$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e31312e302f32342d3234203d3e203535393630.roa File: 35342e3232322e31312e302f32342d3234203d3e203535393630.roa (raw, json) Hash identifier: Ci//vjNdsv8qcPhvP+Tov8Uz2OckH94eZmLjLRfcDz4= Subject key identifier: 5A:9C:4E:27:35:A4:A1:58:19:9C:DB:BB:95:F7:59:73:B1:D4:47:1C Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Certificate serial: 5FD38C41E4AE224F59B9B7B818E7B8F79F944DD9 Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e31312e302f32342d3234203d3e203535393630.roa Signing time: Tue 19 May 2026 02:47:11 +0000 ROA not before: Tue 19 May 2026 02:42:11 +0000 ROA not after: Tue 18 May 2027 02:47:11 +0000 asID: 55960 IP address blocks: 54.222.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d3:8c:41:e4:ae:22:4f:59:b9:b7:b8:18:e7:b8:f7:9f:94:4d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Validity Not Before: May 19 02:42:11 2026 GMT Not After : May 18 02:47:11 2027 GMT Subject: CN=5A9C4E2735A4A158199CDBBB95F75973B1D4471C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:78:38:0e:91:4c:43:49:66:39:81:d8:25: 20:82:02:9b:b3:9f:46:65:21:d3:cf:44:af:c1:0e: 62:98:b4:75:28:45:f0:8d:f1:03:4d:58:c4:7d:70: c6:d1:5f:33:16:f5:b9:b0:8c:a5:f9:e8:df:ce:29: 6d:18:b7:2a:eb:3f:52:62:73:b2:c5:67:f1:b3:eb: e9:a1:11:e9:a5:81:90:4e:a5:46:3f:f0:6b:50:39: 01:89:8b:68:a8:ec:05:ca:75:b9:ea:7a:e0:b7:f9: 36:47:16:85:6f:58:3a:18:25:a2:bd:4d:16:c3:45: 44:0f:d1:5c:a8:0e:42:b2:85:57:13:fb:91:f4:3a: 7e:62:aa:96:c7:d4:14:4b:47:71:7d:b5:cf:d6:d1: 12:71:40:c9:54:14:d7:63:10:b2:b4:e4:07:61:3b: 35:61:bb:2a:1a:b7:ad:80:2f:11:a7:6f:8c:11:52: aa:51:48:77:e9:55:f7:82:e7:3d:11:5e:e9:23:47: 3f:05:df:2f:e9:19:f2:67:34:70:e2:c6:d5:00:38: 11:9b:2d:4e:70:50:d1:2e:60:e0:e7:57:f6:54:b5: 89:dd:95:94:d1:3e:51:17:c5:e4:e6:d6:1d:68:5b: ed:d2:bd:22:05:9b:84:fa:cb:9d:ba:ac:43:b3:2c: 5e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9C:4E:27:35:A4:A1:58:19:9C:DB:BB:95:F7:59:73:B1:D4:47:1C X509v3 Authority Key Identifier: keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e31312e302f32342d3234203d3e203535393630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.222.11.0/24 Signature Algorithm: sha256WithRSAEncryption ab:c1:fc:0b:aa:48:35:fe:fb:8e:60:9c:87:14:e5:ec:1c:39: af:b0:b3:17:27:44:23:36:1b:52:20:3a:5e:cb:a5:f0:f7:eb: 19:6e:3c:df:dd:ca:d3:f0:cb:40:fe:ff:b2:32:bf:9e:d9:19: b2:0f:02:59:2c:09:33:d2:2e:23:be:9e:5f:bb:f1:98:f6:0e: cc:07:a0:86:93:7d:09:75:50:f6:22:e4:57:29:fb:2b:fc:f3: 00:60:db:0b:82:75:e0:8a:7e:e5:bf:45:e3:90:91:00:55:3e: f1:84:ca:6f:03:50:ec:62:d2:e7:d8:9a:ab:31:af:de:ea:32: 06:9b:7f:a9:6a:d3:9a:00:4f:a0:e0:a4:66:c4:d1:b8:22:25: 74:d2:ec:d4:e4:76:af:3d:11:8b:ef:32:3c:4c:db:84:01:b5: 18:8e:7d:71:7e:70:7c:0a:ba:1d:04:0a:78:17:8a:72:cd:49: 7a:b0:1e:f3:45:a7:f2:42:bd:98:88:a0:76:dc:89:13:dc:b2: 07:b8:7e:1b:41:82:c6:bf:ca:69:0b:8a:d4:2e:b1:65:8e:bd: a8:35:bc:50:93:0e:28:b8:f4:cd:0f:41:3e:6b:1b:b8:a5:1d: 68:cc:af:7a:6d:67:d9:d9:25:32:95:f7:0e:a8:51:6d:51:4e: 99:1c:67:1f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUX9OMQeSuIk9Zube4GOe495+UTdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC MkNFRUM1RjAeFw0yNjA1MTkwMjQyMTFaFw0yNzA1MTgwMjQ3MTFaMDMxMTAvBgNV BAMTKDVBOUM0RTI3MzVBNEExNTgxOTlDREJCQjk1Rjc1OTczQjFENDQ3MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvFXg4DpFMQ0lmOYHYJSCCApuz n0ZlIdPPRK/BDmKYtHUoRfCN8QNNWMR9cMbRXzMW9bmwjKX56N/OKW0YtyrrP1Ji c7LFZ/Gz6+mhEemlgZBOpUY/8GtQOQGJi2io7AXKdbnqeuC3+TZHFoVvWDoYJaK9 TRbDRUQP0VyoDkKyhVcT+5H0On5iqpbH1BRLR3F9tc/W0RJxQMlUFNdjELK05Adh OzVhuyoat62ALxGnb4wRUqpRSHfpVfeC5z0RXukjRz8F3y/pGfJnNHDixtUAOBGb LU5wUNEuYODnV/ZUtYndlZTRPlEXxeTm1h1oW+3SvSIFm4T6y526rEOzLF5LAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUWpxOJzWkoVgZnNu7lfdZc7HURxwwHwYDVR0j BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA4Njc3NDM1Mzk1NjcwMDM3LzAvMzUzNDJlMzIzMjMy MmUzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzYzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEADbeCzANBgkqhkiG9w0BAQsFAAOCAQEAq8H8C6pINf77jmCchxTl7Bw5r7Cz FydEIzYbUiA6Xsul8PfrGW48393K0/DLQP7/sjK/ntkZsg8CWSwJM9IuI76eX7vx mPYOzAeghpN9CXVQ9iLkVyn7K/zzAGDbC4J14Ip+5b9F45CRAFU+8YTKbwNQ7GLS 59iaqzGv3uoyBpt/qWrTmgBPoOCkZsTRuCIldNLs1OR2rz0Ri+8yPEzbhAG1GI59 cX5wfAq6HQQKeBeKcs1JerAe80Wn8kK9mIigdtyJE9yyB7h+G0GCxr/KaQuK1C6x ZY69qDW8UJMOKLj0zQ9BPmsbuKUdaMyvem1n2dklMpX3DqhRbVFOmRxnHw== -----END CERTIFICATE-----Generated at Sat May 30 01:22:52 2026 by rpki-client