$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130312e302f32342d3234203d3e203535393630.roa File: 35342e3232322e3130312e302f32342d3234203d3e203535393630.roa (raw, json) Hash identifier: XhvVxD3sNueuxSYYIuluZE6yCSQ15azBIjryvWl9ggs= Subject key identifier: 2A:32:65:DE:4D:A1:81:24:E0:AE:A8:13:EB:CE:69:6C:5C:2D:77:F6 Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Certificate serial: 698D317465026F94A22F3A7209A255E5E3E19378 Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130312e302f32342d3234203d3e203535393630.roa Signing time: Tue 19 May 2026 02:57:07 +0000 ROA not before: Tue 19 May 2026 02:52:07 +0000 ROA not after: Tue 18 May 2027 02:57:07 +0000 asID: 55960 IP address blocks: 54.222.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8d:31:74:65:02:6f:94:a2:2f:3a:72:09:a2:55:e5:e3:e1:93:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Validity Not Before: May 19 02:52:07 2026 GMT Not After : May 18 02:57:07 2027 GMT Subject: CN=2A3265DE4DA18124E0AEA813EBCE696C5C2D77F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:f5:d4:75:15:85:29:33:cf:4d:ff:4f:e5: 75:18:21:37:74:ef:ae:f4:9a:23:40:f0:bf:5d:3e: 8a:85:d7:10:f7:c0:ea:f8:79:47:1e:92:a3:35:9a: 35:41:7a:a8:fa:8e:b4:03:cc:47:e3:cb:bc:c0:9e: b8:01:d2:e7:b7:7a:92:0c:fb:05:7d:17:38:c2:06: 3f:9c:63:b9:ca:d4:8b:3e:46:40:3c:d8:2e:15:d9: 7b:77:f3:3f:62:53:1a:f3:eb:5f:2c:a9:26:5d:0c: ec:a4:b8:86:97:15:03:a4:8b:71:48:79:1b:a9:e3: fa:29:dc:08:b7:2f:45:53:65:24:66:3e:8f:49:1d: 9a:06:10:5b:73:33:c4:ca:f3:6d:73:df:0f:a6:ed: 7b:56:7c:a7:0d:fb:5e:95:e5:27:50:5e:2c:d3:3a: 83:d2:fa:a4:9e:67:91:91:b4:4a:8c:30:fe:2d:66: 80:af:56:2f:6d:1f:18:7a:a1:44:90:d6:91:2f:b5: 7d:e3:ea:bc:6a:29:94:ff:f7:b9:90:b8:93:23:73: 90:fb:e9:df:c9:64:f6:00:33:52:f8:3c:97:02:41: bf:33:f1:17:d8:b2:d5:4a:6e:ed:d6:b8:50:f6:93: 2e:df:de:d6:d6:ea:a6:e0:04:1a:10:da:10:b7:c4: a5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:32:65:DE:4D:A1:81:24:E0:AE:A8:13:EB:CE:69:6C:5C:2D:77:F6 X509v3 Authority Key Identifier: keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130312e302f32342d3234203d3e203535393630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.222.101.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:7f:0a:74:28:be:f2:dc:2f:86:4b:ad:e0:b3:c5:77:c4:f4: da:a9:2a:9a:33:71:7b:9c:85:ea:46:11:72:1f:21:c0:15:93: 4b:a7:9e:63:4f:fd:99:57:17:4f:7b:00:30:27:bb:1e:ac:ee: a7:81:35:88:f5:1f:1c:6a:d8:a7:76:cf:3c:57:8f:2b:1e:f1: 71:95:28:a9:cf:11:71:e9:ad:10:42:6d:77:a6:5f:e8:a1:91: 9d:f9:63:b6:35:24:3a:a5:a9:f3:fa:cd:87:3c:df:03:cf:a5: 5a:60:60:c0:e4:a3:87:0e:3f:98:74:87:91:24:65:bb:36:a2: c5:bd:4b:da:44:e5:c9:92:5f:1e:ff:2f:12:21:59:f9:1c:55: 4b:57:ae:0f:bd:a7:62:78:b2:89:14:a9:5c:69:85:a6:56:64: 5b:9b:18:3e:e8:fe:fd:d0:91:11:8c:5b:a8:5b:13:ff:1f:60: e8:5e:61:8e:2a:26:ac:c6:20:65:11:98:25:5c:92:b1:04:35: 23:61:b3:b4:91:2c:1c:45:b2:fa:f0:bd:34:72:4e:f3:03:3b: 7d:3a:cb:8f:e0:a9:4b:e2:61:a1:31:3a:31:7a:09:28:3c:90: d1:17:05:cd:83:af:6c:e0:b5:4c:e4:b9:51:6f:aa:a3:e1:47: fd:b4:e5:85 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUaY0xdGUCb5SiLzpyCaJV5ePhk3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC MkNFRUM1RjAeFw0yNjA1MTkwMjUyMDdaFw0yNzA1MTgwMjU3MDdaMDMxMTAvBgNV BAMTKDJBMzI2NURFNERBMTgxMjRFMEFFQTgxM0VCQ0U2OTZDNUMyRDc3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59PXUdRWFKTPPTf9P5XUYITd0 7670miNA8L9dPoqF1xD3wOr4eUcekqM1mjVBeqj6jrQDzEfjy7zAnrgB0ue3epIM +wV9FzjCBj+cY7nK1Is+RkA82C4V2Xt38z9iUxrz618sqSZdDOykuIaXFQOki3FI eRup4/op3Ai3L0VTZSRmPo9JHZoGEFtzM8TK821z3w+m7XtWfKcN+16V5SdQXizT OoPS+qSeZ5GRtEqMMP4tZoCvVi9tHxh6oUSQ1pEvtX3j6rxqKZT/97mQuJMjc5D7 6d/JZPYAM1L4PJcCQb8z8RfYstVKbu3WuFD2ky7f3tbW6qbgBBoQ2hC3xKVTAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUKjJl3k2hgSTgrqgT685pbFwtd/YwHwYDVR0j BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwODY3NzQzNTM5NTY3MDAzNy8wLzM1MzQyZTMyMzIz MjJlMzEzMDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzYzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADbeZTANBgkqhkiG9w0BAQsFAAOCAQEALH8KdCi+8twvhkut4LPFd8T0 2qkqmjNxe5yF6kYRch8hwBWTS6eeY0/9mVcXT3sAMCe7Hqzup4E1iPUfHGrYp3bP PFePKx7xcZUoqc8RcemtEEJtd6Zf6KGRnfljtjUkOqWp8/rNhzzfA8+lWmBgwOSj hw4/mHSHkSRluzaixb1L2kTlyZJfHv8vEiFZ+RxVS1euD72nYniyiRSpXGmFplZk W5sYPuj+/dCREYxbqFsT/x9g6F5hjiomrMYgZRGYJVySsQQ1I2GztJEsHEWy+vC9 NHJO8wM7fTrLj+CpS+JhoTE6MXoJKDyQ0RcFzYOvbOC1TOS5UW+qo+FH/bTlhQ== -----END CERTIFICATE-----Generated at Sat May 30 01:23:31 2026 by rpki-client