5:4c:80:43:81:7a:32:3d:47:dd:81:16:5a:4b:49:f8:
40:43:de:be:a9:c1:90:17:ea:f3:8b:53:16:d9:86:8c:11:43:
78:ae:e5:5c:70:da:9b:2b:5d:2a:f1:1e:17:60:05:c5:60:1b:
e9:ac:ae:e7:6e:5a:4b:bc:ec:5d:77:31:30:7d:df:e0:72:35:
03:6d:80:99:92:c9:62:2a:9f:ce:94:bb:35:96:83:6a:fa:5f:
0d:2c:af:42:9d:97:08:b2:66:63:cb:61:6c:13:b6:f5:5f:b2:
c1:db:9b:21
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUbMaNdumdBTu/pMTyMTJ7jB3igF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC
MkNFRUM1RjAeFw0yNjA1MTkwMjUyMDdaFw0yNzA1MTgwMjU3MDdaMDMxMTAvBgNV
BAMTKDI2NjQ0MzFDMTk2QkQ4MzFBNERBQzFGMjg2MDk1RTJBMkNBOTY0QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrr6gc4TCAGh6Gln9HScKaLgF0
10aZt92c20Snwg5I1OrwGxYvyB+yvSNDuF4WLO3OiUU6FylSeP0DVYk9tHJ4kMje
Cn9hGkCZ+8SbV/DuJiF6K8iWcgYX5VWx9QBD2/OJnMfhcWRRq+m7njAoUc/s3FSj
Sy1QGvvIMCHuSpQQNHJJTlUcWKBjH433w8DoTy58cA/6K04buyL12caRff9YjQEc
zm2Oi164Aa/d7sws1XNsphjuXMfkm9C76xL/l6DxwhN0IkoV5ZMCFvu1KwawFoqC
NEPiBzXbqYqPDRDONb+JU44886xX3TWlymXhvtmo2I087nTvCvLHqFeE6dfjAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUJmRDHBlr2DGk2sHyhgleKiypZLUwHwYDVR0j
BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy
OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwODY3NzQzNTM5NTY3MDAzNy8wLzM1MzQyZTMyMzIz
MjJlMzEzMDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzYzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEADbeZDANBgkqhkiG9w0BAQsFAAOCAQEAgMeT/KPirUrylzQGHIjpjncQ
RfOdMyMNLj8k0D63SmAnirdlq6V/ty1tIJbI4MqBoe+7t1lLkV6oO+LNvwg9Gi/2
LyXP/eoKnZLiP3q5xsxofsfdYhyFuKP3qqU/y/6BPvMWIMCeYLcyBemDaV5/0bIB
xWmrwTvkfG3DLbQjLS5Ja/g7DfAuRoGqs0ebWrkZvTK1TIBDgXoyPUfdgRZaS0n4
QEPevqnBkBfq84tTFtmGjBFDeK7lXHDamytdKvEeF2AFxWAb6ayu525aS7zsXXcx
MH3f4HI1A22AmZLJYiqfzpS7NZaDavpfDSyvQp2XCLJmY8thbBO29V+ywdubIQ==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:20 2026 by rpki-client