
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130382e302f32322d3232203d3e203535393630.roa
File: 35342e3232322e3130382e302f32322d3232203d3e203535393630.roa (raw, json)
Hash identifier: Y1ygBVXjma2xajJzsGkduXLVm49nZ417OosLfY2eskA=
Subject key identifier: C0:5A:6D:47:75:2C:C9:0B:39:BF:5F:DE:10:68:1D:09:03:02:93:C4
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 511CE7EA390556FE82C9F3A5E517A52974F49594
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130382e302f32322d3232203d3e203535393630.roa
Signing time: Tue 19 May 2026 02:59:53 +0000
ROA not before: Tue 19 May 2026 02:54:53 +0000
ROA not after: Tue 18 May 2027 02:59:53 +0000
asID: 55960
IP address blocks: 54.222.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:1c:e7:ea:39:05:56:fe:82:c9:f3:a5:e5:17:a5:29:74:f4:95:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 02:54:53 2026 GMT
Not After : May 18 02:59:53 2027 GMT
Subject: CN=C05A6D47752CC90B39BF5FDE10681D09030293C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:82:24:28:ad:fc:50:a3:13:93:65:1f:a8:
f9:0f:54:72:50:c0:8f:6f:6b:ee:65:1b:51:24:a3:
63:a5:2e:64:b0:2d:ec:49:98:1f:f6:e6:9c:22:2a:
53:4f:bc:b8:c3:3f:54:7e:20:32:9b:6a:19:df:6f:
bd:79:77:a2:4f:be:7a:1f:37:d0:56:9c:95:1a:c6:
66:64:dd:a0:aa:46:dc:3a:28:b4:e3:81:ac:4b:47:
37:eb:9f:4f:4d:e8:0d:43:95:66:cb:04:36:54:ef:
03:ab:b3:9e:de:b4:d3:3d:05:23:35:b1:82:ed:fb:
f6:37:45:ca:18:05:b2:ca:e9:21:55:2e:2f:f4:66:
70:3b:35:08:60:e0:fe:45:57:4c:a5:1a:62:8a:91:
95:65:ef:03:6a:ba:f4:3c:50:9c:ae:e3:28:cb:d6:
9a:f8:bd:e7:4e:00:a4:f2:3c:85:56:56:bb:86:de:
80:2f:72:ed:95:50:76:6b:19:e4:8f:51:15:c8:d5:
79:b0:54:d8:b3:8a:37:0c:b5:0e:04:1d:7f:83:f2:
31:e1:bd:86:a8:e4:b2:8c:ff:b5:9e:58:6d:57:64:
82:50:df:12:50:ab:bc:d6:13:24:44:8b:ca:ae:ad:
89:d8:67:0c:e1:13:a2:0d:2a:71:f0:3d:93:67:00:
76:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5A:6D:47:75:2C:C9:0B:39:BF:5F:DE:10:68:1D:09:03:02:93:C4
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130382e302f32322d3232203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.222.108.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:3c:d9:72:b2:a3:c7:09:b2:83:cb:db:7c:ac:c3:13:47:ad:
52:77:01:7f:ea:10:96:bb:17:6b:47:5b:ea:57:3d:21:f3:b5:
23:1f:17:e7:f5:61:58:4e:93:dc:83:fb:8b:b9:a0:36:35:9a:
2d:e4:92:21:5e:0d:00:0c:2c:5e:6d:7d:57:07:37:cb:ee:9a:
45:7b:7a:19:64:0a:0c:8d:d7:11:91:9c:15:7d:6c:17:8b:cd:
36:cc:50:60:69:12:c4:cb:81:2d:aa:b6:9c:52:1f:7f:c3:87:
a8:0d:96:be:44:34:b9:b5:b3:c6:21:7d:ed:1a:31:97:be:46:
dc:cb:33:66:ae:25:cf:a1:c4:e4:6a:03:ef:41:29:54:33:d1:
e3:4d:9b:54:76:a7:b6:89:2c:ce:22:13:2c:18:74:46:ea:96:
94:ab:23:90:4f:0f:84:a3:9f:71:59:9e:3e:a7:51:cf:29:4f:
5d:da:69:03:b8:ef:08:1f:c7:e8:80:ba:a8:ba:81:25:e0:b3:
e8:5e:46:0f:ba:56:59:8c:9c:c2:71:c7:49:c4:ca:c0:0d:49:
0a:48:ce:d7:93:40:67:10:d3:ab:24:0b:1c:56:ae:0a:73:db:
c1:b0:23:88:d2:0e:96:b8:7c:76:fd:e1:c0:32:87:5b:31:ad:
f8:43:bc:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:19 2026 by rpki-client